Uses of Class
org.forgerock.secrets.Secret
-
Packages that use Secret Package Description org.forgerock.secrets Provides a unified API for accessing secrets of various kinds.org.forgerock.secrets.keys Contains cryptographic key related API objects.org.forgerock.secrets.propertyresolver Provides aSecretStoreimplementation that loads secrets from a Common ConfigurationPropertyResolverand then decodes it with aSecretPropertyFormat. -
-
Uses of Secret in org.forgerock.secrets
Classes in org.forgerock.secrets with type parameters of type Secret Modifier and Type Class Description classPurpose<T extends Secret>A purpose encapsulates both a name for a function that requires access to secrets, together with a hint as to the intended usage of those secrets.interfaceSecretConstraint<T extends Secret>Interface for constraints on a secret that must be satisfied for a givenPurpose.classSecretReference<T extends Secret>A long-lived reference to an active or named secret.interfaceSecretStore<T extends Secret>A backend storage mechanism for certain kinds of secrets.classThreadPoolSecretStore<T extends Secret>A secret store that wraps another secret store and performs all query operations in a background thread using a thread pool.Subclasses of Secret in org.forgerock.secrets Modifier and Type Class Description classGenericSecretA generic secret represented as an opaque blob of bytes, such as a password or API key.Methods in org.forgerock.secrets with type parameters of type Secret Modifier and Type Method Description static <T extends Secret>
SecretReference<T>SecretReference. active(SecretsProvider secretsProvider, Purpose<T> purpose, Clock clock)Creates a reference to the active secret for the given purpose using the given secrets provider.<T extends Secret>
TSecretBuilder. build(Class<T> secretType)Deprecated.UseSecretBuilder.build(Purpose)instead.<T extends Secret>
TSecretBuilder. build(Purpose<T> purpose)Builds a secret of the given type, enforcing anyconstraintsattached to the purpose.static <T extends Secret>
SecretReference<T>SecretReference. constant(T secret)Create a constantSecretReferencefor the given secret, that will never expire.<S extends Secret>
SecretReference<S>SecretsProvider. createActiveReference(Purpose<S> purpose)Creates the secret reference from the given purpose.<S extends Secret>
SecretReference<S>SecretsProvider. createNamedReference(Purpose<S> purpose, String name)Creates a reference to a secret with the given name (stable id) for the given purpose.<S extends Secret>
Promise<S,NoSuchSecretException>SecretsProvider. getActiveSecret(Purpose<S> purpose)Gets the currently active secret for the given purpose.<S extends Secret>
Promise<Stream<S>,NeverThrowsException>SecretsProvider. getNamedOrValidSecrets(Purpose<S> purpose, String id)If the given id is not null, then this returns the single named secret that corresponds to that stable id (or a stream of valid secrets for the givenpurposeif no such secret exists), otherwise it returns all valid secrets for the given purpose.<S extends Secret>
Promise<S,NoSuchSecretException>SecretsProvider. getNamedSecret(Purpose<S> purpose, String id)Gets the secret for the given purpose with the given stable secret id.<S extends Secret>
Promise<Stream<S>,NeverThrowsException>SecretsProvider. getValidSecrets(Purpose<S> purpose)Returns all secrets for the given purpose which have not yet expired.static <T extends Secret>
SecretReference<T>SecretReference. named(SecretsProvider secretsProvider, Purpose<T> purpose, String name, Clock clock)Creates a reference to a named secret using the given secrets provider.static <T extends Secret>
Purpose<T>Purpose. purpose(String label, Class<T> type)Constructs a purpose object.static <T extends Secret>
Purpose<T>Purpose. purpose(String label, Class<T> type, SecretConstraint<? super T>... constraints)Constructs a purpose object.protected <T extends Secret>
voidSecretsProvider. setActiveStore(SecretStore<? super T> store, Purpose<? extends T> purpose)Sets the active store to use for the given purpose.<T extends Secret>
SecretsProviderSecretsProvider. setActiveStore(SecretStore<? super T> store, Purpose<? extends T>... purposes)Sets the active store to use for the given purpose.<S extends Secret>
SecretsProviderSecretsProvider. useSpecificSecretForPurpose(Purpose<S> purpose, S secret)Configures this SecretsProvider to always return the specific given secret for the given purpose.static <S extends Secret>
ThreadPoolSecretStore<S>ThreadPoolSecretStore. wrap(SecretStore<S> store)Wraps the given store in an asynchronous thread-pool executor using the systemForkJoinPool.commonPool().static <S extends Secret>
ThreadPoolSecretStore<S>ThreadPoolSecretStore. wrap(SecretStore<S> store, ExecutorService executor)Wraps the given store in an asynchronous thread-pool executor using the given thread pool. -
Uses of Secret in org.forgerock.secrets.keys
Subclasses of Secret in org.forgerock.secrets.keys Modifier and Type Class Description classCertificateVerificationKeyA key used for verifying certificate signatures.classCryptoKeyBase class for all secrets that are used as keys for cryptographic operations.classDataDecryptionKeyA key that is used for decrypting confidential data.classDataEncryptionKeyA key that is used for encrypting confidential data.classKeyAgreementKeyA key that is used in a key-agreement protocol (such as Diffie-Hellman) to agree another key.classKeyDecryptionKeyA key that is used to decrypt (or "unwrap") other keys that have been encrypted with aKeyEncryptionKey.classKeyEncryptionKeyA key that is used to encrypt ("wrap") other keys.classSigningKeyA key that is used for signing digital signatures.classVerificationKeyA key used for verifying digital signatures. -
Uses of Secret in org.forgerock.secrets.propertyresolver
Methods in org.forgerock.secrets.propertyresolver with type parameters of type Secret Modifier and Type Method Description <S extends Secret>
Promise<S,NoSuchSecretException>PropertyResolverSecretStore. getActive(Purpose<S> purpose)<S extends Secret>
Promise<S,NoSuchSecretException>PropertyResolverSecretStore. getNamed(Purpose<S> purpose, String name)<S extends Secret>
Promise<Stream<S>,NeverThrowsException>PropertyResolverSecretStore. getValid(Purpose<S> purpose)Returns a stream of the active secret for the given purpose.Methods in org.forgerock.secrets.propertyresolver that return types with arguments of type Secret Modifier and Type Method Description Class<Secret>PropertyResolverSecretStore. getStoredType()
-