org.apache.sshd.client.config.keys

Interface ClientIdentityProvider

All Known Implementing Classes:

ClientIdentityFileWatcher

Functional Interface:

This is a functional interface and can therefore be used as the assignment target for a lambda expression or method reference.

@FunctionalInterface
public interface ClientIdentityProvider

Author:

Apache MINA SSHD Project

Method Summary

Modifier and Type	Method and Description
Iterable<KeyPair>	getClientIdentities(SessionContext session) Provides a KeyPair representing the client identity
static Iterator<KeyPair>	lazyKeysIterator(Iterator<? extends ClientIdentityProvider> providers, Function<? super ClientIdentityProvider,? extends Iterable<? extends KeyPair>> kpExtractor, Predicate<? super KeyPair> filter) Wraps several ClientIdentityProvider into a KeyPair Iterator that invokes each provider "lazily" - i.e., only when Iterator.hasNext() is invoked.
static Iterable<KeyPair>	lazyKeysLoader(Iterable<? extends ClientIdentityProvider> providers, Function<? super ClientIdentityProvider,? extends Iterable<? extends KeyPair>> kpExtractor, Predicate<? super KeyPair> filter) Wraps several ClientIdentityProvider into a KeyPair Iterable that invokes each provider "lazily" - i.e., only when Iterator.hasNext() is invoked.
static ClientIdentityProvider	of(KeyPair kp) Wraps a KeyPair into a ClientIdentityProvider that simply returns this value as it getClientIdentities(SessionContext).

Method Detail

getClientIdentities

Iterable<KeyPair> getClientIdentities(SessionContext session)
                               throws IOException,
                                      GeneralSecurityException

Provides a KeyPair representing the client identity

Parameters:

session - The SessionContext for invoking this load command - may be null if not invoked within a session context (e.g., offline tool).

Returns:

The client identities - may be null/empty if no currently available identity from this provider. Note: the provider may return a different value every time this method is called - e.g., if it is (re-)loading contents from a file.

Throws:

IOException - If failed to load the identity

GeneralSecurityException - If failed to parse the identity

of

static ClientIdentityProvider of(KeyPair kp)

Wraps a KeyPair into a ClientIdentityProvider that simply returns this value as it getClientIdentities(SessionContext).

Parameters:

kp - The KeyPair instance (including null)

Returns:

The wrapping provider

lazyKeysLoader

static Iterable<KeyPair> lazyKeysLoader(Iterable<? extends ClientIdentityProvider> providers,
                                        Function<? super ClientIdentityProvider,? extends Iterable<? extends KeyPair>> kpExtractor,
                                        Predicate<? super KeyPair> filter)

Wraps several ClientIdentityProvider into a KeyPair Iterable that invokes each provider "lazily" - i.e., only when Iterator.hasNext() is invoked. This prevents password protected private keys to be decrypted until they are actually needed.

Parameters:

providers - The providers - ignored if null

kpExtractor - The (never null) extractor of the KeyPair from the ClientIdentityProvider argument. If returned pair is null then next provider is queried.

filter - Any further filter to apply on (non-null) key pairs before returning it as the Iterator.next() result.

Returns:

The wrapper Iterable. Note: a new Iterator instance is returned on each Iterable.iterator() call - i.e., any encrypted private key may require the user to re-enter the relevant password. If the default ClientIdentityFileWatcher is used, this is not a problem since it caches the decoded result (unless the file has changed).

lazyKeysIterator

static Iterator<KeyPair> lazyKeysIterator(Iterator<? extends ClientIdentityProvider> providers,
                                          Function<? super ClientIdentityProvider,? extends Iterable<? extends KeyPair>> kpExtractor,
                                          Predicate<? super KeyPair> filter)

Wraps several ClientIdentityProvider into a KeyPair Iterator that invokes each provider "lazily" - i.e., only when Iterator.hasNext() is invoked. This prevents password protected private keys to be decrypted until they are actually needed.

Parameters:

providers - The providers - ignored if null

kpExtractor - The (never null) extractor of the KeyPair from the ClientIdentityProvider argument. If returned pair is null then next provider is queried.

filter - Any further filter to apply on (non-null) key pairs before returning it as the Iterator.next() result.

Returns:

The wrapper Iterator