Record Class ServerRealmConfiguration

java.lang.Object

java.lang.Record

zeroecho.pki.server.ServerRealmConfiguration

Record Components:

realmId - canonical realm identity

displayName - safe finite administrative display name

confirmationProofPolicy - immutable credential-confirmation proof policy

pkiSessionConfiguration - shared PKI session configuration

authorityExposure - explicit process authority-exposure policy

authorizationCommitment - SHA-256 commitment to authorization configuration

approvalCommitment - SHA-256 commitment to the HIGH_RISK approval policy

extendedApprovalCommitment - SHA-256 commitment to all non-HIGH_RISK approval policies

disclosureCommitment - SHA-256 commitment to disclosure defaults

disclosureDefaults - safe object-disclosure defaults

controlLogPath - dedicated server-control metadata log

controlStoreId - explicit durable server-control identity

approvalPolicies - closed approval policies by operation category

public record ServerRealmConfiguration(RealmId realmId, String displayName, CredentialConfirmationProofPolicy confirmationProofPolicy, PkiSessionConfiguration pkiSessionConfiguration, AuthorityExposurePolicy authorityExposure, String authorizationCommitment, String approvalCommitment, String extendedApprovalCommitment, String disclosureCommitment, DisclosureService.Defaults disclosureDefaults, Path controlLogPath, MetadataStoreId controlStoreId, Map<OperationSecurityDescriptors.ApprovalCategory, ApprovalService.Policy> approvalPolicies)
extends Record

Immutable transport-neutral configuration for one server realm.

The realm identity and server-control identity are explicit values and are never derived from paths, listeners, display names, or Java types. Provider configuration values may contain sensitive references and must not be logged or rendered.

Constructor Summary

Constructors

Constructor

Description

ServerRealmConfiguration(RealmId realmId, String displayName, CredentialConfirmationProofPolicy confirmationProofPolicy, PkiSessionConfiguration pkiSessionConfiguration, AuthorityExposurePolicy authorityExposure, String authorizationCommitment, String approvalCommitment, String extendedApprovalCommitment, String disclosureCommitment, DisclosureService.Defaults disclosureDefaults, Path controlLogPath, MetadataStoreId controlStoreId, Map<OperationSecurityDescriptors.ApprovalCategory, ApprovalService.Policy> approvalPolicies)

Validates and snapshots the complete configuration before allocation.

Method Summary

Modifier and Type	Method	Description
String	approvalCommitment()	Returns the value of the approvalCommitment record component.
Map<OperationSecurityDescriptors.ApprovalCategory, ApprovalService.Policy>	approvalPolicies()	Returns the value of the approvalPolicies record component.
AuthorityExposurePolicy	authorityExposure()	Returns the value of the authorityExposure record component.
String	authorizationCommitment()	Returns the value of the authorizationCommitment record component.
CredentialConfirmationProofPolicy	confirmationProofPolicy()	Returns the value of the confirmationProofPolicy record component.
Path	controlLogPath()	Returns the value of the controlLogPath record component.
MetadataStoreId	controlStoreId()	Returns the value of the controlStoreId record component.
String	disclosureCommitment()	Returns the value of the disclosureCommitment record component.
DisclosureService.Defaults	disclosureDefaults()	Returns the value of the disclosureDefaults record component.
String	displayName()	Returns the value of the displayName record component.
final boolean	equals(Object o)	Indicates whether some other object is "equal to" this one.
String	extendedApprovalCommitment()	Returns the value of the extendedApprovalCommitment record component.
static String	extendedApprovalCommitment(Map<OperationSecurityDescriptors.ApprovalCategory, ApprovalService.Policy> approvalPolicies)	Computes the canonical tamper-evidence commitment over every approval policy other than OperationSecurityDescriptors.ApprovalCategory.HIGH_RISK (which the durable record commits separately).
final int	hashCode()	Returns a hash code value for this object.
PkiSessionConfiguration	pkiSessionConfiguration()	Returns the value of the pkiSessionConfiguration record component.
RealmId	realmId()	Returns the value of the realmId record component.
final String	toString()	Returns a string representation of this record class.

