Arpith Siromoney 💬

Confidant v1 REST API Routes

Confidant is an open source credential storage project from Lyft. I’ve written about how clients authenticate with AWS KMS and what a request looks like. This post contains the list of routes supported by the Confidant v1 REST API.

Services

/v1/services

GET: Get list of services

/v1/services/<id>

• GET: Get service metadata and list of credentials and blind credentials for a service
• PUT: Update a service’s credentials, blind_credentials, account and enabled flag

Credentials

/v1/credentials

• GET: Get list of credentials sorted by name
• POST: Creates a credential

/v1/credentials/<id>

• GET: Get a credential (includes the secrets)
• PUT: Updates a credentials

/v1/credentials/<id>/services

GET: Get list of service ids and enabled flag for credential

Blind Credentials

/v1/blind_credentials

• GET: get list of blind credentials
• POST: creates a blind credential

/v1/blind_credentials/<id>

• GET: gets a blind credential
• PUT: updates a blind credential

/v1/blind_credentials/<id>/services

GET: returns a list of services associated with this blind credential

Archive

/v1/archive/services

GET: Get a list of archived services

/v1/archive/services/<id>

GET: Get a list of revisions for an archived service

/v1/archive/credentials

GET: Gets a list of archived credentials

/v1/archive/credentials/<id>

GET: get a list of revisions for an archived credential

/v1/archive/blind_credentials

GET: get archived blind credentials

/v1/archive/blind_credentials/<id>

GET: get a list of revisions for an archived blind credential

Roles

/v1/roles

GET: Gets the list of IAM roles

Grants

/v1/grants/<id>

• GET: Get grants for a service
• PUT: Add encrypt and decrypt grants for the service

Misc

/v1/login

GET, POST: Send user through login flow

/v1/user/email

GET, POST: Get the email address of the currently logged-in user.

/v1/client_config

GET: Get configuration to help clients bootstrap themselves

/v1/value_generator

GET: Generate a random string