Skip to main content
POST
Re-encrypt connector tokens and client credentials under the current KEK

Authorizations

x-api-key
string
header
required

Response

Success.

data
ConnectorReencryptResult · object
required

The KEK re-encrypt sweep's outcome, for the connection tokens and the stored client credentials.

scanned connection blobs split into reencrypted (rewritten under the current KEK), skipped (already under the current key), and failed (no configured key could open them, or compare-and-set contention was not resolved); failed_connection_ids names each failed connection. The clients_* counts split the stored OAuth client blobs the same way, failed_client_row_ids naming each failed client row. cas_retries counts the compare-and-set retries concurrent writers forced in both tables.