Uses of Class
org.forgerock.secrets.GenericSecret
Package
Description
Core
Filter
implementations.This package provides APIs for OAuth 2.0 services implementations.
OAuth 2.0 ForgeRock Client Implementation.
A package containing a set of script-friendly classes and functionality that are intended to simplify
use of the Secrets API from within a scripting context.
Provides a unified API for accessing secrets of various kinds.
A secret store implementation that can retrieve keys from a Google Cloud Platform Key Management Service.
Implementations of
SecretStore
for accessing keys stored in Java KeyStores, such as
PKCS#11 Hardware Security Modules (HSMs) and PKCS#12 file-based encrypted key stores.A Secrets API backend that can obtain OAuth 2 access tokens from a token endpoint, along with a collection of
grant type handlers.
Provides a
SecretStore
implementation that loads secrets from a Common Configuration
PropertyResolver
and then decodes it with a
SecretPropertyFormat
.Secrets backend that reads secrets from a remote Hashicorp Vault server.
-
Uses of GenericSecret in org.forgerock.http.filter
Modifier and TypeMethodDescriptionstatic Filter
Filters.newBearerTokenAuthFilter
(SecretReference<GenericSecret> tokenReference) Creates an authenticationFilter
that puts a Bearer Authorization header in the request.static Filter
Filters.newBearerTokenAuthFilterWithoutRetry
(SecretReference<GenericSecret> tokenReference) Creates an authenticationFilter
that puts a Bearer Authorization header in the request.static Filter
Filters.newHttpBasicAuthenticationFilter
(String username, SecretReference<GenericSecret> password) Deprecated, for removal: This API element is subject to removal in a future version.static Filter
Filters.newHttpBasicAuthenticationFilter
(String username, SecretReference<GenericSecret> password, Charset charset) Deprecated, for removal: This API element is subject to removal in a future version.static Filter
Filters.newHttpBasicAuthenticationFilter
(CredentialPair<GenericSecret> credentialPair) Creates an authenticationFilter
that puts a Basic Authorization header in the request.static Filter
Filters.newHttpBasicAuthenticationFilter
(CredentialPair<GenericSecret> credentialPair, Charset charset) Creates an authenticationFilter
that puts a Basic Authorization header in the request.static Filter
Filters.newUrlEncodedHttpBasicAuthFilter
(String username, SecretReference<GenericSecret> password) Deprecated, for removal: This API element is subject to removal in a future version.static Filter
Filters.newUrlEncodedHttpBasicAuthFilter
(CredentialPair<GenericSecret> credentialPair) Creates an authenticationFilter
that put a Basic Authorization header in the request. -
Uses of GenericSecret in org.forgerock.http.oauth2
ModifierConstructorDescriptionClientSecretBasicAuthenticationFilter
(String clientId, SecretReference<GenericSecret> secretReference) Deprecated.Creates and instance of ClientSecretBasicAuthenticationFilter.ClientSecretPostAuthenticationFilter
(String clientId, SecretReference<GenericSecret> secretReference) Creates an instance of this class. -
Uses of GenericSecret in org.forgerock.oauth.clients.oauth2
Modifier and TypeMethodDescriptionOAuth2ClientConfiguration.getClientSecretReference()
Returns a reference to the client secret.Modifier and TypeMethodDescriptionOAuth2ClientConfiguration.Builder.withClientSecret
(SecretReference<GenericSecret> clientSecret) Set the clientSecret. -
Uses of GenericSecret in org.forgerock.openam.scripting.api.secrets
ModifierConstructorDescriptionSecret
(GenericSecret genericSecret) Default constructor exposing required dependencies. -
Uses of GenericSecret in org.forgerock.secrets
Modifier and TypeFieldDescriptionstatic final Purpose<GenericSecret>
Purpose.PASSWORD
Indicates a secret intended to be used as a password for authentication to some service.Modifier and TypeMethodDescriptionstatic GenericSecret
GenericSecret.password
(char[] password) A helper utility for constructing a Generic Secret from a password that never expires.static GenericSecret
A helper utility for constructing a Generic Secret from a password that never expires.static GenericSecret
A helper utility for constructing a Generic Secret from a password with a default expiry time. -
Uses of GenericSecret in org.forgerock.secrets.gcpkms
ModifierConstructorDescriptionSecretsApiBearerTokenCredentials
(Function<URI, SecretReference<GenericSecret>> bearerTokenLookup) Initialises the credentials with the given mapping from URIs to bearer token references.SecretsApiBearerTokenCredentials
(SecretReference<GenericSecret> bearerToken) Initialises the credentials with a single bearer token to use for all URIs. -
Uses of GenericSecret in org.forgerock.secrets.keystore
ModifierConstructorDescriptionKeyStoreSecretStore
(Function<char[], KeyStore, KeyStoreException> keyStoreLoader, SecretReference<GenericSecret> keyStorePassword) Initialises the keystore using the same password for the keystore and all keys and default configuration options.KeyStoreSecretStore
