1"use strict";(globalThis.webpackChunkdocs=globalThis.webpackChunkdocs||[]).push([[2761],{12399(e,t,i){i.r(t),i.d(t,{assets:()=>E,contentTitle:()=>h,default:()=>L,frontMatter:()=>A,metadata:()=>a,toc:()=>g});const a=JSON.parse('{"id":"OpenAPI-clients/policy/subjectmapping/policy-subjectmapping-subject-mapping-service-list-subject-mappings","title":"ListSubjectMappings","description":"ListSubjectMappings","source":"@site/docs/OpenAPI-clients/policy/subjectmapping/policy-subjectmapping-subject-mapping-service-list-subject-mappings.api.mdx","sourceDirName":"OpenAPI-clients/policy/subjectmapping","slug":"/OpenAPI-clients/policy/subjectmapping/policy-subjectmapping-subject-mapping-service-list-subject-mappings","permalink":"/OpenAPI-clients/policy/subjectmapping/policy-subjectmapping-subject-mapping-service-list-subject-mappings","draft":false,"unlisted":false,"editUrl":null,"tags":[],"version":"current","lastUpdatedAt":null,"frontMatter":{"id":"policy-subjectmapping-subject-mapping-service-list-subject-mappings","title":"ListSubjectMappings","description":"ListSubjectMappings","sidebar_label":"ListSubjectMappings","hide_title":true,"hide_table_of_contents":true,"api":"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
1xly6y3ldtxy4zRTZs5ULnlh4UYXMg0a6wHX6UK1Lq/Gb/PGCwiYV1WaYok0G+8QnqK+7iuqywvNFIRils4SFyGz5oPGWoIsKWYUZ9egqzktPfmH8gy+nGOwxh24XXOmZSbxjReAY2yLH4OnOrIMUwo72daJ5aM6t0BYwfu3/s78uj1skZ1ef9Qd9NsnDdL9p/vX2stCEZQ9H3S66yPHy558zFpz/gIbF76i+vVHuQJXVJ9v9o+vqJ6s85FhK4C9831gC9K2ESkytDesx/htMGZJGEtDmzkFwYqlmNkAot/6rY5SYbArV/Si8e4zap+8Oh30Rj/XTd+yvWTsqo3evC0bu50JWIyVtqffP1tpe350WGmr2KVa81pLtIZm1fYsicrWpt7q7MvK/c+FU1jkLEO+lxA2v5dnB3yx3QHdjv5cUb0ZRwTOXROKAibrHW/g23Lwn8Pt/rWVsntH/eG91tzV3/yaWjdUl62oj6xzbdn5sbGwEqB27jxhICvpqOIGe49AUnXojkwSKQgGmjDQ9JkDTRVHli2cVHqhfJAvuyLTZMBmXBu1KHukPvZ0tyNs5cZRFThaEUBuknPNSC7qVrwYjZwORKOMRhmN8rdilEF8V8T7Hkt9lKEuIDb7Kth2lcWV64f9++7HoJtYedggJqPRoPfyfNSdDM5P8mvDahTnTrL2ycnk9KeNFP1ft1D83OsO2oPOz7/ae4q1FY/WiEHIVZjFVO3slvb3Fw8P3+/8/QwQc/i6IwuIOSDmgJgDYg6IOSDmgJgDYg6IOSDmgOENDG9geAMxB8QcEHP4I2IORfBvA+bw9WWro5uAbgK6Cd+Mm7DeRSj/JsgGsmJ5M1IUQoY0rvJtLG8mpuiqj/+PObN3dansj3xvmLNHmWbVt7jfb7qf80SZDawxEapF6n9pyGu/VCLWIsDPRBOuNdQUeMxPZ9D7QO/j/8v7qIQRAPvbGkK4Ln4yuW2eCHV9xQEthLoQ6kKoC6EuhLoQ6kKoC6EuhLoQ6sIYFsawMIaFUBcGmzDY9EeEuuyivymY695V05ZJ7NUqceWUdj/YJFmWva1O2BMQT4A4G/oo6KN8zT6KK+VorzRfprAiFolD5+J3ViRuTa3Qz/VjMaaS+8in38+SwLsnLeQms7TMd67hk5b3fFD59NXqqcsimD50BYFw6LBTBa1YnE/hiDz25mTrOrsrjr0y5Y7e3a9qkJs5D+dFrM/xz1iQlKny7zPv5Qyum840i+MFeZfR2BUyLl/l6rNx88RLHerdr1Tv1jMIyjrCi+zmOG19KoNcAry7Ql6BBGhCVUlxRCSUcezKf1sYv/6UHotSECYTEVOE5orAyT4M1nxE1eJRRYPZS0G+ffGCyBuhXbynLsrNZR163zIW5esEdfNquKd9RH6pq57ocu2H0TwvOj0WK8lIDhaEgd24EZ9OmUWilyNgheWv8TKPzjMq8d+Z84wpYF8x0IspYJgChilgmAKGKWCYAoYpYJgChilgmAKG8CrCqwivYgoYBpow0PRHTAHDCstolNEo/66M8uMqLJeGHlRTqGrXkVp+yMfhnZrs0Cua701HCqNkvMQ3uxBwsmSWqjPo7gI0OhbaxuwzxXSOhuVZFXkqQQkm1fYeWPuKrQ4q9y5/SSpnYMjLmM/svf8zB/S3QrKIXSJ2iS4lupSIXSJ2idglYpeIXSJ2idglYpeIXSJ2idglYpcYJsUwKYZJEbvEQBMGmhC7ROwSjTIa5W/TKH/Wr8N+9JdR7xfjXuKGZZEqtW4Wyeov6j9VbWqj+GzG1Bdb+rJ4wMr6J9e+OsCn2gUa1jfbtzwgnJxpIzeKnKe420JVxKKgrkRMXOOaiAm4gxFVlXh20bbhlRuutaN2/7g9OJ60O6Peab9+ta31Hnc7g1/PRmt6RoN2f/imN6qGtkpzKy+waLb3/Y9EqV99PEr98J879yvFGth7s4xZ38lTiMYjGo+XpD/iJQnReETjEY1HNB7ReETjEY1HNB7ReETjEY1HNB4D/xj4x8A/ovEYaMJAE6LxiMajUUaj/C0a5cei8QjHoJX8XcExD3tvW3iwGI7Fnx5EGwy9Yl/2CwsexP6YeHjl6wrw51b5jTkTZrOqczRO25Wj1w8qUvAuY9p0/AqrgQ6Y58MKE/ws48jVH8+BfxcRtvpvmbsCnzOY8jiGoFPZY8o3+nEF1j0jLiH4IjTv03YaJGKKQ2htqmRip1kvgw4BKsd1WO0ccxTQKKJRxBwFzFHAHAXMUcAcBcxRwBwFzFHAHAXMUcAcBcxRQDgE4RCEQzBHAQNNGGjCHAXMUUCjjEb52zXKmKOAVvIbspKfNUchn/VpgVePHH58bzkrykTcG0JFOUI5+v3L0f3SbSqrRRlCGUIZKsnQvcWn/OEVjHeg9Hyd0rP9iqEzO/uOFI5qyCrH47snYd4/0Wz1pOBeo1imbY7bcHVE+8Ejl0oHpDN+zUT9W0cfnxD48LzGyn0sB7HcR5o4fLTJToQUawc2HAuSSq05rNRScU1YkpoF8JxNzaQawLm7Hp4DRi4hpsEESfjMZSwaSWgp8IPJkZgciTocdTgmR2JyJCZHYnIkJkdiciQmR2JyJCZHYnIkJkdiciTmYWAeBuZhYHIkBpow0ITJkZgciUYZjfI3a5QfmxzpEbYh+5gAdgHPvVIySz/FQB8xhl9R971hStB4yGIWGqnqFXhWzjQHaZl/cKL9k8VXjGpYGMkJ7MZTMuUsjnyNFqgIRKYxNYYJFpGus54D0MqaCeMqzOzoLJwTqsfCFXvh0dn+yXH7bNd+YCkFGE+qsnYp2tZBsAze7AbO6YATFYtr36Javcmdv/x7tzOavGmfnfX6ryanZ91Be3Q6WBc020zb628l6Z+O7kPW6086p/1Ru9cf2jti7VR/ue/XvYrFJlz0XN/h7YZD9wldFfr6bsdcG9jaUCYpVVxL4U59KYGKaQBHAXlJ03jhwHA2FmQLk92Lb8aC7Pj0gN1Gfuwu+gLvLpikrG2KPIL6d5w2CUuJCR9WYum7sWiT4pWAFXPBNOBqWWz9+b/CRH01I2NnvVzzk0KsLMGTsYili8T9jfw1n9DfyF/z3IB8K/0Z/K1WrCnXJ3UO8JD06Rox812TjeLmicpiZ6PpNFRSF/Wllm+/S/g6p/3jnv0A18vT05Nuu+8DJKuit4my3d9GcTqoBlk7FZ1dY4v65jzs+NsklDGcodVF0yUn6FVure81SZW85hGL1h7jZOYMzEbxLOCxJQc6u0SoYqUZ2Etru39MYjnjYdU4F1bxYT77nSv3MwjWqB7NzCp3YpYEXl5/V1kSWx1RV9HuQX4ffuIRP/GIn3jEDEG0fWj7vmbbhxmCX3UeAGYIYoYgZghihiBmCGKGIGYIYoYgZghihiAmI2AyAiYjYIYgBpow0IQZgpghiEYZjfI3bpSxfCJayW/ISn6RklXtHAb+hN98LAOkLvVrVQX4PpIylXDj06F8QpB2NXC4tvV+YJc/V0keP/6dxXiapDclWjr7lzAqIFMVhvbpUeSND95iOR4E21G7o3b/GrQ7gu1fdUgdwXYE2xFsR7AdwXYE2xFsR7AdwXYE2zGuj3F9jOsj2I6BJgw0IdiOYDsaZTTK37hRRrAdreQ3ZCW/CNjuUWMPGj/M+tYQ5xZpkzMZ83ABbi+fWWw7pxkys6N3Hfy8BNhpjuOOhSs88yePwgNtKJNLLlbiS3mJDg+U2/IdKZ3llGVTt2zdKqUuQH86nWr/lSBHzoVh7gOOy7oDlnIiHWmJ0bgwT49WBGHA3mVMw2KX0yH+YbgEsPf3eSuQ3fuVHRqHWby8dCg3BRLzhBvyJ/92IlWOUEMKQdd+6edmzgQRUkD4K4FQEp0apkiY4xd05tIppKHxxgk7iq1THQEZCWUmbGEm4GbFCNRyeogPecK1qTKyHjCdSqG3fTTw9tYKrN0FWE91dl2lbKEhj3RYjyYFFN+e4v6/tOM3Hc5ZQrd7e4ARrNMgZV0mpJlMZSYi0GG5NxTCfS62QdJMWHwCXExhI48TqmYZBA3t3tIo5oJN2PvQAgBBozQgQCKK0WgxYe+5tg6xlUQNQNQkYoL7MKyPi7H3c5ppl6MwpTxm0QQc5lLRKnppPR
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","sidebar_class_name":"post api-method","info_path":"policy-subjectmapping","custom_edit_url":null},"sidebar":"tutorialSidebar","previous":{"title":"ListSubjectConditionSets","permalink":"/OpenAPI-clients/policy/subjectmapping/policy-subjectmapping-subject-mapping-service-list-subject-condition-sets"},"next":{"title":"MatchSubjectMappings","permalink":"/OpenAPI-clients/policy/subjectmapping/policy-subjectmapping-subject-mapping-service-match-subject-mappings"}}');var s=i(74848),r=i(28453),n=i(80811),o=i.n(n),p=i(6801),d=i.n(p),l=i(12939),c=i.n(l),y=i(71621),_=i.n(y),m=(i(71156),i(7227),i(85225)),u=i(23230);const A={id:"policy-subjectmapping-subject-mapping-service-list-subject-mappings",title:"ListSubjectMappings",description:"ListSubjectMappings",sidebar_label:"ListSubjectMappings",hide_title:!0,hide_table_of_contents:!0,api:"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",sidebar_class_name:"post api-method",info_path:"policy-subjectmapping",custom_edit_url:null},h=void 0,E={},g=[];function b(e){const t={p:"p",...(0,r.R)(),...e.components};return(0,s.jsxs)(s.Fragment,{children:[(0,s.jsx)(m.default,{as:"h1",className:"openapi__heading",children:"ListSubjectMappings"}),"\n",(0,s.jsx)(o(),{method:"post",path:"/policy.subjectmapping.SubjectMappingService/ListSubjectMappings",context:"endpoint"}),"\n",(0,s.jsx)(t.p,{children:"ListSubjectMappings"}),"\n",(0,s.jsx)(m.default,{id:"request",as:"h2",className:"openapi-tabs__heading",children:(0,s.jsx)(u.default,{id:"theme.openapi.request.title",children:"Request"})}),"\n",(0,s.jsx)(d(),{...i(27789)}),"\n",(0,s.jsx)(c(),{...i(31999)}),"\n",(0,s.jsx)(_(),{...i(93361)})]})}function L(e={}){const{wrapper:t}={...(0,r.R)(),...e.components};return t?