Sign in
search-tools

Reencrypt Stored Search Tool Keys

Changed on

Re-encrypt stored search-tool keys with the primary OTARI_SECRET_KEY.

The search-tool half of the OTARI_SECRET_KEY rotation procedure; run it alongside POST /api/v1/provider-credentials/reencrypt. Rows that cannot be decrypted are left untouched and must be recovered by replacing the affected tool's key.

post/api/v1/search-tools/reencrypt

Request

  • The document declares no server URL.
  • Auth: one of:
    • API key in header Otari-Key
    • API key in header x-api-key

Response

Successful Response

reencryptedinteger required

Number of stored search-tool keys re-encrypted.

skippedinteger

Number of rows whose stored key changed between the read and the write, so the re-encryption was not applied. They already hold whoever wrote them last.

unreadableinteger required

Number of encrypted keys left untouched because they could not be decrypted.

Changes