Index

A B C D E F G H I J K L M N O P R S T U V 
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form

A

AbstractTokenLoginCallbackHandler - Class in io.confluent.kafka.clients.plugins.auth.token
An abstract CallbackHandler for the OAuthLoginModule.
AbstractTokenLoginCallbackHandler() - Constructor for class io.confluent.kafka.clients.plugins.auth.token.AbstractTokenLoginCallbackHandler
 
accessToken() - Method in class io.confluent.kafka.clients.plugins.auth.entities.SanitizeTokenRequest
 
aclBinding - Variable in class io.confluent.security.auth.client.rest.entities.CreateAclRequest
 
aclBindingFilter - Variable in class io.confluent.security.auth.client.rest.entities.AclFilter
 
AclBindingFilterMapKeyDeserializer - Class in io.confluent.security.auth.client.rest.jackson
 
AclBindingFilterMapKeyDeserializer() - Constructor for class io.confluent.security.auth.client.rest.jackson.AclBindingFilterMapKeyDeserializer
 
AclBindingFilterMapKeySerializer - Class in io.confluent.security.auth.client.rest.jackson
 
AclBindingFilterMapKeySerializer() - Constructor for class io.confluent.security.auth.client.rest.jackson.AclBindingFilterMapKeySerializer
 
aclBindingFilters - Variable in class io.confluent.security.auth.client.rest.entities.DeleteAclsRequest
 
AclBindingMapKeyDeserializer - Class in io.confluent.security.auth.client.rest.jackson
 
AclBindingMapKeyDeserializer() - Constructor for class io.confluent.security.auth.client.rest.jackson.AclBindingMapKeyDeserializer
 
AclBindingMapKeySerializer - Class in io.confluent.security.auth.client.rest.jackson
 
AclBindingMapKeySerializer() - Constructor for class io.confluent.security.auth.client.rest.jackson.AclBindingMapKeySerializer
 
aclBindings - Variable in class io.confluent.security.auth.client.rest.entities.CreateAclsRequest
 
aclBindings - Variable in class io.confluent.security.auth.client.rest.entities.DeleteAclsResult.DeleteResult
 
AclFilter - Class in io.confluent.security.auth.client.rest.entities
 
AclFilter(Scope, AclBindingFilter) - Constructor for class io.confluent.security.auth.client.rest.entities.AclFilter
 
add(String, Object) - Method in class io.confluent.security.util.SecurityContext
 
add(Map.Entry<String, Object>) - Method in class io.confluent.security.util.SecurityContext
 
addAll(Map<String, Object>) - Method in class io.confluent.security.util.SecurityContext
 
addPath(String) - Method in class io.confluent.security.auth.client.rest.RestRequest
 
addQueryParam(String, Object...) - Method in class io.confluent.security.auth.client.rest.RestRequest
 
ALLOW_UNSAFE_KEY_RESOLVER_URL_CONFIG - Static variable in class io.confluent.kafka.clients.plugins.auth.jwt.JwtAuthenticatorConfig
 
AsyncHttpsJwks - Class in io.confluent.kafka.clients.plugins.auth.jwt
Extends HttpsJwks with an asynchronous refresh implementation.
AsyncHttpsJwks(String) - Constructor for class io.confluent.kafka.clients.plugins.auth.jwt.AsyncHttpsJwks
 
AsyncHttpsJwks(String, boolean, long) - Constructor for class io.confluent.kafka.clients.plugins.auth.jwt.AsyncHttpsJwks
 
AsyncHttpsJwks(URI) - Constructor for class io.confluent.kafka.clients.plugins.auth.jwt.AsyncHttpsJwks
Create a new HttpsJwks that can be used to retrieve JWKs from the given location asynchronously.
AsyncHttpsJwks(SimpleGet, String, boolean, long) - Constructor for class io.confluent.kafka.clients.plugins.auth.jwt.AsyncHttpsJwks
 
AsyncHttpsJwksVerificationKeyResolver - Class in io.confluent.kafka.clients.plugins.auth.jwt
AsyncHttpsJwksVerificationKeyResolver asynchronously maintains a JsonWebKeySet.
AsyncHttpsJwksVerificationKeyResolver(AsyncHttpsJwks) - Constructor for class io.confluent.kafka.clients.plugins.auth.jwt.AsyncHttpsJwksVerificationKeyResolver
 
AsyncHttpsJwksVerificationKeyResolver(AsyncHttpsJwks, boolean) - Constructor for class io.confluent.kafka.clients.plugins.auth.jwt.AsyncHttpsJwksVerificationKeyResolver
 
AUD_CLAIM_MISMATCH - Static variable in class io.confluent.security.authentication.AuthenticationExceptionReasonCodes
 
audience() - Method in class io.confluent.kafka.clients.plugins.auth.jwt.JwtAuthenticatorConfig
 
AUDIENCE_CONFIG - Static variable in class io.confluent.kafka.clients.plugins.auth.jwt.JwtAuthenticatorConfig
 
AUDIENCE_REQUIRED_CONFIG - Static variable in class io.confluent.kafka.clients.plugins.auth.jwt.JwtAuthenticatorConfig
 
audienceRequired() - Method in class io.confluent.kafka.clients.plugins.auth.jwt.JwtAuthenticatorConfig
 
AUTHENTICATION_EXCEPTION - Enum constant in enum class io.confluent.security.authentication.AuthenticationExceptionReasonCodes.ErrorTypes
 
AUTHENTICATION_EXCEPTION_OCCURRED - Static variable in exception class io.confluent.security.authentication.AuthenticationException
 
AuthenticationErrorInfo - Interface in io.confluent.security.authentication
This interface is used to specify extra payload in case AuthenticationException occurs.
AuthenticationErrorInfo.GeneralInfo - Class in io.confluent.security.authentication
 
AuthenticationErrorInfo.JwtClaimsInfo - Class in io.confluent.security.authentication
 
AuthenticationException - Exception Class in io.confluent.security.authentication
 
AuthenticationException(String) - Constructor for exception class io.confluent.security.authentication.AuthenticationException
Deprecated.
AuthenticationException(String, String) - Constructor for exception class io.confluent.security.authentication.AuthenticationException
Creates a new AuthenticationException with the given message.
AuthenticationException(String, Throwable) - Constructor for exception class io.confluent.security.authentication.AuthenticationException
Deprecated.
AuthenticationException(String, Throwable, String) - Constructor for exception class io.confluent.security.authentication.AuthenticationException
Creates a new AuthenticationException with the given message and cause.
AuthenticationExceptionReasonCodes - Class in io.confluent.security.authentication
 
AuthenticationExceptionReasonCodes() - Constructor for class io.confluent.security.authentication.AuthenticationExceptionReasonCodes
 
AuthenticationExceptionReasonCodes.ErrorTypes - Enum Class in io.confluent.security.authentication
Enum to encapsulate Jose4J error codes
AuthenticationResponse - Class in io.confluent.security.auth.client.rest.entities
 
AuthenticationResponse(String, String, long) - Constructor for class io.confluent.security.auth.client.rest.entities.AuthenticationResponse
 
authenticationToken() - Method in class io.confluent.security.auth.client.rest.entities.AuthenticationResponse
 

B

BAD_POOL_EXTENSION - Static variable in class io.confluent.security.authentication.AuthenticationExceptionReasonCodes
 
BASIC - Enum constant in enum class io.confluent.security.auth.client.provider.BuiltInAuthProviders.HttpCredentialProviders
 
BASIC_AUTH_CREDENTIALS_PATH_PROP - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
BASIC_AUTH_CREDENTIALS_PROVIDER_PROP - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
BASIC_AUTH_USER_INFO_PROP - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
BasicAuthCredentialProvider - Interface in io.confluent.security.auth.client.provider
Interface used by providers user credentials for HTTP basic authentication
BcFipsJsseProviderCreator - Class in io.confluent.kafka.security.fips.provider
 
BcFipsJsseProviderCreator() - Constructor for class io.confluent.kafka.security.fips.provider.BcFipsJsseProviderCreator
 
BcFipsProviderCreator - Class in io.confluent.kafka.security.fips.provider
 
BcFipsProviderCreator() - Constructor for class io.confluent.kafka.security.fips.provider.BcFipsProviderCreator
 
BEARER - Enum constant in enum class io.confluent.security.auth.client.provider.BuiltInAuthProviders.HttpCredentialProviders
 
boolVal(String, Boolean) - Method in class io.confluent.security.util.SecurityContext
 
BOOTSTRAP_METADATA_SERVER_URLS_PROP - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
BuiltInAuthProviders - Class in io.confluent.security.auth.client.provider
 
BuiltInAuthProviders() - Constructor for class io.confluent.security.auth.client.provider.BuiltInAuthProviders
 
BuiltInAuthProviders.BasicAuthCredentialProviders - Enum Class in io.confluent.security.auth.client.provider
 
BuiltInAuthProviders.HttpCredentialProviders - Enum Class in io.confluent.security.auth.client.provider
 
builtInBasicAuthCredentialProviders() - Static method in class io.confluent.security.auth.client.provider.BuiltInAuthProviders
 
builtInHttpCredentialProviders() - Static method in class io.confluent.security.auth.client.provider.BuiltInAuthProviders
 

C

CALLING_RESOURCE_IDENTITY_MISSING_OR_EMPTY - Static variable in class io.confluent.security.authentication.AuthenticationExceptionReasonCodes
 
CertificateId - Class in io.confluent.kafka.client.plugins.ssl
 
CertificateId(String, String) - Constructor for class io.confluent.kafka.client.plugins.ssl.CertificateId
 
CertificateId(X509Certificate) - Constructor for class io.confluent.kafka.client.plugins.ssl.CertificateId
 
CertificateIdsJsonConfig - Class in io.confluent.kafka.client.plugins.ssl
 
CertificateIdsJsonConfig(String, List<String>) - Constructor for class io.confluent.kafka.client.plugins.ssl.CertificateIdsJsonConfig
 
checkClientTrusted(X509Certificate[], String) - Method in class io.confluent.kafka.client.plugins.ssl.ConfluentTrustManager
 
checkClientTrusted(X509Certificate[], String, Socket) - Method in class io.confluent.kafka.client.plugins.ssl.ConfluentTrustManager
 
checkClientTrusted(X509Certificate[], String, SSLEngine) - Method in class io.confluent.kafka.client.plugins.ssl.ConfluentTrustManager
 
checkServerTrusted(X509Certificate[], String) - Method in class io.confluent.kafka.client.plugins.ssl.ConfluentTrustManager
 
checkServerTrusted(X509Certificate[], String, Socket) - Method in class io.confluent.kafka.client.plugins.ssl.ConfluentTrustManager
 
checkServerTrusted(X509Certificate[], String, SSLEngine) - Method in class io.confluent.kafka.client.plugins.ssl.ConfluentTrustManager
 
