Package io.confluent.kafka.schemaregistry.encryption.local

Class LocalKmsClient

java.lang.Object

io.confluent.kafka.schemaregistry.encryption.local.LocalKmsClient

All Implemented Interfaces:

com.google.crypto.tink.KmsClient

public final class LocalKmsClient
extends Object
implements com.google.crypto.tink.KmsClient

An implementation of local KmsClient for testing.

Field Summary

Fields

Modifier and Type	Field	Description
static final String	PREFIX	The prefix of all keys stored in Local KMS.

Constructor Summary

Constructors

Constructor	Description
LocalKmsClient(String uri, String secret)

Method Summary

Modifier and Type	Method	Description
boolean	doesSupport(String uri)
com.google.crypto.tink.Aead	getAead(String uri)
com.google.crypto.tink.KmsClient	withCredentials(String credentialPath)	Loads credentials from a properties file.
com.google.crypto.tink.KmsClient	withDefaultCredentials()	Loads default credentials.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

PREFIX

public static final String PREFIX

The prefix of all keys stored in Local KMS.

See Also:

• Constant Field Values

Constructor Details

LocalKmsClient

public LocalKmsClient(String uri,
 String secret)
               throws GeneralSecurityException

Throws:

GeneralSecurityException

Method Details

doesSupport

public boolean doesSupport(String uri)

Specified by:

doesSupport in interface com.google.crypto.tink.KmsClient

Returns:

true either if this client is a generic one and uri starts with PREFIX, or the client is a specific one that is bound to the key identified by uri.

withCredentials

@CanIgnoreReturnValue
public com.google.crypto.tink.KmsClient withCredentials(String credentialPath)
                                                 throws GeneralSecurityException

Loads credentials from a properties file.

Specified by:

withCredentials in interface com.google.crypto.tink.KmsClient

Throws:

GeneralSecurityException - if the client initialization fails

withDefaultCredentials

@CanIgnoreReturnValue
public com.google.crypto.tink.KmsClient withDefaultCredentials()
                                                        throws GeneralSecurityException

Loads default credentials.

Specified by:

withDefaultCredentials in interface com.google.crypto.tink.KmsClient

Throws:

GeneralSecurityException - if the client initialization fails

getAead

public com.google.crypto.tink.Aead getAead(String uri)
                                    throws GeneralSecurityException

Specified by:

getAead in interface com.google.crypto.tink.KmsClient

Throws:

GeneralSecurityException