public class ElytronIntegrationResourceDefinitions extends Object
ResourceDefinition
instances for the various components of the elytron
integration.Modifier and Type | Field and Description |
---|---|
static org.jboss.as.controller.SimpleAttributeDefinition |
APPLY_ROLE_MAPPERS |
static org.jboss.as.controller.SimpleAttributeDefinition |
LEGACY_JAAS_CONFIG |
static org.jboss.as.controller.SimpleAttributeDefinition |
LEGACY_JSSE_CONFIG |
Constructor and Description |
---|
ElytronIntegrationResourceDefinitions() |
Modifier and Type | Method and Description |
---|---|
static org.jboss.as.controller.ResourceDefinition |
getElytronKeyManagersResourceDefinition()
Defines a resource that represents Elytron-compatible key managers that can be exported by a JSSE-enabled domain
in the legacy security subsystem.
|
static org.jboss.as.controller.ResourceDefinition |
getElytronKeyStoreResourceDefinition()
Defines a resource that represents an Elytron-compatible key store that can be exported by a JSSE-enabled domain
in the legacy security subsystem.
|
static org.jboss.as.controller.ResourceDefinition |
getElytronRealmResourceDefinition()
Defines a resource that represents an Elytron-compatible realm that can be exported by the legacy security subsystem.
|
static org.jboss.as.controller.ResourceDefinition |
getElytronTrustManagersResourceDefinition()
Defines a resource that represents Elytron-compatible trust managers that can be exported by a JSSE-enabled domain
in the legacy security subsystem.
|
static org.jboss.as.controller.ResourceDefinition |
getElytronTrustStoreResourceDefinition()
Defines a resource that represents an Elytron-compatible trust store that will be exported by a JSSE-enabled domain
in the legacy security subsystem.
|
public static final org.jboss.as.controller.SimpleAttributeDefinition LEGACY_JAAS_CONFIG
public static final org.jboss.as.controller.SimpleAttributeDefinition LEGACY_JSSE_CONFIG
public static final org.jboss.as.controller.SimpleAttributeDefinition APPLY_ROLE_MAPPERS
public ElytronIntegrationResourceDefinitions()
public static org.jboss.as.controller.ResourceDefinition getElytronRealmResourceDefinition()
SecurityRealm
wraps a legacy SecurityDomainContext
and delegates authentication
decisions to that context.
To export the realm the resource uses a BasicAddHandler
implementation that registers the security-realm
capability and implements a org.jboss.as.security.elytron.BasicService.ValueSupplier
that uses the injected
SecurityDomainContext
to create and return an instance of SecurityDomainContextRealm
.public static org.jboss.as.controller.ResourceDefinition getElytronKeyStoreResourceDefinition()
BasicAddHandler
implementation that registers the elytron key-store
capability and implements a org.jboss.as.security.elytron.BasicService.ValueSupplier
that uses the injected
SecurityDomainContext
to obtain a JSSESecurityDomain
. If such domain is found, its configured key
store is obtained and returned.
The ValueSupplier
implementation throws an exception if the referenced legacy domain is not a JSSE-enabled
domain or if the domain doesn't contain a key store configuration.public static org.jboss.as.controller.ResourceDefinition getElytronTrustStoreResourceDefinition()
BasicAddHandler
implementation that registers the elytron key-store
capability and implements a org.jboss.as.security.elytron.BasicService.ValueSupplier
that uses the injected
SecurityDomainContext
to obtain a JSSESecurityDomain
. If such domain is found, its configured trust
store is obtained and returned.
NOTE 1: In the Elytron subsystem, both key stores and trust stores are registered using the same capability. This
means that the name of the trust store must be unique across all configured trust stores and key stores. If a trust
store resource is registered with the same name of a key store resource, an error will occur.
The ValueSupplier
implementation throws an exception if the referenced legacy domain is not a JSSE-enabled
domain or if the domain doesn't contain a trust store configuration.
NOTE 2: The PicketBox
implementation of a JSSESecurityDomain
returns a reference to the key store if
a trust store was not configured. So extra care must be taken when that implementation is used (default) as the code
will silently export the key store as a trust store instead of throwing an exception to alert about a missing trust
store configuration in the legacy JSSE-enabled domain.public static org.jboss.as.controller.ResourceDefinition getElytronKeyManagersResourceDefinition()
BasicAddHandler
implementation that registers the elytron
key-managers capability and implements a org.jboss.as.security.elytron.BasicService.ValueSupplier
that uses
the injected SecurityDomainContext
to obtain a JSSESecurityDomain
. If such domain is found, its
configured key manager array is obtained and returned.
The ValueSupplier
implementation throws an exception if the referenced legacy domain is not a JSSE-enabled
domain or if the domain doesn't contain a key store configuration that can be used to build the key managers.public static org.jboss.as.controller.ResourceDefinition getElytronTrustManagersResourceDefinition()
BasicAddHandler
implementation that registers the elytron
trust-managers capability and implements a org.jboss.as.security.elytron.BasicService.ValueSupplier
that uses
the injected SecurityDomainContext
to obtain a JSSESecurityDomain
. If such domain is found, its
configured trust manager array is obtained and returned.
The ValueSupplier
implementation throws an exception if the referenced legacy domain is not a JSSE-enabled
domain or if the domain doesn't contain a trust store configuration that can be used to build the trust managers.
NOTE: The PicketBox
implementation of a JSSESecurityDomain
returns a reference to the key store if
a trust store was not configured. This means that the trust managers that it builds will use the configured key store
instead of throwing an exception to alert about a missing trust store configuration. So extra care must be taken
to ensure that the exported trust managers are being built using the correct trust stores.Copyright © 2018 JBoss by Red Hat. All rights reserved.