v1

latestOpenAPI 3.1.02026-07-178964200.5 KB

Secrets

Fetch Secret For Server

Return a secret wrapped as JWE for the requesting server.

Auth: The caller must present a delegation JWT (RFC 8693) issued by Core. sub is the user whose secret is being fetched; act.sub is the client_id of the server requesting the secret. The JWE envelope is encrypted with the server's registered RSA public key so only that server can decrypt it. Plaintext never leaves Core unencrypted.

post/secrets/fetch

Request body

typestring nullable

Filter by secret type

providerstring nullable

Filter by provider

authorizer_idstring nullable

Filter by authorizer artifact ID

secret_idstring nullable

Exact secret ID

Response

Successful Response

idstring required

typestring required

jweobject required