Primitive
secret.decrypt
BETAShort name: decrypt
Version: 1.0.0
Admin-only: decrypts a sensitive-field envelope under a specified owner KEK. Prefer secret.reveal for application use.
Back to primitive libraryInputs
| Key | Type | Required | Description |
|---|---|---|---|
| envelope | object | true | Sensitive-field envelope to decrypt. |
| ownerId | string | true | Owner whose KEK wraps this envelope. Must match the kid encoded in the envelope. |
Outputs
| Key | Type | Required | Description |
|---|---|---|---|
| value | any | false | Decrypted JSON value. |