Package co.ankatech.ankasecure.sdk.auth

package co.ankatech.ankasecure.sdk.auth
  • Class
    Description
    AdmittedIssuer
    An external issuer that passed admission, together with the addresses it resolved to at that moment.
    AuthMechanism
    The credential kind a TokenSource presents at the ANKASecure token endpoint.
    AuthSetting
    Every configuration value the resolution chain reads, and the two names each one answers to.
    AuthSettings
    A read-only view of the configuration the resolution chain consults.
    AuthSettings.Builder
    Assembles an immutable AuthSettings.
    CachingTokenSource
    The caching, single-flight, fail-without-poisoning half of every TokenSource, so the three mechanisms differ in exactly one method and cannot drift apart in the parts that are not about the credential at all.
    ClientCredentialsExchangeException
    A client-credentials exchange with an external authorization server failed, and this names the PHASE it failed in.
    ClientCredentialsExchangeException.Phase
    Where in the exchange the failure happened.
    ClientCredentialsExternalTokenProvider
    Obtains an external token by performing the OAuth 2.0 client-credentials grant against the workload's OWN authorization server, and hands it to the federated assertion path.
    CommandExternalTokenProvider
    Runs a command the operator configured and takes its standard output as the external token.
    ExplicitExternalTokenProvider
    The token itself, held in memory.
    ExternalIssuerAdmission
    Decides whether this process may talk to an external authorization server at all, and refuses locally - before a socket exists - when it may not.
    ExternalIssuerAdmissionException
    An external issuer was refused before any connection was opened, and this names the rule that refused it.
    ExternalIssuerAdmissionException.Rule
    The admission rules, one per way an issuer can be refused.
    ExternalTokenException
    An externally minted token could not be obtained from its configured source.
    ExternalTokenProvider
    Supplies an externally minted token that some OTHER authorization server issued to this workload.
    ExternalTokenSourceKind
    Where an externally minted token comes from.
    FederatedAssertionTokenSource
    Presents a token some OTHER authorization server issued to this workload - Auth0, Entra, Okta, Keycloak, Cognito, or anything else the deployment has declared it trusts.
    FileExternalTokenProvider
    Reads an externally minted token from a file the operator named.
    IssuerHttpClient
    The SECOND HTTP client: the one that talks to the external authorization server, and to nothing else.
    MintedToken
    One ANKASecure access token together with the lifetime the issuer stated for it.
    NativeSecretTokenSource
    Presents an ANKASecure-issued client_secret - the platform's own credential, and the last link of the resolution chain.
    PrivateKeyJwtTokenSource
    Signs an RFC 7523 §2.2 assertion with a key pair this process holds and presents that.
    RejectedEgressAddresses
    The addresses this SDK will never open a connection to, whatever names a configuration or a response supplies.
    SuppliedTokenSource
    An ANKASecure access token the caller already holds, presented as a token source so that everything above TokenSource works identically whether the SDK obtained the token or was handed one.
    TokenSource
    The one seam between "how this workload proves who it is" and "everything the SDK does".
    TokenSourceChain
    Decides which credential the workload will present, from configuration alone.
    TokenSourceChain.Link
    One resolvable credential configuration, in the order they are considered.