Module org.elasticsearch.security

Package org.elasticsearch.xpack.security.authc

Class ApiKeyService.ApiKeyCredentials

java.lang.Object

org.elasticsearch.xpack.security.authc.ApiKeyService.ApiKeyCredentials

All Implemented Interfaces:

Closeable, AutoCloseable, AuthenticationToken

Enclosing class:

ApiKeyService

public static final class ApiKeyService.ApiKeyCredentials
extends Object
implements AuthenticationToken, Closeable

Constructor Summary

Constructors

Constructor	Description
ApiKeyCredentials(String id, SecureString key, ApiKey.Type expectedType)
ApiKeyCredentials(String id, SecureString key, ApiKey.Type expectedType, String certificateIdentity)

Method Summary

Modifier and Type	Method	Description
void	clearCredentials()
void	close()
Object	credentials()
String	getCertificateIdentity()	The identity (Subject DistinguishedName) of the X.509 certificate that was provided by the client alongside the API during authenticate.
ApiKey.Type	getExpectedType()
String	principal()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

ApiKeyCredentials

public ApiKeyCredentials(String id,
 SecureString key,
 ApiKey.Type expectedType)

ApiKeyCredentials

public ApiKeyCredentials(String id,
 SecureString key,
 ApiKey.Type expectedType,
 @Nullable
 String certificateIdentity)

Method Details

close

public void close()

Specified by:

close in interface AutoCloseable

Specified by:

close in interface Closeable

principal

public String principal()

Specified by:

principal in interface AuthenticationToken

credentials

public Object credentials()

Specified by:

credentials in interface AuthenticationToken

clearCredentials

public void clearCredentials()

Specified by:

clearCredentials in interface AuthenticationToken

getExpectedType

public ApiKey.Type getExpectedType()

getCertificateIdentity

public String getCertificateIdentity()

The identity (Subject DistinguishedName) of the X.509 certificate that was provided by the client alongside the API during authenticate. At the time of writing, the only place where this is used is for cross cluster request signing