Sign in
providers

Reencrypt Stored Provider Keys

Changed on

Re-encrypt stored provider keys with the primary OTARI_SECRET_KEY.

Operators rotate OTARI_SECRET_KEY by setting it to new,old first, restarting, running this endpoint, then removing the old key and restarting again. Rows that cannot be decrypted are left untouched and must be recovered by replacing the affected provider keys.

post/api/v1/provider-credentials/reencrypt

Request

  • The document declares no server URL.
  • Auth: one of:
    • API key in header Otari-Key
    • API key in header x-api-key

Response

Successful Response

reencryptedinteger required

Number of stored provider keys re-encrypted.

skippedinteger

Number of rows whose stored key changed between the read and the write, so the re-encryption was not applied. They already hold whoever wrote them last.

unreadableinteger required

Number of encrypted keys left untouched because they could not be decrypted.

Changes