Uses of Class
co.ankatech.ankasecure.keymanagement.WorkloadCredential

Packages that use WorkloadCredential

Package	Description
co.ankatech.ankasecure.keymanagement

Uses of WorkloadCredential in co.ankatech.ankasecure.keymanagement

Methods in co.ankatech.ankasecure.keymanagement that return WorkloadCredential

Modifier and Type	Method	Description
static WorkloadCredential	WorkloadCredential.federated(UUID workloadId, Supplier<String> externalToken)	A federated workload: an external issuer the platform trusts mints a token for it, and the SDK presents that token as its client_assertion.
static WorkloadCredential	WorkloadCredential.federatedTokenCommand(UUID workloadId, List<String> command)	A federated workload whose external token is printed by a command (a cloud CLI, a credential helper).
static WorkloadCredential	WorkloadCredential.federatedTokenFile(UUID workloadId, Path tokenFile)	A federated workload whose external token is written to a file by the system that mints it (a Kubernetes projected service-account token, a CI runner's identity token file).
static WorkloadCredential	WorkloadCredential.privateKeyJwt(UUID workloadId, Path privateJwkFile)	A workload that signs its assertions with the private key held in a file.
static WorkloadCredential	WorkloadCredential.privateKeyJwt(UUID workloadId, PrivateKey privateKey)	A workload that signs its assertions with a private key the caller holds as a JCA key, for example one kept in a hardware-backed KeyStore.

Methods in co.ankatech.ankasecure.keymanagement with parameters of type WorkloadCredential

Modifier and Type	Method	Description
AuthenticatedKeyManagementSdk	AnkaSecureKeyManagementSdk.authenticateWorkload(WorkloadCredential credential)	Authenticates an administrative workload and returns an immutable SDK instance whose every request is DPoP-bound (RFC 9449).