Package org.forgerock.secrets.propertyresolver

Provides a SecretStore implementation that loads secrets from a Common Configuration PropertyResolver and then decodes it with a SecretPropertyFormat. This supports devops-friendly secret management, including loading secrets from environment variables and system properties, as well as from flat files. This allows for easy integration with existing deployment options such as Docker or Kubernetes secrets APIs.

Interface Summary

Interface	Description
SecretPropertyFormat	Defines the format of secrets loaded from configuration properties.
StableIdResolver	Interface for resolving stable ids in a SecretStore.

Class Summary

Class	Description
FileSystemSecretStore	A SecretStore that reads secrets from a directory with the expectation that each file contains a separate secret.
FileSystemSecretStore.FileSystemSecretStoreBuilder	A builder for more fluently creating a FileSystemSecretStore.
JwkPropertyFormat	Decodes a JSON Web Key (JWK) as a secret.
OrderedStableIdResolver	A StableIdResolver that uses a version suffix and a subsequent number to determine the stableId of a Secret.
PemPropertyFormat	Supports decoding keys and certificates in PEM format.
PropertyResolverSecretStore	A SecretStore implementation that resolves secrets as base64-encoded strings from an underlying PropertyResolver.
SecretKeyPropertyFormat	Wraps a property format that decodes raw bytes and converts it into a property format for extracting secret keys using some algorithm.
SecretResource	The secret resource used for creating a Secret.
SingletonStableIdResolver	A StableIdResolver that matches a stableId exactly to the purpose for returning only one Secret.

Enum Summary

Enum	Description
PropertyFormatBase64	Decodes secrets in raw base64 format.