Search Secrets Shared With Me

SearchSecretsSharedWithMe returns secrets shared with the current user. Automatically scoped to current user - no user_id filter parameter. INTERNAL secrets only: EXTERNAL secrets are addressed by email and are never viewable through an authenticated C1 session, so returning them here would surface rows that GetContent then denies.

POST /api/v1/search/secrets/shared_with_me

SearchSecretsSharedWithMe

Go

package main

import(
	"context"
	"github.com/conductorone/conductorone-sdk-go/pkg/models/shared"
	conductoronesdkgo "github.com/conductorone/conductorone-sdk-go"
	"log"
)

func main() {
    ctx := context.Background()

    s := conductoronesdkgo.New(
        conductoronesdkgo.WithSecurity(shared.Security{
            BearerAuth: "<YOUR_BEARER_TOKEN_HERE>",
            Oauth: "<YOUR_OAUTH_HERE>",
        }),
    )

    res, err := s.PaperSecret.SearchSecretsSharedWithMe(ctx, nil)
    if err != nil {
        log.Fatal(err)
    }
    if res.PaperSecretServiceSearchResponse != nil {
        // handle response
    }
}

200

{
  "list": [
    {
      "ageSuite": "AGE_SUITE_UNSPECIFIED",
      "allowedEmails": [
        "<string>"
      ],
      "allowedUserIds": [
        "<string>"
      ],
      "contentDeleted": true,
      "contentExpiresAt": "2023-11-07T05:31:56Z",
      "contentReady": true,
      "contentType": "<string>",
      "createdAt": "2023-11-07T05:31:56Z",
      "creatorUserId": "<string>",
      "currentViews": 123,
      "deletedAt": "2023-11-07T05:31:56Z",
      "displayName": "<string>",
      "fileSize": "<string>",
      "filename": "<string>",
      "inputFormat": "SECRET_INPUT_FORMAT_UNSPECIFIED",
      "maxViews": 123,
      "secretType": "SECRET_TYPE_UNSPECIFIED",
      "shareCode": "<string>",
      "shareUrl": "<string>",
      "sharingMode": "PAPER_VAULT_SHARING_MODE_UNSPECIFIED",
      "status": "SECRET_STATUS_UNSPECIFIED",
      "updatedAt": "2023-11-07T05:31:56Z",
      "vaultId": "<string>"
    }
  ],
  "nextPageToken": "<string>"
}

Authorizations

Authorization · string · header · required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Authorization · string · header · required

This API uses OAuth2 with the Client Credential flow. Client Credentials must be sent in the BODY, not the headers. For an example of how to implement this, refer to the c1TokenSource.Token() function.

Body

application/json

SearchSecretsSharedWithMe request - for end users viewing secrets others shared with them. Automatically scoped to current user.

includeOwn · boolean

Include secrets the caller created and also shared with themselves. Off by default so this list stays disjoint from SearchMySecrets.

pageSize · integer<int32>

The pageSize field.

pageToken · string

The pageToken field.

query · string

Fuzzy search by display name

secretType · enum<string>

Filter by secret type. Unspecified returns all secret types.

Available options: SECRET_TYPE_UNSPECIFIED, SECRET_TYPE_TEXT, SECRET_TYPE_FILE

sharingMode · enum<string>

Filter by sharing mode. Unspecified returns internal secrets; external returns none.

Available options: PAPER_VAULT_SHARING_MODE_UNSPECIFIED, PAPER_VAULT_SHARING_MODE_INTERNAL, PAPER_VAULT_SHARING_MODE_EXTERNAL

statuses · enum<string>[] | null

Filter by status. Empty returns all statuses.

Available options: SECRET_STATUS_UNSPECIFIED, SECRET_STATUS_ACTIVE, SECRET_STATUS_EXPIRED, SECRET_STATUS_BURNED, SECRET_STATUS_REVOKED, SECRET_STATUS_DATA_DELETED

Response

200 - application/json

Search response for user's own secrets

Search response for user's own secrets

list · Paper Secret · object[] | null

The list field.

Show child attributes

nextPageToken · string

The nextPageToken field.