Package | Description |
---|---|
org.springframework.vault.authentication |
Support for authentication and session management.
|
org.springframework.vault.authentication.event |
Support classes for authentication application events.
|
org.springframework.vault.client |
Spring Vault Client abstraction.
|
org.springframework.vault.core |
Vault core support.
|
org.springframework.vault.support |
Classes supporting the Vault packages, such as value objects.
|
Modifier and Type | Class and Description |
---|---|
class |
LoginToken
Value object for a Vault token obtained by a login method.
|
Modifier and Type | Method and Description |
---|---|
VaultToken |
CubbyholeAuthenticationOptions.getInitialToken() |
VaultToken |
AppRoleAuthenticationOptions.getInitialToken()
Deprecated.
since 2.0, use
AppRoleAuthenticationOptions.getRoleId() /AppRoleAuthenticationOptions.getSecretId() to obtain
configuration modes (pull/wrapped) for an AppRole token. |
VaultToken |
SessionManager.getSessionToken()
Obtain a session token.
|
VaultToken |
SimpleSessionManager.getSessionToken() |
VaultToken |
LifecycleAwareSessionManager.getSessionToken() |
VaultToken |
LifecycleAwareSessionManager.TokenWrapper.getToken() |
VaultToken |
ReactiveLifecycleAwareSessionManager.TokenWrapper.getToken() |
VaultToken |
AuthenticationStepsExecutor.login() |
VaultToken |
ClientCertificateAuthentication.login() |
VaultToken |
AwsIamAuthentication.login() |
VaultToken |
AppIdAuthentication.login()
Deprecated.
|
VaultToken |
GcpIamAuthentication.login()
Deprecated.
|
VaultToken |
TokenAuthentication.login() |
VaultToken |
PcfAuthentication.login() |
VaultToken |
AwsEc2Authentication.login() |
VaultToken |
KubernetesAuthentication.login() |
VaultToken |
AzureMsiAuthentication.login() |
VaultToken |
UsernamePasswordAuthentication.login() |
VaultToken |
GcpIamCredentialsAuthentication.login() |
VaultToken |
GcpComputeAuthentication.login() |
VaultToken |
CubbyholeAuthentication.login() |
protected VaultToken |
LifecycleAwareSessionManager.login() |
VaultToken |
AppRoleAuthentication.login() |
VaultToken |
ClientAuthentication.login()
Return a
VaultToken . |
Modifier and Type | Method and Description |
---|---|
default Mono<VaultToken> |
ReactiveSessionManager.getSessionToken()
Obtain a session token.
|
Mono<VaultToken> |
CachingVaultTokenSupplier.getVaultToken() |
Mono<VaultToken> |
VaultTokenSupplier.getVaultToken()
Return a
VaultToken . |
Mono<VaultToken> |
AuthenticationStepsOperator.getVaultToken() |
Mono<VaultToken> |
ReactiveLifecycleAwareSessionManager.getVaultToken() |
Mono<VaultToken> |
ReactiveLifecycleAwareSessionManager.renewToken()
Performs a token refresh.
|
Modifier and Type | Method and Description |
---|---|
static AuthenticationSteps |
TokenAuthentication.createAuthenticationSteps(VaultToken token,
boolean selfLookup)
Creates a
AuthenticationSteps for token authentication given
VaultToken . |
CubbyholeAuthenticationOptions.CubbyholeAuthenticationOptionsBuilder |
CubbyholeAuthenticationOptions.CubbyholeAuthenticationOptionsBuilder.initialToken(VaultToken initialToken)
Configure the initial
VaultToken to access Cubbyhole. |
AppRoleAuthenticationOptions.AppRoleAuthenticationOptionsBuilder |
AppRoleAuthenticationOptions.AppRoleAuthenticationOptionsBuilder.initialToken(VaultToken initialToken)
|
protected boolean |
ReactiveLifecycleAwareSessionManager.isTokenRenewable(VaultToken token) |
static AuthenticationSteps |
AuthenticationSteps.just(VaultToken token)
Create a flow definition using a provided
VaultToken . |
static AppRoleAuthenticationOptions.RoleId |
AppRoleAuthenticationOptions.RoleId.pull(VaultToken initialToken)
Create a
AppRoleAuthenticationOptions.RoleId that obtains its value using pull-mode, specifying a
initial token . |
static AppRoleAuthenticationOptions.SecretId |
AppRoleAuthenticationOptions.SecretId.pull(VaultToken initialToken)
Create a
AppRoleAuthenticationOptions.SecretId that obtains its value using pull-mode, specifying a
initial token . |
static LoginToken |
LoginToken.renewable(VaultToken token,
Duration leaseDuration)
Create a new renewable
LoginToken with a leaseDurationSeconds . |
protected void |
LifecycleAwareSessionManager.revoke(VaultToken token)
