All Classes and Interfaces
Class
Description
Base class for Spring Vault configuration using JavaConfig for a reactive
infrastructure.
Supporting class for computation results allowing introspection of the result
value.
Base class for Spring Vault configuration using JavaConfig.
Wrapper for
ClientHttpRequestFactory to not expose the bean globally.Wrapper to keep
ThreadPoolTaskScheduler local to Spring Vault and to
not expose the bean globally.Base class for
VaultConverter implementations.Event published after logging into Vault.
Event published after renewing a
login token.Event published after revoking a
login token.Event published after renewing a
Lease for a RequestedSecret.Event published after revoking a
Lease for a RequestedSecret.AppRole implementation of
ClientAuthentication.Authentication options for
AppRoleAuthentication.Builder for
AppRoleAuthenticationOptions.RoleId type encapsulating how the roleId is actually obtained.
SecretId type encapsulating how the secretId is actually obtained.
Generic event class for authentication error events.
Listener for Vault exceptional
AuthenticationEvents.Abstract base class for authentication events.
Interface to be implemented by objects that can manage a number of
AuthenticationEvent and AuthenticationErrorEvent objects and
publish events to them.Publisher for
AuthenticationEvents.Listener for Vault
AuthenticationEvents.Authentication DSL allowing flow composition to create a
VaultToken.Value object representing a HTTP request.
Builder for
AuthenticationSteps.HttpRequest.Intermediate authentication step with authentication flow operators
represented as node.
A tuple of two things.
Synchronous executor for
AuthenticationSteps using
RestOperations to login using authentication flows.Factory interface for components that create
AuthenticationSteps.AWS-EC2 login implementation.
Authentication options for
AwsEc2Authentication.Enumeration for the Instance metadata service version.
Value object for an authentication nonce.
AWS IAM authentication using signed HTTP requests to query the current
identity.
Authentication options for
AwsIamAuthentication.Builder for
AwsIamAuthenticationOptions.Azure MSI (Managed Service Identity) authentication using Azure as trusted
third party.
Authentication options for
AzureMsiAuthentication.Builder for
AzureMsiAuthenticationOptions.Value object representing a VM environment consisting of the subscription Id,
the resource group name and the VM name.
VaultPersistentEntity implementation.Event published before renewing a
login token.Event published before revoking a
login token.Event published before revoking a
Lease for a
RequestedSecret.Default implementation of
VaultTokenSupplier caching the
VaultToken from a delegate VaultTokenSupplier.Value object representing a certificate consisting of the certificate and the
issuer certificate.
Value object representing a certificate bundle consisting of a private key,
the certificate and the issuer certificate.
Value object representing cipher text with an optional
VaultTransitContext.Strategy interface representing an authentication mechanism to obtain a
VaultToken for authenticated Vault access.TLS Client Certificate
ClientAuthentication.Authentication options for
ClientCertificateAuthentication.Builder for
ClientCertificateAuthenticationOptions.Factory for
ClientHttpConnector that supports
ReactorClientHttpConnector and JettyClientHttpConnector.Utility methods to create
ClientHttpRequestFactory using Apache Http
Components.ClientHttpRequestFactory using the JDK's HttpClient.Utility methods to create
ClientHttpRequestFactory using the Jetty
Client.ClientHttpConnector for Reactor Netty.Factory for
ClientHttpRequestFactory that supports Apache HTTP
Components, Netty and the JDK HTTP client (in that order).Utilities to create a
ClientHttpRequestFactory for Apache Http
Components.ClientHttpRequestFactory using the JDK's HttpClient.Utility methods to create
ClientHttpRequestFactory using the Jetty
Client.ClientHttpConnector for Reactor Netty.Client options for Vault.
Interface to obtain an arbitrary credential that is uses in
ClientAuthentication or AuthenticationSteps methods.Cubbyhole
ClientAuthentication implementation.Authentication options for
CubbyholeAuthentication.Builder for
CubbyholeAuthenticationOptions.Default implementation of
VaultTypeMapper allowing configuration of
the key to lookup and store type information in SecretDocument.Utility to parse a Go format duration into
Duration.Annotation to activate Vault repositories.
Configuration using Spring's
Environment
to configure Spring Vault endpoint, SSL options and authentication options.GCP GCE (Google Compute Engine)-based login implementation using GCE's
metadata service to create signed JSON Web Token.
Authentication options for
GcpComputeAuthentication.Builder for
GcpComputeAuthenticationOptions.Support class for Google Cloud IAM-based Authentication options.