CIPHER_PATTERN - Static variable in class io.confluent.kafka.security.config.provider.DecryptionEngine
 
claim(String, Class<T>) - Method in class io.confluent.kafka.clients.plugins.auth.jwt.UnverifiedJwtBearerToken
 
CLAIM_ISSUER_POOL_FILTER_MISMATCH - Static variable in class io.confluent.security.authentication.AuthenticationExceptionReasonCodes
 
CLAIM_USER_ID - Static variable in class io.confluent.security.util.JwtUtils
 
CLAIM_USER_RESOURCE_ID - Static variable in class io.confluent.security.util.JwtUtils
 
claims() - Method in class io.confluent.security.authentication.AuthenticationErrorInfo.JwtClaimsInfo
 
claims(Map<String, Object>) - Method in class io.confluent.security.authentication.AuthenticationErrorInfo.JwtClaimsInfo
 
CLAIMS_POOL_FILTER_MISMATCH - Static variable in class io.confluent.security.authentication.AuthenticationExceptionReasonCodes
 
claimSuppliers() - Method in class io.confluent.security.util.JwtUtils.ErrorInfo
 
close() - Method in class io.confluent.kafka.clients.plugins.auth.jwt.AsyncHttpsJwks
 
close() - Method in class io.confluent.kafka.clients.plugins.auth.jwt.AsyncHttpsJwksVerificationKeyResolver
 
close() - Method in class io.confluent.kafka.clients.plugins.auth.jwt.JkuVerificationKeyResolver
 
close() - Method in class io.confluent.kafka.clients.plugins.auth.jwt.JwtAuthenticator
 
close() - Method in class io.confluent.kafka.clients.plugins.auth.jwt.PublicKeyVerificationKeyResolver
 
close() - Method in class io.confluent.kafka.clients.plugins.auth.oauth.internals.SpireJwtTokenRetriever
 
close() - Method in class io.confluent.kafka.clients.plugins.auth.oauth.OAuthBearerLoginCallbackHandler
 
close() - Method in class io.confluent.kafka.clients.plugins.auth.oauth.SpireJwtLoginCallbackHandler
 
close() - Method in class io.confluent.kafka.clients.plugins.auth.token.AbstractTokenLoginCallbackHandler
 
close() - Method in class io.confluent.kafka.clients.plugins.auth.token.TokenBearerLoginCallbackHandler
 
close() - Method in class io.confluent.kafka.clients.plugins.auth.token.TokenCertificateLoginCallbackHandler
 
close() - Method in class io.confluent.kafka.clients.plugins.auth.token.TokenUserLoginCallbackHandler
 
close() - Method in class io.confluent.kafka.security.config.provider.SecurePassConfigProvider
 
close() - Method in class io.confluent.security.auth.client.oauth.RefreshingAccessTokenRetriever
 
close() - Method in class io.confluent.security.auth.client.provider.HttpOauthBearerCredentialProvider
 
close() - Method in class io.confluent.security.auth.client.rest.RestClient
 
CloseableVerificationKeyResolver - Interface in io.confluent.kafka.clients.plugins.auth.jwt
Extends VerificationKeyResolver interface with Closeable.
CLUSTER_ID_MISSING_OR_EMPTY - Static variable in class io.confluent.security.authentication.AuthenticationExceptionReasonCodes
 
CLUSTER_NOT_ALLOWED - Static variable in class io.confluent.security.authentication.AuthenticationExceptionReasonCodes
 
CLUSTER_NOT_FOUND - Static variable in class io.confluent.security.authentication.AuthenticationExceptionReasonCodes
 
ClusterLinkAccessTokenRetrieverFactory - Class in io.confluent.kafka.clients.plugins.auth.oauth
 
ClusterLinkAccessTokenRetrieverFactory() - Constructor for class io.confluent.kafka.clients.plugins.auth.oauth.ClusterLinkAccessTokenRetrieverFactory
 
ClusterLinkHttpAccessTokenRetriever - Class in io.confluent.kafka.clients.plugins.auth.oauth
 
ClusterLinkHttpAccessTokenRetriever(String, String, String, String, boolean, boolean) - Constructor for class io.confluent.kafka.clients.plugins.auth.oauth.ClusterLinkHttpAccessTokenRetriever
 
ClusterLinkHttpAccessTokenRetriever(String, String, String, String, boolean, boolean, boolean) - Constructor for class io.confluent.kafka.clients.plugins.auth.oauth.ClusterLinkHttpAccessTokenRetriever
 
ClusterLinkOAuthBearerLoginCallbackHandler - Class in io.confluent.kafka.clients.plugins.auth.oauth
 
ClusterLinkOAuthBearerLoginCallbackHandler() - Constructor for class io.confluent.kafka.clients.plugins.auth.oauth.ClusterLinkOAuthBearerLoginCallbackHandler
 
CONFIG_PREFIX - Static variable in class io.confluent.kafka.clients.plugins.auth.jwt.JwtAuthenticatorConfig
 
CONFIG_PREFIX - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
configure(Map<String, ?>) - Method in class io.confluent.kafka.client.plugins.ssl.ConfluentTrustProviderCreator
 
configure(Map<String, ?>) - Method in class io.confluent.kafka.clients.plugins.auth.http.FileBasedDynamicBasicAuthCredentialProvider
 
configure(Map<String, ?>) - Method in class io.confluent.kafka.clients.plugins.auth.token.AbstractTokenLoginCallbackHandler
 
configure(Map<String, ?>) - Method in class io.confluent.kafka.clients.plugins.auth.token.TokenBearerLoginCallbackHandler
 
configure(Map<String, ?>) - Method in class io.confluent.kafka.clients.plugins.auth.token.TokenCertificateLoginCallbackHandler
 
configure(Map<String, ?>) - Method in class io.confluent.kafka.clients.plugins.auth.token.TokenUserLoginCallbackHandler
 
configure(Map<String, ?>) - Method in class io.confluent.kafka.security.config.provider.SecurePassConfigProvider
 
configure(Map<String, ?>) - Method in class io.confluent.security.auth.client.provider.HttpBasicCredentialProvider
 
configure(Map<String, ?>) - Method in class io.confluent.security.auth.client.provider.HttpBearerCredentialProvider
 
configure(Map<String, ?>) - Method in class io.confluent.security.auth.client.provider.HttpOauthBearerCredentialProvider
 
configure(Map<String, ?>, String, List<AppConfigurationEntry>) - Method in class io.confluent.kafka.clients.plugins.auth.oauth.ClusterLinkHttpAccessTokenRetriever
 
configure(Map<String, ?>, String, List<AppConfigurationEntry>) - Method in class io.confluent.kafka.clients.plugins.auth.oauth.ClusterLinkOAuthBearerLoginCallbackHandler
 
configure(Map<String, ?>, String, List<AppConfigurationEntry>) - Method in class io.confluent.kafka.clients.plugins.auth.oauth.OAuthBearerLoginCallbackHandler
 
configure(Map<String, ?>, String, List<AppConfigurationEntry>) - Method in class io.confluent.kafka.clients.plugins.auth.oauth.SpireJwtLoginCallbackHandler
 
configure(Map<String, ?>, String, List<AppConfigurationEntry>) - Method in class io.confluent.kafka.clients.plugins.auth.token.AbstractTokenLoginCallbackHandler
 
configure(Map<String, ?>, String, List<AppConfigurationEntry>) - Method in class io.confluent.security.auth.client.oauth.UamiJwtRetriever
 
configure(FipsSecurityConfig.FipsMode) - Method in class io.confluent.kafka.security.fips.ConfluentFipsValidator
 
CONFLUENT_ISSUER - Static variable in class io.confluent.kafka.clients.plugins.auth.jwt.JwtAuthenticator
 
ConfluentFipsValidator - Class in io.confluent.kafka.security.fips
This class centralizes FIPS validation for cipher suites, SSL/TLS versions and kafka broker protocols.
ConfluentFipsValidator() - Constructor for class io.confluent.kafka.security.fips.ConfluentFipsValidator
 
ConfluentTrustManager - Class in io.confluent.kafka.client.plugins.ssl
A trust manager that verifies that the client invalid input: '&' server certificate presented during clientAuth belongs to confluent cloud and then delegates to the defaultTrustManager for general certificate chain validation.
ConfluentTrustManager(Map<String, ?>, X509ExtendedTrustManager) - Constructor for class io.confluent.kafka.client.plugins.ssl.ConfluentTrustManager
 
ConfluentTrustManagerFactory - Class in io.confluent.kafka.client.plugins.ssl
 
ConfluentTrustManagerFactory() - Constructor for class io.confluent.kafka.client.plugins.ssl.ConfluentTrustManagerFactory
 
ConfluentTrustManagerHelper - Class in io.confluent.kafka.client.plugins.ssl
Helper class to share code for trust manager implementations between io.confluent.kafka.client.plugins.ssl.ConfluentTrustManager and io.confluent.kafka.server.plugins.ssl.ConfluentTrustManager from broker-plugins.
ConfluentTrustManagerHelper(Map<String, ?>, Optional<Sensor>) - Constructor for class io.confluent.kafka.client.plugins.ssl.ConfluentTrustManagerHelper
 
ConfluentTrustManagerHelper.AltNameDnsDomainSuffixVerifier - Interface in io.confluent.kafka.client.plugins.ssl
 
ConfluentTrustProvider - Class in io.confluent.kafka.client.plugins.ssl
 
ConfluentTrustProvider(Map<String, ?>) - Constructor for class io.confluent.kafka.client.plugins.ssl.ConfluentTrustProvider
 
ConfluentTrustProviderCreator - Class in io.confluent.kafka.client.plugins.ssl
 
ConfluentTrustProviderCreator() - Constructor for class io.confluent.kafka.client.plugins.ssl.ConfluentTrustProviderCreator
 
create(Map<String, ?>, String, Map<String, Object>) - Static method in class io.confluent.kafka.clients.plugins.auth.oauth.ClusterLinkAccessTokenRetrieverFactory
 
create(Map<String, ?>, Map<String, Object>) - Static method in class io.confluent.kafka.clients.plugins.auth.oauth.ClusterLinkAccessTokenRetrieverFactory
Create a JwtRetriever from the given SASL and JAAS configuration.
CreateAclRequest - Class in io.confluent.security.auth.client.rest.entities
 
CreateAclRequest(Scope, AclBinding) - Constructor for class io.confluent.security.auth.client.rest.entities.CreateAclRequest
 
CreateAclsRequest - Class in io.confluent.security.auth.client.rest.entities
 
CreateAclsRequest(Scope, Collection<AclBinding>) - Constructor for class io.confluent.security.auth.client.rest.entities.CreateAclsRequest
 
CreateAclsResult - Class in io.confluent.security.auth.client.rest.entities
 
CreateAclsResult(Map<AclBinding, CreateAclsResult.CreateResult>) - Constructor for class io.confluent.security.auth.client.rest.entities.CreateAclsResult
 
