Uses of Interface
org.forgerock.secrets.SecretStore
Package
Description
Provides the Common Secrets API for accessing secrets of various kinds.
Provides a unified API for accessing secrets of various kinds.
Secret store backend for retrieving keys from a local or remote JWK Set.
Implementations of
SecretStore
for accessing keys stored in Java KeyStores, such as
PKCS#11 Hardware Security Modules (HSMs) and PKCS#12 file-based encrypted key stores.A Secrets API backend that can obtain OAuth 2 access tokens from a token endpoint, along with a collection of
grant type handlers.
Provides a
SecretStore
implementation that loads secrets from a Common Configuration
PropertyResolver
and then decodes it with a
SecretPropertyFormat
.-
Uses of SecretStore in org.forgerock.openig.secrets
Modifier and TypeClassDescriptionclass
ABase64EncodedSecretStore
stores secret values (such as password or simple shared secrets) in a base64-encoded form in memory.Modifier and TypeMethodDescriptionstatic SecretStore<Secret>
SystemAndEnvSecretStoreHeaplet.newBase64SysEnvSecretStore()
Returns a new instance of a SecretStore that reads base64-encoded secrets (passwords or symmetric keys) from system properties and environment variables.Modifier and TypeMethodDescriptionSecretsService.setDefaultStores
(SecretStore<?> activeStore, SecretStore<?>... defaultStores) Sets the default store(s) to use if there is no specific store configured for a particular purpose. -
Uses of SecretStore in org.forgerock.secrets
Modifier and TypeClassDescriptionfinal class
ThreadPoolSecretStore<T extends Secret>
A secret store that wraps another secret store and performs all query operations in a background thread using a thread pool.Modifier and TypeMethodDescriptionprotected <T extends Secret>
voidSecretsProvider.setActiveStore
(SecretStore<? super T> store, Purpose<? extends T> purpose) Sets the active store to use for the given purpose.final <T extends Secret>
SecretsProviderSecretsProvider.setActiveStore
(SecretStore<? super T> store, Purpose<? extends T>... purposes) Sets the active store to use for the given purpose.SecretsProvider.setDefaultStores
(SecretStore<?> activeStore, SecretStore<?>... defaultStores) Sets the default store(s) to use if there is no specific store configured for a particular purpose.static <S extends Secret>
ThreadPoolSecretStore<S>ThreadPoolSecretStore.wrap
(SecretStore<S> store) Wraps the given store in an asynchronous thread-pool executor using the systemForkJoinPool.commonPool()
.static <S extends Secret>
ThreadPoolSecretStore<S>ThreadPoolSecretStore.wrap
(SecretStore<S> store, ExecutorService executor) Wraps the given store in an asynchronous thread-pool executor using the given thread pool. -
Uses of SecretStore in org.forgerock.secrets.jwkset
Modifier and TypeClassDescriptionclass
A secret store that loads cryptographic keys from a local or remoteJWKSet
. -
Uses of SecretStore in org.forgerock.secrets.keystore
Modifier and TypeClassDescriptionclass
A secret store for cryptographic keys based on a standard JavaKeyStore
. -
Uses of SecretStore in org.forgerock.secrets.oauth2
Modifier and TypeClassDescriptionfinal class
A secret store that can obtain access tokens from an OAuth 2 provider. -
Uses of SecretStore in org.forgerock.secrets.propertyresolver
Modifier and TypeClassDescriptionfinal class
ASecretStore
that reads secrets from a directory with the expectation that each file contains a separate secret.class
ASecretStore
implementation that resolves secrets as base64-encoded strings from an underlyingPropertyResolver
.