Google Cloud IAM credentials login implementation using GCP IAM service
accounts to legitimate its authenticity via JSON Web Token using the IAM
Credentials
projects.serviceAccounts.signJwt method.Authentication options for
GcpIamCredentialsAuthentication.Builder for
GcpIamCredentialsAuthenticationOptions.Base class for GCP JWT-based authentication.
GitHub's authentication method can be used to authenticate with Vault using a
GitHub personal access token.
Authentication options for
GitHubAuthentication.Builder for
GitHubAuthenticationOptions.Interface to obtain a service account id for GCP IAM credentials
authentication.
Interface to obtain a
ServiceAccountCredentials for GCP IAM
credentials authentication.Value object representing Hmac digest.
Compatibility layer for Jackson 2 and Jackson 3.
Accessor for
ObjectMapper that provides methods to serialize and
deserialize JSON.JWT implementation of
ClientAuthentication.Authentication options for
JwtAuthentication.Builder for
JwtAuthenticationOptions.Key-Value utility to retrieve secrets from a versioned key-value secrets
engine.
Kubernetes implementation of
ClientAuthentication.Authentication options for
KubernetesAuthentication.Builder for
KubernetesAuthenticationOptions.Interface to obtain a Kubernetes Service Account Token for Kubernetes
authentication.
Mechanism to retrieve a Kubernetes service account token.
A lease abstracting the lease Id, duration and its renewability.
PropertySource that requests renewable secrets from
SecretLeaseContainer.Version-specific endpoint implementations that use either legacy or
sys/leases endpoints.
Listener for Vault exceptional
SecretLeaseEvents.Listener for Vault
SecretLeaseEvents.Empty listener adapter implementing
LeaseListener and
LeaseErrorListener.Strategy interface to control whether to retain or drop a
Lease after a failure.Lifecycle-aware
Session Manager.Wraps a
VaultToken and specifies whether the token is revocable on
factory shutdown.Support class to build Lifecycle-aware Session Manager implementations,
defining common properties such as the
TaskScheduler and
LifecycleAwareSessionManagerSupport.RefreshTrigger.LifecycleAwareSessionManagerSupport.RefreshTrigger implementation using a fixed timeout to schedule
renewal before a LoginToken expires.This one-shot trigger creates only one execution time to trigger an execution
only once.
Common interface for trigger objects that determine the next execution time
of a refresh task.
Event published before renewing a
login token.Value object for a Vault token obtained by a login method.
Builder for
LoginToken.Adapts tokens created by a
ClientAuthentication to a
LoginToken.Event published when dropping an expired
login token.Generic event class for authentication error events.
Generic event class for authentication error events.
VaultConverter that uses a MappingContext to do sophisticated
mapping of domain objects to SecretDocument.VaultEntityInformation implementation using a
VaultPersistentEntity instance to lookup the necessary information.PCF implementation of
ClientAuthentication.Authentication options for
PcfAuthentication.Builder for
PcfAuthenticationOptions.Represents a PEM object that is internally decoded to a DER object.
Value object representing plain text with an optional
VaultTransitContext.Value object representing a Vault policy associated with
Policy.Rules.Built-in Vault capabilities.
Capability interface representing capability literals.
Value object representing a rule for a certain path.
Builder for a
Policy.Rule.Strategy interface to transform properties to a new key-value
Map in
a functional style.Implementations of
PropertyTransformer that provide various useful
property transformation operations, prefixing, etc.PropertyTransformer that adds a prefix to each key name.PropertyTransformer that passes the given properties through without
returning changed properties.A exported raw key inside Vault's
transit secrets engine.Reactive implementation of Lifecycle-aware
session manager.Wraps a
VaultToken and specifies whether the token is revocable on
factory shutdown.Strategy interface that encapsulates the creation and management of Vault
sessions based on
VaultToken used by reactive components.Client to perform Vault HTTP requests, exposing a fluent, reactive API over
underlying
WebClient.A mutable builder for creating a
ReactiveVaultClient.Contract for specifying the path for a request.
Contract for specifying request headers and body leading up to the exchange.
Contract for specifying request headers, body and path for a request.
Contract for specifying request headers and path for a request.
Contract for specifying request headers leading up to the exchange.
Contract for specifying response operations following the exchange.
Callback interface that can be used to customize a
ReactiveVaultClient.Builder.Vault Client factory to create
WebClient configured to the needs of
accessing Vault.Component that provides reactively a
VaultEndpoint.Interface that specifies a basic set of Vault operations using Vault's
versioned Key/Value (kv version 2) secrets engine.