CreateAclsResult.CreateResult - Class in io.confluent.security.auth.client.rest.entities
 
current() - Method in class io.confluent.security.auth.client.rest.UrlSelector
Get the current url

D

data() - Method in interface io.confluent.security.authentication.AuthenticationErrorInfo
 
data() - Method in class io.confluent.security.authentication.AuthenticationErrorInfo.GeneralInfo
 
data(String, Object) - Method in interface io.confluent.security.authentication.AuthenticationErrorInfo
 
data(String, Object) - Method in class io.confluent.security.authentication.AuthenticationErrorInfo.GeneralInfo
 
data(Map<String, Object>) - Method in interface io.confluent.security.authentication.AuthenticationErrorInfo
 
data(Map<String, Object>) - Method in class io.confluent.security.authentication.AuthenticationErrorInfo.GeneralInfo
 
DATA_ENCRYPTION_KEY - Static variable in class io.confluent.kafka.security.config.provider.SecurePassConfigProvider
 
DATA_POLICY_DISALLOWED - Static variable in class io.confluent.security.authentication.AuthenticationExceptionReasonCodes
 
DecryptionEngine - Class in io.confluent.kafka.security.config.provider
DecryptionEngine Engine performs Key loading and decryption operations.
DecryptionEngine(String, String, String) - Constructor for class io.confluent.kafka.security.config.provider.DecryptionEngine
 
decryptWithDEK(String) - Method in class io.confluent.kafka.security.config.provider.DecryptionEngine
 
decryptWithMasterKey(String) - Method in class io.confluent.kafka.security.config.provider.DecryptionEngine
 
DEFAULT_OAUTH_LOGIN_RETRY_BACKOFF_MAX_MS - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
DEFAULT_OAUTH_LOGIN_RETRY_BACKOFF_MS - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
DEFAULT_REFRESH_INTERVAL_MS - Static variable in class io.confluent.kafka.clients.plugins.auth.jwt.AsyncHttpsJwks
 
DEFAULT_REQ_ID - Static variable in class io.confluent.security.util.SecurityContext
 
DeleteAclsRequest - Class in io.confluent.security.auth.client.rest.entities
 
DeleteAclsRequest(Scope, Collection<AclBindingFilter>) - Constructor for class io.confluent.security.auth.client.rest.entities.DeleteAclsRequest
 
DeleteAclsResult - Class in io.confluent.security.auth.client.rest.entities
 
DeleteAclsResult(Map<AclBindingFilter, DeleteAclsResult.DeleteResult>) - Constructor for class io.confluent.security.auth.client.rest.entities.DeleteAclsResult
 
DeleteAclsResult.DeleteResult - Class in io.confluent.security.auth.client.rest.entities
 
deserialize(JsonParser, DeserializationContext) - Method in class io.confluent.security.authorizer.utils.JsonMapper.JwkJsonDeserializer
 
deserialize(JsonParser, DeserializationContext) - Method in class io.confluent.security.authorizer.utils.JsonMapper.JwksJsonDeserializer
 
deserializeKey(String, DeserializationContext) - Method in class io.confluent.security.auth.client.rest.jackson.AclBindingFilterMapKeyDeserializer
 
deserializeKey(String, DeserializationContext) - Method in class io.confluent.security.auth.client.rest.jackson.AclBindingMapKeyDeserializer
 
details() - Method in class io.confluent.security.util.JwtUtils.ErrorInfo
 
doubleVal(String, Double) - Method in class io.confluent.security.util.SecurityContext
 
DYNAMIC_FILE - Static variable in class io.confluent.kafka.clients.plugins.auth.http.FileBasedDynamicBasicAuthCredentialProvider
 

E

ENABLE_METADATA_SERVER_URL_REFRESH - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
ENABLE_METADATA_SERVER_URL_REFRESH_DOC - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
encodeUserInfo(String) - Static method in class io.confluent.security.auth.client.provider.HttpBasicCredentialProvider
 
equals(Object) - Method in class io.confluent.kafka.client.plugins.ssl.CertificateId
 
equals(Object) - Method in class io.confluent.security.util.JwtUtils.ErrorInfo
 
Error(String, List<JwtUtils.ErrorInfo>) - Constructor for class io.confluent.security.util.JwtUtils.Error
 
errorCode() - Method in class io.confluent.security.auth.client.rest.entities.ErrorMessage
 
errorCode() - Method in exception class io.confluent.security.auth.client.rest.exceptions.RestClientException
 
errorCode(int) - Method in class io.confluent.security.auth.client.rest.entities.ErrorMessage
 
errorCodes(Throwable) - Static method in class io.confluent.security.util.JwtUtils
jose error codes, can be logged on server side and help lookup proper messages
errorDetails(Throwable, SecurityContext) - Static method in class io.confluent.security.util.JwtUtils
returns the error encapsulated in Error class for fine grain control.
errorInfo() - Method in exception class io.confluent.security.authentication.AuthenticationException
 
errorInfo(AuthenticationErrorInfo) - Method in exception class io.confluent.security.authentication.AuthenticationException
 
ErrorInfo(AuthenticationExceptionReasonCodes.ErrorTypes, Integer, String, Map<String, Object>, List<JwtUtils.MapSource>) - Constructor for class io.confluent.security.util.JwtUtils.ErrorInfo
 
errorMessage - Variable in class io.confluent.security.auth.client.rest.entities.CreateAclsResult.CreateResult
 
errorMessage - Variable in class io.confluent.security.auth.client.rest.entities.DeleteAclsResult.DeleteResult
 
errorMessage(Throwable) - Static method in class io.confluent.security.util.JwtUtils
safe and comprehensive error message to log on server and throw to client.
ErrorMessage - Class in io.confluent.security.auth.client.rest.entities
Generic JSON error message.
ErrorMessage(int, String) - Constructor for class io.confluent.security.auth.client.rest.entities.ErrorMessage
 
errors() - Method in class io.confluent.security.util.JwtUtils.Error
 
EXPIRATION_CLAIM_NAME - Static variable in class io.confluent.kafka.clients.plugins.auth.oauth.internals.SpireJwtTokenLoginValidator
 
extractSignature(OAuthBearerToken) - Static method in class io.confluent.kafka.clients.plugins.auth.jwt.JwtAuthenticator
 

F

fail() - Method in class io.confluent.security.auth.client.rest.UrlSelector
Declare the current url as failed.
FAILED_TO_READ_CLAIMS - Static variable in class io.confluent.security.authentication.AuthenticationExceptionReasonCodes
 
failure(String) - Static method in class io.confluent.security.auth.client.rest.entities.CreateAclsResult
 
failure(String) - Static method in class io.confluent.security.auth.client.rest.entities.DeleteAclsResult
 
failures() - Method in class io.confluent.security.auth.client.rest.UrlSelector
 
FileBasedDynamicBasicAuthCredentialProvider - Class in io.confluent.kafka.clients.plugins.auth.http
 
FileBasedDynamicBasicAuthCredentialProvider() - Constructor for class io.confluent.kafka.clients.plugins.auth.http.FileBasedDynamicBasicAuthCredentialProvider
 
FilteringDnsResolver - Class in io.confluent.kafka.clients.plugins.auth.oauth
A custom DNS resolver which filters out resolved IP addresses based on the following rules (in order): If the IP address is in allowCidrRanges, allow it If filterLocalAddresses is true and the IP address is a local IP, disallow it If filterPrivateAddresses is true and the IP address is a private IP, disallow it If filterClassEAddresses is true and the IP address is a class E IP, disallow it If the IP address is in disallowCidrRanges, disallow it
FilteringDnsResolver(boolean, boolean, boolean, List<String>, List<String>) - Constructor for class io.confluent.kafka.clients.plugins.auth.oauth.FilteringDnsResolver
 
fipsEnabled() - Method in class io.confluent.kafka.security.fips.ConfluentFipsValidator
 
fromByteBuffer(ByteBuffer, Class<T>) - Static method in class io.confluent.security.authorizer.utils.JsonMapper
 
fromJson(String) - Static method in class io.confluent.kafka.client.plugins.ssl.CertificateIdsJsonConfig
 
fromMap(Map<String, Object>) - Static method in class io.confluent.security.util.SecurityContext
 

G

GCM_TAG_LENGTH - Static variable in class io.confluent.kafka.security.config.provider.DecryptionEngine
 
GeneralInfo() - Constructor for class io.confluent.security.authentication.AuthenticationErrorInfo.GeneralInfo
 
get(String) - Method in class io.confluent.kafka.security.config.provider.SecurePassConfigProvider
Retrieves the data at the given Properties file and decrypts the values using the CONFLUENT_MASTER_KEY.
get(String, Set<String>) - Method in class io.confluent.kafka.security.config.provider.SecurePassConfigProvider
Retrieves the data with the given keys at the given Properties file and decrypts the values using the CONFLUENT_MASTER_KEY.
get(Function<Map<String, Object>, T>) - Method in class io.confluent.security.util.SecurityContext
 
getAcceptedIssuers() - Method in class io.confluent.kafka.client.plugins.ssl.ConfluentTrustManager
 
getContextMap() - Method in class io.confluent.security.util.SecurityContext
 
getCredentials() - Method in class io.confluent.security.auth.client.provider.HttpBasicCredentialProvider
 
getCredentials() - Method in class io.confluent.security.auth.client.provider.HttpBearerCredentialProvider
 
getCredentials() - Method in interface io.confluent.security.auth.client.provider.HttpCredentialProvider
 
getCredentials() - Method in class io.confluent.security.auth.client.provider.HttpOauthBearerCredentialProvider
 
getIdentityInfo() - Method in class io.confluent.security.util.JwtUtils.ErrorInfo
 
getIssuer() - Method in class io.confluent.kafka.client.plugins.ssl.CertificateIdsJsonConfig
 
getJsonWebKeys() - Method in class io.confluent.kafka.clients.plugins.auth.jwt.AsyncHttpsJwks
 
getJsonWebKeys() - Method in class io.confluent.kafka.clients.plugins.auth.jwt.PublicKeyJwks
 
getNetworkRoutes() - Method in class io.confluent.kafka.client.plugins.ssl.ConfluentTrustManagerHelper
 
getProvider() - Method in class io.confluent.kafka.client.plugins.ssl.ConfluentTrustProviderCreator
 
getProvider() - Method in class io.confluent.kafka.security.fips.provider.BcFipsJsseProviderCreator
Create the security provider configured
getProvider() - Method in class io.confluent.kafka.security.fips.provider.BcFipsProviderCreator
Create the security provider configured.
getProviderName() - Method in class io.confluent.security.auth.client.provider.HttpBasicCredentialProvider
 
getProviderName() - Method in class io.confluent.security.auth.client.provider.HttpBearerCredentialProvider
 
getProviderName() - Method in interface io.confluent.security.auth.client.provider.HttpCredentialProvider
 
getProviderName() - Method in class io.confluent.security.auth.client.provider.HttpOauthBearerCredentialProvider
 
getRelatedClaims() - Method in class io.confluent.security.util.JwtUtils.ErrorInfo
 
getReqId() - Method in class io.confluent.security.util.SecurityContext
 
getScheme() - Method in class io.confluent.security.auth.client.provider.HttpBasicCredentialProvider
 
getScheme() - Method in class io.confluent.security.auth.client.provider.HttpBearerCredentialProvider
 
getScheme() - Method in interface io.confluent.security.auth.client.provider.HttpCredentialProvider
 
getScheme() - Method in class io.confluent.security.auth.client.provider.HttpOauthBearerCredentialProvider
 
getSerialNumbers() - Method in class io.confluent.kafka.client.plugins.ssl.CertificateIdsJsonConfig
 
getSubjectAltNames(X509Certificate) - Static method in class io.confluent.kafka.client.plugins.ssl.ConfluentTrustManagerHelper
 
getUserInfo() - Method in class io.confluent.kafka.clients.plugins.auth.http.FileBasedDynamicBasicAuthCredentialProvider
 
getUserInfo() - Method in interface io.confluent.security.auth.client.provider.BasicAuthCredentialProvider
Returns user credentials