(0,s.jsx)(t,{...e,children:(0,s.jsx)(b,{...e})}):b(e)}},27789(e){e.exports=JSON.parse('{"parameters":[{"name":"Connect-Protocol-Version","in":"header","required":true,"schema":{"type":"number","title":"Connect-Protocol-Version","enum":[1],"description":"Define the version of the Connect protocol","const":1}},{"name":"Connect-Timeout-Ms","in":"header","schema":{"type":"number","title":"Connect-Timeout-Ms","description":"Define the timeout, in ms"}}]}')},31999(e){e.exports=JSON.parse('{"title":"Body","body":{"content":{"application/json":{"schema":{"type":"object","properties":{"namespaceId":{"type":"string","title":"namespace_id","format":"uuid"},"namespaceFqn":{"type":"string","title":"namespace_fqn","minLength":1,"format":"uri"},"pagination":{"title":"pagination","description":"Optional","type":"object","properties":{"limit":{"type":"integer","title":"limit","format":"int32","description":"Optional\\n Set to configured default limit if not provided\\n Maximum limit set in platform config and enforced by services"},"offset":{"type":"integer","title":"offset","format":"int32","description":"Optional\\n Defaulted if not provided"}},"additionalProperties":false},"sort":{"type":"array","items":{"type":"object","properties":{"field":{"title":"field","type":"string","enum":["SORT_SUBJECT_MAPPINGS_TYPE_UNSPECIFIED","SORT_SUBJECT_MAPPINGS_TYPE_CREATED_AT","SORT_SUBJECT_MAPPINGS_TYPE_UPDATED_AT"]},"direction":{"title":"direction","type":"string","enum":["SORT_DIRECTION_UNSPECIFIED","SORT_DIRECTION_ASC","SORT_DIRECTION_DESC"],"description":"Sorting direction shared across list APIs.\\n When the \'sort\' field is omitted or the chosen sort \'field\' is UNSPECIFIED,\\n the endpoint\'s request message defines the default ordering; see the\\n specific List* request docs."}},"title":"SubjectMappingsSort","additionalProperties":false},"title":"sort","maxItems":1,"description":"Optional - CONSTRAINT: max 1 item\\n Sort defaults:\\n - direction UNSPECIFIED defaults to DESC for the specified field\\n - field UNSPECIFIED defaults to created_at with the specified direction\\n - both UNSPECIFIED or sort omitted defaults to created_at DESC"},"search":{"title":"search","description":"Optional","type":"object","properties":{"term":{"type":"string","title":"term","maxLength":253,"minLength":1}},"additionalProperties":false}},"title":"ListSubjectMappingsRequest","additionalProperties":false}}},"required":true}}')},93361(e){e.exports=JSON.parse('{"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"object","properties":{"subjectMappings":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","title":"id"},"attributeValue":{"title":"attribute_value","description":"the Attribute Value mapped to; aka: \\"The Entity Entitlement Attribute\\"","type":"object","properties":{"id":{"type":"string","title":"id","description":"generated uuid in database"},"attribute":{"title":"attribute","type":"object","properties":{"id":{"type":"string","title":"id"},"namespace":{"title":"namespace","description":"namespace of the attribute","type":"object","properties":{"id":{"type":"string","title":"id","description":"generated uuid in database"},"name":{"type":"string","title":"name","description":"used to partition Attribute Definitions, support by namespace AuthN and\\n enable federation"},"fqn":{"type":"string","title":"fqn"},"active":{"title":"active","description":"active by default until explicitly deactivated","type":"boolean"},"metadata":{"title":"metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false,"description":"Struct to uniquely identify a resource with optional additional metadata"},"grants":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","title":"id"},"uri":{"type":"string","title":"uri","description":"Address of a KAS instance\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https?://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(:[0-9]+)?(/.*)?$\')\\n```\\n\\n"},"publicKey":{"title":"public_key","description":"Deprecated: KAS can have multiple key pairs","type":"object","oneOf":[{"properties":{"cached":{"title":"cached","description":"public key with additional information. Current preferred version","type":"object","properties":{"keys":{"type":"array","items":{"type":"object","properties":{"pem":{"type":"string","title":"pem","maxLength":8192,"minLength":1,"description":"x509 ASN.1 content in PEM envelope, usually"},"kid":{"type":"string","title":"kid","maxLength":32,"minLength":1,"description":"A unique string identifier for this key"},"alg":{"not":{"enum":[0]},"title":"alg","description":"A known algorithm type with any additional parameters encoded.\\n To start, these may be `rsa:2048` for RSA-based wrapping and\\n `ec:secp256r1` for EC-based wrapping, but more formats may be added as
1needed.","type":"string","enum":["KAS_PUBLIC_KEY_ALG_ENUM_UNSPECIFIED","KAS_PUBLIC_KEY_ALG_ENUM_RSA_2048","KAS_PUBLIC_KEY_ALG_ENUM_RSA_4096","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP256R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP384R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP521R1","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_XWING","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP256R1_MLKEM768","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP384R1_MLKEM1024","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_768","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_1024"]}},"title":"KasPublicKey","additionalProperties":false,"description":"Deprecated\\n A KAS public key and some associated metadata for further identifcation"},"title":"keys"}},"additionalProperties":false}},"title":"cached","required":["cached"]},{"properties":{"remote":{"type":"string","title":"remote","description":"kas public key url - optional since can also be retrieved via public key\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(/.*)?$\')\\n```\\n\\n"}},"title":"remote","required":["remote"]}],"additionalProperties":false},"sourceType":{"title":"source_type","description":"The source of the KAS: (INTERNAL, EXTERNAL)","type":"string","enum":["SOURCE_TYPE_UNSPECIFIED","SOURCE_TYPE_INTERNAL","SOURCE_TYPE_EXTERNAL"]},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Kas keys associated with this KAS"},"name":{"type":"string","title":"name","description":"Optional\\n Unique name of the KAS instance"},"metadata":{"title":"metadata","description":"Common metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false}},"title":"KeyAccessServer","additionalProperties":false,"description":"Key Access Server Registry"},"title":"grants","description":"Deprecated KAS grants for the namespace. Use kas_keys instead."},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Keys for the namespace"}},"additionalProperties":false}
