Package io.helidon.security.provider.httpsign

Class InboundClientDefinition

java.lang.Object

io.helidon.security.provider.httpsign.InboundClientDefinition

public class InboundClientDefinition
extends java.lang.Object

Configuration of inbound client. This information is used to validate incoming signatures and to create a principal.

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	InboundClientDefinition.Builder Fluent API builder to create a new instance of InboundClientDefinition.

Method Summary

Modifier and Type	Method and Description
static InboundClientDefinition.Builder	builder(Config config) Create a new builder from configuration.
static InboundClientDefinition.Builder	builder(java.lang.String keyId) Create a new builder for the keyId.
static InboundClientDefinition	fromConfig(Config config) Create a new instance from configuration.
java.lang.String	getAlgorithm() Algorithm of signature used by this client.
java.util.Optional<byte[]>	getHmacSharedSecret() For hmac-sha256 algorithm, this provides access to a secret shared with the client.
java.util.Optional<KeyConfig>	getKeyConfig() For rsa-sha256 algorithm, this provides access to the public key of the client.
java.lang.String	getKeyId() The key id of this client.
java.lang.String	getPrincipalName() The principal name of the client.
SubjectType	getSubjectType() The type of principal we have authenticated (either user or service, defaults to service).

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

builder

public static InboundClientDefinition.Builder builder(java.lang.String keyId)

Create a new builder for the keyId.

Parameters:

keyId - Key id as is received in inbound signature (mandatory part of the signature header) to map to configured RSA or HMAC key.

Returns:

builder instance

builder

public static InboundClientDefinition.Builder builder(Config config)

Create a new builder from configuration.

Parameters:

config - configuration instance located at a single client definition (expect key-id as a child)

Returns:

builder configured based on config

fromConfig

public static InboundClientDefinition fromConfig(Config config)

Create a new instance from configuration.

Parameters:

config - configuration instance located at a single client definition (expect key-id as a child)

Returns:

instance configured based on config

getKeyId

public java.lang.String getKeyId()

The key id of this client.

Returns:

key id to map this configuration to inbound signature

getPrincipalName

public java.lang.String getPrincipalName()

The principal name of the client.

Returns:

name to use when creating security principal for this client

getSubjectType

public SubjectType getSubjectType()

The type of principal we have authenticated (either user or service, defaults to service).

Returns:

principal type to use when creating security principal for this client

getAlgorithm

public java.lang.String getAlgorithm()

Algorithm of signature used by this client.

Returns:

algorithm of signature expected in request

getKeyConfig

public java.util.Optional<KeyConfig> getKeyConfig()

For rsa-sha256 algorithm, this provides access to the public key of the client.

Returns:

Public key configuration to validate signature or empty optional if none configured

getHmacSharedSecret

public java.util.Optional<byte[]> getHmacSharedSecret()

For hmac-sha256 algorithm, this provides access to a secret shared with the client.

Returns:

shared secret to validate signature or empty optional if none configured