Skip to main content

TrustSecretLease

Description

Short-lived authorization to use a key version for one scoped cryptographic operation. Lease purpose is operation and audit metadata; ACL authority is evaluated through canonical ThorAPI permissions. ENCRYPT and WRAP require ENCRYPTION. DECRYPT, UNWRAP, and REWRAP require VIEW_DECRYPTED. SIGN requires EXECUTE. VERIFY requires READ. READ alone never implies plaintext or unwrap authority.

Properties

NameTypeDescriptionNotes
keyVersionTrustKeyVersion[optional]
leasePurposeLeasePurposeEnum[optional]
actorIdUUID[optional]
serviceAccountIdUUID[optional]
expiresAtOffsetDateTime[optional]
leaseStatusLeaseStatusEnum[optional]
requestHashString[optional]
ownerIdUUID[optional]
idUUIDUnique identifier for object in the system[optional] [readonly]
createdDateOffsetDateTimeDate of object creation[optional] [readonly]
keyHashStringData, including hash of the key(s) used to encrypt this record.[optional] [readonly]
lastAccessedByIdUUIDLast user to access object[optional] [readonly]
lastAccessedDateOffsetDateTimeTimestamp of last access of object[optional] [readonly]
lastModifiedByIdUUIDUnique identifier for user who last modifed the object in the system[optional] [readonly]
lastModifiedDateOffsetDateTimeDate of last object modification[optional] [readonly]
trashedBooleanIndicates if the object is trashed (soft deleted)[optional]

Enum: LeasePurposeEnum

NameValue
encrypt"ENCRYPT"
decrypt"DECRYPT"
sign"SIGN"
verify"VERIFY"
wrap"WRAP"
unwrap"UNWRAP"
rewrap"REWRAP"

Enum: LeaseStatusEnum

NameValue
issued"ISSUED"
used"USED"
expired"EXPIRED"
revoked"REVOKED"

Implemented Interfaces

  • Serializable

Generated Version Details

~value
GENERATOR VERSIONcom.valkyrlabs:ValkyrAI API 1.0.3-SNAPSHOT
API ARTIFACTcom.valkyrlabs.valkyrai-api.jar
GENERATOR VERSIONorg.openapitools.openapi-generator:7.5.0
GENERATOR CLASSorg.openapitools.codegen.languages.SpringCodegen
GENERATED DATE2026-05-16T11:45:23.900207-07:00[America/Los_Angeles]