1,"name":{"type":"string","title":"name","description":"attribute name"},"rule":{"title":"rule","description":"attribute rule enum","type":"string","enum":["ATTRIBUTE_RULE_TYPE_ENUM_UNSPECIFIED","ATTRIBUTE_RULE_TYPE_ENUM_ALL_OF","ATTRIBUTE_RULE_TYPE_ENUM_ANY_OF","ATTRIBUTE_RULE_TYPE_ENUM_HIERARCHY"]},"values":{"type":"array","items":{"type":"object","properties":"circular()","title":"Value","additionalProperties":false},"title":"values"},"grants":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","title":"id"},"uri":{"type":"string","title":"uri","description":"Address of a KAS instance\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https?://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(:[0-9]+)?(/.*)?$\')\\n```\\n\\n"},"publicKey":{"title":"public_key","description":"Deprecated: KAS can have multiple key pairs","type":"object","oneOf":[{"properties":{"cached":{"title":"cached","description":"public key with additional information. Current preferred version","type":"object","properties":{"keys":{"type":"array","items":{"type":"object","properties":{"pem":{"type":"string","title":"pem","maxLength":8192,"minLength":1,"description":"x509 ASN.1 content in PEM envelope, usually"},"kid":{"type":"string","title":"kid","maxLength":32,"minLength":1,"description":"A unique string identifier for this key"},"alg":{"not":{"enum":[0]},"title":"alg","description":"A known algorithm type with any additional parameters encoded.\\n To start, these may be `rsa:2048` for RSA-based wrapping and\\n `ec:secp256r1` for EC-based wrapping, but more formats may be added as needed.","type":"string","enum":["KAS_PUBLIC_KEY_ALG_ENUM_UNSPECIFIED","KAS_PUBLIC_KEY_ALG_ENUM_RSA_2048","KAS_PUBLIC_KEY_ALG_ENUM_RSA_4096","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP256R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP384R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP521R1","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_XWING","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP256R1_MLKEM768","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP384R1_MLKEM1024","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_768","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_1024"]}},"title":"KasPublicKey","additionalProperties":false,"description":"Deprecated\\n A KAS public key and some associated metadata for further identifcation"},"title":"keys"}},"additionalProperties":false}},"title":"cached","required":["cached"]},{"properties":{"remote":{"type":"string","title":"remote","description":"kas public key url - optional since can also be retrieved via public key\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(/.*)?$\')\\n```\\n\\n"}},"title":"remote","required":["remote"]}],"additionalProperties":false},"sourceType":{"title":"source_type","description":"The source of the KAS: (INTERNAL, EXTERNAL)","type":"string","enum":["SOURCE_TYPE_UNSPECIFIED","SOURCE_TYPE_INTERNAL","SOURCE_TYPE_EXTERNAL"]},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Kas keys associated with this KA
1S"},"name":{"type":"string","title":"name","description":"Optional\\n Unique name of the KAS instance"},"metadata":{"title":"metadata","description":"Common metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false}},"title":"KeyAccessServer","additionalProperties":false,"description":"Key Access Server Registry"},"title":"grants","description":"Deprecated KAS grants for the attribute. Use kas_keys instead."},"fqn":{"type":"string","title":"fqn"},"active":{"title":"active","description":"active by default until explicitly deactivated","type":"boolean"},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Keys associated with the attribute"},"allowTraversal":{"title":"allow_traversal","description":"Whether or not we will use the attribute definition during encryption\\n if the attribute value is missing.","type":"boolean"},"metadata":{"title":"metadata","description":"Common metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false}},"required":["rule"],"additionalProperties":false},"value":{"type":"string","title":"value"},"grants":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","title":"id"},"uri":{"type":"string","title":"uri","description":"Address of a KAS instance\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https?://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(:[0-9]+)?(/.*)?$\')\\n```\\n\\n"},"publicKey":{"title":"public_key","description":"Deprecated: KAS can have multiple key pairs","type":"object","oneOf":[{"properties":{"cached":{"title":"cached","description":"public key with additional information. Current preferred version","type":"object","properties":{"keys":{"type":"array","items":{"type":"object","properties":{"pem":{"type":"string","title":"pem","maxLength":8192,"minLength":1,"description":"x509 ASN.1 content in PEM envelope, usually"},"kid":{"type":"string","title":"kid","maxLength":32,"minLength":1,"description":"A unique string identifier for this key"},"alg":{"not":{"enum":[0]},"title":"alg","description":"A known algorithm type with any additional parameters encoded.\\n To start, these may be `rsa:2048` for RSA-based wrapping and\\n `ec:secp256r1` for EC-based wrapping, but more formats may be added as
1needed.","type":"string","enum":["KAS_PUBLIC_KEY_ALG_ENUM_UNSPECIFIED","KAS_PUBLIC_KEY_ALG_ENUM_RSA_2048","KAS_PUBLIC_KEY_ALG_ENUM_RSA_4096","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP256R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP384R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP521R1","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_XWING","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP256R1_MLKEM768","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP384R1_MLKEM1024","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_768","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_1024"]}},"title":"KasPublicKey","additionalProperties":false,"description":"Deprecated\\n A KAS public key and some associated metadata for further identifcation"},"title":"keys"}},"additionalProperties":false}},"title":"cached","required":["cached"]},{"properties":{"remote":{"type":"string","title":"remote","description":"kas public key url - optional since can also be retrieved via public key\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(/.*)?$\')\\n```\\n\\n"}},"title":"remote","required":["remote"]}],"additionalProperties":false},"sourceType":{"title":"source_type","description":"The source of the KAS: (INTERNAL, EXTERNAL)","type":"string","enum":["SOURCE_TYPE_UNSPECIFIED","SOURCE_TYPE_INTERNAL","SOURCE_TYPE_EXTERNAL"]},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Kas keys associated with this KAS"},"name":{"type":"string","title":"name","description":"Optional\\n Unique name of the KAS instance"},"metadata":{"title":"metadata","description":"Common metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false}},"title":"KeyAccessServer","additionalProperties":false,"description":"Key Access Server Registry"},"title":"grants","description":"Deprecated KAS grants for the value. Use kas_keys instead."},"fqn":{"type":"string","title":"fqn"},"active":{"title":"active","description":"active by default until explicitly deactivated","type":"boolean"},"subjectMappings":{"type":"array","items":"circular(SubjectMapping)","title":"subject_mappings","de
