public class STSRemoteConfig extends Object
Constructor and Description |
---|
STSRemoteConfig() |
Modifier and Type | Method and Description |
---|---|
String |
getAuthenticationChain()
Returns authentication chain used for authenticating sts clients.
|
String |
getEncryptionAlgorithm()
Returns encryption algorithm
|
int |
getEncryptionStrength()
Returns the encryption strength;
|
String |
getIssuer() |
String |
getKDCDomain()
Returns Kerberos Domain Controller Domain
|
String |
getKDCServer()
Returns Kerberos Domain Controller Server.
|
String |
getKerberosServicePrincipal()
Returns kerberos service principal
|
String |
getKeyTabFile()
This method is used by the web services provider to get the key tab file.
|
String |
getPrivateKeyAlias()
Returns the key alias for the security provider at STS service.
|
String |
getPrivateKeyType()
Returns the key type for the security provider at STS service.
|
String |
getPublicKeyAlias()
Returns the Public key alias for this provider's partner.
|
List |
getSecurityMechanisms()
Returns the list of security mechanims that the STS service is configured.
|
List |
getSignedElements()
Returns the list of signed elements.
|
String |
getSigningRefType()
Returns signing reference type.
|
String |
getSTSEndpoint()
Returns STS Endpoint
|
String |
getType() |
List |
getUsers()
Returns the list of
PasswordCredential s of the user. |
boolean |
isMessageReplayDetectionEnabled()
Returns true if the message replay detection is enabled.
|
boolean |
isRequestEncryptEnabled()
Checks if the request needs to be encrypted or not.
|
boolean |
isRequestHeaderEncryptEnabled()
Checks if the request header needs to be encrypted or not.
|
boolean |
isRequestSignEnabled()
Checks if the request needs to be signed or not.
|
boolean |
isResponseEncryptEnabled()
Checks if the response needs to be encrypted or not.
|
boolean |
isResponseSignEnabled()
Checks if the response needs to be signed or not.
|
boolean |
isUserTokenDetectReplayEnabled()
Returns true if the user name token replay is enabled.
|
boolean |
isValidateKerberosSignature()
Returns true if kerberos signature needs to be validated.
|
void |
setAuthenticationChain(String authChain)
Sets the authentication chain name.
|
void |
setDetectUserTokenReplay(boolean enable)
Enable or disable the detection of user token replay
|
void |
setEncryptionAlgorithm(String algorithm)
Sets the encryption algorithm
|
void |
setEncryptionStrength(int encryptionStrength)
Sets the encryption data strength.
|
void |
setIssuer(String issuer) |
void |
setKDCDomain(String domain)
Sets Kerberos Domain Controller Domain
|
void |
setKDCServer(String kdcServer)
Sets Kerberos Domain Controller Server
|
void |
setKerberosServicePrincipal(String principal)
Sets kerberos service principal.
|
void |
setKeyTabFile(String file)
Sets the keytab file
|
void |
setMessageReplayDetection(boolean enable)
Enable or disable the message replay detection.
|
void |
setPrivateKeyAlias(String alias)
Sets the key alias for the security provider at STS service.
|
void |
setPrivateKeyType(String keyType)
Sets the key type for the security provider at STS service.
|
void |
setPublicKeyAlias(String alias)
Sets the Public key alias for this provider's partner.
|
void |
setRequestEncryptEnabled(boolean enable)
Sets the request encrypt enable flag.
|
void |
setRequestHeaderEncryptEnabled(boolean enable)
Sets the request header encrypt enable flag.
|
void |
setRequestSignEnabled(boolean enable)
Sets the request sign enable flag.
|
void |
setResponseEncryptEnabled(boolean enable)
Sets the response encrypt enable flag.
|
void |
setResponseSignEnabled(boolean enable)
Sets the response sign enable flag.
|
void |
setSecurityMechanisms(List authMech)
Sets the list of security mechanisms.
|
void |
setSignedElements(List signedElements)
Sets the signed elements
|
void |
setSigningRefType(String refType)
Set signing reference type.
|
void |
setType(String type) |
void |
setUsers(List usercredentials)
Sets the user credentials list.
|
void |
setValidateKerberosSignature(boolean validate)
Sets a boolean flag to enable or disable validate kerberos signature.
|
public void setType(String type)
public String getType()
public void setIssuer(String issuer)
public String getIssuer()
public List getSecurityMechanisms()
public void setSecurityMechanisms(List authMech)
authMech
- the list of security mechanisms.public boolean isResponseSignEnabled()
public void setResponseSignEnabled(boolean enable)
enable
- enables the response signing.public boolean isResponseEncryptEnabled()
public void setResponseEncryptEnabled(boolean enable)
enable
- enables the response encryption.public boolean isRequestSignEnabled()
public void setRequestSignEnabled(boolean enable)
enable
- enables the request signing.public boolean isRequestEncryptEnabled()
public void setRequestEncryptEnabled(boolean enable)
enable
- enables the request encryption.public boolean isRequestHeaderEncryptEnabled()
public void setRequestHeaderEncryptEnabled(boolean enable)
enable
- enables the request header encryption.public String getPrivateKeyType()
public void setPrivateKeyType(String keyType)
keyType
- the key type for the security provider at STS service.public String getPrivateKeyAlias()
public void setPrivateKeyAlias(String alias)
alias
- the key alias for the security provider at STS service.public String getPublicKeyAlias()
public void setPublicKeyAlias(String alias)
alias
- the Public key alias for this provider's partner.public String getSTSEndpoint()
public String getKDCDomain()
public void setKDCDomain(String domain)
domain
- Kerberos Domain Controller Domainpublic String getKDCServer()
public void setKDCServer(String kdcServer)
kdcServer
- Kerberos Domain Controller Serverpublic String getKeyTabFile()
public void setKeyTabFile(String file)
file
- the fully qualified file pathpublic String getKerberosServicePrincipal()
public void setKerberosServicePrincipal(String principal)
principal
- the kerberos service principal.public boolean isValidateKerberosSignature()
public void setValidateKerberosSignature(boolean validate)
validate
- boolean flag to enable or disable validate krb signature.public void setUsers(List usercredentials)
usercredentials
- list of PasswordCredential
objects.public List getUsers()
PasswordCredential
s of the user.PasswordCredential
objects.public String getEncryptionAlgorithm()
public void setEncryptionAlgorithm(String algorithm)
algorithm
- the encryption algorithmpublic int getEncryptionStrength()
public void setEncryptionStrength(int encryptionStrength)
encryptionStrength
- the encryption data strength.public String getSigningRefType()
public void setSigningRefType(String refType)
refType
- the signing reference type.public String getAuthenticationChain()
public void setAuthenticationChain(String authChain)
authChain
- the authentication chain name.public boolean isUserTokenDetectReplayEnabled()
public void setDetectUserTokenReplay(boolean enable)
enable
- true if the detection of user token replay is enabled.public boolean isMessageReplayDetectionEnabled()
public void setMessageReplayDetection(boolean enable)
enable
- true if the detection of the message replay is enabled.public List getSignedElements()
public void setSignedElements(List signedElements)
signedElements
- the signed elements.Copyright © 2010–2025 Open Identity Platform Community. All rights reserved.