H

handle(Callback[]) - Method in class io.confluent.kafka.clients.plugins.auth.oauth.OAuthBearerLoginCallbackHandler
 
handle(Callback[]) - Method in class io.confluent.kafka.clients.plugins.auth.oauth.SpireJwtLoginCallbackHandler
 
handle(Callback[]) - Method in class io.confluent.kafka.clients.plugins.auth.token.AbstractTokenLoginCallbackHandler
 
hasClaims() - Method in class io.confluent.security.authentication.AuthenticationErrorInfo.JwtClaimsInfo
 
hasData() - Method in class io.confluent.security.authentication.AuthenticationErrorInfo.GeneralInfo
 
hasData() - Method in interface io.confluent.security.authentication.AuthenticationErrorInfo
 
hashCode() - Method in class io.confluent.kafka.client.plugins.ssl.CertificateId
 
hashCode() - Method in class io.confluent.security.util.JwtUtils.ErrorInfo
 
hasValidJkuDomain(Collection<String>, String, String) - Static method in class io.confluent.kafka.clients.plugins.auth.jwt.JkuVerificationKeyResolver
 
hasViolatingIpAddress(String) - Method in class io.confluent.kafka.clients.plugins.auth.oauth.FilteringDnsResolver
 
HTTP_AUTH_CREDENTIALS_PROVIDER_PROP - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
HTTP_REQUEST_TIMEOUT_MS_CONFIG - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
HTTP_REQUEST_TIMEOUT_MS_DOC - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
HttpBasicCredentialProvider - Class in io.confluent.security.auth.client.provider
 
HttpBasicCredentialProvider() - Constructor for class io.confluent.security.auth.client.provider.HttpBasicCredentialProvider
 
HttpBasicCredentialProvider(String) - Constructor for class io.confluent.security.auth.client.provider.HttpBasicCredentialProvider
 
HttpBearerCredentialProvider - Class in io.confluent.security.auth.client.provider
 
HttpBearerCredentialProvider() - Constructor for class io.confluent.security.auth.client.provider.HttpBearerCredentialProvider
 
HttpBearerCredentialProvider(String) - Constructor for class io.confluent.security.auth.client.provider.HttpBearerCredentialProvider
 
HttpCredentialProvider - Interface in io.confluent.security.auth.client.provider
 
HttpOauthBearerCredentialProvider - Class in io.confluent.security.auth.client.provider
Implementation of HttpCredentialProvider used in RestClient for making calls to mds using Oauth/OIDC token.
HttpOauthBearerCredentialProvider() - Constructor for class io.confluent.security.auth.client.provider.HttpOauthBearerCredentialProvider
 
HTTPS_JWKS - Static variable in class io.confluent.kafka.clients.plugins.auth.jwt.JwtAuthenticatorConfig
 

I

IAT_CLAIM_REQUIRED - Static variable in class io.confluent.kafka.clients.plugins.auth.jwt.JwtAuthenticator
 
IDENTITY_POOL_IDENTITY_CLAIM_ABSENT_IN_CLAIMS - Static variable in class io.confluent.security.authentication.AuthenticationExceptionReasonCodes
 
IDENTITY_POOL_NOT_FOUND - Static variable in class io.confluent.security.authentication.AuthenticationExceptionReasonCodes
 
IDENTITY_SUPPLIERS - Static variable in class io.confluent.security.util.JwtUtils.ErrorInfo
 
identityInfo(String, Object) - Method in class io.confluent.security.util.JwtUtils.ErrorInfo
 
identityInfo(Map.Entry<String, Object>) - Method in class io.confluent.security.util.JwtUtils.ErrorInfo
 
ILLEGAL_ARGUMENT_EXCEPTION - Enum constant in enum class io.confluent.security.authentication.AuthenticationExceptionReasonCodes.ErrorTypes
 
INCORRECT_AUTHENTICATOR_TYPE - Static variable in class io.confluent.security.authentication.AuthenticationExceptionReasonCodes
 
index() - Method in class io.confluent.security.auth.client.rest.UrlSelector
 
intVal(String, Integer) - Method in class io.confluent.security.util.SecurityContext
 
INVALID_POOL_ID - Static variable in class io.confluent.security.authentication.AuthenticationExceptionReasonCodes
 
InvalidFipsBrokerProtocolException - Exception Class in io.confluent.kafka.security.fips.exceptions
 
InvalidFipsBrokerProtocolException(String) - Constructor for exception class io.confluent.kafka.security.fips.exceptions.InvalidFipsBrokerProtocolException
 
InvalidFipsBrokerProtocolException(String, Throwable) - Constructor for exception class io.confluent.kafka.security.fips.exceptions.InvalidFipsBrokerProtocolException
 
InvalidFipsLdapProtocolException - Exception Class in io.confluent.kafka.security.fips.exceptions
 
InvalidFipsLdapProtocolException(String) - Constructor for exception class io.confluent.kafka.security.fips.exceptions.InvalidFipsLdapProtocolException
 
InvalidFipsLdapProtocolException(String, Throwable) - Constructor for exception class io.confluent.kafka.security.fips.exceptions.InvalidFipsLdapProtocolException
 
InvalidFipsRestProtocolException - Exception Class in io.confluent.kafka.security.fips.exceptions
 
InvalidFipsRestProtocolException(String) - Constructor for exception class io.confluent.kafka.security.fips.exceptions.InvalidFipsRestProtocolException
 
InvalidFipsRestProtocolException(String, Throwable) - Constructor for exception class io.confluent.kafka.security.fips.exceptions.InvalidFipsRestProtocolException
 
InvalidFipsTlsCipherSuiteException - Exception Class in io.confluent.kafka.security.fips.exceptions
 
InvalidFipsTlsCipherSuiteException(String) - Constructor for exception class io.confluent.kafka.security.fips.exceptions.InvalidFipsTlsCipherSuiteException
 
InvalidFipsTlsCipherSuiteException(String, Throwable) - Constructor for exception class io.confluent.kafka.security.fips.exceptions.InvalidFipsTlsCipherSuiteException
 
InvalidFipsTlsVersionException - Exception Class in io.confluent.kafka.security.fips.exceptions
 
InvalidFipsTlsVersionException(String) - Constructor for exception class io.confluent.kafka.security.fips.exceptions.InvalidFipsTlsVersionException
 
InvalidFipsTlsVersionException(String, Throwable) - Constructor for exception class io.confluent.kafka.security.fips.exceptions.InvalidFipsTlsVersionException
 
io.confluent.kafka.client.plugins.ssl - package io.confluent.kafka.client.plugins.ssl
 
io.confluent.kafka.clients.plugins.auth.entities - package io.confluent.kafka.clients.plugins.auth.entities
 
io.confluent.kafka.clients.plugins.auth.http - package io.confluent.kafka.clients.plugins.auth.http
 
io.confluent.kafka.clients.plugins.auth.jwt - package io.confluent.kafka.clients.plugins.auth.jwt
 
io.confluent.kafka.clients.plugins.auth.oauth - package io.confluent.kafka.clients.plugins.auth.oauth
 
io.confluent.kafka.clients.plugins.auth.oauth.internals - package io.confluent.kafka.clients.plugins.auth.oauth.internals
 
io.confluent.kafka.clients.plugins.auth.token - package io.confluent.kafka.clients.plugins.auth.token
 
io.confluent.kafka.common.multitenant.oauth - package io.confluent.kafka.common.multitenant.oauth
 
io.confluent.kafka.security - package io.confluent.kafka.security
 
io.confluent.kafka.security.config.provider - package io.confluent.kafka.security.config.provider
 
io.confluent.kafka.security.fips - package io.confluent.kafka.security.fips
 
io.confluent.kafka.security.fips.exceptions - package io.confluent.kafka.security.fips.exceptions
 
io.confluent.kafka.security.fips.provider - package io.confluent.kafka.security.fips.provider
 
io.confluent.security.auth.client - package io.confluent.security.auth.client
 
io.confluent.security.auth.client.oauth - package io.confluent.security.auth.client.oauth
 
io.confluent.security.auth.client.provider - package io.confluent.security.auth.client.provider
 
io.confluent.security.auth.client.rest - package io.confluent.security.auth.client.rest
 
io.confluent.security.auth.client.rest.entities - package io.confluent.security.auth.client.rest.entities
 
io.confluent.security.auth.client.rest.exceptions - package io.confluent.security.auth.client.rest.exceptions
 
io.confluent.security.auth.client.rest.jackson - package io.confluent.security.auth.client.rest.jackson
 
io.confluent.security.auth.common - package io.confluent.security.auth.common
 
io.confluent.security.authentication - package io.confluent.security.authentication
 
io.confluent.security.authorizer.jackson - package io.confluent.security.authorizer.jackson
 
io.confluent.security.authorizer.utils - package io.confluent.security.authorizer.utils
 
io.confluent.security.util - package io.confluent.security.util
 
IPADDRESS_FROM_LAT_INVALID - Static variable in class io.confluent.security.authentication.AuthenticationExceptionReasonCodes
 
isConfluentCert(X509Certificate, ConfluentTrustManagerHelper.AltNameDnsDomainSuffixVerifier) - Method in class io.confluent.kafka.client.plugins.ssl.ConfluentTrustManagerHelper
 
isRunning() - Method in class io.confluent.kafka.clients.plugins.auth.jwt.AsyncHttpsJwks
 
