Uses of Record Class
zeroecho.pki.server.RealmId

Packages that use RealmId

Package	Description
zeroecho.pki.server
zeroecho.pki.server.acme
zeroecho.pki.server.enrollment
zeroecho.pki.server.spi

Uses of RealmId in zeroecho.pki.server

Methods in zeroecho.pki.server that return RealmId

Modifier and Type	Method	Description
RealmId	AuthorizationEngine.Request.realmId()	Returns the value of the realmId record component.
RealmId	CertificateIdentityEvidence.realmId()	Returns the value of the realmId record component.
RealmId	DisclosureService.Capability.realmId()	Returns the value of the realmId record component.
RealmId	OcspResponderService.Responder.realmId()	Returns the value of the realmId record component.
RealmId	Permission.Scope.realmId()	Returns the value of the realmId record component.
RealmId	RepositoryAliasService.Record.realmId()	Returns the value of the realmId record component.
RealmId	ServerControlStore.RealmRecord.realmId()	Returns the value of the realmId record component.
RealmId	ServerOperationGateway.Request.realmId()	Returns the value of the realmId record component.
RealmId	ServerRealmConfiguration.realmId()	Returns the value of the realmId record component.

Methods in zeroecho.pki.server with parameters of type RealmId

Modifier and Type	Method	Description
String	OperationSecurityDescriptors.commitment(RealmId realmId, PkiOperation operation, Permission.Resource resource)	Computes an exact deterministic safe PKI-operation commitment.
String	OperationSecurityDescriptors.commitment(RealmId realmId, AdministrativeOperation operation, Permission.Resource resource)	Computes an exact deterministic commitment for either closed operation family.
static CertificateIdentityEvidence	CertificateIdentityEvidence.fromCertificate(RealmId realmId, X509Certificate certificate)	Computes evidence from an already validated end-client certificate.
static String	RepositoryAliasService.idFor(RealmId realmId, PkiId authorityId, RepositoryAliasService.Type type)	Returns the deterministic alias ID for one realm, authority, and type.

