forked from TrueCloudLab/frostfs-s3-gw
Roman Loginov
a725c68d06
Salt is used when generating encryption keys for data (tokens) in the access box. Now frostfs-s3-authmate always derivation an encryption key with salt. Signed-off-by: Roman Loginov <r.loginov@yadro.com>
31 lines
890 B
Protocol Buffer
31 lines
890 B
Protocol Buffer
syntax = "proto3";
|
|
|
|
package accessbox;
|
|
|
|
option go_package = "git.frostfs.info/TrueCloudLab/frostfs-s3-gw/creds/tokenbox;accessbox";
|
|
|
|
|
|
|
|
message AccessBox {
|
|
message Gate {
|
|
bytes tokens = 1 [json_name = "tokens"];
|
|
bytes gatePublicKey = 2 [json_name = "gatePublicKey"];
|
|
bytes encryptionKeySalt = 3 [json_name = "encryptionKeySalt"];
|
|
}
|
|
|
|
message ContainerPolicy {
|
|
string locationConstraint = 1;
|
|
bytes policy = 2;
|
|
}
|
|
|
|
bytes seedKey = 1 [json_name = "seedKey"];
|
|
repeated Gate gates = 2 [json_name = "gates"];
|
|
repeated ContainerPolicy containerPolicy = 3 [json_name = "containerPolicy"];
|
|
bool isCustom = 4 [json_name = "isCustom"];
|
|
}
|
|
|
|
message Tokens {
|
|
bytes secretKey = 1 [json_name = "secretKey"];
|
|
bytes bearerToken = 2 [json_name = "bearerToken"];
|
|
repeated bytes sessionTokens = 3 [json_name = "sessionTokens"];
|
|
}
|