1scription":"subject mapping"},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys"},"resourceMappings":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","title":"id"},"metadata":{"title":"metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false,"description":"Struct to uniquely identify a resource with optional additional metadata"},"attributeValue":{"type":"object","properties":"circular()","title":"Value","additionalProperties":false},"terms":{"type":"array","items":{"type":"string"},"title":"terms"},"group":{"title":"group","type":"object","properties":{"id":{"type":"string","title":"id"},"namespaceId":{"type":"string","title":"namespace_id","description":"the namespace containing the group of resource mappings"},"name":{"type":"string","title":"name","description":"the common name for the group of resource mappings, which must be unique\\n per namespace"},"fqn":{"type":"string","title":"fqn","description":"the fully qualified name of the resource mapping group"},"metadata":{"title":"metadata","description":"Common metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false}},"required":["namespaceId","name"],"additionalProperties":false,"description":"Resource Mapping Groups are namespaced collections of Resource Mappings\\nassociated under a common group name."},"namespace":{"title":"namespace","description":"The namespace that optionally owns this resource mapping. When the mapping\\n belongs to a group, this matches the group\'s namespace. The mapped\\n attribute value may belong to a different namespace.","type":"object","properties":{"id":{"type":"string","title":"id","description":"generated uuid in database"},"name":{"type":"string","title":"name","description":"used to partition Attribute Definitions, support by namespace AuthN and\\n enable federation"},"fqn":{"type":"string","title":"fqn"},"active":{"title":"active","description":"active by default until explicitly deactivated","type":"boolean"},"metadata":{"title":"metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false,"description":"Struct to uniquely identify a resource with optional additional metadata"},"grants":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","title":"id"},"uri":{"type":"string","title":"uri","description":"Address of a KAS instance\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https?://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(:[0-9]+)?(/.*)?$\')\\n```\\n\\n"},"publicKey":{"title":"public_key","description":"Deprecated: KAS can have multiple key pairs","type":"object","oneOf":[{"properties":{"cached":{"title":"cached","description":"public key with additional information. Current preferred version","type":"object","properties":{"keys":{"type":"array","items":{"type":"object","properties":{"pem":{"type":"string","title":"pem","maxLength":8192,"minLength":1,"description":"x509 ASN.1 content in PEM envelope, usually"},"kid":{"type":"string","title":"kid","maxLength":32,"minLength":1,"description":"A unique string identifier for this key"},"alg":{"not":{"enum":[0]},"title":"alg","description":"A known algorithm type with any additional parameters encoded.\\n To start, these may be `rsa:2048` for RSA-based wrapping and\\n `ec:secp256r1` for EC-based wrapping, but more formats may be added as
1needed.","type":"string","enum":["KAS_PUBLIC_KEY_ALG_ENUM_UNSPECIFIED","KAS_PUBLIC_KEY_ALG_ENUM_RSA_2048","KAS_PUBLIC_KEY_ALG_ENUM_RSA_4096","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP256R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP384R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP521R1","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_XWING","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP256R1_MLKEM768","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP384R1_MLKEM1024","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_768","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_1024"]}},"title":"KasPublicKey","additionalProperties":false,"description":"Deprecated\\n A KAS public key and some associated metadata for further identifcation"},"title":"keys"}},"additionalProperties":false}},"title":"cached","required":["cached"]},{"properties":{"remote":{"type":"string","title":"remote","description":"kas public key url - optional since can also be retrieved via public key\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(/.*)?$\')\\n```\\n\\n"}},"title":"remote","required":["remote"]}],"additionalProperties":false},"sourceType":{"title":"source_type","description":"The source of the KAS: (INTERNAL, EXTERNAL)","type":"string","enum":["SOURCE_TYPE_UNSPECIFIED","SOURCE_TYPE_INTERNAL","SOURCE_TYPE_EXTERNAL"]},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Kas keys associated with this KAS"},"name":{"type":"string","title":"name","description":"Optional\\n Unique name of the KAS instance"},"metadata":{"title":"metadata","description":"Common metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false}},"title":"KeyAccessServer","additionalProperties":false,"description":"Key Access Server Registry"},"title":"grants","description":"Deprecated KAS grants for the namespace. Use kas_keys instead."},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Keys for the namespace"}},"additionalProperties":false}},"title":"ResourceMapping","required":["attributeValue"],"additionalProperties":false,"description":"Resource Mappings (aka Access Control Resource Encodings aka ACRE) are\\nstructures supporting the mapping of Resources and Attribute Values"},"title":"resource_mappings"},"obligations":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","title":"id"},"namespace":{"title":"namespace","type":"object","properties":{"id":{"type":"string","title":"id","description":"generated uuid in database"},"name":{"type":"string","title":"name","description":"used to partition Attribute Definitions, support by namespace AuthN and\\n enable federation"},"fqn":{"type":"string","title":"fqn"},"active":{"title":"active","description":"active by default until explicitly deactivated","type":"boolean"},"metadata":{"title":"metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false,"description":"Struct to uniquely identify a resource with optional additional metadata"},"grants":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","title":"id"},"uri":{"type":"string","title":"uri","description":"Address of a KAS instance\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https?://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(:[0-9]+)?(/.*)?$\')\\n```\\n\\n"},"publicKey":{"title":"public_key","description":"Deprecated: KAS can have multiple key pairs","type":"object","oneOf":[{"properties":{"cached":{"title":"cached","description":"public key with additional information. Current preferred version","type":"object","properties":{"keys":{"type":"array","items":{"type":"object","properties":{"pem":{"type":"string","title":"pem","maxLength":8192,"minLength":1,"description":"x509 ASN.1 content in PEM envelope, usually"},"kid":{"type":"string","title":"kid","maxLength":32,"minLength":1,"description":"A unique string identifier for this key"},"alg":{"not":{"enum":[0]},"title":"alg","description":"A known algorithm type with any additional parameters encoded.\\n To start, these may be `rsa:2048` for RSA-based wrapping and\\n `ec:secp256r1` for EC-based wrapping, but more formats may be added as