Constructors in zeroecho.pki.server with parameters of type RealmId

Modifier	Constructor	Description
	Capability(String capabilityId, RealmId realmId, PkiId objectId, String action, byte[] tokenCommitment, Instant expiresAt, boolean revoked)	Creates compatibility metadata with a non-secret system issuer.
	Capability(String capabilityId, RealmId realmId, PkiId objectId, String action, String issuerPrincipalId, byte[] tokenCommitment, Instant expiresAt, boolean revoked)	Creates capability metadata in the delivered state for embedded compatibility.
	Capability(String capabilityId, RealmId realmId, PkiId objectId, String action, String issuerPrincipalId, byte[] tokenCommitment, Instant expiresAt, DisclosureService.DeliveryState deliveryState, boolean revoked)	Validates and snapshots capability metadata.
	CertificateIdentityEvidence(RealmId realmId, String certificateSha256, String canonicalKeySha256, Set<String> legacySpkiSha256, String issuerSerialSha256)	Validates fixed-size commitments and snapshots at most three SPKI hashes.
	DisclosureService(RealmId realmId, ServerControlStore store, DisclosureService.Defaults defaults, Clock clock, SecureRandom random, AuditSink auditSink)	Creates a durable disclosure service with an injected random source and clock.
	OcspResponderService(RealmId realmId, ServerControlStore control, PkiRepository repository, X509AlgorithmBindingRegistry bindings, Optional<OcspResponseService> signing, Clock clock)	Binds responder control to one realm and one authoritative PKI repository.
	RealmRecord(RealmId realmId, String displayName, AuthorityExposurePolicy exposure, String authorizationCommitment, String approvalCommitment, String extendedApprovalCommitment, String disclosureCommitment, MetadataStoreId controlStoreId)	Validates finite realm control metadata.
	Record(String aliasId, RealmId realmId, PkiId authorityId, RepositoryAliasService.Type type, PkiId targetObjectId, Optional<PkiId> issuerId, Optional<PkiId> pathId, String targetCommitment, Instant createdAt, Instant updatedAt, String actorPrincipalId, RepositoryAliasService.State state, String recordCommitment)	Validates exact alias identity and commitments.
	RepositoryAliasService(RealmId realmId, ServerControlStore store, PkiRepository repository, DisclosureService disclosure, Clock clock, AuditSink auditSink)	Creates a repository alias authority over one realm control store.
	Request(RealmId realmId, AuthorityExposurePolicy exposure, SecurityPrincipal principal, Permission.Action action, Permission.Resource resource, Permission.Relationship relationship, Permission.DataView dataView, Permission.Context context, List<Permission.Grant> grants, Set<String> breakGlassGrantIds)	Validates and snapshots the authorization input.
	Request(RealmId realmId, String principalId, PkiOperation operation, Permission.Resource resource, Permission.Relationship relationship, Permission.Context context, Optional<String> approvalId, String correlationId)	Wraps an existing PKI operation for source-compatible embedded callers.
	Request(RealmId realmId, String principalId, AdministrativeAuthenticationMode authenticationMode, Optional<String> transportPrincipalId, Optional<CertificateIdentityEvidence> credentialEvidence, AdministrativeOperation operation, Permission.Resource resource, Permission.Relationship relationship, Permission.Context context, Optional<String> approvalId, String correlationId)	Validates the immutable request.
	Request(RealmId realmId, String principalId, AdministrativeAuthenticationMode authenticationMode, Optional<String> transportPrincipalId, AdministrativeOperation operation, Permission.Resource resource, Permission.Relationship relationship, Permission.Context context, Optional<String> approvalId, String correlationId)	Creates an embedded request with no enrollment credential evidence.
	Request(RealmId realmId, String principalId, AdministrativeOperation operation, Permission.Resource resource, Permission.Relationship relationship, Permission.Context context, Optional<String> approvalId, String correlationId)	Creates a direct-mTLS request for existing embedded control callers.
	Responder(String responderId, String alias, RealmId realmId, PkiId authorityId, PkiId issuerId, OcspResponderService.SigningMode signingMode, PkiId responderCredentialId, KeyRef signingKeyRef, PkiId chainPathId, String signatureAlgorithm, Optional<String> signatureBindingId, String signatureBindingCommitment, OcspResponseService.ResponderId responderIdForm, Duration responseValidity, OcspResponderService.NoncePolicy noncePolicy, int maximumNonceBytes, Set<OcspResponseService.CertIdHash> acceptedHashes, int maximumRequestBytes, int maximumEntries, Duration cacheLifetime, OcspResponderService.RequestAuthenticationMode requestAuthenticationMode, Optional<OcspResponderService.RequesterTrustPolicy> requesterTrustPolicy, OcspResponderService.State state, Instant createdAt, String configurationCommitment)	Validates all finite immutable dependencies and the record commitment.
	Scope(RealmId realmId, Optional<PkiId> authorityId, Optional<PkiId> issuerId, Optional<String> profileId)	Creates a scope without an OCSP responder dimension.
	Scope(RealmId realmId, Optional<PkiId> authorityId, Optional<PkiId> issuerId, Optional<String> profileId, Optional<String> responderId)	Validates the exact finite scope.
	ServerControlOperationExecutor(PkiOperationExecutor pkiExecutor, RealmId realmId, AuthorityExposurePolicy exposure, ServerControlStore store, RoleTemplateCatalog roles, AuthorizationEngine authorization, ApprovalService approvals, BreakGlassService breakGlass, DisclosureService disclosure, CredentialPublicationGate credentialPublication, AuditorViews auditorViews, Optional<RepositoryAliasService> repositoryAliases, OperationSecurityDescriptors descriptors, Map<OperationSecurityDescriptors.ApprovalCategory, ApprovalService.Policy> approvalPolicies)	Creates the one control dispatcher over existing durable authorities.
	ServerOperationGateway(RealmId realmId, AuthorityExposurePolicy exposure, ServerControlStore control, RoleTemplateCatalog roles, AuthorizationEngine authorization, ApprovalService approvals, BreakGlassService breakGlass, DisclosureService disclosure, CredentialPublicationGate credentialPublication, AuditorViews auditorViews, Optional<RepositoryAliasService> repositoryAliases, OperationSecurityDescriptors descriptors, PkiOperationExecutor executor, ServerOperationGateway.SigningExecutor signingExecutor, PkiResourceScopeResolver resourceScopes, Map<OperationSecurityDescriptors.ApprovalCategory, ApprovalService.Policy> approvalPolicies, Function<String, IssuanceApprovalRequirement> issuanceApprovalRequirements, Clock clock, AuditSink auditSink, Runnable openCheck)	Creates one gateway whose reconciliation is driven only by periodic polling.
	ServerOperationGateway(RealmId realmId, AuthorityExposurePolicy exposure, ServerControlStore control, RoleTemplateCatalog roles, AuthorizationEngine authorization, ApprovalService approvals, BreakGlassService breakGlass, DisclosureService disclosure, CredentialPublicationGate credentialPublication, AuditorViews auditorViews, Optional<RepositoryAliasService> repositoryAliases, OperationSecurityDescriptors descriptors, PkiOperationExecutor executor, ServerOperationGateway.SigningExecutor signingExecutor, PkiResourceScopeResolver resourceScopes, Map<OperationSecurityDescriptors.ApprovalCategory, ApprovalService.Policy> approvalPolicies, Function<String, IssuanceApprovalRequirement> issuanceApprovalRequirements, Clock clock, AuditSink auditSink, Runnable reconciliationWake, Runnable openCheck)	Creates one gateway bound to one realm and one session executor.
	ServerRealmConfiguration(RealmId realmId, String displayName, CredentialConfirmationProofPolicy confirmationProofPolicy, PkiSessionConfiguration pkiSessionConfiguration, AuthorityExposurePolicy authorityExposure, String authorizationCommitment, String approvalCommitment, String extendedApprovalCommitment, String disclosureCommitment, DisclosureService.Defaults disclosureDefaults, Path controlLogPath, MetadataStoreId controlStoreId, Map<OperationSecurityDescriptors.ApprovalCategory, ApprovalService.Policy> approvalPolicies)	Validates and snapshots the complete configuration before allocation.