Revoke a
VaultToken . |
protected Mono<Void> |
ReactiveLifecycleAwareSessionManager.revoke(VaultToken token)
Revoke a
VaultToken . |
static AppRoleAuthenticationOptions.RoleId |
AppRoleAuthenticationOptions.RoleId.wrapped(VaultToken initialToken)
Create a
AppRoleAuthenticationOptions.RoleId object that obtains its value from unwrapping a
response using the initial token from a Cubbyhole. |
static AppRoleAuthenticationOptions.SecretId |
AppRoleAuthenticationOptions.SecretId.wrapped(VaultToken initialToken)
Create a
AppRoleAuthenticationOptions.SecretId object that obtains its value from unwrapping a
response using the initial token from a Cubbyhole. |
Modifier and Type | Method and Description |
---|---|
AuthenticationSteps |
AuthenticationSteps.Node.login(Function<? super T,? extends VaultToken> mappingFunction)
|
Constructor and Description |
---|
TokenAuthentication(VaultToken token)
Create a new
TokenAuthentication with a static token . |
TokenWrapper(VaultToken token,
boolean revocable) |
Modifier and Type | Method and Description |
---|---|
VaultToken |
LoginTokenRevocationFailedEvent.getSource() |
VaultToken |
LoginTokenRenewalFailedEvent.getSource() |
VaultToken |
AuthenticationEvent.getSource() |
Constructor and Description |
---|
AfterLoginEvent(VaultToken source)
Create a new
AfterLoginEvent given VaultToken . |
AfterLoginTokenRenewedEvent(VaultToken source)
Create a new
AfterLoginTokenRenewedEvent given VaultToken . |
AfterLoginTokenRevocationEvent(VaultToken source)
Create a new
AfterLoginTokenRevocationEvent given VaultToken . |
AuthenticationEvent(VaultToken source)
Create a new
AuthenticationEvent given VaultToken . |
BeforeLoginTokenRenewedEvent(VaultToken source)
Create a new
BeforeLoginTokenRenewedEvent given VaultToken . |
BeforeLoginTokenRevocationEvent(VaultToken source)
Create a new
BeforeLoginTokenRevocationEvent given VaultToken . |
LoginTokenExpiredEvent(VaultToken source)
Create a new
LoginTokenExpiredEvent given VaultToken . |
LoginTokenRenewalFailedEvent(VaultToken source,
Throwable exception)
|
LoginTokenRevocationFailedEvent(VaultToken source,
Throwable exception)
|
Modifier and Type | Method and Description |
---|---|
static HttpHeaders |
VaultHttpHeaders.from(VaultToken vaultToken)
Create
HttpHeaders given VaultToken . |
Modifier and Type | Method and Description |
---|---|
WrappedMetadata |
VaultWrappingTemplate.lookup(VaultToken token) |
WrappedMetadata |
VaultWrappingOperations.lookup(VaultToken token)
Looks up
metadata for the given token containing a wrapped
response. |
VaultResponse |
VaultWrappingTemplate.read(VaultToken token) |
VaultResponse |
VaultWrappingOperations.read(VaultToken token)
Read a wrapped secret.
|
<T> VaultResponseSupport<T> |
VaultWrappingTemplate.read(VaultToken token,
Class<T> responseType) |
<T> VaultResponseSupport<T> |
VaultWrappingOperations.read(VaultToken token,
Class<T> responseType)
Read a wrapped secret of type
responseType . |
VaultTokenResponse |
VaultTokenOperations.renew(VaultToken vaultToken)
Renew a
VaultToken . |
VaultTokenResponse |
VaultTokenTemplate.renew(VaultToken vaultToken) |
void |
VaultTokenOperations.revoke(VaultToken vaultToken)
Revoke a
VaultToken . |
void |
VaultTokenTemplate.revoke(VaultToken vaultToken) |
void |
VaultTokenOperations.revokeOrphan(VaultToken vaultToken)
Revoke a
VaultToken but not its child tokens. |
void |
VaultTokenTemplate.revokeOrphan(VaultToken vaultToken) |
WrappedMetadata |
VaultWrappingTemplate.rewrap(VaultToken token) |
WrappedMetadata |
VaultWrappingOperations.rewrap(VaultToken token)
Rewraps a response-wrapped token.
|
Modifier and Type | Method and Description |
---|---|
VaultToken |
VaultInitializationResponse.getRootToken() |
VaultToken |
VaultTokenResponse.getToken()
Return a
VaultToken from the VaultResponse . |
VaultToken |
WrappedMetadata.getToken() |
static VaultToken |
VaultToken.of(char[] token)
Create a new
VaultToken . |
static VaultToken |
VaultToken.of(String token)
Create a new
VaultToken . |
Constructor and Description |
---|
WrappedMetadata(VaultToken token,
Duration ttl,
Instant creationTime,
String path)
Creates a new
WrappedMetadata . |
Copyright © 2016–2022 Pivotal Software, Inc.. All rights reserved.