Record Class PkiServerConfiguration.Authentication

java.lang.Object

java.lang.Record

zeroecho.pki.server.PkiServerConfiguration.Authentication

Record Components:

mode - exact deployment mode

directClientMappings - direct TLS end-client mappings

proxyTransportMappings - backend TLS proxy mappings

forwardedClientMappings - externally authenticated end-client mappings

trustedProxyPrincipalIds - explicitly admitted infrastructure principals

forwardedCertificateFormat - selected forwarding representation

forwardedCertificateHeaderName - exact leaf header name

forwardedCertificateChainHeaderName - optional exact chain header name

administrativeClientTrust - independent forwarded-client trust provider

maximumForwardedCertificateBytes - maximum decoded leaf size

maximumForwardedChainBytes - maximum aggregate decoded chain size

Enclosing class:

PkiServerConfiguration

public static record PkiServerConfiguration.Authentication(AdministrativeAuthenticationMode mode, List<PkiServerConfiguration.ClientCertificateMapping> directClientMappings, List<PkiServerConfiguration.ClientCertificateMapping> proxyTransportMappings, List<PkiServerConfiguration.ClientCertificateMapping> forwardedClientMappings, Set<String> trustedProxyPrincipalIds, Optional<ForwardedCertificateFormat> forwardedCertificateFormat, Optional<String> forwardedCertificateHeaderName, Optional<String> forwardedCertificateChainHeaderName, Optional<ProviderConfig> administrativeClientTrust, int maximumForwardedCertificateBytes, int maximumForwardedChainBytes)
extends Record

Strict mode-separated administrative client-certificate authentication.

Constructor Summary

Constructors

Constructor

Description

Authentication(AdministrativeAuthenticationMode mode, List<PkiServerConfiguration.ClientCertificateMapping> directClientMappings, List<PkiServerConfiguration.ClientCertificateMapping> proxyTransportMappings, List<PkiServerConfiguration.ClientCertificateMapping> forwardedClientMappings, Set<String> trustedProxyPrincipalIds, Optional<ForwardedCertificateFormat> forwardedCertificateFormat, Optional<String> forwardedCertificateHeaderName, Optional<String> forwardedCertificateChainHeaderName, Optional<ProviderConfig> administrativeClientTrust, int maximumForwardedCertificateBytes, int maximumForwardedChainBytes)

Validates strict mode separation, mappings, headers, and technical bounds.

Method Summary

Modifier and Type	Method	Description
Optional<ProviderConfig>	administrativeClientTrust()	Returns the value of the administrativeClientTrust record component.
List<PkiServerConfiguration.ClientCertificateMapping>	directClientMappings()	Returns the value of the directClientMappings record component.
final boolean	equals(Object o)	Indicates whether some other object is "equal to" this one.
Optional<String>	forwardedCertificateChainHeaderName()	Returns the value of the forwardedCertificateChainHeaderName record component.
Optional<ForwardedCertificateFormat>	forwardedCertificateFormat()	Returns the value of the forwardedCertificateFormat record component.
Optional<String>	forwardedCertificateHeaderName()	Returns the value of the forwardedCertificateHeaderName record component.
List<PkiServerConfiguration.ClientCertificateMapping>	forwardedClientMappings()	Returns the value of the forwardedClientMappings record component.
final int	hashCode()	Returns a hash code value for this object.
int	maximumForwardedCertificateBytes()	Returns the value of the maximumForwardedCertificateBytes record component.
int	maximumForwardedChainBytes()	Returns the value of the maximumForwardedChainBytes record component.
AdministrativeAuthenticationMode	mode()	Returns the value of the mode record component.
List<PkiServerConfiguration.ClientCertificateMapping>	proxyTransportMappings()	Returns the value of the proxyTransportMappings record component.
final String	toString()	Returns a string representation of this record class.
Set<String>	trustedProxyPrincipalIds()	Returns the value of the trustedProxyPrincipalIds record component.

