NewAccess creates a new access object which contains the provided wrapped key and no groups.

NewToken creates a new token which contains the provided plaintext and has the given validity period.

TokenFromString takes a raw base 64 URL encoded token and deserializes it.

Validity period of tokens created with D1.CreateToken.

Access is used to manage access to encrypted objects.

Node contains an identifier (e.g.

Object contains plaintext data provided to D1 for encryption.

SealedAccess is an encrypted structure which is used to manage access to encrypted objects.

SealedNode is an encrypted structure which defines an occurrence of a specific keyword in a specific identifier.

SealedObject contains encrypted and authenticated data.

SealedToken contains encrypted data which has an expiry time.

Token contains arbitrary data along with an expiry time.