Package net.shibboleth.utilities.java.support.security

Helpers for common security related tasks.

See: Description

Interface Summary

Interface	Description
AccessControl	A policy that evaluates a ServletRequest and determines whether access to a named resource should be granted.
AccessControlService	A component that supplies AccessControl instances identified by a policy name.
DataSealerKeyStrategy	Interface for acquiring secret keys on behalf of the DataSealer class, this principally abstracts methods of handling key versioning moreso than actual access to keys, by optimizing access to keys in accordance with the manner in which key rollover is handled.
IdentifierGenerationStrategy	Interface for identifier generators.

Class Summary

Class	Description
BasicAccessControlService	Simple implementation that uses an in-memory map of policies.
BasicKeystoreKeyStrategy	Implements a strategy for access to versioned symmetric keys using a keystore, and a standalone file for tracking the latest key version, to compensate for the lack of extensible attribute support in the pre-Java 8 KeyStore API.
BasicKeystoreKeyStrategyTool	Implements a tool for managing secret keys in accordance with the BasicKeystoreKeyStrategy.
BasicKeystoreKeyStrategyTool.FileConverter	Command line option conversion from String to File.
DataSealer	Applies a MAC to time-limited information and encrypts with a symmetric key.
DelegatingAccessControlService	This class uses the ReloadableService concept to implement AccessControlService to hide the details of pinning and unpinning the underlying service.
IPRangeAccessControl	Simple access control implementation based on IP address checking.
RandomIdentifierGenerationStrategy	Generates a random number of bytes via a Random source and encodes them into a string using a BinaryEncoder (Hex by default).
SecureRandomIdentifierGenerationStrategy	A specialized subclass of RandomIdentifierGenerationStrategy which constrains the supplied random number generator to be an instance of SecureRandom.
SelfSignedCertificateGenerator	A helper class to generate self-signed keypairs.
SelfSignedCertificateGenerator.FileConverter	Command line option conversion from String to File.
Type4UUIDIdentifierGenerationStrategy	Generates a type 4 UUID as an identifier.

Exception Summary

Exception	Description
DataExpiredException	Indicates the sealed data has expired.
DataSealerException	Exceptions during use of the DataSealer.
KeyNotFoundException	Indicates that a key was not found in a key storage facility.

Package net.shibboleth.utilities.java.support.security Description

Helpers for common security related tasks.