Class AdminKeyExportResponse
java.lang.Object
co.ankatech.keymanagement.client.keymanagement.model.AdminKeyExportResponse
@Generated(value="org.openapitools.codegen.languages.JavaClientCodegen",
comments="Generator version: 7.23.0")
public class AdminKeyExportResponse
extends Object
Public key material and full operational metadata for a tenant-scoped cryptographic key. Private key material is never returned. For symmetric keys (kty=oct) publicKey is null; for composite keys only component PUBLIC keys are exposed via components[].
-
Nested Class Summary
Nested ClassesModifier and TypeClassDescriptionstatic enumHow a composite key's components are combined — the construction axis that a coarse key type deliberately does not carry.static classstatic enumHow the key entered the platform (GENERATED or IMPORTED).static enumKey structure: SIMPLE (single-algorithm key) or COMPOSITE (hybrid classical + PQC key). -
Field Summary
FieldsModifier and TypeFieldDescriptionstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final String -
Constructor Summary
Constructors -
Method Summary
Modifier and TypeMethodDescriptionaddComponentsItem(AdminKeyComponentExport componentsItem) addKeyOpsItem(String keyOpsItem) components(List<AdminKeyComponentExport> components) compositeMode(AdminKeyExportResponse.CompositeModeEnum compositeMode) createdAt(OffsetDateTime createdAt) booleanexpiresAt(OffsetDateTime expiresAt) exportable(Boolean exportable) static AdminKeyExportResponseCreate an instance of AdminKeyExportResponse given an JSON stringgetAlg()Algorithm identifier.Component PUBLIC keys for COMPOSITE keys.How a composite key's components are combined — the construction axis that a coarse key type deliberately does not carry.The wire value ofcompositeMode: what the server sent, verbatim.UTC timestamp at which the key material was generated.Hard expiration UTC timestamp.Whether the public key material can be exported via migration endpoints.getKdf()Key derivation function the key's combination policy stores, reported exactly as stored and never defaulted.Permitted key operations (encrypt, decrypt, sign, verify, wrapKey, unwrapKey).getKid()Unique key identifier (kid) within the tenant keystore.getKty()Key type (kty).Most recent UTC timestamp at which the key was used.Hard usage limit.Always absent.How the key entered the platform (GENERATED or IMPORTED).The wire value oforigin: what the server sent, verbatim.Always absent.Base64-encoded public key material for simple asymmetric keys.Whether the key has operational restrictions (e.g. imported with an expired certificate).Soft expiration UTC timestamp (warning threshold).Soft usage limit (warning threshold).Current lifecycle state, as the LOWER-CASE token the mapper emits (active, rotated, expired, revoked, archived, ...): the wire token of the key status, not the constant name.getType()Key structure: SIMPLE (single-algorithm key) or COMPOSITE (hybrid classical + PQC key).The wire value oftype: what the server sent, verbatim.Cumulative count of cryptographic operations performed with this key.inthashCode()lastUsedAt(OffsetDateTime lastUsedAt) maxUsageLimit(Integer maxUsageLimit) previousKid(String previousKid) restricted(Boolean restricted) voidvoidsetComponents(List<AdminKeyComponentExport> components) voidsetCompositeMode(AdminKeyExportResponse.CompositeModeEnum compositeMode) voidsetCreatedAt(OffsetDateTime createdAt) voidsetExpiresAt(OffsetDateTime expiresAt) voidsetExportable(Boolean exportable) voidvoidvoidvoidvoidsetLastUsedAt(OffsetDateTime lastUsedAt) voidsetMaxUsageLimit(Integer maxUsageLimit) voidsetNextKid(String nextKid) voidvoidsetPreviousKid(String previousKid) voidsetPublicKey(String publicKey) voidsetRestricted(Boolean restricted) voidsetSoftLimitExpiration(OffsetDateTime softLimitExpiration) voidsetSoftUsageLimit(Integer softUsageLimit) voidvoidvoidsetUsageCount(Integer usageCount) softLimitExpiration(OffsetDateTime softLimitExpiration) softUsageLimit(Integer softUsageLimit) toJson()Convert an instance of AdminKeyExportResponse to an JSON stringtoString()usageCount(Integer usageCount) static voidvalidateJsonElement(com.google.gson.JsonElement jsonElement) Validates the JSON Element and throws an exception if issues foundstatic voidvalidateJsonElementAsCandidate(com.google.gson.JsonElement jsonElement) Validates the JSON Element as a candidate of a oneOf schema: the checks ofvalidateJsonElement(JsonElement), and the element carries no member this model does not declare.