Interface that specifies a basic set of Vault operations using Vault's
Key/Value secrets engine.
Interface that specifies a basic set of Vault operations using Vault's
Key/Value secrets engine.
Central entrypoint for performing Vault operations on a reactive runtime.
Interface that specifies a basic set of administrative Vault operations using
reactive infrastructure.
Default implementation of
ReactiveVaultSysOperations.This class encapsulates main Vault interaction.
Interface that specifies operations using the
transit secrets engine.Default implementation of
ReactiveVaultTransitOperations.Interface that specifies a basic set of Vault operations using Vault's
versioned Key/Value (kv version 2) secrets engine.
Default implementation of
ReactiveVaultVersionedKeyValueOperations.Represents a requested secret from a specific Vault path associated with a
lease
RequestedSecret.Mode.Mechanism to retrieve a credential from a
Resource.Builder that can be used to configure and create a
RestClient.Callback interface that can be used to customize a
RestClient.Builder.A callback for executing arbitrary operations on
RestOperations.Deprecated.
Deprecated.
since 4.1, use
VaultClientCustomizer (preferred) or
RestClientCustomizer for low-level RestClient customization
instead.Deprecated.
since 4.1, use
VaultClient or RestClientBuilder instead.Deprecated.
since 4.1, use
ClientHttpRequestInitializer through
RestClientBuilder.customizers(RestClientCustomizer...).Secret marks objects as aggregate roots to be stored in Vault.Vault database exchange object containing data before/after it's exchanged
with Vault.
Wrapper value object for a
SecretDocument to be able to access raw
values by VaultPersistentProperty references.Event-based container to request secrets from Vault and renew the associated
Lease.Event published after obtaining secrets potentially associated with a
Lease.Event published when caught an
Exception during secret retrieval and
lease interaction.Abstract base class for
Lease based events associated with
RequestedSecret.Publisher for
SecretLeaseEvents.Simple
LeaseErrorListener implementation to log errors.Event published after an expired
Lease for a RequestedSecret
was observed.Event published after rotating secrets.
Event published after secrets could not be found for a
RequestedSecret.An exception which is used in case that no secret is found from Vault server.
Strategy interface that encapsulates the creation and management of Vault
sessions based on
VaultToken.Value object representing a Signature.
Value object representing the result of a
Signature validation.Simple implementation of
SessionManager.VaultEndpointProvider returning a static VaultEndpoint.SSL configuration.
Configuration for a key in a keystore.
Configuration for a key store/trust store.
Static Token-based
ClientAuthentication method.Value object representing cipher text with an optional
VaultTransformContext.Value object representing plain text with an optional
VaultTransformContext.Enumeration to specify the type of the transit key.
Version-specific endpoint implementations for response unwrapping.
Username and password implementation of
ClientAuthentication.Authentication options for
UsernamePasswordAuthentication.Builder for
UsernamePasswordAuthenticationOptions.Vault-based
BytesEncryptor using Vault's transit secrets
engine.Random byte generator using Vault's
transit secrets engine to
generate high-quality random bytes of the configured length.Request for a Certificate.
Value object to bind Vault HTTP PKI issue certificate API responses.
Client to perform Vault HTTP requests, exposing a fluent, synchronous API
over underlying
RestClient.A mutable builder for creating a
VaultClient.Contract for specifying the path for a request.
Contract for specifying request headers and body leading up to the exchange.
Contract for specifying request headers, body and path for a request.
Contract for specifying request headers and path for a request.
Contract for specifying request headers leading up to the exchange.
Contract for specifying response operations following the exchange.
Callback interface that can be used to customize a
VaultClient.Builder.Abstract base class for exceptions thrown by
VaultClient and
ReactiveVaultClient in case a request fails because of a server error
response, a failure to decode the response, or a low level I/O error.Vault Client factory to create
RestTemplate / RestClient
configured to the needs of accessing Vault.Central Vault-specific converter interface.
Value object to capture custom conversion.
Holds the response from decryption operation and provides methods to access
the result.
Holds the response from encryption operation and provides methods to access
the result.
Value object that defines Vault connection coordinates.
Component that provides a
VaultEndpoint.Vault-specific
EntityInformation.The Spring Vault specific
NestedRuntimeException implementation.Vault health state.
Request for a HMAC Digest.
Builder to build a
VaultHmacRequest.Class providing utility methods to create Vault HTTP headers.
