public class ElytronCSKeyStoreProviderFactory extends AbstractVaultProviderFactory
VaultProviderFactory implementation that creates and configures ElytronCSKeyStoreProviders. The following
configuration attributes are available for the ElytronCSKeyStoreProviderFactory:
elytron subsystem in WildFly/EAP or the elytron-tool.sh script.elytron-tool.sh script. For further details, check the Elytron tool documentation.JCEKS.REALM_UNDERSCORE_KEY.null when create(KeycloakSession) is called.
If the factory has been properly configured but the location attribute points to a keystore that does not exist,
a VaultNotFoundException is raised on init. Similarly, if the key resolvers are configured and none of the specified
resolvers is valid, a VaultConfigurationException is raised on init.AbstractVaultProviderFactory.AvailableResolversKEY_RESOLVERS, keyResolvers| Constructor and Description |
|---|
ElytronCSKeyStoreProviderFactory() |
| Modifier and Type | Method and Description |
|---|---|
void |
close() |
VaultProvider |
create(KeycloakSession session) |
protected org.wildfly.security.credential.source.CredentialSource |
getCredentialSource(String secret)
Obtains the
CredentialSource to be used as a protection parameter when initializing the Elytron credential
store. |
String |
getId() |
void |
init(Config.Scope config) |
void |
postInit(KeycloakSessionFactory factory) |
getFactoryResolver, getRealmNameclone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, waitorderpublic VaultProvider create(KeycloakSession session)
public void init(Config.Scope config)
init in interface ProviderFactory<VaultProvider>init in class AbstractVaultProviderFactorypublic void postInit(KeycloakSessionFactory factory)
public void close()
public String getId()
protected org.wildfly.security.credential.source.CredentialSource getCredentialSource(String secret)
CredentialSource to be used as a protection parameter when initializing the Elytron credential
store. The source is essentially a wrapper for the credential store secret. The credential store secret can be specified
in clear text form or in masked form. Check the Elytron tool documentation for instruction on how to mask the credential
store secret.
Note: This logic should ideally be provided directly by Elytron but is currently missing.secret - the secret obtained from the ElytronCSKeyStoreProviderFactory configuration.CredentialSource.Copyright © 2020 JBoss by Red Hat. All rights reserved.