-
Field Details
-
SERIALIZED_NAME_ALG
- See Also:
-
SERIALIZED_NAME_COMPONENTS
- See Also:
-
SERIALIZED_NAME_COMPOSITE_MODE
- See Also:
-
SERIALIZED_NAME_CREATED_AT
- See Also:
-
SERIALIZED_NAME_EXPIRES_AT
- See Also:
-
SERIALIZED_NAME_EXPORTABLE
- See Also:
-
SERIALIZED_NAME_KDF
- See Also:
-
SERIALIZED_NAME_KEY_OPS
- See Also:
-
SERIALIZED_NAME_KID
- See Also:
-
SERIALIZED_NAME_KTY
- See Also:
-
SERIALIZED_NAME_LAST_USED_AT
- See Also:
-
SERIALIZED_NAME_MAX_USAGE_LIMIT
- See Also:
-
SERIALIZED_NAME_NEXT_KID
- See Also:
-
SERIALIZED_NAME_ORIGIN
- See Also:
-
SERIALIZED_NAME_PREVIOUS_KID
- See Also:
-
SERIALIZED_NAME_PUBLIC_KEY
- See Also:
-
SERIALIZED_NAME_RESTRICTED
- See Also:
-
SERIALIZED_NAME_SOFT_LIMIT_EXPIRATION
- See Also:
-
SERIALIZED_NAME_SOFT_USAGE_LIMIT
- See Also:
-
SERIALIZED_NAME_STATUS
- See Also:
-
SERIALIZED_NAME_TYPE
- See Also:
-
SERIALIZED_NAME_USAGE_COUNT
- See Also:
-
openapiFields
-
openapiRequiredFields
-
-
Constructor Details
-
AdminKeyExportResponse
public AdminKeyExportResponse()
-
-
Method Details
-
getCompositeModeAsString
The wire value ofcompositeMode: what the server sent, verbatim.- For a value this release declares, the same wire value the enum names.
- For a value it does not declare (one a later server added), the server's wire value verbatim,
while
getCompositeMode()readsUNKNOWN_DEFAULT_OPEN_API; writing this model sends that wire value back, never the sentinel. - For an absent member,
null.
- Returns:
- the wire value, or
nullwhen the member is absent
-
getOriginAsString
The wire value oforigin: what the server sent, verbatim.- For a value this release declares, the same wire value the enum names.
- For a value it does not declare (one a later server added), the server's wire value verbatim,
while
getOrigin()readsUNKNOWN_DEFAULT_OPEN_API; writing this model sends that wire value back, never the sentinel. - For an absent member,
null.
- Returns:
- the wire value, or
nullwhen the member is absent
-
getTypeAsString
The wire value oftype: what the server sent, verbatim.- For a value this release declares, the same wire value the enum names.
- For a value it does not declare (one a later server added), the server's wire value verbatim,
while
getType()readsUNKNOWN_DEFAULT_OPEN_API; writing this model sends that wire value back, never the sentinel. - For an absent member,
null.
- Returns:
- the wire value, or
nullwhen the member is absent
-
alg
-
getAlg
Algorithm identifier. Simple keys: single algorithm. Composite keys: combined algorithms separated by '+'.- Returns:
- alg
-
setAlg
-
components
-
addComponentsItem
-
getComponents
Component PUBLIC keys for COMPOSITE keys. Null for SIMPLE keys. Each component carries only public material — component private keys are never exposed.- Returns:
- components
-
setComponents
-
compositeMode
public AdminKeyExportResponse compositeMode(@Nullable AdminKeyExportResponse.CompositeModeEnum compositeMode) -
getCompositeMode
How a composite key's components are combined — the construction axis that a coarse key type deliberately does not carry. COMPOSITE_KEM_COMBINE: the component secrets are combined into one via kdf. COMPOSITE_SIGNATURE: both components sign one composite message and the signature holds only when both verify. Null for simple keys.- Returns:
- compositeMode
-
setCompositeMode
-
createdAt
-
getCreatedAt
UTC timestamp at which the key material was generated.- Returns:
- createdAt
-
setCreatedAt
-
expiresAt
-
getExpiresAt
Hard expiration UTC timestamp. Null for keys without an expiration.- Returns:
- expiresAt
-
setExpiresAt
-
exportable
-
getExportable
Whether the public key material can be exported via migration endpoints.- Returns:
- exportable
-
setExportable
-
kdf
-
getKdf
Key derivation function the key's combination policy stores, reported exactly as stored and never defaulted. Null for simple keys and for COMPOSITE_SIGNATURE pairings, which combine no secrets; null as well for a composite key whose combination policy stores none.- Returns:
- kdf
-
setKdf
-
keyOps
-
