Class PublicRepositoryGateway

java.lang.Object

zeroecho.pki.server.PublicRepositoryGateway

public final class PublicRepositoryGateway
extends Object

Transport-neutral, read-only disclosed repository gateway.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static final record	PublicRepositoryGateway.Access	Safe request identity, without certificate or bearer-token logging fields.
static final record	PublicRepositoryGateway.Authority	Safe public authority metadata.
static enum	PublicRepositoryGateway.CacheClass	Cache policy classes with distinct privacy semantics.
static final record	PublicRepositoryGateway.Chain	Exact explicit chain path represented as ordered immutable certificate links.
static final record	PublicRepositoryGateway.Content	Lifecycle-owned binary response descriptor.

Method Summary

Modifier and Type	Method	Description
List<PublicRepositoryGateway.Authority>	authorities(Optional<PkiId> after, int limit)	Returns one bounded keyset page of exposed public authority metadata.
PublicRepositoryGateway.Authority	authority(PkiId authorityId)	Returns one exact exposed authority.
PublicRepositoryGateway.Chain	chainPath(PkiId authorityId, PkiId issuerId, PkiId pathId, PublicRepositoryGateway.Access access)	Resolves one explicit chain path without constructing or preferring a path.
PublicRepositoryGateway.Content	credential(PkiId credentialId, PublicRepositoryGateway.Access access)	Opens one exact leaf certificate; object identity alone grants no access.
PublicRepositoryGateway.Chain	currentChain(PkiId authorityId, PublicRepositoryGateway.Access access)	Resolves the stable chain route only through CURRENT_CHAIN metadata.
PublicRepositoryGateway.Content	currentCrl(PkiId authorityId, PublicRepositoryGateway.Access access)	Resolves the stable current-CRL route only through CURRENT_CRL metadata.
PublicRepositoryGateway.Content	currentDeltaCrl(PkiId authorityId, PublicRepositoryGateway.Access access)	Resolves the stable current-delta-CRL route only through CURRENT_DELTA_CRL metadata.
PublicRepositoryGateway.Content	issuerCertificate(PkiId authorityId, PkiId issuerId, PublicRepositoryGateway.Access access)	Opens one exact issuer-generation certificate after disclosure enforcement.
PublicRepositoryGateway.Content	statusObject(PkiId statusObjectId, PublicRepositoryGateway.Access access)	Opens one exact status object after role and disclosure checks.

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Details

authorities

public List<PublicRepositoryGateway.Authority> authorities(Optional<PkiId> after,
 int limit)

Returns one bounded keyset page of exposed public authority metadata.

Parameters:

after - optional exclusive authority cursor

limit - positive maximum result count

Returns:

bounded immutable authority page

authority

public PublicRepositoryGateway.Authority authority(PkiId authorityId)

Returns one exact exposed authority.

Parameters:

authorityId - exact exposed authority identifier

Returns:

safe public authority metadata

issuerCertificate

public PublicRepositoryGateway.Content issuerCertificate(PkiId authorityId,
 PkiId issuerId,
 PublicRepositoryGateway.Access access)

Opens one exact issuer-generation certificate after disclosure enforcement.

Parameters:

authorityId - exact exposed authority identifier

issuerId - exact issuer generation

access - authenticated or capability request authority

Returns:

lifecycle-owned certificate response

chainPath

public PublicRepositoryGateway.Chain chainPath(PkiId authorityId,
 PkiId issuerId,
 PkiId pathId,
 PublicRepositoryGateway.Access access)

Resolves one explicit chain path without constructing or preferring a path.

Parameters:

authorityId - exact exposed authority identifier

issuerId - exact issuer generation

pathId - exact chain path

access - authenticated or capability request authority

Returns:

exact disclosed chain path

currentChain

public PublicRepositoryGateway.Chain currentChain(PkiId authorityId,
 PublicRepositoryGateway.Access access)

Resolves the stable chain route only through CURRENT_CHAIN metadata.

Parameters:

authorityId - exact exposed authority identifier

access - authenticated or capability request authority

Returns:

currently aliased disclosed chain path

credential

public PublicRepositoryGateway.Content credential(PkiId credentialId,
 PublicRepositoryGateway.Access access)

Opens one exact leaf certificate; object identity alone grants no access.

Parameters:

credentialId - exact credential identifier

access - authenticated or capability request authority

Returns:

lifecycle-owned certificate response

statusObject

public PublicRepositoryGateway.Content statusObject(PkiId statusObjectId,
 PublicRepositoryGateway.Access access)

Opens one exact status object after role and disclosure checks.

Parameters:

statusObjectId - exact status-object identifier

access - authenticated or capability request authority

Returns:

lifecycle-owned status-object response

currentDeltaCrl

public PublicRepositoryGateway.Content currentDeltaCrl(PkiId authorityId,
 PublicRepositoryGateway.Access access)

Resolves the stable current-delta-CRL route only through CURRENT_DELTA_CRL metadata.

Parameters:

authorityId - exact exposed authority identifier

access - authenticated or capability request authority

Returns:

lifecycle-owned current delta-CRL response

currentCrl

public PublicRepositoryGateway.Content currentCrl(PkiId authorityId,
 PublicRepositoryGateway.Access access)

Resolves the stable current-CRL route only through CURRENT_CRL metadata.

Parameters:

authorityId - exact exposed authority identifier

access - authenticated or capability request authority

Returns:

lifecycle-owned current CRL response