public abstract class AbstractAuthCache extends Object implements io.confluent.security.auth.metadata.AuthCache, io.confluent.security.trustservice.store.TrustCache, io.confluent.security.store.KeyValueStore<io.confluent.security.auth.store.data.AuthKey,io.confluent.security.auth.store.data.AuthValue>
Constructor and Description |
---|
AbstractAuthCache(io.confluent.security.rbac.RbacRoles rbacRoles,
io.confluent.security.authorizer.Scope rootScope,
AccessRuleStore rbacAccessRuleStore,
AccessRuleStore aclAccessRuleStore) |
Modifier and Type | Method and Description |
---|---|
Collection<org.apache.kafka.common.acl.AclBinding> |
aclBindings(io.confluent.security.authorizer.Scope scope,
org.apache.kafka.common.acl.AclBindingFilter aclBindingFilter,
Predicate<io.confluent.security.authorizer.ResourcePattern> resourceAccess) |
Map<io.confluent.security.authorizer.ResourcePattern,Set<io.confluent.security.authorizer.AccessRule>> |
aclRules(io.confluent.security.authorizer.Scope scope) |
void |
addMatchingRules(io.confluent.security.authorizer.provider.ResourceAuthorizeRules matchingRules,
org.apache.kafka.common.security.auth.KafkaPrincipal userPrincipal,
Set<org.apache.kafka.common.security.auth.KafkaPrincipal> groupPrincipals,
String host,
io.confluent.security.authorizer.Operation operation,
io.confluent.security.authorizer.Scope resourceScope,
io.confluent.security.authorizer.ResourceType resourceType) |
void |
fail(int partition,
String errorMessage) |
abstract io.confluent.security.authorizer.provider.AuthorizeRule |
findRule(org.apache.kafka.common.security.auth.KafkaPrincipal userPrincipal,
Set<org.apache.kafka.common.security.auth.KafkaPrincipal> groupPrincipals,
String host,
io.confluent.security.authorizer.Action action) |
io.confluent.security.auth.store.data.AuthValue |
get(io.confluent.security.auth.store.data.AuthKey key) |
Set<org.apache.kafka.common.security.auth.KafkaPrincipal> |
groups(org.apache.kafka.common.security.auth.KafkaPrincipal sessionPrincipal)
Returns the groups of the provided user principal.
|
io.confluent.security.auth.metadata.AuthCache.Result |
healthcheck() |
io.confluent.security.trustservice.store.data.IdentityPool |
identityPool(String poolId) |
Map<String,io.confluent.security.trustservice.store.data.IdentityPool> |
identityPools() |
org.jose4j.jwk.JsonWebKeySet |
jsonWebKeySet(String jwtKey) |
Map<String,org.jose4j.jwk.JsonWebKeySet> |
jsonWebKeySets() |
Set<io.confluent.security.authorizer.Scope> |
knownScopes() |
Map<? extends io.confluent.security.auth.store.data.AuthKey,? extends io.confluent.security.auth.store.data.AuthValue> |
map(String type) |
io.confluent.security.auth.store.data.AuthValue |
put(io.confluent.security.auth.store.data.AuthKey key,
io.confluent.security.auth.store.data.AuthValue value) |
Set<io.confluent.security.rbac.RoleBinding> |
rbacRoleBindings(org.apache.kafka.common.security.auth.KafkaPrincipal principal) |
Set<io.confluent.security.rbac.RoleBinding> |
rbacRoleBindings(org.apache.kafka.common.security.auth.KafkaPrincipal principal,
Set<io.confluent.security.authorizer.Scope> scopes) |
Set<io.confluent.security.rbac.RoleBinding> |
rbacRoleBindings(io.confluent.security.rbac.RoleBindingFilter filter) |
Set<io.confluent.security.rbac.RoleBinding> |
rbacRoleBindings(io.confluent.security.authorizer.Scope scope) |
Set<io.confluent.security.rbac.RoleBinding> |
rbacRoleBindings(Set<io.confluent.security.authorizer.Scope> scopes) |
io.confluent.security.rbac.RbacRoles |
rbacRoles() |
io.confluent.security.authentication.oidc.RefreshTokenInfo |