Uses of RealmId in zeroecho.pki.server.acme

Methods in zeroecho.pki.server.acme that return RealmId

Modifier and Type	Method	Description
RealmId	AcmeState.Directory.realmId()	Returns the value of the realmId record component.

Constructors in zeroecho.pki.server.acme with parameters of type RealmId

Modifier	Constructor	Description
	Directory(String directoryId, String alias, int revision, RealmId realmId, PkiId authorityId, CertificateProfileRef profile, String enrollmentProfileId, PkiId issuerId, PkiId issuancePathId, String issuancePathCommitment, Set<AcmeState.IdentifierType> identifierTypes, Set<String> dnsNamespaces, Duration maximumValidity, Set<String> publicKeyAlgorithms, Set<String> x509BindingPolicies, Set<AcmeState.ChallengeType> challengeTypes, Set<String> challengeProviderIds, Optional<String> eabProviderId, boolean eabRequired, CredentialConfirmationPolicy confirmationPolicy, String confirmationPolicyCommitment, AcmeState.DirectoryStatus status, String policyCommitment, Instant createdAt, String commitment)	Validates the complete frozen directory revision.

Uses of RealmId in zeroecho.pki.server.enrollment

Methods in zeroecho.pki.server.enrollment that return RealmId

Modifier and Type	Method	Description
RealmId	CmpTransaction.Frozen.realmId()	Returns the value of the realmId record component.
RealmId	EnrollmentIdentityAliases.Snapshot.realmId()	Returns the value of the realmId record component.
RealmId	EnrollmentTransaction.Intent.realmId()	Returns the value of the realmId record component.

Constructors in zeroecho.pki.server.enrollment with parameters of type RealmId

Modifier	Constructor	Description
	EnrollmentIdentityAliases(RealmId realmId, PkiServerConfiguration.Authentication authentication)	Selects only end-client mappings for the configured administrative topology.
	Frozen(RealmId realmId, EnrollmentTransaction.Source source, EnrollmentTransaction.Requester requester, PkiId authorityId, CertificateProfileRef profile, PkiId issuerId, PkiId pathId, String pathCommitment, String transactionSha256, String originalWireSha256, int originalType, BigInteger requestId, Optional<String> requestSha256, boolean implicitConfirmation, Instant createdAt, Instant expiresAt, int maximumResponseBytes)	Rejects mechanism, authority, request and response-capacity inconsistencies.
	Intent(RealmId realmId, EnrollmentTransaction.Source source, EnrollmentTransaction.Requester requester, String transactionId, EnrollmentTransaction.Operation operation, PkiId requestId, X509EnrollmentPayload.Kind requestKind, String requestSha256, int requestBytes, PkiId authorityId, CertificateProfileRef profile, PkiId issuerId, PkiId pathId, String pathCommitment, Optional<Validity> validity, Optional<PkiId> predecessorId, Optional<String> predecessorSha256, OperationSecurityDescriptors.ApprovalCategory approvalCategory, Optional<ApprovalService.Policy> approvalPolicy, Optional<EnrollmentTransaction.ArtifactBinding> artifact, Instant createdAt, Instant expiresAt)	Validates complete, bounded, internally consistent admission references.
	Snapshot(RealmId realmId, Set<String> principalIds)	Validates and snapshots the bounded alias set in O(A log A) time and O(A) memory.

Uses of RealmId in zeroecho.pki.server.spi

Methods in zeroecho.pki.server.spi that return RealmId

Modifier and Type	Method	Description
RealmId	PkiServerAuthenticationContext.realmId()	Returns the value of the realmId record component.

Constructors in zeroecho.pki.server.spi with parameters of type RealmId

Modifier	Constructor	Description
	PkiServerAuthenticationContext(List<X509Certificate> peerCertificates, String protocol, String cipherSuite, String requestId, RealmId realmId)	Creates a direct-mTLS context without forwarded identity headers.
	PkiServerAuthenticationContext(List<X509Certificate> peerCertificates, String protocol, String cipherSuite, String requestId, RealmId realmId, Map<String, List<String>> requestHeaders)	Validates and snapshots the finite authentication context.