Decrypting and Downloading Gmail Message (privilegedprivatekeydecrypt)
The POST /v1/cckm/GoogleWorkspaceCSE/endpoints/{id}/privilegedprivatekeydecrypt API is called to decrypt the Gmail message exported (takeout) from Google. This API returns the base64 data encryption key. This key will be used by Google Workspace CSE to decrypt the exported Gmail message.
Syntax
curl -k 'https://127.0.0.1/api/v1/cckm/GoogleWorkspaceCSE/endpoints/{id}/privilegedprivatekeydecrypt' -H 'Content-Type: application/json' --data-binary $'{\n "wrapped_private_key": "<wrapped private key>",\n "authentication": "<authentication jwt>",\n "algorithm": "<algorithm>",\n "encrypted_data_encryption_key": "<encrypted data encryption key>",\n "reason": ""\n}' --compressed
Request Parameters
| Parameter | Type | Description |
|---|---|---|
| id | string | ID of the endpoint. To find out the ID of an endpoint, refer to Viewing KACLS Endpoints. |
| algorithm | string | Algorithm that was used to encrypt the private key. |
| encrypted_data_encryption_key | string | The base64 encoded encrypted data encryption key. |
| wrapped_private_key | string | The base64 encoded wrapped private key. |
| authentication | string | A JWT issued by a third party asserting who the user is. |
| reason | string | Additional information about the operation. |
Example Request
curl -k 'https://127.0.0.1/api/v1/cckm/GoogleWorkspaceCSE/endpoints/7d03-4e2d-c1583936-a0ae-3a1ae2d2e200/privilegedprivatekeydecrypt' -H 'Content-Type: application/json' --data-binary $'
{
"wrapped_private_key": "wHrlNOTI9mU6PBdqiq7EQA...",
"encrypted_data_encryption_key": "dGVzdCB3cmFwcGVkIGRlaw...",
"authentication": "eyJhbGciOi...",
"algorithm": "RSA/ECB/PKCS1Padding",
"reason": "admin decrypt"
}' --compressed
Example Response
{
"data_encryption_key": "akRQtv3nr+jUhcFL6JmKzB+WzUxbkkMyW5kQsqGUAFc"
}
Response Codes
| Response Code | Description |
|---|---|
| 2xx | Success |
| 4xx | Client errors |
Refer to HTTP status codes for details.