refreshTokenInfo(String refreshTokenKey) |
io.confluent.security.auth.store.data.AuthValue |
remove(io.confluent.security.auth.store.data.AuthKey key) |
io.confluent.security.authorizer.Scope |
rootScope() |
io.confluent.security.store.MetadataStoreStatus |
status(int partition) |
long |
totalAclAccessRules() |
long |
totalIdentityPools() |
int |
totalJwtIssuers() |
long |
totalRbacAccessRules() |
long |
totalRefreshTokenInfos() |
int |
totalRoleBindings() |
io.confluent.security.rbac.UserMetadata |
userMetadata(org.apache.kafka.common.security.auth.KafkaPrincipal userPrincipal) |
Map<org.apache.kafka.common.security.auth.KafkaPrincipal,io.confluent.security.rbac.UserMetadata> |
users() |
public AbstractAuthCache(io.confluent.security.rbac.RbacRoles rbacRoles, io.confluent.security.authorizer.Scope rootScope, AccessRuleStore rbacAccessRuleStore, AccessRuleStore aclAccessRuleStore)
public abstract io.confluent.security.authorizer.provider.AuthorizeRule findRule(org.apache.kafka.common.security.auth.KafkaPrincipal userPrincipal, Set<org.apache.kafka.common.security.auth.KafkaPrincipal> groupPrincipals, String host, io.confluent.security.authorizer.Action action)
findRule
in interface io.confluent.security.auth.metadata.AuthCache
public Set<org.apache.kafka.common.security.auth.KafkaPrincipal> groups(org.apache.kafka.common.security.auth.KafkaPrincipal sessionPrincipal)
groups
in interface io.confluent.security.auth.metadata.AuthCache
sessionPrincipal
- User principal of the session which may contains groupspublic Set<io.confluent.security.rbac.RoleBinding> rbacRoleBindings(io.confluent.security.authorizer.Scope scope)
rbacRoleBindings
in interface io.confluent.security.auth.metadata.AuthCache
public Set<io.confluent.security.rbac.RoleBinding> rbacRoleBindings(Set<io.confluent.security.authorizer.Scope> scopes)
rbacRoleBindings
in interface io.confluent.security.auth.metadata.AuthCache
public Set<io.confluent.security.rbac.RoleBinding> rbacRoleBindings(io.confluent.security.rbac.RoleBindingFilter filter)
rbacRoleBindings
in interface io.confluent.security.auth.metadata.AuthCache
public Set<io.confluent.security.rbac.RoleBinding> rbacRoleBindings(org.apache.kafka.common.security.auth.KafkaPrincipal principal)
rbacRoleBindings
in interface io.confluent.security.auth.metadata.AuthCache
public Set<io.confluent.security.rbac.RoleBinding> rbacRoleBindings(org.apache.kafka.common.security.auth.KafkaPrincipal principal, Set<io.confluent.security.authorizer.Scope> scopes)
rbacRoleBindings
in interface io.confluent.security.auth.metadata.AuthCache
public Map<String,org.jose4j.jwk.JsonWebKeySet> jsonWebKeySets()
jsonWebKeySets
in interface io.confluent.security.trustservice.store.TrustCache
public org.jose4j.jwk.JsonWebKeySet jsonWebKeySet(String jwtKey)
jsonWebKeySet
in interface io.confluent.security.trustservice.store.TrustCache
public io.confluent.security.trustservice.store.data.IdentityPool identityPool(String poolId)
identityPool
in interface io.confluent.security.trustservice.store.TrustCache
public Map<String,io.confluent.security.trustservice.store.data.IdentityPool> identityPools()
identityPools
in interface io.confluent.security.trustservice.store.TrustCache
public io.confluent.security.authentication.oidc.RefreshTokenInfo refreshTokenInfo(String refreshTokenKey)
refreshTokenInfo
in interface io.confluent.security.trustservice.store.TrustCache
public io.confluent.security.rbac.UserMetadata userMetadata(org.apache.kafka.common.security.auth.KafkaPrincipal userPrincipal)
userMetadata
in interface io.confluent.security.auth.metadata.AuthCache