Methods inherited from class Object

clone, finalize, getClass, notify, notifyAll, wait, wait, wait

Constructor Details

ServerRealmConfiguration

public ServerRealmConfiguration(RealmId realmId,
 String displayName,
 CredentialConfirmationProofPolicy confirmationProofPolicy,
 PkiSessionConfiguration pkiSessionConfiguration,
 AuthorityExposurePolicy authorityExposure,
 String authorizationCommitment,
 String approvalCommitment,
 String extendedApprovalCommitment,
 String disclosureCommitment,
 DisclosureService.Defaults disclosureDefaults,
 Path controlLogPath,
 MetadataStoreId controlStoreId,
 Map<OperationSecurityDescriptors.ApprovalCategory, ApprovalService.Policy> approvalPolicies)

Validates and snapshots the complete configuration before allocation.

Method Details

extendedApprovalCommitment

public static String extendedApprovalCommitment(Map<OperationSecurityDescriptors.ApprovalCategory, ApprovalService.Policy> approvalPolicies)

Computes the canonical tamper-evidence commitment over every approval policy other than OperationSecurityDescriptors.ApprovalCategory.HIGH_RISK (which the durable record commits separately).

The commitment is a SHA-256 digest over the category-name-sorted map of CATEGORY=policyCommitment entries, so any future approval category is absorbed by the same single field without a durable-record format change. An empty map yields the digest of the empty string.

Parameters:

approvalPolicies - closed approval policies by operation category

Returns:

canonical extended approval commitment

toString

public final String toString()

Returns a string representation of this record class. The representation contains the name of the class, followed by the name and value of each of the record components.

Specified by:

toString in class Record

Returns:

a string representation of this object

hashCode

public final int hashCode()

Returns a hash code value for this object. The value is derived from the hash code of each of the record components.

Specified by:

hashCode in class Record

Returns:

a hash code value for this object

equals

public final boolean equals(Object o)

Indicates whether some other object is "equal to" this one. The objects are equal if the other object is of the same class and if all the record components are equal. All components in this record class are compared with Objects::equals(Object,Object).

Specified by:

equals in class Record

Parameters:

o - the object with which to compare

Returns:

true if this object is the same as the o argument; false otherwise.

realmId

public RealmId realmId()

Returns the value of the realmId record component.

Returns:

the value of the realmId record component

displayName

public String displayName()

Returns the value of the displayName record component.

Returns:

the value of the displayName record component

confirmationProofPolicy

public CredentialConfirmationProofPolicy confirmationProofPolicy()

Returns the value of the confirmationProofPolicy record component.

Returns:

the value of the confirmationProofPolicy record component

pkiSessionConfiguration

public PkiSessionConfiguration pkiSessionConfiguration()

Returns the value of the pkiSessionConfiguration record component.

Returns:

the value of the pkiSessionConfiguration record component

authorityExposure

public AuthorityExposurePolicy authorityExposure()

Returns the value of the authorityExposure record component.

Returns:

the value of the authorityExposure record component

authorizationCommitment

public String authorizationCommitment()

Returns the value of the authorizationCommitment record component.

Returns:

the value of the authorizationCommitment record component

approvalCommitment

public String approvalCommitment()

Returns the value of the approvalCommitment record component.

Returns:

the value of the approvalCommitment record component

extendedApprovalCommitment

public String extendedApprovalCommitment()

Returns the value of the extendedApprovalCommitment record component.

Returns:

the value of the extendedApprovalCommitment record component

disclosureCommitment

public String disclosureCommitment()

Returns the value of the disclosureCommitment record component.

Returns:

the value of the disclosureCommitment record component

disclosureDefaults

public DisclosureService.Defaults disclosureDefaults()

Returns the value of the disclosureDefaults record component.

Returns:

the value of the disclosureDefaults record component

controlLogPath

public Path controlLogPath()

Returns the value of the controlLogPath record component.

Returns:

the value of the controlLogPath record component

controlStoreId

public MetadataStoreId controlStoreId()

Returns the value of the controlStoreId record component.

Returns:

the value of the controlStoreId record component

approvalPolicies

public Map<OperationSecurityDescriptors.ApprovalCategory, ApprovalService.Policy> approvalPolicies()

Returns the value of the approvalPolicies record component.

Returns:

the value of the approvalPolicies record component