1needed.","type":"string","enum":["KAS_PUBLIC_KEY_ALG_ENUM_UNSPECIFIED","KAS_PUBLIC_KEY_ALG_ENUM_RSA_2048","KAS_PUBLIC_KEY_ALG_ENUM_RSA_4096","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP256R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP384R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP521R1","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_XWING","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP256R1_MLKEM768","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP384R1_MLKEM1024","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_768","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_1024"]}},"title":"KasPublicKey","additionalProperties":false,"description":"Deprecated\\n A KAS public key and some associated metadata for further identifcation"},"title":"keys"}},"additionalProperties":false}},"title":"cached","required":["cached"]},{"properties":{"remote":{"type":"string","title":"remote","description":"kas public key url - optional since can also be retrieved via public key\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(/.*)?$\')\\n```\\n\\n"}},"title":"remote","required":["remote"]}],"additionalProperties":false},"sourceType":{"title":"source_type","description":"The source of the KAS: (INTERNAL, EXTERNAL)","type":"string","enum":["SOURCE_TYPE_UNSPECIFIED","SOURCE_TYPE_INTERNAL","SOURCE_TYPE_EXTERNAL"]},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Kas keys associated with this KAS"},"name":{"type":"string","title":"name","description":"Optional\\n Unique name of the KAS instance"},"metadata":{"title":"metadata","description":"Common metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false}},"title":"KeyAccessServer","additionalProperties":false,"description":"Key Access Server Registry"},"title":"grants","description":"Deprecated KAS grants for the namespace. Use kas_keys instead."},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Keys for the namespace"}},"additionalProperties":false}
1,"name":{"type":"string","title":"name"},"values":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","title":"id"},"obligation":{"title":"obligation","type":"object","properties":"circular()","additionalProperties":false},"value":{"type":"string","title":"value"},"triggers":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","title":"id"},"obligationValue":{"title":"obligation_value","type":"object","properties":"circular()","additionalProperties":false},"action":{"title":"action","type":"object","oneOf":[{"properties":{"custom":{"type":"string","title":"custom","description":"Deprecated"}},"title":"custom","required":["custom"]},{"properties":{"standard":{"title":"standard","description":"Deprecated","type":"string","enum":["STANDARD_ACTION_UNSPECIFIED","STANDARD_ACTION_DECRYPT","STANDARD_ACTION_TRANSMIT"]}},"title":"standard","required":["standard"]}],"properties":{"id":{"type":"string","title":"id","description":"Generated uuid in database"},"name":{"type":"string","title":"name"},"namespace":{"title":"namespace","description":"Namespace context for this action","type":"object","properties":{"id":{"type":"string","title":"id","description":"generated uuid in database"},"name":{"type":"string","title":"name","description":"used to partition Attribute Definitions, support by namespace AuthN and\\n enable federation"},"fqn":{"type":"string","title":"fqn"},"active":{"title":"active","description":"active by default until explicitly deactivated","type":"boolean"},"metadata":{"title":"metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false,"description":"Struct to uniquely identify a resource with optional additional metadata"},"grants":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","title":"id"},"uri":{"type":"string","title":"uri","description":"Address of a KAS instance\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https?://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(:[0-9]+)?(/.*)?$\')\\n```\\n\\n"},"publicKey":{"title":"public_key","description":"Deprecated: KAS can have multiple key pairs","type":"object","oneOf":[{"properties":{"cached":{"title":"cached","description":"public key with additional information. Current preferred version","type":"object","properties":{"keys":{"type":"array","items":{"type":"object","properties":{"pem":{"type":"string","title":"pem","maxLength":8192,"minLength":1,"description":"x509 ASN.1 content in PEM envelope, usually"},"kid":{"type":"string","title":"kid","maxLength":32,"minLength":1,"description":"A unique string identifier for this key"},"alg":{"not":{"enum":[0]},"title":"alg","description":"A known algorithm type with any additional parameters encoded.\\n To start, these may be `rsa:2048` for RSA-based wrapping and\\n `ec:secp256r1` for EC-based wrapping, but more formats may be added as needed.","type":"string","enum":["KAS_PUBLIC_KEY_ALG_ENUM_UNSPECIFIED","KAS_PUBLIC_KEY_ALG_ENUM_RSA_2048","KAS_PUBLIC_KEY_ALG_ENUM_RSA_4096","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP256R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP384R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP521R1","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_XWING","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP256R1_MLKEM768","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP384R1_MLKEM1024","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_768","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_1024"]}},"title":"KasPublicKey","additionalProperties":false,"description":"Deprecated\\n A KAS public key and some associated metadata for further identifcation"},"title":"keys"}},"additionalProperties":false}}
1,"title":"cached","required":["cached"]},{"properties":{"remote":{"type":"string","title":"remote","description":"kas public key url - optional since can also be retrieved via public key\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(/.*)?$\')\\n```\\n\\n"}},"title":"remote","required":["remote"]}],"additionalProperties":false},"sourceType":{"title":"source_type","description":"The source of the KAS: (INTERNAL, EXTERNAL)","type":"string","enum":["SOURCE_TYPE_UNSPECIFIED","SOURCE_TYPE_INTERNAL","SOURCE_TYPE_EXTERNAL"]},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Kas keys associated with this KAS"},"name":{"type":"string","title":"name","description":"Optional\\n Unique name of the KAS instance"},"metadata":{"title":"metadata","description":"Common metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false}},"title":"KeyAccessServer","additionalProperties":false,"description":"Key Access Server Registry"},"title":"grants","description":"Deprecated KAS grants for the namespace. Use kas_keys instead."},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Keys for the namespace"}},"additionalProperties":false},"metadata":{"title":"metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false,"description":"Struct to uniquely identify a resource with optional additional metadata"}},"additionalProperties":false,"description":"An action an entity can take"},"attributeValue":{"type":"object","properties":"circular()","title":"Value","additionalProperties":false},"context":{"type":"array","items":{"type":"object","properties":{"pep":{"title":"pep","type":"object","properties":{"clientId":{"type":"string","title":"client_id","minLength":1}},"additionalProperties":false}},"title":"RequestContext","required":["pep"],"additionalProperties":false,"description":"Holds the context needed for obligation fulfillment"},"title":"context"},"namespace":{"title":"namespace","description":"The source namespace for this trigger, derived from the attribute value and action.","type":"object","properties":{"id":{"type":"string","title":"id","description":"generated uuid in database"},"name":{"type":"string","title":"name","description":"used to partition Attribute Definitions, support by namespace AuthN and\\n enable federation"},"fqn":{"type":"string","title":"fqn"},"active":{"title":"active","description":"active by default until explicitly deactivated","type":"boolean"},"metadata":{"title":"metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false,"description":"Struct to uniquely identify a resource with optional additional metadata"},"grants":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","title":"id"},"uri":{"type":"string","title":"uri","description":"Address of a KAS instance\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https?://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(:[0-9]+)?