public Map<org.apache.kafka.common.security.auth.KafkaPrincipal,io.confluent.security.rbac.UserMetadata> users()
users
in interface io.confluent.security.auth.metadata.AuthCache
public Set<io.confluent.security.authorizer.Scope> knownScopes()
knownScopes
in interface io.confluent.security.auth.metadata.AuthCache
public io.confluent.security.authorizer.Scope rootScope()
rootScope
in interface io.confluent.security.auth.metadata.AuthCache
public io.confluent.security.rbac.RbacRoles rbacRoles()
rbacRoles
in interface io.confluent.security.auth.metadata.AuthCache
public Map<io.confluent.security.authorizer.ResourcePattern,Set<io.confluent.security.authorizer.AccessRule>> aclRules(io.confluent.security.authorizer.Scope scope)
aclRules
in interface io.confluent.security.auth.metadata.AuthCache
public Collection<org.apache.kafka.common.acl.AclBinding> aclBindings(io.confluent.security.authorizer.Scope scope, org.apache.kafka.common.acl.AclBindingFilter aclBindingFilter, Predicate<io.confluent.security.authorizer.ResourcePattern> resourceAccess)
aclBindings
in interface io.confluent.security.auth.metadata.AuthCache
public void addMatchingRules(io.confluent.security.authorizer.provider.ResourceAuthorizeRules matchingRules, org.apache.kafka.common.security.auth.KafkaPrincipal userPrincipal, Set<org.apache.kafka.common.security.auth.KafkaPrincipal> groupPrincipals, String host, io.confluent.security.authorizer.Operation operation, io.confluent.security.authorizer.Scope resourceScope, io.confluent.security.authorizer.ResourceType resourceType)
addMatchingRules
in interface io.confluent.security.auth.metadata.AuthCache
public io.confluent.security.auth.metadata.AuthCache.Result healthcheck()
healthcheck
in interface io.confluent.security.auth.metadata.AuthCache
public io.confluent.security.auth.store.data.AuthValue get(io.confluent.security.auth.store.data.AuthKey key)
get
in interface io.confluent.security.store.KeyValueStore<io.confluent.security.auth.store.data.AuthKey,io.confluent.security.auth.store.data.AuthValue>
public io.confluent.security.auth.store.data.AuthValue put(io.confluent.security.auth.store.data.AuthKey key, io.confluent.security.auth.store.data.AuthValue value)
put
in interface io.confluent.security.store.KeyValueStore<io.confluent.security.auth.store.data.AuthKey,io.confluent.security.auth.store.data.AuthValue>
public io.confluent.security.auth.store.data.AuthValue remove(io.confluent.security.auth.store.data.AuthKey key)
remove
in interface io.confluent.security.store.KeyValueStore<io.confluent.security.auth.store.data.AuthKey,io.confluent.security.auth.store.data.AuthValue>
public Map<? extends io.confluent.security.auth.store.data.AuthKey,? extends io.confluent.security.auth.store.data.AuthValue> map(String type)
map
in interface io.confluent.security.store.KeyValueStore<io.confluent.security.auth.store.data.AuthKey,io.confluent.security.auth.store.data.AuthValue>
public void fail(int partition, String errorMessage)
fail
in interface io.confluent.security.store.KeyValueStore<io.confluent.security.auth.store.data.AuthKey,io.confluent.security.auth.store.data.AuthValue>
public io.confluent.security.store.MetadataStoreStatus status(int partition)
status
in interface io.confluent.security.store.KeyValueStore<io.confluent.security.auth.store.data.AuthKey,io.confluent.security.auth.store.data.AuthValue>
public int totalRoleBindings()
public long totalRbacAccessRules()
public long totalAclAccessRules()
public int totalJwtIssuers()
public long totalIdentityPools()
public long totalRefreshTokenInfos()