Interface IInternalCredentials

All Superinterfaces:
ICredentials
@Path("/credentials/{domainUid}") public interface IInternalCredentials extends ICredentials

  • Method Details

    • getDomainCredentialById

      @GET @Path("{credentialId}") String getDomainCredentialById(@PathParam("credentialId") String credentialId)
      Get credentials from its ID
      Parameters:
      credentialId - use domainUid:credentialId syntax, where :
      • domainUid is credential domain UID for domain related credentials, or global.virt
      • id is the credential ID
      Returns:
      credential value or null if not exists or not found
      Throws:
      net.bluemind.core.api.fault.ServerFault

    • addUserCredential

      @PUT @Path("user/{userUid}") void addUserCredential(@PathParam("userUid") String userUid, Credential credential)
      Add user credential
      Used by bm-keycloak to store credentials
      Parameters:
      userUid -
      credential -

    • restoreUserCredential

      void restoreUserCredential(@PathParam("userUid") String userUid, Credential credential)

    • deleteUserCredential

      void deleteUserCredential(@PathParam("userUid") String userUid, String credentialId)

    • addUserCredentials

      @PUT @Path("user/{userUid}/_credentials") void addUserCredentials(@PathParam("userUid") String userUid, List<Credential> credentials)

    • getUserCredentials

      @GET @Path("user/{userUid}/plain") List<Credential> getUserCredentials(@PathParam("userUid") String userUid)
      Get user credentials with secret
      Used by bm-keycloak to store credentials
      Parameters:
      userUid -
      Returns:

    • resolveVaultSecret

      String resolveVaultSecret(String vaultId, String secretId)
      Resolves a secret from the given vault backend. Dispatches to the IVaultResolver registered for vaultId.
      Parameters:
      vaultId - vault identifier (e.g. "etcd")
      secretId - secret path within the vault
      Returns:
      the resolved secret value
      Throws:
      net.bluemind.core.api.fault.ServerFault - if the vault is unknown or resolution fails

    • storeVaultSecret

      String storeVaultSecret(String vaultId, String secretId, String value)
      Stores a secret in the given vault backend and returns the canonical credential reference vault://<vaultId>/<secretId>.
      Parameters:
      vaultId - vault identifier
      secretId - secret path within the vault
      value - plaintext secret to store
      Throws:
      net.bluemind.core.api.fault.ServerFault - if the vault is unknown, read-only, or the write fails