(/.*)?$\')\\n```\\n\\n"},"publicKey":{"title":"public_key","description":"Deprecated: KAS can have multiple key pairs","type":"object","oneOf":[{"properties":{"cached":{"title":"cached","description":"public key with additional information. Current preferred version","type":"object","properties":{"keys":{"type":"array","items":{"type":"object","properties":{"pem":{"type":"string","title":"pem","maxLength":8192,"minLength":1,"description":"x509 ASN.1 content in PEM envelope, usually"},"kid":{"type":"string","title":"kid","maxLength":32,"minLength":1,"description":"A unique string identifier for this key"},"alg":{"not":{"enum":[0]},"title":"alg","description":"A known algorithm type with any additional parameters encoded.\\n To start, these may be `rsa:2048` for RSA-based wrapping and\\n `ec:secp256r1` for EC-based wrapping, but more formats may be added as
1needed.","type":"string","enum":["KAS_PUBLIC_KEY_ALG_ENUM_UNSPECIFIED","KAS_PUBLIC_KEY_ALG_ENUM_RSA_2048","KAS_PUBLIC_KEY_ALG_ENUM_RSA_4096","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP256R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP384R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP521R1","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_XWING","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP256R1_MLKEM768","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP384R1_MLKEM1024","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_768","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_1024"]}},"title":"KasPublicKey","additionalProperties":false,"description":"Deprecated\\n A KAS public key and some associated metadata for further identifcation"},"title":"keys"}},"additionalProperties":false}},"title":"cached","required":["cached"]},{"properties":{"remote":{"type":"string","title":"remote","description":"kas public key url - optional since can also be retrieved via public key\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(/.*)?$\')\\n```\\n\\n"}},"title":"remote","required":["remote"]}],"additionalProperties":false},"sourceType":{"title":"source_type","description":"The source of the KAS: (INTERNAL, EXTERNAL)","type":"string","enum":["SOURCE_TYPE_UNSPECIFIED","SOURCE_TYPE_INTERNAL","SOURCE_TYPE_EXTERNAL"]},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Kas keys associated with this KAS"},"name":{"type":"string","title":"name","description":"Optional\\n Unique name of the KAS instance"},"metadata":{"title":"metadata","description":"Common metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false}},"title":"KeyAccessServer","additionalProperties":false,"description":"Key Access Server Registry"},"title":"grants","description":"Deprecated KAS grants for the namespace. Use kas_keys instead."},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Keys for the namespace"}},"additionalProperties":false},"metadata":{"title":"metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false,"description":"Struct to uniquely identify a resource with optional additional metadata"}},"title":"ObligationTrigger","additionalProperties":false},"title":"triggers"},"fqn":{"type":"string","title":"fqn"},"metadata":{"title":"metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false,"description":"Struct to uniquely identify a resource with optional additional metadata"}},"title":"ObligationValue","additionalProperties":false},"title":"values"},"fqn":{"type":"string","title":"fqn"},"metadata":{"title":"metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false,"description":"Struct to uniquely identify a resource with optional additional metadata"}},"title":"Obligation","additionalProperties":false},"title":"obligations"},"metadata":{"title":"metadata","description":"Common metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false}},"additionalProperties":false},"subjectConditionSet":{"title":"subject_condition_set","description":"the reusable SubjectConditionSet mapped to the given Attribute Value","type":"object","properties":{"id":{"type":"string","title":"id"},"namespace":{"title":"namespace","description":"the namespace containing this subject condition set\\n possible this is empty in the case a subject condition set\\n has not been migrated to a namespace.","type":"object","properties":{"id":{"type":"string","title":"id","description":"generated uuid in database"},"name":{"type":"string","title":"name","description":"used to partition Attribute Definitions, support by namespace AuthN and\\n enable federation"},"fqn":{"type":"string","title":"fqn"},"active":{"title":"active","description":"active by default until explicitly deactivated","type":"boolean"},"metadata":{"title":"metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false,"description":"Struct to uniquely identify a resource with optional additional metadata"},"grants":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","title":"id"},"uri":{"type":"string","title":"uri","description":"Address of a KAS instance\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https?://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(:[0-9]+)?(/.*)?$\')\\n```\\n\\n"},"publicKey":{"title":"public_key","description":"Deprecated: KAS can have multiple key pairs","type":"object","oneOf":[{"properties":{"cached":{"title":"cached","description":"public key with additional information. Current preferred version","type":"object","properties":{"keys":{"type":"array","items":{"type":"object","properties":{"pem":{"type":"string","title":"pem","maxLength":8192,"minLength":1,"description":"x509 ASN.1 content in PEM envelope, usually"},"kid":{"type":"string","title":"kid","maxLength":32,"minLength":1,"description":"A unique string identifier for this key"},"alg":{"not":{"enum":[0]},"title":"alg","description":"A known algorithm type with any additional parameters encoded.\\n To start, these may be `rsa:2048` for RSA-based wrapping and\\n `ec:secp256r1` for EC-based wrapping, but more formats may be added as