Value object to bind Vault HTTP Initialization API requests.
Vault initialization response.
Value object to bind Vault HTTP PKI issue certificate API responses.
Vault-specific
KeyValueAdapter.Interface that specifies kv metadata related operations.
Interface that specifies a basic set of Vault operations using Vault's
Key/Value secrets engine.
Interface that specifies a basic set of Vault operations using Vault's
Key/Value secrets engine.
Enumeration of supported Key/Value secrets engine API versions.
Vault-specific
KeyValueTemplate.Exception thrown if Vault login fails.
Mapping context for
Vault-specific entities.Value object to bind Vault HTTP kv metadata update API requests.
Builder for
VaultMetadataRequest.Value object to bind Vault HTTP kv read metadata API responses.
Builder for
VaultMetadataResponse.Value object to bind Vault HTTP Mount API requests/responses.
Builder to build a
VaultMount.Central entrypoint for performing Vault operations on a reactive runtime.
Vault-specific
KeyValuePartTreeQuery.Vault specific
PersistentEntity.Vault-specific
KeyValuePersistentProperty.Interface that specifies PKI engine-related operations.
Default implementation of
VaultPkiOperations.Annotation providing a convenient and declarative mechanism for adding a
VaultPropertySource to Spring's
Environment.Exception throws when a
VaultPropertySource could not load its
properties.Container annotation that aggregates several
VaultPropertySource
annotations.Vault query consisting of a single
Predicate.Query creator for Vault queries.
Vault specific
ImportBeanDefinitionRegistrar.RepositoryConfigurationExtension for Vault.RepositoryFactorySupport specific of handing Vault
KeyValueRepository.Adapter for Springs
FactoryBean interface to allow easy setup of
VaultRepositoryFactory via Spring configuration.Value object to bind generic Vault HTTP API responses.
Utility methods to unwrap Vault responses and build
VaultException.Value object to bind generic Vault HTTP API responses.
Vault-based
RevisionRepository providing revision metadata for
versioned secrets.Abstract superclass for all exceptions thrown in the session manager
implementations.
Request for a signature verification.
Builder to build a
VaultSignatureVerificationRequest.Value object to bind Vault HTTP PKI issue certificate API responses.
Request for a signature creation request.
Builder to build a
VaultSignRequest.Simple constant holder for a
SimpleTypeHolder enriched with
Vault-specific simple (JSON) types.Interface that specifies a basic set of administrative Vault operations.
Default implementation of
VaultSysOperations.This class encapsulates main Vault interaction.
Value object for a Vault token.
Exception thrown if a token self-lookup fails via
auth/token/lookup-self.Interface that specifies token-related operations.
Exception thrown when a Vault token renewal fails.
Value object to bind Vault HTTP Token API requests.
Builder to build a
VaultTokenRequest.Value object to bind Vault HTTP Token API responses.
VaultTokenSupplier provides a VaultToken to be used for
authenticated Vault access.Default implementation of
VaultTokenOperations.Transform secrets engine encode/decode context object.
Builder for
VaultTransformContext.Holds the response from decryption operation and provides methods to access
the result.
Holds the response from encryption operation and provides methods to access
the result.
Interface that specifies operations using the
transform engine.Default implementation of
VaultTransformOperations.Transit secrets engine encryption/decryption/rewrapping context.
Builder for
VaultTransitContext.A key inside Vault's
transit secrets engine.Value object to bind Vault HTTP Transit Key Config API requests.
Builder for
VaultTransitKeyConfiguration.Transit secrets engine key creation request options.
Builder for
VaultTransitKeyCreationRequest.Interface that specifies operations using the
transit secrets engine.Default implementation of
VaultTransitOperations.Vault-specific
TypeMapper exposing that SecretDocuments might
contain a type key.Vault unseal status.
Interface that specifies a basic set of Vault operations using Vault's
versioned Key/Value (kv version 2) secrets engine.
Default implementation of
VaultVersionedKeyValueOperations.Interface that specifies wrapping-related operations.
Default implementation of
VaultWrappingOperations.Value object representing versioned secrets along
Versioned.Version metadata.Value object representing version metadata such as creation/deletion time.
Builder for
Versioned.Metadata objects.Value object representing a Vault version.
Builder that can be used to configure and create a
WebClient.Callback interface that can be used to customize a
WebClient.Builder.Factory interface that produces a
WebClient object.Value object representing wrapped secret metadata.
VaultClientCustomizerorRestClientCustomizerinstead.