Uses of Class
org.forgerock.secrets.SecretBuilder
Package
Description
Classes and interfaces for creating and manipulating JWKs.
Provides a unified API for accessing secrets of various kinds.
A secret store implementation that can retrieve keys from a Google Cloud Platform Key Management Service.
Contains cryptographic key related API objects.
Provides a
SecretStore
implementation that loads secrets from a Common Configuration
PropertyResolver
and then decodes it with a
SecretPropertyFormat
.Secrets backend that reads secrets from a remote Hashicorp Vault server.
-
Uses of SecretBuilder in org.forgerock.json.jose.jwk
Modifier and TypeMethodDescriptionJWK.toSecretBuilder()
Get aSecretBuilder
capable of building aSecret
subclass object from this JWK. -
Uses of SecretBuilder in org.forgerock.secrets
Modifier and TypeMethodDescriptionSecretBuilder.allowedAlgorithms
(Collection<String> allowedAlgorithms) Sets the cryptographic algorithms that can be used with this key.SecretBuilder.allowedAlgorithms
(Predicate<String> allowedAlgorithmsTest) Sets the cryptographic algorithms that can be used with this key.SecretBuilder.certificate
(Certificate certificate) Sets the certificate associated with this secret.SecretBuilder.certificateChain
(Certificate... chain) Sets the certificate chain associated with this secret.SecretBuilder.certificateChain
(List<? extends Certificate> chain) Sets the certificate chain associated with this secret.Set the source of time for the default (relative) secret expiry time.SecretBuilder.combine
(SecretBuilder that) Returns a freshSecretBuilder
that combines the data from this secret builder and the argument.Sets the secret to expire at the given time.SecretBuilder.expiresIn
(long deadline, TemporalUnit unit, Clock clock) Sets the secret to expire in deadline units from now.Sets the allowed key usages for this key.SecretBuilder.password
(char[] password) Sets the raw data of this secret object to the UTF-8 bytes of the given password.Sets the provider associated with this secret.Sets the public key associated with this secret.SecretBuilder.rawData
(byte[] rawData) Sets the raw data of the secret object.Sets the secret key for this object.Sets the stable id of this secret.Modifier and TypeMethodDescriptionSecretDecoder.decodeToPromise
(byte[] data) Decodes the raw data retrieved from a backend into aSecretBuilder
for further processing.Modifier and TypeMethodDescriptionSecretBuilder.combine
(SecretBuilder that) Returns a freshSecretBuilder
that combines the data from this secret builder and the argument.ModifierConstructorDescriptionGenericSecret
(SecretBuilder builder) Constructs a generic secret with the given stable identifier and secret data.protected
Secret
(SecretBuilder builder) Constructs the secret using the given builder. -
Uses of SecretBuilder in org.forgerock.secrets.gcpkms
Modifier and TypeMethodDescriptionModifier and TypeMethodDescriptionGoogleKmsEncryptedPropertyFormat.decodeToPromise
(String propertyValue) -
Uses of SecretBuilder in org.forgerock.secrets.keys
Modifier and TypeMethodDescriptionCryptoKey.toBuilder()
Converts the key back into aSecretBuilder
, pre-initialized with the fields of this CryptoKey object.ModifierConstructorDescriptionCertificateVerificationKey
(SecretBuilder builder) Initialises the key with the given secret data.DataDecryptionKey
(SecretBuilder builder) Initialises the key with the given secret data.DataEncryptionKey
(SecretBuilder builder) Initialises the key with the given secret data.KeyAgreementKey
(SecretBuilder builder) Initialises the key with the given secret data.KeyDecryptionKey
(SecretBuilder builder) Initialises the key with the given secret data.KeyEncryptionKey
(SecretBuilder builder) Initialises the key with the given secret data.SigningKey
(SecretBuilder builder) Initialises the key with the given secret data.VerificationKey
(SecretBuilder builder) Initialises the key with the given secret data. -
Uses of SecretBuilder in org.forgerock.secrets.propertyresolver
Modifier and TypeMethodDescriptionDecodes the input property value, setting relevant properties on aSecretBuilder
object.Modifier and TypeMethodDescriptionPemPropertyFormat.decodeToPromise
(String propertyValue) default Promise<SecretBuilder,
NoSuchSecretException> SecretPropertyFormat.decodeToPromise
(byte[] data) Decodes the data as a UTF-8 string and then callsSecretPropertyFormat.decodeToPromise(String)
to decode the string value.default Promise<SecretBuilder,
NoSuchSecretException> SecretPropertyFormat.decodeToPromise
(String propertyValue) Decodes the input property value, setting relevant properties on aSecretBuilder
object.ModifierConstructorDescriptionPemPropertyFormat
(Supplier<SecretBuilder> secretBuilderSupplier) Initializes the property format without any support for decrypting private key files.PemPropertyFormat
(SecretsProvider secretsProvider, Purpose<GenericSecret> decryptionPasswordPurpose, Supplier<SecretBuilder> secretBuilderSupplier) Initializes the property format with the given secrets provider and purpose for decrypting password-encrypted PEM files. -
Uses of SecretBuilder in org.forgerock.secrets.vault
Modifier and TypeMethodDescriptionVaultKeyValueSecretStore.SecretFieldDecoder.apply
(SecretBuilder secretBuilder, JsonValue jsonValue) Decodes a JSON value into one or more fields on aSecretBuilder
.Modifier and TypeMethodDescriptionVaultKeyValueSecretStore.SecretFieldDecoder.apply
(SecretBuilder secretBuilder, JsonValue jsonValue) Decodes a JSON value into one or more fields on aSecretBuilder
.