All Classes and Interfaces
Class
Description
An abstract
CallbackHandler for the OAuthLoginModule.Extends
HttpsJwks with an asynchronous refresh implementation.AsyncHttpsJwksVerificationKeyResolver asynchronously maintains a
JsonWebKeySet.This interface is used to specify extra payload in case
AuthenticationException
occurs.Enum to encapsulate Jose4J error codes
Interface used by providers user credentials for HTTP basic authentication
Extends
VerificationKeyResolver interface with Closeable.This class centralizes FIPS validation for cipher suites, SSL/TLS versions and kafka broker protocols.
A trust manager that verifies that the client invalid input: '&' server certificate presented during
clientAuth belongs to confluent cloud and then delegates to the
defaultTrustManager for general certificate chain validation.DecryptionEngine Engine performs Key loading and decryption operations.
Generic JSON error message.
A custom DNS resolver which filters out resolved IP addresses based on the following rules (in
order):
If the IP address is in
allowCidrRanges, allow it
If filterLocalAddresses is true and the IP address is a local IP, disallow it
If filterPrivateAddresses is true and the IP address is a private IP, disallow it
If filterClassEAddresses is true and the IP address is a class E IP, disallow it
If the IP address is in disallowCidrRanges, disallow it
Contains the FIPS security config
Implementation of HttpCredentialProvider used in RestClient for making
calls to mds using Oauth/OIDC token.
Inspired by Confluent's Schroedinger https://github.com/confluentinc/schroedinger
JkuVerificationKeyResolver extracts jku from the JWT header and validates
that it is from an authorized domain.
JwtAuthenticator validates
JwtClaims returning OAuthBearerJwsToken on success.For testing
For testing
A
CallbackHandler that recognizes OAuthBearerTokenCallback
and retrieves OAuth 2 Bearer Token that was provided via the JAAS config.Utility class for reading PEM encoded objects.
PublicKeyJwks converts PublicKeys files into a
JsonWebKey collection.PublicKeyKeyVerificationKeyResolver maintains a static
JsonWebKeySet.Implementation of AccessTokenReceiver which refreshes the token
after 80% of its lifetime is complete.
Rest client for sending RBAC requests to the metadata service.
Class for making a sanitize request.
An implementation of
ConfigProvider that represents a Properties file.A
CallbackHandler that recognizes OAuthBearerTokenCallback
and retrieves SPIFFE JWT from Spire Agent that is running at the endpoint provided via
the sasl.oauthbearer.token.spire.agent.endpoint.A
JwtValidator that does basic validation of the JWT retrieved from the Spire Agent.A
JwtRetriever that retrieves the JWT SVID from the Spire agentA
CallbackHandler for the OAuthBearerLoginModule.A
CallbackHandler for the OAuthBearerLoginModule.A
CallbackHandler for the OAuthBearerLoginModule.This class implements a JwtRetriever for Azure UAMI.