Class KeyRingSessionProtection

java.lang.Object

io.fluxzero.idp.bff.session.KeyRingSessionProtection

All Implemented Interfaces:

SessionProtection

public final class KeyRingSessionProtection
extends Object
implements SessionProtection

AES-256-GCM session protection with a lazily supplied, application-scoped key ring. All replicas use the same ring. The active key writes; retained keys read. The HTTP integration loads this ring on first use, retries failed loads, and retains a successful ring for its lifetime. Replace the application process to adopt a new active key or retained-key set.

Nested Class Summary

Nested classes/interfaces inherited from interface SessionProtection

SessionProtection.Context, SessionProtection.SealedValue

Constructor Summary

Constructors

Constructor	Description
KeyRingSessionProtection(String json)

Method Summary

Modifier and Type	Method	Description
SecretValue	open(SessionProtection.Context context, SessionProtection.SealedValue ciphertext)
SessionProtection.SealedValue	seal(SessionProtection.Context context, SecretValue plaintext)
String	toString()

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Constructor Details

KeyRingSessionProtection

public KeyRingSessionProtection(String json)

Method Details

seal

public SessionProtection.SealedValue seal(SessionProtection.Context context,
 SecretValue plaintext)

Specified by:

seal in interface SessionProtection

open

public SecretValue open(SessionProtection.Context context,
 SessionProtection.SealedValue ciphertext)

Specified by:

open in interface SessionProtection

toString

public String toString()

Overrides:

toString in class Object