addKeyOpsItem
-
getKeyOps
Permitted key operations (encrypt, decrypt, sign, verify, wrapKey, unwrapKey).- Returns:
- keyOps
-
setKeyOps
-
kid
-
getKid
Unique key identifier (kid) within the tenant keystore.- Returns:
- kid
-
setKid
-
kty
-
getKty
Key type (kty). Simple keys include oct, RSA, EC, OKP, ML-KEM, ML-DSA, FALCON, SLH-DSA, SM2, HQC — an illustrative sample, not the vocabulary. Every composite key publishes the single coarse token COMPOSITE; how it is constructed is published separately as compositeMode. The authoritative set is the published key-type vocabulary the ?kty= filters accept, and this field is always a member of it.- Returns:
- kty
-
setKty
-
lastUsedAt
-
getLastUsedAt
Most recent UTC timestamp at which the key was used. Null for keys that have not been used.- Returns:
- lastUsedAt
-
setLastUsedAt
-
maxUsageLimit
-
getMaxUsageLimit
Hard usage limit. Null means unlimited.- Returns:
- maxUsageLimit
-
setMaxUsageLimit
-
nextKid
-
getNextKid
Always absent. The Stable-KID model advances the material version under a fixed kid and never mints a successor kid; the field is retained for wire-shape parity with the cryptographic service.- Returns:
- nextKid
-
setNextKid
-
origin
-
getOrigin
How the key entered the platform (GENERATED or IMPORTED).- Returns:
- origin
-
setOrigin
-
previousKid
-
getPreviousKid
Always absent. The Stable-KID model advances the material version under a fixed kid — there is no predecessor-kid chain; the field is retained for wire-shape parity with the cryptographic service.- Returns:
- previousKid
-
setPreviousKid
-
publicKey
-
getPublicKey
Base64-encoded public key material for simple asymmetric keys. Null for symmetric keys (kty=oct) and for COMPOSITE keys (use components[] instead). Private key material is never returned.- Returns:
- publicKey
-
setPublicKey
-
restricted
-
getRestricted
Whether the key has operational restrictions (e.g. imported with an expired certificate).- Returns:
- restricted
-
setRestricted
-
softLimitExpiration
-
getSoftLimitExpiration
Soft expiration UTC timestamp (warning threshold). Null for keys without a soft expiration.- Returns:
- softLimitExpiration
-
setSoftLimitExpiration
-
softUsageLimit
-
getSoftUsageLimit
Soft usage limit (warning threshold). Null means no warning threshold set.- Returns:
- softUsageLimit
-
setSoftUsageLimit
-
status
-
getStatus
Current lifecycle state, as the LOWER-CASE token the mapper emits (active, rotated, expired, revoked, archived, ...): the wire token of the key status, not the constant name.- Returns:
- status
-
setStatus
-
type
-
getType
Key structure: SIMPLE (single-algorithm key) or COMPOSITE (hybrid classical + PQC key).- Returns:
- type
-
setType
-
usageCount
-
getUsageCount
Cumulative count of cryptographic operations performed with this key.- Returns:
- usageCount
-
setUsageCount
-
equals
-
hashCode
public int hashCode() -
toString
-
validateJsonElement
Validates the JSON Element and throws an exception if issues found- Parameters:
jsonElement- JSON Element- Throws:
IOException- if the JSON Element is invalid with respect to AdminKeyExportResponse
-
validateJsonElementAsCandidate
public static void validateJsonElementAsCandidate(com.google.gson.JsonElement jsonElement) throws IOException Validates the JSON Element as a candidate of a oneOf schema: the checks ofvalidateJsonElement(JsonElement), and the element carries no member this model does not declare. A oneOf schema without a discriminator tells its candidates apart by their member sets, so a candidate is matched on its closed member set.- Parameters:
jsonElement- JSON Element- Throws:
IOException- if the JSON Element is not a AdminKeyExportResponse
-
fromJson
Create an instance of AdminKeyExportResponse given an JSON string- Parameters:
jsonString- JSON string- Returns:
- An instance of AdminKeyExportResponse
- Throws:
IOException- if the JSON string is invalid with respect to AdminKeyExportResponse
-
toJson
Convert an instance of AdminKeyExportResponse to an JSON string- Returns:
- JSON string
-