ISSUED_AT_CLAIM_NAME - Static variable in class io.confluent.kafka.clients.plugins.auth.oauth.internals.SpireJwtTokenLoginValidator
 
issuer() - Method in class io.confluent.kafka.client.plugins.ssl.CertificateId
 
issuer() - Method in class io.confluent.kafka.client.plugins.ssl.CertificateIdsJsonConfig
 
issuer() - Method in class io.confluent.kafka.clients.plugins.auth.jwt.JwtAuthenticator
 
issuer() - Method in class io.confluent.kafka.clients.plugins.auth.jwt.JwtAuthenticatorConfig
 
ISSUER_CONFIG - Static variable in class io.confluent.kafka.clients.plugins.auth.jwt.JwtAuthenticatorConfig
 
ISSUER_INVALID - Static variable in class io.confluent.security.authentication.AuthenticationExceptionReasonCodes
 

J

JKU_JWKS - Static variable in class io.confluent.kafka.clients.plugins.auth.jwt.JwtAuthenticatorConfig
 
JKU_KEY_RESOLVER_WHITELIST_CONFIG - Static variable in class io.confluent.kafka.clients.plugins.auth.jwt.JwtAuthenticatorConfig
 
JkuVerificationKeyResolver - Class in io.confluent.kafka.clients.plugins.auth.jwt
Inspired by Confluent's Schroedinger https://github.com/confluentinc/schroedinger JkuVerificationKeyResolver extracts jku from the JWT header and validates that it is from an authorized domain.
JkuVerificationKeyResolver(Collection<String>) - Constructor for class io.confluent.kafka.clients.plugins.auth.jwt.JkuVerificationKeyResolver
 
JkuVerificationKeyResolver(Collection<String>, boolean) - Constructor for class io.confluent.kafka.clients.plugins.auth.jwt.JkuVerificationKeyResolver
 
JkuVerificationKeyResolver(Function<String, AsyncHttpsJwks>, Collection<String>, boolean, boolean) - Constructor for class io.confluent.kafka.clients.plugins.auth.jwt.JkuVerificationKeyResolver
 
JsonMapper - Class in io.confluent.security.authorizer.utils
 
JsonMapper() - Constructor for class io.confluent.security.authorizer.utils.JsonMapper
 
JsonMapper.JwkJsonDeserializer - Class in io.confluent.security.authorizer.utils
 
JsonMapper.JwkJsonSerializer - Class in io.confluent.security.authorizer.utils
 
JsonMapper.JwksJsonDeserializer - Class in io.confluent.security.authorizer.utils
 
JsonStrict - Annotation Interface in io.confluent.security.authorizer.jackson
 
JTI_CLAIM_REQUIRED - Static variable in class io.confluent.kafka.clients.plugins.auth.jwt.JwtAuthenticator
 
JwkJsonDeserializer(Class<JsonWebKey>) - Constructor for class io.confluent.security.authorizer.utils.JsonMapper.JwkJsonDeserializer
 
JwkJsonSerializer(Class<JsonWebKey>) - Constructor for class io.confluent.security.authorizer.utils.JsonMapper.JwkJsonSerializer
 
JWKS_LOCATION_CONFIG - Static variable in class io.confluent.kafka.clients.plugins.auth.jwt.JwtAuthenticatorConfig
 
JWKS_PEMFILE - Static variable in class io.confluent.kafka.clients.plugins.auth.jwt.JwtAuthenticatorConfig
 
JwksJsonDeserializer(Class<JsonWebKeySet>) - Constructor for class io.confluent.security.authorizer.utils.JsonMapper.JwksJsonDeserializer
 
JWT_AUD_CLAIM_INVALID - Enum constant in enum class io.confluent.security.authentication.AuthenticationExceptionReasonCodes.ErrorTypes
 
JWT_AUD_CLAIM_MISSING - Enum constant in enum class io.confluent.security.authentication.AuthenticationExceptionReasonCodes.ErrorTypes
 
JWT_CLAIM_MALFORMED - Enum constant in enum class io.confluent.security.authentication.AuthenticationExceptionReasonCodes.ErrorTypes
 
JWT_ENCRYPTION_MISSING - Enum constant in enum class io.confluent.security.authentication.AuthenticationExceptionReasonCodes.ErrorTypes
 
JWT_EXP_CLAIM_MISSING - Enum constant in enum class io.confluent.security.authentication.AuthenticationExceptionReasonCodes.ErrorTypes
 
JWT_EXP_CLAIM_TOO_FAR_IN_FUTURE - Enum constant in enum class io.confluent.security.authentication.AuthenticationExceptionReasonCodes.ErrorTypes
 
JWT_EXPIRED - Enum constant in enum class io.confluent.security.authentication.AuthenticationExceptionReasonCodes.ErrorTypes
1-to-1 Jose4J error code mapping we should keep monitoring org.jose4j.jwt.consumer.ErrorCodes and map the codes here.
JWT_HEADER_ALG_INVALID - Enum constant in enum class io.confluent.security.authentication.AuthenticationExceptionReasonCodes.ErrorTypes
 
JWT_HEADER_JKU_INVALID - Enum constant in enum class io.confluent.security.authentication.AuthenticationExceptionReasonCodes.ErrorTypes
 
JWT_HEADER_KID_LOOKUP_FAILED - Enum constant in enum class io.confluent.security.authentication.AuthenticationExceptionReasonCodes.ErrorTypes
ErrorCodes.MISCELLANEOUS error can be broken down those codes below
JWT_IAT_CLAIM_MISSING - Enum constant in enum class io.confluent.security.authentication.AuthenticationExceptionReasonCodes.ErrorTypes
 
JWT_IAT_CLAIM_TOO_FAR_IN_FUTURE - Enum constant in enum class io.confluent.security.authentication.AuthenticationExceptionReasonCodes.ErrorTypes
 
JWT_IAT_CLAIM_TOO_FAR_IN_PAST - Enum constant in enum class io.confluent.security.authentication.AuthenticationExceptionReasonCodes.ErrorTypes
 
JWT_INTEGRITY_PROTECTION_MISSING - Enum constant in enum class io.confluent.security.authentication.AuthenticationExceptionReasonCodes.ErrorTypes
 
JWT_ISS_CLAIM_INVALID - Enum constant in enum class io.confluent.security.authentication.AuthenticationExceptionReasonCodes.ErrorTypes
 
JWT_ISS_CLAIM_LOOKUP_FAILED - Enum constant in enum class io.confluent.security.authentication.AuthenticationExceptionReasonCodes.ErrorTypes
 
JWT_ISS_CLAIM_MISSING - Enum constant in enum class io.confluent.security.authentication.AuthenticationExceptionReasonCodes.ErrorTypes
 
JWT_JTI_CLAIM_MISSING - Enum constant in enum class io.confluent.security.authentication.AuthenticationExceptionReasonCodes.ErrorTypes
 
JWT_NBF_CLAIM_MISSING - Enum constant in enum class io.confluent.security.authentication.AuthenticationExceptionReasonCodes.ErrorTypes
 
JWT_NBF_CLAIM_NOT_VALID_YET - Enum constant in enum class io.confluent.security.authentication.AuthenticationExceptionReasonCodes.ErrorTypes
 
JWT_PAYLOAD_JSON_INVALID - Enum constant in enum class io.confluent.security.authentication.AuthenticationExceptionReasonCodes.ErrorTypes
 
JWT_PROCESSING_FAILED - Enum constant in enum class io.confluent.security.authentication.AuthenticationExceptionReasonCodes.ErrorTypes
 
JWT_SIGNATURE_MISSING - Enum constant in enum class io.confluent.security.authentication.AuthenticationExceptionReasonCodes.ErrorTypes
 
JWT_SIGNATURE_VERIFICATION_FAILED - Enum constant in enum class io.confluent.security.authentication.AuthenticationExceptionReasonCodes.ErrorTypes
 
JWT_SUB_CLAIM_INVALID - Enum constant in enum class io.confluent.security.authentication.AuthenticationExceptionReasonCodes.ErrorTypes
 
JWT_SUB_CLAIM_MISSING - Enum constant in enum class io.confluent.security.authentication.AuthenticationExceptionReasonCodes.ErrorTypes
 
JWT_TYP_CLAIM_INVALID - Enum constant in enum class io.confluent.security.authentication.AuthenticationExceptionReasonCodes.ErrorTypes
 
JWT_TYP_CLAIM_MISSING - Enum constant in enum class io.confluent.security.authentication.AuthenticationExceptionReasonCodes.ErrorTypes
 
JWT_UNKNOWN_ERROR - Enum constant in enum class io.confluent.security.authentication.AuthenticationExceptionReasonCodes.ErrorTypes
 
JwtAuthenticator - Class in io.confluent.kafka.clients.plugins.auth.jwt
JwtAuthenticator validates JwtClaims returning OAuthBearerJwsToken on success.
JwtAuthenticator(JwtAuthenticatorConfig) - Constructor for class io.confluent.kafka.clients.plugins.auth.jwt.JwtAuthenticator
 
JwtAuthenticator(String, CloseableVerificationKeyResolver) - Constructor for class io.confluent.kafka.clients.plugins.auth.jwt.JwtAuthenticator
 
JwtAuthenticator(String, CloseableVerificationKeyResolver, List<String>, boolean) - Constructor for class io.confluent.kafka.clients.plugins.auth.jwt.JwtAuthenticator
 
JwtAuthenticator(String, CloseableVerificationKeyResolver, List<String>, Map<String, Boolean>) - Constructor for class io.confluent.kafka.clients.plugins.auth.jwt.JwtAuthenticator
 
JwtAuthenticatorConfig - Class in io.confluent.kafka.clients.plugins.auth.jwt
 
JwtAuthenticatorConfig(String, Map<String, ?>) - Constructor for class io.confluent.kafka.clients.plugins.auth.jwt.JwtAuthenticatorConfig
 
JwtAuthenticatorConfig(Map<String, ?>) - Constructor for class io.confluent.kafka.clients.plugins.auth.jwt.JwtAuthenticatorConfig
 
JwtBearerToken - Class in io.confluent.security.auth.common
 
JwtBearerToken(String) - Constructor for class io.confluent.security.auth.common.JwtBearerToken
 
JwtBearerToken(String, Set<String>, long, String, Long, String) - Constructor for class io.confluent.security.auth.common.JwtBearerToken
 
jwtClaims() - Method in class io.confluent.security.auth.common.JwtBearerToken
 
JwtClaimsInfo() - Constructor for class io.confluent.security.authentication.AuthenticationErrorInfo.JwtClaimsInfo
 
jwtId() - Method in class io.confluent.security.auth.common.JwtBearerToken
 
JwtUtils - Class in io.confluent.security.util
 
JwtUtils() - Constructor for class io.confluent.security.util.JwtUtils
 
JwtUtils.Error - Class in io.confluent.security.util
 
JwtUtils.ErrorInfo - Class in io.confluent.security.util
 
JwtVerificationException - Exception Class in io.confluent.kafka.clients.plugins.auth.jwt
 
