Tokenization

Rehash values of records

POST
/api/records/rehash

Recalculates tokens or hashes for all or some fields of the records with the given profile_key values, using the deterministic tokenization key and a redaction strategy per field.

Authorization

bearerAuth
AuthorizationBearer <token>

Access token from POST /oauth2/token (valid for 300 seconds).

In: header

Request Body

application/json

dtk*string

Deterministic tokenization key (96 alphanumeric characters).

keys*array<string>

profile_key values of the records to re-tokenize.

rules*

Field name → redaction rule.

Response Body

curl -X POST "https://example.com/api/records/rehash" \  -H "Content-Type: application/json" \  -d '{    "dtk": "your_96_character_deterministic_tokenization_key",    "keys": [      "pk1",      "pk2"    ],    "rules": {      "first_name": {        "strategy": "alphaNumeric"      },      "nickname": {        "strategy": "masking",        "strategyOptions": {          "type": "alphanumeric"        }      },      "email": {        "strategy": "formula",        "strategyOptions": {          "formula": {            "fn": "dtkSha256",            "transforms": [              "trim",              "toLowerCase"            ],            "format": "[A-Za-z0-9]{15}@redacted.com"          }        }      },      "service_key": {        "strategy": "fixed",        "strategyOptions": {          "value": "fixed_value"        }      }    }  }'
Empty