(Function<char[], KeyStore, KeyStoreException> keyStoreLoader, SecretReference<GenericSecret> keyStorePassword, SecretReference<GenericSecret> keyEntryPassword, Options options, KeyStoreSecretStore.StableIdProvider stableIdProvider) Initialises the key store.KeyStoreSecretStore
(Function<char[], KeyStore, KeyStoreException> keyStoreLoader, SecretReference<GenericSecret> keyStorePassword, Options options) Initialises the keystore using the same password for the keystore and all keys. -
Uses of GenericSecret in org.forgerock.secrets.oauth2
Modifier and TypeMethodDescription<S extends GenericSecret>
Promise<S,NoSuchSecretException> <S extends GenericSecret>
Promise<S,NoSuchSecretException> <S extends GenericSecret>
Promise<Stream<S>,NeverThrowsException> Modifier and TypeMethodDescriptionAccessTokenSecretStore.Builder.forPurpose
(Purpose<GenericSecret> purpose) Configures the purpose for which this access token store is to be used.AccessTokenSecretStore.Builder.withClientSecretBasicAuth
(String clientId, SecretReference<GenericSecret> clientSecretRef) Configures the token store to supply client credentials via HTTP Basic Authentication.AccessTokenSecretStore.Builder.withClientSecretPostAuth
(String clientId, SecretReference<GenericSecret> clientSecretRef) Configures the token store to supply client credentials via client_secret_post method.ModifierConstructorDescriptionJwtBearerGrantTypeHandler
(SecretReference<GenericSecret> jwtReference) Constructs the handler with the given source of JWTs.JwtBearerGrantTypeHandler
(SecretReference<GenericSecret> jwtReference, String clientId, Collection<String> scope) Constructs the handler with the given source of JWTs, for the given client and scope.JwtBearerGrantTypeHandler
(SecretReference<GenericSecret> jwtReference, Collection<String> scope) Constructs the handler with the given source of JWTs, for the given scope.ResourceOwnerPasswordGrantTypeHandler
(String clientId, String username, SecretReference<GenericSecret> password) Initialises the grant type handler with the given credentials and the default scope for this client.ResourceOwnerPasswordGrantTypeHandler
(String clientId, String username, SecretReference<GenericSecret> password, Collection<String> scope) Initialises the grant type handler with the given credentials. -
Uses of GenericSecret in org.forgerock.secrets.propertyresolver
ModifierConstructorDescriptionPemPropertyFormat
(SecretsProvider secretsProvider, Purpose<GenericSecret> decryptionPasswordPurpose) Initializes the property format with the given secrets provider and purpose for decrypting password-encrypted PEM files.PemPropertyFormat
(SecretsProvider secretsProvider, Purpose<GenericSecret> decryptionPasswordPurpose, Supplier<SecretBuilder> secretBuilderSupplier) Initializes the property format with the given secrets provider and purpose for decrypting password-encrypted PEM files. -
Uses of GenericSecret in org.forgerock.secrets.vault
Modifier and TypeMethodDescriptionstatic SecretReference<GenericSecret>
AppRoleTokenStore.createTokenReference
(String roleId, SecretReference<GenericSecret> secretReference, VaultConfig config) Returns aSecretReference
that will obtain a Vault authentication token using the AppRole login method.static SecretReference<GenericSecret>
JwtAuthenticationTokenStore.createTokenReference
(String role, SecretReference<GenericSecret> secretReference, VaultConfig config) Returns aSecretReference
that will obtain a Vault login token by logging in with the given JWT.Modifier and TypeMethodDescriptionstatic SecretReference<GenericSecret>
AppRoleTokenStore.createTokenReference
(String roleId, SecretReference<GenericSecret> secretReference, VaultConfig config) Returns aSecretReference
that will obtain a Vault authentication token using the AppRole login method.static SecretReference<GenericSecret>
JwtAuthenticationTokenStore.createTokenReference
(String role, SecretReference<GenericSecret> secretReference, VaultConfig config) Returns aSecretReference
that will obtain a Vault login token by logging in with the given JWT.ModifierConstructorDescriptionVaultDatabaseCredentialsSecretStore
(SecretReference<GenericSecret> tokenReference, VaultConfig config) Constructs a secret store to retrieve database credentials from Vault with the given options.VaultKeyValueSecretStore
(SecretReference<GenericSecret> tokenReference, Map<JsonPointer, ? extends VaultKeyValueSecretStore.SecretFieldDecoder> fieldDecoders, VaultConfig config) Constructs the key-value store using the given authentication token and options.VaultPkiSecretStore
(SecretReference<GenericSecret> tokenReference, VaultConfig config, JsonValue certificateRequestPayload) Initializes the PKI secret store using the given authentication token and configuration options.VaultTransitSecretStore
(SecretReference<GenericSecret> tokenReference, VaultConfig config) Initializes the transit secret store with the given Vault login token and options.
Filters.newHttpBasicAuthenticationFilter(CredentialPair)
instead