JwtVerificationException(String) - Constructor for exception class io.confluent.kafka.clients.plugins.auth.jwt.JwtVerificationException
 
JwtVerificationException(String, Throwable) - Constructor for exception class io.confluent.kafka.clients.plugins.auth.jwt.JwtVerificationException
 

K

KafkaModule - Class in io.confluent.security.authorizer.jackson
 
KafkaModule() - Constructor for class io.confluent.security.authorizer.jackson.KafkaModule
 
KEY_RESOLVER_CONFIG - Static variable in class io.confluent.kafka.clients.plugins.auth.jwt.JwtAuthenticatorConfig
 

L

lifetime() - Method in class io.confluent.security.auth.client.rest.entities.AuthenticationResponse
 
lifetimeMs() - Method in class io.confluent.kafka.clients.plugins.auth.jwt.UnverifiedJwtBearerToken
 
lifetimeMs() - Method in class io.confluent.security.auth.common.JwtBearerToken
 
loadBasicAuthCredentialProvider(String) - Static method in class io.confluent.security.auth.client.provider.BuiltInAuthProviders
 
loadHttpCredentialProviders(String) - Static method in class io.confluent.security.auth.client.provider.BuiltInAuthProviders
 
loadPublicKey(String) - Static method in class io.confluent.kafka.clients.plugins.auth.jwt.PublicKeyJwks
Convert PEM encoded public key files to a PublicKey collection.
login() - Method in class io.confluent.security.auth.client.rest.RestClient
 
login(HttpCredentialProvider) - Method in class io.confluent.security.auth.client.rest.RestClient
 
login(String) - Method in class io.confluent.kafka.clients.plugins.auth.jwt.JwtAuthenticator
 
login(String) - Method in class io.confluent.security.auth.client.rest.RestClient
 
login(String, String) - Method in class io.confluent.kafka.clients.plugins.auth.jwt.JwtAuthenticator
 
login(OAuthBearerToken) - Method in class io.confluent.kafka.clients.plugins.auth.jwt.JwtAuthenticator
 

M

main(String[]) - Static method in class io.confluent.security.auth.client.RestClientConfig
 
MASTER_KEY_ENV_VAR - Static variable in class io.confluent.kafka.security.config.provider.SecurePassConfigProvider
 
message() - Method in class io.confluent.security.auth.client.rest.entities.ErrorMessage
 
message() - Method in class io.confluent.security.util.JwtUtils.Error
 
message(String) - Method in class io.confluent.security.auth.client.rest.entities.ErrorMessage
 
METADATA_KEY_LENGTH - Static variable in class io.confluent.kafka.security.config.provider.SecurePassConfigProvider
 
METADATA_PREFIX - Static variable in class io.confluent.kafka.security.config.provider.SecurePassConfigProvider
 
METADATA_SERVER_URL_FAIL_ON_401_DEFAULT - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
METADATA_SERVER_URL_FAIL_ON_401_DOC - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
METADATA_SERVER_URL_FAIL_ON_401_PROP - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
METADATA_SERVER_URL_MAX_AGE_DEFAULT - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
METADATA_SERVER_URL_MAX_AGE_DOC - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
METADATA_SERVER_URL_MAX_AGE_PROP - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
METADATA_SERVER_URL_MAX_RETRIES_DEFAULT - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
METADATA_SERVER_URL_MAX_RETRIES_DOC - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
METADATA_SERVER_URL_MAX_RETRIES_PROP - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
mkErrorInfo(AuthenticationExceptionReasonCodes.ErrorTypes, Integer, String) - Static method in class io.confluent.security.util.JwtUtils.ErrorInfo
 
mkErrorInfo(AuthenticationExceptionReasonCodes.ErrorTypes, Integer, String, List<JwtUtils.MapSource>) - Static method in class io.confluent.security.util.JwtUtils.ErrorInfo
 
mkErrorInfo(AuthenticationExceptionReasonCodes.ErrorTypes, Integer, String, Map<String, Object>, List<JwtUtils.MapSource>) - Static method in class io.confluent.security.util.JwtUtils.ErrorInfo
 
MockSpireJwtLoginCallbackHandler - Class in io.confluent.kafka.clients.plugins.auth.oauth
For testing
MockSpireJwtLoginCallbackHandler() - Constructor for class io.confluent.kafka.clients.plugins.auth.oauth.MockSpireJwtLoginCallbackHandler
 
MockSpireJwtTokenRetriever - Class in io.confluent.kafka.clients.plugins.auth.oauth
For testing
MockSpireJwtTokenRetriever(String) - Constructor for class io.confluent.kafka.clients.plugins.auth.oauth.MockSpireJwtTokenRetriever
 

N

NETWORK_ID_DISALLOWED - Static variable in class io.confluent.security.authentication.AuthenticationExceptionReasonCodes
 
NetworkLinkTrustManager - Class in io.confluent.kafka.client.plugins.ssl
 
NetworkLinkTrustManager(Map<String, ?>, X509ExtendedTrustManager) - Constructor for class io.confluent.kafka.client.plugins.ssl.NetworkLinkTrustManager
 
NetworkLinkTrustManagerFactory - Class in io.confluent.kafka.client.plugins.ssl
 
NetworkLinkTrustManagerFactory() - Constructor for class io.confluent.kafka.client.plugins.ssl.NetworkLinkTrustManagerFactory
 
newRequest(String) - Method in class io.confluent.security.auth.client.rest.RestClient
 
newThread(Runnable) - Method in class io.confluent.security.auth.client.rest.RestClientThreadFactory
 
NO_VALID_IDENTITY_POOLS_FOUND - Static variable in class io.confluent.security.authentication.AuthenticationExceptionReasonCodes
 
NO_VALID_IDENTITY_PROVIDER_FOUND - Static variable in class io.confluent.security.authentication.AuthenticationExceptionReasonCodes
 

O

OAUTH_CLIENTASSERTION_AUDIENCE - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
OAUTH_CLIENTASSERTION_AUDIENCE_DOC - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
OAUTH_CLIENTASSERTION_EXPIRATION - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
OAUTH_CLIENTASSERTION_EXPIRATION_DOC - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
OAUTH_CLIENTASSERTION_HEADER_VALUES_PATH - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
OAUTH_CLIENTASSERTION_HEADER_VALUES_PATH_DOC - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
OAUTH_CLIENTASSERTION_INCLUDE_JTI_CLAIM - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
OAUTH_CLIENTASSERTION_INCLUDE_JTI_CLAIM_DOC - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
OAUTH_CLIENTASSERTION_INCLUDE_NBF_CLAIM - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
OAUTH_CLIENTASSERTION_INCLUDE_NBF_CLAIM_DOC - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
OAUTH_CLIENTASSERTION_ISSUER - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
OAUTH_CLIENTASSERTION_ISSUER_DOC - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
OAUTH_CLIENTASSERTION_LOCATION - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
OAUTH_CLIENTASSERTION_LOCATION_DOC - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
OAUTH_CLIENTASSERTION_PRIVATE_KEY - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
OAUTH_CLIENTASSERTION_PRIVATE_KEY_DOC - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
OAUTH_CLIENTASSERTION_PRIVATE_KEY_PASSPHRASE - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
OAUTH_CLIENTASSERTION_PRIVATE_KEY_PASSPHRASE_DOC - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
OAUTH_CLIENTASSERTION_SUBJECT - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
OAUTH_CLIENTASSERTION_SUBJECT_DOC - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
OAUTH_CONFIG_PREFIX - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
OAUTH_HEADER_URLENCODE - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
OAUTH_HEADER_URLENCODE_MS_DOC - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
OAUTH_JWKS_ENDPOINT - Static variable in class io.confluent.security.util.JwtUtils
 
OAUTH_LOGIN_CLIENT_ID - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
OAUTH_LOGIN_CLIENT_ID_MS_DOC - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
OAUTH_LOGIN_CLIENT_SCOPE - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
OAUTH_LOGIN_CLIENT_SCOPE_MS_DOC - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
OAUTH_LOGIN_CLIENT_SECRET - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
OAUTH_LOGIN_CLIENT_SECRET_MS_DOC - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
OAUTH_LOGIN_CONNECT_TIMEOUT_MS - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
OAUTH_LOGIN_CONNECT_TIMEOUT_MS_DOC - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
OAUTH_LOGIN_READ_TIMEOUT_MS - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
OAUTH_LOGIN_READ_TIMEOUT_MS_DOC - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
OAUTH_LOGIN_RETRY_BACKOFF_MAX_MS - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
OAUTH_LOGIN_RETRY_BACKOFF_MAX_MS_DOC - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
OAUTH_LOGIN_RETRY_BACKOFF_MS - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
OAUTH_LOGIN_RETRY_BACKOFF_MS_DOC - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
OAUTH_ORG_ID - Static variable in class io.confluent.security.util.JwtUtils
 
OAUTH_POOL_ID - Static variable in class io.confluent.security.util.JwtUtils
 
OAUTH_PRINCIPALS - Static variable in class io.confluent.kafka.common.multitenant.oauth.OauthMayActClaim
 
OAUTH_PROVIDER_ID - Static variable in class io.confluent.security.util.JwtUtils
 
OAUTH_TOKEN_ENDPOINT_URL - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
OAUTH_TOKEN_ENDPOINT_URL_DOC - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
OAUTH_UNION_OF_POOLS_FLOW - Static variable in class io.confluent.security.util.JwtUtils
 
OAUTHBEARER - Enum constant in enum class io.confluent.security.auth.client.provider.BuiltInAuthProviders.HttpCredentialProviders
 
OAuthBearerLoginCallbackHandler - Class in io.confluent.kafka.clients.plugins.auth.oauth
A CallbackHandler that recognizes OAuthBearerTokenCallback and retrieves OAuth 2 Bearer Token that was provided via the JAAS config.
OAuthBearerLoginCallbackHandler() - Constructor for class io.confluent.kafka.clients.plugins.auth.oauth.OAuthBearerLoginCallbackHandler
 
OauthMayActClaim - Class in io.confluent.kafka.common.multitenant.oauth
 
objectMapper() - Static method in class io.confluent.security.authorizer.utils.JsonMapper
 
ORG_ID_CLUSTER_ID_MISMATCH - Static variable in class io.confluent.security.authentication.AuthenticationExceptionReasonCodes
 
ORG_ID_POOL_FILTER_MISMATCH - Static variable in class io.confluent.security.authentication.AuthenticationExceptionReasonCodes
 

P

PemKey - Class in io.confluent.kafka.security
Utility class for reading PEM encoded objects.
PemKey() - Constructor for class io.confluent.kafka.security.PemKey
 
