public class ElytronCSKeyStoreProviderFactory extends AbstractVaultProviderFactory
VaultProviderFactory
implementation that creates and configures ElytronCSKeyStoreProvider
s. The following
configuration attributes are available for the ElytronCSKeyStoreProviderFactory
:
elytron
subsystem in WildFly/EAP or the elytron-tool.sh
script.elytron-tool.sh
script. For further details, check the Elytron tool documentation.JCEKS
.REALM_UNDERSCORE_KEY
.null
when create(KeycloakSession)
is called.
If the factory has been properly configured but the location
attribute points to a keystore that does not exist,
a VaultNotFoundException
is raised on init. Similarly, if the key resolvers are configured and none of the specified
resolvers is valid, a VaultConfigurationException
is raised on init.AbstractVaultProviderFactory.AvailableResolvers
KEY_RESOLVERS, keyResolvers
Constructor and Description |
---|
ElytronCSKeyStoreProviderFactory() |
Modifier and Type | Method and Description |
---|---|
void |
close() |
VaultProvider |
create(KeycloakSession session) |
protected org.wildfly.security.credential.source.CredentialSource |
getCredentialSource(String secret)
Obtains the
CredentialSource to be used as a protection parameter when initializing the Elytron credential
store. |
String |
getId() |
void |
init(Config.Scope config) |
void |
postInit(KeycloakSessionFactory factory) |
getFactoryResolver, getRealmName
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
order
public VaultProvider create(KeycloakSession session)
public void init(Config.Scope config)
init
in interface ProviderFactory<VaultProvider>
init
in class AbstractVaultProviderFactory
public void postInit(KeycloakSessionFactory factory)
public void close()
public String getId()
protected org.wildfly.security.credential.source.CredentialSource getCredentialSource(String secret)
CredentialSource
to be used as a protection parameter when initializing the Elytron credential
store. The source is essentially a wrapper for the credential store secret. The credential store secret can be specified
in clear text form or in masked form. Check the Elytron tool documentation for instruction on how to mask the credential
store secret.
Note: This logic should ideally be provided directly by Elytron but is currently missing.secret
- the secret obtained from the ElytronCSKeyStoreProviderFactory
configuration.CredentialSource
.Copyright © 2021 JBoss by Red Hat. All rights reserved.