com.oracle.bmc.auth.internal

Class ResourcePrincipalsFederationClient

java.lang.Object

com.oracle.bmc.auth.internal.AbstractFederationClient

com.oracle.bmc.auth.internal.ResourcePrincipalsFederationClient

All Implemented Interfaces:

FederationClient, ProvidesConfigurableRefresh

public class ResourcePrincipalsFederationClient
extends AbstractFederationClient

This class gets a security token from the auth service by signing the request with a PKI issued leaf certificate, passing along a temporary public key that is bounded to the the security token, and the leaf certificate.

Field Summary

Fields inherited from class com.oracle.bmc.auth.internal.AbstractFederationClient

additionalClientConfigurator, circuitBreaker, clientConfigurator, federationClient, resourcePrincipalTokenClient, sessionKeySupplier

Constructor Summary

Constructors

Constructor and Description

ResourcePrincipalsFederationClient(String resourcePrincipalTokenEndpoint, RptPathProvider resourcePrincipalTokenPathProvider, String resourcePrincipalSessionTokenEndpoint, SessionKeySupplier sessionKeySupplier, InstancePrincipalsAuthenticationDetailsProvider instancePrincipalsAuthenticationDetailsProvider, ClientConfigurator clientConfigurator, CircuitBreakerConfiguration circuitBreakerConfiguration) Constructor of ResourcePrincipalsFederationClient.

Method Summary

Modifier and Type	Method and Description
protected SecurityTokenAdapter	getSecurityTokenFromServer() Gets a security token from the federation server

Methods inherited from class com.oracle.bmc.auth.internal.AbstractFederationClient

getSecurityToken, getSecurityTokenAdapter, getStringClaim, makeClient, prepareRptCall, refreshAndGetSecurityToken, refreshAndGetSecurityTokenIfExpiringWithin, refreshAndGetSecurityTokenIfExpiringWithin, refreshAndGetSecurityTokenInner, requestSessionToken

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ResourcePrincipalsFederationClient

public ResourcePrincipalsFederationClient(String resourcePrincipalTokenEndpoint,
                                          RptPathProvider resourcePrincipalTokenPathProvider,
                                          String resourcePrincipalSessionTokenEndpoint,
                                          SessionKeySupplier sessionKeySupplier,
                                          InstancePrincipalsAuthenticationDetailsProvider instancePrincipalsAuthenticationDetailsProvider,
                                          ClientConfigurator clientConfigurator,
                                          CircuitBreakerConfiguration circuitBreakerConfiguration)

Constructor of ResourcePrincipalsFederationClient.

Parameters:

resourcePrincipalTokenEndpoint - the endpoint that can provide the resource principal token.

resourcePrincipalTokenPathProvider - the path provider for the resource principal token

resourcePrincipalSessionTokenEndpoint - the endpoint that can provide the resource principal session token.

sessionKeySupplier - the session key supplier.

instancePrincipalsAuthenticationDetailsProvider - the instance principals authentication details provider.

clientConfigurator - the reset client configurator.

Method Detail

getSecurityTokenFromServer

protected SecurityTokenAdapter getSecurityTokenFromServer()

Gets a security token from the federation server

Specified by:

getSecurityTokenFromServer in class AbstractFederationClient

Returns:

the security token, which is basically a JWT token string