Package com.oracle.bmc.auth.okeworkloadidentity.internal

Class OkeWorkloadIdentityResourcePrincipalsFederationClient

java.lang.Object

com.oracle.bmc.auth.internal.AbstractFederationClient

com.oracle.bmc.auth.okeworkloadidentity.internal.OkeWorkloadIdentityResourcePrincipalsFederationClient

All Implemented Interfaces:

FederationClient, ProvidesConfigurableRefresh

public class OkeWorkloadIdentityResourcePrincipalsFederationClient
extends AbstractFederationClient

This class gets a security token from the auth service by signing the request with the provided private key.

Field Summary

Fields inherited from class com.oracle.bmc.auth.internal.AbstractFederationClient

additionalClientConfigurator, circuitBreaker, clientConfigurator, federationClient, resourcePrincipalTokenClient, securityTokenAdapter, sessionKeySupplier

Constructor Summary

Constructors

Constructor

Description

OkeWorkloadIdentityResourcePrincipalsFederationClient(SessionKeySupplier sessionKeySupplier, ServiceAccountTokenSupplier serviceAccountTokenSupplier, OkeTenancyOnlyAuthenticationDetailsProvider okeTenancyOnlyAuthenticationDetailsProvider, ClientConfigurator clientConfigurator, com.oracle.bmc.circuitbreaker.CircuitBreakerConfiguration circuitBreakerConfiguration, List<ClientConfigurator> additionalClientConfigurators)

Constructor of OkeWorkloadIdentityResourcePrincipalsFederationClient.

Method Summary

Modifier and Type	Method	Description
String	getSecurityToken()	Gets a security token from the federation endpoint.
protected SecurityTokenAdapter	getSecurityTokenFromServer()	Gets a security token from the proxymux server
protected com.oracle.bmc.http.client.HttpClient	makeClient(String endpoint, RequestSigner requestSigner)

Methods inherited from class com.oracle.bmc.auth.internal.AbstractFederationClient

getSecurityTokenAdapter, getStringClaim, prepareRptCall, refreshAndGetSecurityToken, refreshAndGetSecurityTokenIfExpiringWithin, refreshAndGetSecurityTokenIfExpiringWithin, refreshAndGetSecurityTokenInner, requestSessionToken

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

OkeWorkloadIdentityResourcePrincipalsFederationClient

public OkeWorkloadIdentityResourcePrincipalsFederationClient(SessionKeySupplier sessionKeySupplier,
                                                             ServiceAccountTokenSupplier serviceAccountTokenSupplier,
                                                             OkeTenancyOnlyAuthenticationDetailsProvider okeTenancyOnlyAuthenticationDetailsProvider,
                                                             ClientConfigurator clientConfigurator,
                                                             com.oracle.bmc.circuitbreaker.CircuitBreakerConfiguration circuitBreakerConfiguration,
                                                             List<ClientConfigurator> additionalClientConfigurators)

Constructor of OkeWorkloadIdentityResourcePrincipalsFederationClient.

Parameters:

sessionKeySupplier - the session key supplier.

okeTenancyOnlyAuthenticationDetailsProvider - the key pair authentication details provider.

clientConfigurator - the reset client configurator.

Method Detail

getSecurityToken

public String getSecurityToken()

Gets a security token from the federation endpoint.

Refresh the security token when the half of the token duration is left. If the request failed, use cached security token.

Specified by:

getSecurityToken in interface FederationClient

Overrides:

getSecurityToken in class AbstractFederationClient

Returns:

A security token that can be used to authenticate requests.

makeClient

protected com.oracle.bmc.http.client.HttpClient makeClient(String endpoint,
                                                           RequestSigner requestSigner)

Overrides:

makeClient in class AbstractFederationClient

getSecurityTokenFromServer

protected SecurityTokenAdapter getSecurityTokenFromServer()

Gets a security token from the proxymux server

Specified by:

getSecurityTokenFromServer in class AbstractFederationClient

Returns:

the security token, which is basically a JWT token string