bedrock-ssm-mongodb

Usage

This API is designed to be accessed using the bedrock-package-manager API.

import * as brPackageManager from '@bedrock/package-manager';

// require this module in the application
// it registers itself with bedrock-package-manager
import '@bedrock/ssm-mongodb';

// use the API
export async function callMethod({method, options, plugin}) {
  // the alias for bedrock-ssm-mongodb is 'ssm-v1'
  // the type for bedrock-ssm-mongodb is 'webkms-module'
  const {packageName} = brPackageManager.get(
    {alias: plugin, type: 'webkms-module'});
  const store = await import(packageName);

  const result = await store[method](options);

  return result;
}

API Reference

bedrock-ssm-mongodb

• bedrock-ssm-mongodb
  • .getKeyCount(options) ⇒ Promise.<object>
  • .generateKey(options) ⇒ Promise.<object>
  • .wrapKey(options) ⇒ Promise.<object>
  • .unwrapKey(options) ⇒ Promise.<object>
  • .sign(options) ⇒ Promise.<object>
  • .verify(options) ⇒ Promise.<object>
  • .deriveSecret(options) ⇒ Promise.<object>

bedrock-ssm-mongodb.getKeyCount(options) ⇒ Promise.<object>

Gets the number of keys in a given keystore.

Kind: static method of bedrock-ssm-mongodb
Returns: Promise.<object> - Key count information.

| Param | Type | Description | | --- | --- | --- | | options | object | The options to use. | | options.keystoreId | string | The ID of the keystore. |

bedrock-ssm-mongodb.generateKey(options) ⇒ Promise.<object>

Generates a new key.

Kind: static method of bedrock-ssm-mongodb
Returns: Promise.<object> - Key information.

| Param | Type | Description | | --- | --- | --- | | options | object | The options to use. | | options.keyId | string | The key ID to use. | | options.controller | string | The key controller. | | options.operation | object | The KMS operation. |

bedrock-ssm-mongodb.wrapKey(options) ⇒ Promise.<object>

Wraps a cryptographic key using a key encryption key (KEK).

Kind: static method of bedrock-ssm-mongodb
Returns: Promise.<object> - An object containing {wrappedKey}.

| Param | Type | Description | | --- | --- | --- | | options | object | The options to use. | | options.keyId | string | The key ID to use. | | options.operation | object | The KMS operation. | | [options.zcapInvocation] | object | The zcap invocation used to run the KMS operation; if the KMS operation was invoked via zcap. |

bedrock-ssm-mongodb.unwrapKey(options) ⇒ Promise.<object>

Unwraps a cryptographic key using a key encryption key (KEK).

Kind: static method of bedrock-ssm-mongodb
Returns: Promise.<object> - An object containing {unwrappedKey}.

| Param | Type | Description | | --- | --- | --- | | options | object | The options to use. | | options.keyId | string | The key ID to use. | | options.operation | object | The KMS operation. | | [options.zcapInvocation] | object | The zcap invocation used to run the KMS operation; if the KMS operation was invoked via zcap. |

bedrock-ssm-mongodb.sign(options) ⇒ Promise.<object>

Signs some data. Note that the data will be sent to the server, so if this data is intended to be secret it should be hashed first. However, hashing the data first may present interoperability issues so choose wisely.

Kind: static method of bedrock-ssm-mongodb
Returns: Promise.<object> - An object containing {signatureValue}.

| Param | Type | Description | | --- | --- | --- | | options | object | The options to use. | | options.keyId | string | The key ID to use. | | options.operation | object | The KMS operation. | | [options.zcapInvocation] | object | The zcap invocation used to run the KMS operation; if the KMS operation was invoked via zcap. |

bedrock-ssm-mongodb.verify(options) ⇒ Promise.<object>

Verifies some data. Note that the data will be sent to the server, so if this data is intended to be secret it should be hashed first. However, hashing the data first may present interoperability issues so choose wisely.

Kind: static method of bedrock-ssm-mongodb
Returns: Promise.<object> - An object containing {verified}.

| Param | Type | Description | | --- | --- | --- | | options | object | The options to use. | | options.keyId | string | The key ID to use. | | options.operation | object | The KMS operation. | | [options.zcapInvocation] | object | The zcap invocation used to run the KMS operation; if the KMS operation was invoked via zcap. |

bedrock-ssm-mongodb.deriveSecret(options) ⇒ Promise.<object>

Derives a shared secret via the given peer public key, typically for use as one parameter for computing a shared key. It should not be used as a shared key itself, but rather input into a key derivation function (KDF) to produce a shared key.

Kind: static method of bedrock-ssm-mongodb
Returns: Promise.<object> - An object containing {secret}.

| Param | Type | Description | | --- | --- | --- | | options | object | The options to use. | | options.keyId | string | The key ID to use. | | options.operation | object | The KMS operation. | | [options.zcapInvocation] | object | The zcap invocation used to run the KMS operation; if the KMS operation was invoked via zcap. |