POOL_PROVIDER_LIST_MISMATCH - Static variable in class io.confluent.security.authentication.AuthenticationExceptionReasonCodes
 
principalName() - Method in class io.confluent.kafka.clients.plugins.auth.jwt.UnverifiedJwtBearerToken
 
principalName() - Method in class io.confluent.security.auth.common.JwtBearerToken
 
principals() - Method in class io.confluent.kafka.common.multitenant.oauth.OauthMayActClaim
 
PROVIDER_NAME - Static variable in class io.confluent.kafka.client.plugins.ssl.ConfluentTrustProvider
 
providerName() - Method in class io.confluent.kafka.clients.plugins.auth.http.FileBasedDynamicBasicAuthCredentialProvider
 
providerName() - Method in interface io.confluent.security.auth.client.provider.BasicAuthCredentialProvider
Returns the name of this provider.
PublicKeyJwks - Class in io.confluent.kafka.clients.plugins.auth.jwt
PublicKeyJwks converts PublicKeys files into a JsonWebKey collection.
PublicKeyJwks(Collection<PublicKey>) - Constructor for class io.confluent.kafka.clients.plugins.auth.jwt.PublicKeyJwks
 
PublicKeyVerificationKeyResolver - Class in io.confluent.kafka.clients.plugins.auth.jwt
PublicKeyKeyVerificationKeyResolver maintains a static JsonWebKeySet.
PublicKeyVerificationKeyResolver(PublicKeyJwks) - Constructor for class io.confluent.kafka.clients.plugins.auth.jwt.PublicKeyVerificationKeyResolver
 
PublicKeyVerificationKeyResolver(List<JsonWebKey>) - Constructor for class io.confluent.kafka.clients.plugins.auth.jwt.PublicKeyVerificationKeyResolver
 

R

readKeyPair(Reader) - Static method in class io.confluent.kafka.security.PemKey
 
readKeyPair(String) - Static method in class io.confluent.kafka.security.PemKey
 
readKeyPair(Path) - Static method in class io.confluent.kafka.security.PemKey
 
readPrivateKey(Reader) - Static method in class io.confluent.kafka.security.PemKey
 
readPrivateKey(String) - Static method in class io.confluent.kafka.security.PemKey
 
readPrivateKey(Path) - Static method in class io.confluent.kafka.security.PemKey
 
readPublicKey(Reader) - Static method in class io.confluent.kafka.security.PemKey
 
readPublicKey(String) - Static method in class io.confluent.kafka.security.PemKey
 
readPublicKey(Path) - Static method in class io.confluent.kafka.security.PemKey
 
reasonCode() - Method in exception class io.confluent.security.authentication.AuthenticationException
 
reasonCode() - Method in class io.confluent.security.util.JwtUtils.ErrorInfo
 
refresh() - Method in class io.confluent.kafka.clients.plugins.auth.jwt.AsyncHttpsJwks
 
RefreshingAccessTokenRetriever - Class in io.confluent.security.auth.client.oauth
Implementation of AccessTokenReceiver which refreshes the token after 80% of its lifetime is complete.
RefreshingAccessTokenRetriever(JwtRetriever) - Constructor for class io.confluent.security.auth.client.oauth.RefreshingAccessTokenRetriever
 
relatedClaims(String, Object) - Method in class io.confluent.security.util.JwtUtils.ErrorInfo
 
relatedClaims(Map.Entry<String, Object>) - Method in class io.confluent.security.util.JwtUtils.ErrorInfo
 
REQ_ID - Static variable in class io.confluent.security.util.SecurityContext
 
REQUEST_TIMEOUT_MS_CONFIG - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
REQUEST_TIMEOUT_MS_DOC - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
RequestSender - Interface in io.confluent.security.auth.client.rest
 
resolve(String) - Method in class io.confluent.kafka.clients.plugins.auth.oauth.FilteringDnsResolver
 
resolveCanonicalHostname(String) - Method in class io.confluent.kafka.clients.plugins.auth.oauth.FilteringDnsResolver
 
resolveKey(JsonWebSignature, List<JsonWebStructure>) - Method in class io.confluent.kafka.clients.plugins.auth.jwt.AsyncHttpsJwksVerificationKeyResolver
 
resolveKey(JsonWebSignature, List<JsonWebStructure>) - Method in class io.confluent.kafka.clients.plugins.auth.jwt.JkuVerificationKeyResolver
 
resolveKey(JsonWebSignature, List<JsonWebStructure>) - Method in class io.confluent.kafka.clients.plugins.auth.jwt.PublicKeyVerificationKeyResolver
 
RestClient - Class in io.confluent.security.auth.client.rest
Rest client for sending RBAC requests to the metadata service.
RestClient(Map<String, ?>) - Constructor for class io.confluent.security.auth.client.rest.RestClient
 
RestClient(Map<String, ?>, Time) - Constructor for class io.confluent.security.auth.client.rest.RestClient
 
RestClientConfig - Class in io.confluent.security.auth.client
 
RestClientConfig(Map<?, ?>) - Constructor for class io.confluent.security.auth.client.RestClientConfig
 
RestClientException - Exception Class in io.confluent.security.auth.client.rest.exceptions
 
RestClientException(String, int, int) - Constructor for exception class io.confluent.security.auth.client.rest.exceptions.RestClientException
 
RestClientThreadFactory - Class in io.confluent.security.auth.client.rest
 
RestRequest - Class in io.confluent.security.auth.client.rest
 
resultMap - Variable in class io.confluent.security.auth.client.rest.entities.CreateAclsResult
 
resultMap - Variable in class io.confluent.security.auth.client.rest.entities.DeleteAclsResult
 
retrieve() - Method in class io.confluent.kafka.clients.plugins.auth.oauth.ClusterLinkHttpAccessTokenRetriever
 
retrieve() - Method in class io.confluent.kafka.clients.plugins.auth.oauth.internals.SpireJwtTokenRetriever
 
retrieve() - Method in class io.confluent.kafka.clients.plugins.auth.oauth.MockSpireJwtTokenRetriever
 
retrieve() - Method in class io.confluent.security.auth.client.oauth.RefreshingAccessTokenRetriever
 
retrieve() - Method in class io.confluent.security.auth.client.oauth.UamiJwtRetriever
Retrieves a JWT token in its serialized form.
revokedCertificateIds(Map<String, ?>) - Static method in class io.confluent.kafka.client.plugins.ssl.ConfluentTrustManagerHelper
 
round() - Method in class io.confluent.security.auth.client.rest.UrlSelector
0-index "round" number we are on.

S

sanitizeClaims() - Method in class io.confluent.kafka.clients.plugins.auth.entities.SanitizeTokenRequest
 
SanitizeTokenRequest - Class in io.confluent.kafka.clients.plugins.auth.entities
Class for making a sanitize request.
SanitizeTokenRequest(String, Collection<String>) - Constructor for class io.confluent.kafka.clients.plugins.auth.entities.SanitizeTokenRequest
 
SASL_OAUTHBEARER_TOKEN_SPIRE_AGENT_ENDPOINT - Static variable in class io.confluent.kafka.clients.plugins.auth.oauth.SpireJwtLoginCallbackHandler
 
saslClientConfigs() - Method in class io.confluent.security.auth.client.RestClientConfig
 
scope - Variable in class io.confluent.security.auth.client.rest.entities.AclFilter
 
scope - Variable in class io.confluent.security.auth.client.rest.entities.CreateAclRequest
 
scope - Variable in class io.confluent.security.auth.client.rest.entities.CreateAclsRequest
 
scope - Variable in class io.confluent.security.auth.client.rest.entities.DeleteAclsRequest
 
scope() - Method in class io.confluent.kafka.clients.plugins.auth.jwt.UnverifiedJwtBearerToken
 
scope() - Method in class io.confluent.security.auth.common.JwtBearerToken
 
SecurePassConfigProvider - Class in io.confluent.kafka.security.config.provider
An implementation of ConfigProvider that represents a Properties file.
SecurePassConfigProvider() - Constructor for class io.confluent.kafka.security.config.provider.SecurePassConfigProvider
 
SecurityContext - Class in io.confluent.security.util
 
SecurityContext() - Constructor for class io.confluent.security.util.SecurityContext
 
send(RestRequest, long) - Method in interface io.confluent.security.auth.client.rest.RequestSender
 
sendRequest(RestRequest) - Method in class io.confluent.security.auth.client.rest.RestClient
 
serialize(AclBindingFilter, JsonGenerator, SerializerProvider) - Method in class io.confluent.security.auth.client.rest.jackson.AclBindingFilterMapKeySerializer
 
serialize(AclBinding, JsonGenerator, SerializerProvider) - Method in class io.confluent.security.auth.client.rest.jackson.AclBindingMapKeySerializer
 
serialize(JsonWebKey, JsonGenerator, SerializerProvider) - Method in class io.confluent.security.authorizer.utils.JsonMapper.JwkJsonSerializer
 
serialNumber() - Method in class io.confluent.kafka.client.plugins.ssl.CertificateId
 
serialNumbers() - Method in class io.confluent.kafka.client.plugins.ssl.CertificateIdsJsonConfig
 
setCredentialProvider(HttpCredentialProvider) - Method in class io.confluent.security.auth.client.rest.RestClient
 
setCredentialProvider(HttpCredentialProvider) - Method in class io.confluent.security.auth.client.rest.RestRequest
 
setPath(String) - Method in class io.confluent.security.auth.client.rest.RestRequest
 
setRequest(Object) - Method in class io.confluent.security.auth.client.rest.RestRequest
 
setRequestMethod(String) - Method in class io.confluent.security.auth.client.rest.RestRequest
 
setResponse(TypeReference) - Method in class io.confluent.security.auth.client.rest.RestRequest
 
size() - Method in class io.confluent.security.auth.client.rest.UrlSelector
 
SNI_ID_CLUSTER_ID_MISMATCH - Static variable in class io.confluent.security.authentication.AuthenticationExceptionReasonCodes
 
SpireJwtLoginCallbackHandler - Class in io.confluent.kafka.clients.plugins.auth.oauth
A CallbackHandler that recognizes OAuthBearerTokenCallback and retrieves SPIFFE JWT from Spire Agent that is running at the endpoint provided via the sasl.oauthbearer.token.spire.agent.endpoint.
SpireJwtLoginCallbackHandler() - Constructor for class io.confluent.kafka.clients.plugins.auth.oauth.SpireJwtLoginCallbackHandler
 
SpireJwtTokenLoginValidator - Class in io.confluent.kafka.clients.plugins.auth.oauth.internals
A JwtValidator that does basic validation of the JWT retrieved from the Spire Agent.
SpireJwtTokenLoginValidator() - Constructor for class io.confluent.kafka.clients.plugins.auth.oauth.internals.SpireJwtTokenLoginValidator
 