1needed.","type":"string","enum":["KAS_PUBLIC_KEY_ALG_ENUM_UNSPECIFIED","KAS_PUBLIC_KEY_ALG_ENUM_RSA_2048","KAS_PUBLIC_KEY_ALG_ENUM_RSA_4096","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP256R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP384R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP521R1","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_XWING","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP256R1_MLKEM768","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP384R1_MLKEM1024","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_768","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_1024"]}},"title":"KasPublicKey","additionalProperties":false,"description":"Deprecated\\n A KAS public key and some associated metadata for further identifcation"},"title":"keys"}},"additionalProperties":false}},"title":"cached","required":["cached"]},{"properties":{"remote":{"type":"string","title":"remote","description":"kas public key url - optional since can also be retrieved via public key\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(/.*)?$\')\\n```\\n\\n"}},"title":"remote","required":["remote"]}],"additionalProperties":false},"sourceType":{"title":"source_type","description":"The source of the KAS: (INTERNAL, EXTERNAL)","type":"string","enum":["SOURCE_TYPE_UNSPECIFIED","SOURCE_TYPE_INTERNAL","SOURCE_TYPE_EXTERNAL"]},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Kas keys associated with this KAS"},"name":{"type":"string","title":"name","description":"Optional\\n Unique name of the KAS instance"},"metadata":{"title":"metadata","description":"Common metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false}},"title":"KeyAccessServer","additionalProperties":false,"description":"Key Access Server Registry"},"title":"grants","description":"Deprecated KAS grants for the namespace. Use kas_keys instead."},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Keys for the namespace"}},"additionalProperties":false},"subjectSets":{"type":"array","items":{"type":"object","properties":{"conditionGroups":{"type":"array","items":{"type":"object","properties":{"conditions":{"type":"array","items":{"type":"object","properties":{"subjectExternalSelectorValue":{"type":"string","title":"subject_external_selector_value","description":"a selector for a field value on a flattened Entity Representation (such as\\n from idP/LDAP)"},"operator":{"title":"operator","description":"the evaluation operator of relation","type":"string","enum":["SUBJECT_MAPPING_OPERATOR_ENUM_UNSPECIFIED","SUBJECT_MAPPING_OPERATOR_ENUM_IN","SUBJECT_MAPPING_OPERATOR_ENUM_NOT_IN","SUBJECT_MAPPING_OPERATOR_ENUM_IN_CONTAINS"]},"subjectExternalValues":{"type":"array","items":{"type":"string","minItems":1},"title":"subject_external_values","minItems":1,"description":"list of comparison values for the result of applying the\\n subject_external_selector_value on a flattened Entity Representation\\n (Subject), evaluated by the operator"}},"title":"Condition","required":["subjectExternalSelectorValue","operator"],"additionalProperties":false,"description":"*\\nA Condition defines a rule of <the value at the flattened \'selector value\'\\nlocation> <operator>
1 <subject external values>"},"title":"conditions","minItems":1},"booleanOperator":{"title":"boolean_operator","description":"the boolean evaluation type across the conditions","type":"string","enum":["CONDITION_BOOLEAN_TYPE_ENUM_UNSPECIFIED","CONDITION_BOOLEAN_TYPE_ENUM_AND","CONDITION_BOOLEAN_TYPE_ENUM_OR"]}},"title":"ConditionGroup","required":["booleanOperator"],"additionalProperties":false,"description":"A collection of Conditions evaluated by the boolean_operator provided"},"title":"condition_groups","minItems":1,"description":"multiple Condition Groups are evaluated with AND logic"}},"title":"SubjectSet","additionalProperties":false,"description":"A collection of Condition Groups"},"title":"subject_sets","minItems":1},"metadata":{"title":"metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false,"description":"Struct to uniquely identify a resource with optional additional metadata"}},"additionalProperties":false},"actions":{"type":"array","items":{"type":"object","oneOf":[{"properties":{"custom":{"type":"string","title":"custom","description":"Deprecated"}},"title":"custom","required":["custom"]},{"properties":{"standard":{"title":"standard","description":"Deprecated","type":"string","enum":["STANDARD_ACTION_UNSPECIFIED","STANDARD_ACTION_DECRYPT","STANDARD_ACTION_TRANSMIT"]}},"title":"standard","required":["standard"]}],"properties":{"id":{"type":"string","title":"id","description":"Generated uuid in database"},"name":{"type":"string","title":"name"},"namespace":{"title":"namespace","description":"Namespace context for this action","type":"object","properties":{"id":{"type":"string","title":"id","description":"generated uuid in database"},"name":{"type":"string","title":"name","description":"used to partition Attribute Definitions, support by namespace AuthN and\\n enable federation"},"fqn":{"type":"string","title":"fqn"},"active":{"title":"active","description":"active by default until explicitly deactivated","type":"boolean"},"metadata":{"title":"metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false,"description":"Struct to uniquely identify a resource with optional additional metadata"},"grants":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","title":"id"},"uri":{"type":"string","title":"uri","description":"Address of a KAS instance\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https?://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(:[0-9]+)?(/.*)?$\')\\n```\\n\\n"},"publicKey":{"title":"public_key","description":"Deprecated: KAS can have multiple key pairs","type":"object","oneOf":[{"properties":{"cached":{"title":"cached","description":"public key with additional information. Current preferred version","type":"object","properties":{"keys":{"type":"array","items":{"type":"object","properties":{"pem":{"type":"string","title":"pem","maxLength":8192,"minLength":1,"description":"x509 ASN.1 content in PEM envelope, usually"},"kid":{"type":"string","title":"kid","maxLength":32,"minLength":1,"description":"A unique string identifier for this key"},"alg":{"not":{"enum":[0]},"title":"alg","description":"A known algorithm type with any additional parameters encoded.\\n To start, these may be `rsa:2048` for RSA-based wrapping and\\n `ec:secp256r1` for EC-based wrapping, but more formats may be added as
1needed.","type":"string","enum":["KAS_PUBLIC_KEY_ALG_ENUM_UNSPECIFIED","KAS_PUBLIC_KEY_ALG_ENUM_RSA_2048","KAS_PUBLIC_KEY_ALG_ENUM_RSA_4096","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP256R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP384R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP521R1","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_XWING","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP256R1_MLKEM768","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP384R1_MLKEM1024","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_768","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_1024"]}},"title":"KasPublicKey","additionalProperties":false,"description":"Deprecated\\n A KAS public key and some associated metadata for further identifcation"},"title":"keys"}},"additionalProperties":false}},"title":"cached","required":["cached"]},{"properties":{"remote":{"type":"string","title":"remote","description":"kas public key url - optional since can also be retrieved via public key\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(/.*)?