Methods inherited from class Object

clone, finalize, getClass, notify, notifyAll, wait, wait, wait

Constructor Details

Authentication

public Authentication(AdministrativeAuthenticationMode mode,
 List<PkiServerConfiguration.ClientCertificateMapping> directClientMappings,
 List<PkiServerConfiguration.ClientCertificateMapping> proxyTransportMappings,
 List<PkiServerConfiguration.ClientCertificateMapping> forwardedClientMappings,
 Set<String> trustedProxyPrincipalIds,
 Optional<ForwardedCertificateFormat> forwardedCertificateFormat,
 Optional<String> forwardedCertificateHeaderName,
 Optional<String> forwardedCertificateChainHeaderName,
 Optional<ProviderConfig> administrativeClientTrust,
 int maximumForwardedCertificateBytes,
 int maximumForwardedChainBytes)

Validates strict mode separation, mappings, headers, and technical bounds.

Method Details

toString

public final String toString()

Returns a string representation of this record class. The representation contains the name of the class, followed by the name and value of each of the record components.

Specified by:

toString in class Record

Returns:

a string representation of this object

hashCode

public final int hashCode()

Returns a hash code value for this object. The value is derived from the hash code of each of the record components.

Specified by:

hashCode in class Record

Returns:

a hash code value for this object

equals

public final boolean equals(Object o)

Indicates whether some other object is "equal to" this one. The objects are equal if the other object is of the same class and if all the record components are equal. Reference components are compared with Objects::equals(Object,Object); primitive components are compared with the compare method from their corresponding wrapper classes.

Specified by:

equals in class Record

Parameters:

o - the object with which to compare

Returns:

true if this object is the same as the o argument; false otherwise.

mode

public AdministrativeAuthenticationMode mode()

Returns the value of the mode record component.

Returns:

the value of the mode record component

directClientMappings

public List<PkiServerConfiguration.ClientCertificateMapping> directClientMappings()

Returns the value of the directClientMappings record component.

Returns:

the value of the directClientMappings record component

proxyTransportMappings

public List<PkiServerConfiguration.ClientCertificateMapping> proxyTransportMappings()

Returns the value of the proxyTransportMappings record component.

Returns:

the value of the proxyTransportMappings record component

forwardedClientMappings

public List<PkiServerConfiguration.ClientCertificateMapping> forwardedClientMappings()

Returns the value of the forwardedClientMappings record component.

Returns:

the value of the forwardedClientMappings record component

trustedProxyPrincipalIds

public Set<String> trustedProxyPrincipalIds()

Returns the value of the trustedProxyPrincipalIds record component.

Returns:

the value of the trustedProxyPrincipalIds record component

forwardedCertificateFormat

public Optional<ForwardedCertificateFormat> forwardedCertificateFormat()

Returns the value of the forwardedCertificateFormat record component.

Returns:

the value of the forwardedCertificateFormat record component

forwardedCertificateHeaderName

public Optional<String> forwardedCertificateHeaderName()

Returns the value of the forwardedCertificateHeaderName record component.

Returns:

the value of the forwardedCertificateHeaderName record component

forwardedCertificateChainHeaderName

public Optional<String> forwardedCertificateChainHeaderName()

Returns the value of the forwardedCertificateChainHeaderName record component.

Returns:

the value of the forwardedCertificateChainHeaderName record component

administrativeClientTrust

public Optional<ProviderConfig> administrativeClientTrust()

Returns the value of the administrativeClientTrust record component.

Returns:

the value of the administrativeClientTrust record component

maximumForwardedCertificateBytes

public int maximumForwardedCertificateBytes()

Returns the value of the maximumForwardedCertificateBytes record component.

Returns:

the value of the maximumForwardedCertificateBytes record component

maximumForwardedChainBytes

public int maximumForwardedChainBytes()

Returns the value of the maximumForwardedChainBytes record component.

Returns:

the value of the maximumForwardedChainBytes record component