SpireJwtTokenRetriever - Class in io.confluent.kafka.clients.plugins.auth.oauth.internals
A JwtRetriever that retrieves the JWT SVID from the Spire agent
SpireJwtTokenRetriever(String, String) - Constructor for class io.confluent.kafka.clients.plugins.auth.oauth.internals.SpireJwtTokenRetriever
 
sslClientConfigs() - Method in class io.confluent.security.auth.client.RestClientConfig
 
startTimeMs() - Method in class io.confluent.kafka.clients.plugins.auth.jwt.UnverifiedJwtBearerToken
 
startTimeMs() - Method in class io.confluent.security.auth.common.JwtBearerToken
 
status() - Method in exception class io.confluent.security.auth.client.rest.exceptions.RestClientException
 
strVal(String, String) - Method in class io.confluent.security.util.SecurityContext
 
strVal(String, String, boolean) - Method in class io.confluent.security.util.SecurityContext
 
SUBJECT_CLAIM_NAME - Static variable in class io.confluent.kafka.clients.plugins.auth.oauth.internals.SpireJwtTokenLoginValidator
 
success - Variable in class io.confluent.security.auth.client.rest.entities.CreateAclsResult.CreateResult
 
success - Variable in class io.confluent.security.auth.client.rest.entities.DeleteAclsResult.DeleteResult
 
success(Collection<AclBinding>) - Static method in class io.confluent.security.auth.client.rest.entities.DeleteAclsResult
 
SUCCESS - Static variable in class io.confluent.security.auth.client.rest.entities.CreateAclsResult
 

T

toByteArray(Object) - Static method in class io.confluent.security.authorizer.utils.JsonMapper
 
toByteBuffer(Object) - Static method in class io.confluent.security.authorizer.utils.JsonMapper
 
toJson(CertificateIdsJsonConfig[]) - Static method in class io.confluent.kafka.client.plugins.ssl.CertificateIdsJsonConfig
 
TOKEN_AUTH_CREDENTIAL_PROP - Static variable in class io.confluent.security.auth.client.RestClientConfig
 
TOKEN_ISSUER_CLAIM_ABSENT - Static variable in class io.confluent.security.authentication.AuthenticationExceptionReasonCodes
 
TOKEN_ISSUER_CLAIM_UNRECOGNIZED - Static variable in class io.confluent.security.authentication.AuthenticationExceptionReasonCodes
 
TOKEN_PROCESSING_FAILURE - Static variable in class io.confluent.security.authentication.AuthenticationExceptionReasonCodes
 
TOKEN_VALUE_ABSENT - Static variable in class io.confluent.security.authentication.AuthenticationExceptionReasonCodes
 
TokenBearerLoginCallbackHandler - Class in io.confluent.kafka.clients.plugins.auth.token
A CallbackHandler for the OAuthBearerLoginModule.
TokenBearerLoginCallbackHandler() - Constructor for class io.confluent.kafka.clients.plugins.auth.token.TokenBearerLoginCallbackHandler
 
TokenCertificateLoginCallbackHandler - Class in io.confluent.kafka.clients.plugins.auth.token
A CallbackHandler for the OAuthBearerLoginModule.
TokenCertificateLoginCallbackHandler() - Constructor for class io.confluent.kafka.clients.plugins.auth.token.TokenCertificateLoginCallbackHandler
 
tokenType() - Method in class io.confluent.security.auth.client.rest.entities.AuthenticationResponse
 
TokenUserLoginCallbackHandler - Class in io.confluent.kafka.clients.plugins.auth.token
A CallbackHandler for the OAuthBearerLoginModule.
TokenUserLoginCallbackHandler() - Constructor for class io.confluent.kafka.clients.plugins.auth.token.TokenUserLoginCallbackHandler
 
toString() - Method in class io.confluent.kafka.client.plugins.ssl.CertificateId
 
toString() - Method in class io.confluent.security.auth.client.rest.entities.AclFilter
 
toString() - Method in class io.confluent.security.auth.client.rest.entities.CreateAclRequest
 
toString() - Method in class io.confluent.security.auth.client.rest.entities.CreateAclsRequest
 
toString() - Method in class io.confluent.security.auth.client.rest.entities.CreateAclsResult.CreateResult
 
toString() - Method in class io.confluent.security.auth.client.rest.entities.CreateAclsResult
 
toString() - Method in class io.confluent.security.auth.client.rest.entities.DeleteAclsRequest
 
toString() - Method in class io.confluent.security.auth.client.rest.entities.DeleteAclsResult.DeleteResult
 
toString() - Method in class io.confluent.security.auth.client.rest.entities.DeleteAclsResult
 
toString() - Method in class io.confluent.security.auth.client.rest.UrlSelector
 
toString() - Method in class io.confluent.security.auth.client.RestClientConfig
 
toString() - Method in enum class io.confluent.security.authentication.AuthenticationExceptionReasonCodes.ErrorTypes
 
toString() - Method in class io.confluent.security.util.JwtUtils.Error
 
toString() - Method in class io.confluent.security.util.JwtUtils.ErrorInfo
 
TRUST_PROVIDER_CONFIG - Static variable in class io.confluent.kafka.client.plugins.ssl.ConfluentTrustProvider
 
typeVal(String, Class<T>, T) - Method in class io.confluent.security.util.SecurityContext
 

U

UamiJwtRetriever - Class in io.confluent.security.auth.client.oauth
This class implements a JwtRetriever for Azure UAMI.
UamiJwtRetriever() - Constructor for class io.confluent.security.auth.client.oauth.UamiJwtRetriever
 
UamiJwtRetriever(Time, HttpClient) - Constructor for class io.confluent.security.auth.client.oauth.UamiJwtRetriever
 
UnverifiedJwtBearerToken - Class in io.confluent.kafka.clients.plugins.auth.jwt
 
UnverifiedJwtBearerToken(String) - Constructor for class io.confluent.kafka.clients.plugins.auth.jwt.UnverifiedJwtBearerToken
 
updateBearerCredential(String) - Static method in class io.confluent.kafka.clients.plugins.auth.oauth.MockSpireJwtTokenRetriever
 
UrlSelector - Class in io.confluent.security.auth.client.rest
 
UrlSelector(List<String>) - Constructor for class io.confluent.security.auth.client.rest.UrlSelector
 
USER_INFO - Enum constant in enum class io.confluent.security.auth.client.provider.BuiltInAuthProviders.BasicAuthCredentialProviders
 

V

validate(String) - Method in class io.confluent.kafka.clients.plugins.auth.oauth.internals.SpireJwtTokenLoginValidator
 
validateFipsBrokerProtocol(Map<String, SecurityProtocol>) - Method in class io.confluent.kafka.security.fips.ConfluentFipsValidator
Validate broker protocol, make sure broker uses either SSL or SASL_SSL protocol.
validateFipsLdapProtocol(String) - Method in class io.confluent.kafka.security.fips.ConfluentFipsValidator
Validate LDAP protocol, make sure only LDAPS protocol is used in all provider URLs.
validateFipsTls(Map<String, ?>) - Method in class io.confluent.kafka.security.fips.ConfluentFipsValidator
Validate FIPS requirements on cipher suites, TLS protocols versions.
validateFipsTlsCipherSuite(Collection<String>) - Method in class io.confluent.kafka.security.fips.ConfluentFipsValidator
Validate cipher suites are FIPS compliant or not.
validateFipsTlsCipherSuite(Map<String, ?>) - Method in class io.confluent.kafka.security.fips.ConfluentFipsValidator
Validate cipher suites are FIPS compliant or not.
validateFipsTlsVersion(Collection<String>) - Method in class io.confluent.kafka.security.fips.ConfluentFipsValidator
Validate TLS versions are FIPS compliant or not.
validateFipsTlsVersion(Map<String, ?>) - Method in class io.confluent.kafka.security.fips.ConfluentFipsValidator
Validate TLS versions are FIPS compliant or not.
validateHaveCredentials(Map<String, String>, Map<String, ?>) - Method in class io.confluent.kafka.clients.plugins.auth.token.AbstractTokenLoginCallbackHandler
 
validateHaveCredentials(Map<String, String>, Map<String, ?>) - Method in class io.confluent.kafka.clients.plugins.auth.token.TokenBearerLoginCallbackHandler
 
validateHaveCredentials(Map<String, String>, Map<String, ?>) - Method in class io.confluent.kafka.clients.plugins.auth.token.TokenCertificateLoginCallbackHandler
 
validateHaveCredentials(Map<String, String>, Map<String, ?>) - Method in class io.confluent.kafka.clients.plugins.auth.token.TokenUserLoginCallbackHandler
 
validateRestProtocol(String) - Method in class io.confluent.kafka.security.fips.ConfluentFipsValidator
Validate rest server protocol, make sure connect uses https protocol.
value() - Method in class io.confluent.kafka.clients.plugins.auth.jwt.UnverifiedJwtBearerToken
 
value() - Method in class io.confluent.security.auth.common.JwtBearerToken
 
valueOf(String) - Static method in enum class io.confluent.security.auth.client.provider.BuiltInAuthProviders.BasicAuthCredentialProviders
Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class io.confluent.security.auth.client.provider.BuiltInAuthProviders.HttpCredentialProviders
Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class io.confluent.security.authentication.AuthenticationExceptionReasonCodes.ErrorTypes
Returns the enum constant of this class with the specified name.
values() - Static method in enum class io.confluent.security.auth.client.provider.BuiltInAuthProviders.BasicAuthCredentialProviders
Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class io.confluent.security.auth.client.provider.BuiltInAuthProviders.HttpCredentialProviders
Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class io.confluent.security.authentication.AuthenticationExceptionReasonCodes.ErrorTypes
Returns an array containing the constants of this enum class, in the order they are declared.
VERIFICATION_KEY_REFRESH_INTERVAL_MS_CONFIG - Static variable in class io.confluent.kafka.clients.plugins.auth.jwt.JwtAuthenticatorConfig
 
verificationKeyResolver() - Method in class io.confluent.kafka.clients.plugins.auth.jwt.JwtAuthenticatorConfig
 
verify(String) - Method in interface io.confluent.kafka.client.plugins.ssl.ConfluentTrustManagerHelper.AltNameDnsDomainSuffixVerifier
 
verifyClientCerts(X509Certificate[]) - Method in class io.confluent.kafka.client.plugins.ssl.ConfluentTrustManager
 
verifyClientCerts(X509Certificate[], ConfluentTrustManagerHelper.AltNameDnsDomainSuffixVerifier) - Method in class io.confluent.kafka.client.plugins.ssl.ConfluentTrustManagerHelper
 
verifyServerCerts(X509Certificate[]) - Method in class io.confluent.kafka.client.plugins.ssl.ConfluentTrustManager
 
verifyServerCerts(X509Certificate[], ConfluentTrustManagerHelper.AltNameDnsDomainSuffixVerifier) - Method in class io.confluent.kafka.client.plugins.ssl.ConfluentTrustManagerHelper
 
A B C D E F G H I J K L M N O P R S T U V 
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form