cn.home1.cloud.config.server.security

Class ConfigSecurity

java.lang.Object

cn.home1.cloud.config.server.security.ConfigSecurity

public class ConfigSecurity
extends Object

Constructor Summary

Constructors

Constructor and Description
ConfigSecurity()

Method Summary

Modifier and Type	Method and Description
String	encryptParentPassword(String application, String parentApplication, String parentPassword) Generate a password (token) valid only for given application to access a given parent
void	init()
void	setEncryptorLocator(org.springframework.cloud.config.server.encryption.TextEncryptorLocator encryptorLocator) By default, this is a KeyStoreTextEncryptorLocator instance.
Boolean	verifyParentPassword(String application, String parentApplication, String token, String expectedParentPassword) Verify privilege

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ConfigSecurity

public ConfigSecurity()

Method Detail

setEncryptorLocator

@Autowired
public void setEncryptorLocator(org.springframework.cloud.config.server.encryption.TextEncryptorLocator encryptorLocator)

By default, this is a KeyStoreTextEncryptorLocator instance.

init

@PostConstruct
public void init()

encryptParentPassword

public String encryptParentPassword(String application,
                                    String parentApplication,
                                    String parentPassword)

Generate a password (token) valid only for given application to access a given parent

Parameters:

application - from child config

parentApplication - from child config

parentPassword - from child config

Returns:

token valid for application only

verifyParentPassword

public Boolean verifyParentPassword(String application,
                                    String parentApplication,
                                    String token,
                                    String expectedParentPassword)

Verify privilege

Parameters:

application - from context (URL path)

parentApplication - from child config

token - from child config

expectedParentPassword - from parent config (may need to decrypt before verify)

Returns:

whether token, application in token and password in token valid