Class FileSessionProtection

java.lang.Object

io.fluxzero.idp.bff.session.FileSessionProtection

All Implemented Interfaces:

SessionProtection

public final class FileSessionProtection
extends Object
implements SessionProtection

AES-256-GCM session protection with a lazily supplied, application-scoped key ring. The platform mounts the same ring on all replicas. The active key writes; retained keys read. The HTTP integration loads this ring on first use, retries failed loads, and retains a successful ring for its lifetime. Replace the application process to adopt a new active key or retained-key set.

Nested Class Summary

Nested classes/interfaces inherited from interface SessionProtection

SessionProtection.Context, SessionProtection.SealedValue

Constructor Summary

Constructors

Constructor	Description
FileSessionProtection(Path file)

Method Summary

Modifier and Type	Method	Description
SecretValue	open(SessionProtection.Context context, SessionProtection.SealedValue ciphertext)
SessionProtection.SealedValue	seal(SessionProtection.Context context, SecretValue plaintext)
String	toString()

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Constructor Details

FileSessionProtection

public FileSessionProtection(Path file)

Method Details

seal

public SessionProtection.SealedValue seal(SessionProtection.Context context,
 SecretValue plaintext)

Specified by:

seal in interface SessionProtection

open

public SecretValue open(SessionProtection.Context context,
 SessionProtection.SealedValue ciphertext)

Specified by:

open in interface SessionProtection

toString

public String toString()

Overrides:

toString in class Object