$\')\\n```\\n\\n"}},"title":"remote","required":["remote"]}],"additionalProperties":false},"sourceType":{"title":"source_type","description":"The source of the KAS: (INTERNAL, EXTERNAL)","type":"string","enum":["SOURCE_TYPE_UNSPECIFIED","SOURCE_TYPE_INTERNAL","SOURCE_TYPE_EXTERNAL"]},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Kas keys associated with this KAS"},"name":{"type":"string","title":"name","description":"Optional\\n Unique name of the KAS instance"},"metadata":{"title":"metadata","description":"Common metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false}},"title":"KeyAccessServer","additionalProperties":false,"description":"Key Access Server Registry"},"title":"grants","description":"Deprecated KAS grants for the namespace. Use kas_keys instead."},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Keys for the namespace"}},"additionalProperties":false},"metadata":{"title":"metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false,"description":"Struct to uniquely identify a resource with optional additional metadata"}},"title":"Action","additionalProperties":false,"description":"An action an entity can take"},"title":"actions","description":"The actions permitted by subjects in this mapping"},"namespace":{"title":"namespace","description":"the namespace containing this subject mapping\\n possible this is empty. If so that means\\n the Subject Mapping has not been migrated to a namespace.","type":"object","properties":{"id":{"type":"string","title":"id","description":"generated uuid in database"},"name":{"type":"string","title":"name","description":"used to partition Attribute Definitions, support by namespace AuthN and\\n enable federation"},"fqn":{"type":"string","title":"fqn"},"active":{"title":"active","description":"active by default until explicitly deactivated","type":"boolean"},"metadata":{"title":"metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false,"description":"Struct to uniquely identify a resource with optional additional metadata"},"grants":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","title":"id"},"uri":{"type":"string","title":"uri","description":"Address of a KAS instance\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https?://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(:[0-9]+)?(/.*)?$\')\\n```\\n\\n"},"publicKey":{"title":"public_key","description":"Deprecated: KAS can have multiple key pairs","type":"object","oneOf":[{"properties":{"cached":{"title":"cached","description":"public key with additional information. Current preferred version","type":"object","properties":{"keys":{"type":"array","items":{"type":"object","properties":{"pem":{"type":"string","title":"pem","maxLength":8192,"minLength":1,"description":"x509 ASN.1 content in PEM envelope, usually"},"kid":{"type":"string","title":"kid","maxLength":32,"minLength":1,"description":"A unique string identifier for this key"},"alg":{"not":{"enum":[0]},"title":"alg","description":"A known algorithm type with any additional parameters encoded.\\n To start, these may be `rsa:2048` for RSA-based wrapping and\\n `ec:secp256r1` for EC-based wrapping, but more formats may be added as
1needed.","type":"string","enum":["KAS_PUBLIC_KEY_ALG_ENUM_UNSPECIFIED","KAS_PUBLIC_KEY_ALG_ENUM_RSA_2048","KAS_PUBLIC_KEY_ALG_ENUM_RSA_4096","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP256R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP384R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP521R1","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_XWING","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP256R1_MLKEM768","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP384R1_MLKEM1024","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_768","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_1024"]}},"title":"KasPublicKey","additionalProperties":false,"description":"Deprecated\\n A KAS public key and some associated metadata for further identifcation"},"title":"keys"}},"additionalProperties":false}},"title":"cached","required":["cached"]},{"properties":{"remote":{"type":"string","title":"remote","description":"kas public key url - optional since can also be retrieved via public key\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(/.*)?$\')\\n```\\n\\n"}},"title":"remote","required":["remote"]}],"additionalProperties":false},"sourceType":{"title":"source_type","description":"The source of the KAS: (INTERNAL, EXTERNAL)","type":"string","enum":["SOURCE_TYPE_UNSPECIFIED","SOURCE_TYPE_INTERNAL","SOURCE_TYPE_EXTERNAL"]},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Kas keys associated with this KAS"},"name":{"type":"string","title":"name","description":"Optional\\n Unique name of the KAS instance"},"metadata":{"title":"metadata","description":"Common metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false}},"title":"KeyAccessServer","additionalProperties":false,"description":"Key Access Server Registry"},"title":"grants","description":"Deprecated KAS grants for the namespace. Use kas_keys instead."},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Keys for the namespace"}},"additionalProperties":false},"metadata":{"title":"metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false,"description":"Struct to uniquely identify a resource with optional additional metadata"}},"title":"SubjectMapping","additionalProperties":false,"description":"Subject Mapping: A Policy assigning Subject Set(s) to a permitted attribute\\nvalue + action(s) combination"},"title":"subject_mappings"},"pagination":{"title":"pagination","type":"object","properties":{"currentOffset":{"type":"integer","title":"current_offset","format":"int32","description":"Requested pagination offset"},"nextOffset":{"type":"integer","title":"next_offset","format":"int32","description":"Calculated with request limit + offset or defaults\\n Empty when none remain after current page"},"total":{"type":"integer","title":"total","format":"int32","description":"Total count of entire list"}},"additionalProperties":false}},"title":"ListSubjectMappingsResponse","additionalProperties":false}}}},"default":{"description":"Error","content":{"application/json":{"schema":{"type":"object","properties":{"code":{"type":"string","examples":["not_found"],"enum":["canceled","unknown","invali
1d_argument","deadline_exceeded","not_found","already_exists","permission_denied","resource_exhausted","failed_precondition","aborted","out_of_range","unimplemented","internal","unavailable","data_loss","unauthenticated"],"description":"The status code, which should be an enum value of [google.rpc.Code][google.rpc.Code]."},"message":{"type":"string","description":"A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the [google.rpc.Status.details][google.rpc.Status.details] field, or localized by the client."},"detail":{"type":"object","properties":{"type":{"type":"string"},"value":{"type":"string","format":"binary"},"debug":{"type":"object","additionalProperties":true}},"additionalProperties":true,"description":"Contains an arbitrary serialized message along with a @type that describes the type of the serialized message.","title":"google.protobuf.Any"}},"title":"Connect Error","additionalProperties":true,"description":"Error type returned by Connect: https://connectrpc.com/docs/go/errors/#http-representation"}}}}}}')}}]);
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.