Uses of Record Class
zeroecho.pki.server.SecurityPrincipal

Packages that use SecurityPrincipal

Package	Description
zeroecho.pki.server
zeroecho.pki.server.http

Uses of SecurityPrincipal in zeroecho.pki.server

Methods in zeroecho.pki.server that return SecurityPrincipal

Modifier and Type	Method	Description
SecurityPrincipal	AuthorizationEngine.Request.principal()	Returns the value of the principal record component.
SecurityPrincipal	ServerControlOperation.RegisterPrincipal.principal()	Returns the value of the principal record component.
SecurityPrincipal	ServerRealmContext.principal(String principalId)	Resolves one persisted principal for transport authentication.
SecurityPrincipal	ServerControlStore.requirePrincipal(String principalId)	Returns one principal or fails without revealing storage details.
SecurityPrincipal	ServerRealmContext.setPrincipalEnabled(String principalId, boolean enabled, String actorPrincipalId)	Changes only the enabled state of an existing principal.

Methods in zeroecho.pki.server that return types with arguments of type SecurityPrincipal

Modifier and Type	Method	Description
Optional<SecurityPrincipal>	PublicRepositoryGateway.Access.principal()	Returns the value of the principal record component.
ServerControlStore.Page<SecurityPrincipal>	ServerControlStore.principals(int offset, int limit)	Returns a bounded stable page of principals in metadata-key order.

Methods in zeroecho.pki.server with parameters of type SecurityPrincipal

Modifier and Type	Method	Description
void	ServerControlStore.createPrincipal(SecurityPrincipal value)	Creates one principal.
void	ServerRealmContext.createPrincipal(SecurityPrincipal principal, String actorPrincipalId)	Creates a principal and records only safe administrative audit metadata.
boolean	Permission.Resource.ownedBy(SecurityPrincipal principal)	Tests whether the principal owns this object.
AuditorViews.Pii	AuditorViews.pii(AuditorViews.Source source, SecurityPrincipal principal, String reasonReference, boolean metadataFullAuthorized, boolean piiAuthorized)	Returns PII only with explicit reason-bound authorization and records access safely.
void	ServerControlStore.replacePrincipal(SecurityPrincipal current, SecurityPrincipal updated)	Replaces one exact principal.

Method parameters in zeroecho.pki.server with type arguments of type SecurityPrincipal

Modifier and Type	Method	Description
DisclosureService.Decision	DisclosureService.decide(PkiId objectId, Optional<SecurityPrincipal> principal, boolean ownerRelationship, boolean administrativePermission, Optional<byte[]> capabilityToken)	Evaluates direct retrieval separately from search authorization.
DisclosureService.Decision	DisclosureService.decideRepository(PkiId objectId, Optional<SecurityPrincipal> principal, boolean ownerRelationship, boolean administrativePermission, Optional<String> bearer)	Evaluates public repository retrieval using a point-addressable bearer credential.

Constructors in zeroecho.pki.server with parameters of type SecurityPrincipal

Modifier	Constructor	Description
	RegisterPrincipal(SecurityPrincipal principal)	Validates the operation's immutable input.
	Request(RealmId realmId, AuthorityExposurePolicy exposure, SecurityPrincipal principal, Permission.Action action, Permission.Resource resource, Permission.Relationship relationship, Permission.DataView dataView, Permission.Context context, List<Permission.Grant> grants, Set<String> breakGlassGrantIds)	Validates and snapshots the authorization input.

Constructor parameters in zeroecho.pki.server with type arguments of type SecurityPrincipal

Modifier	Constructor	Description
	Access(Optional<SecurityPrincipal> principal, Optional<String> capabilityBearer, String correlationId)	Validates mutually exclusive principal and capability authority.

Uses of SecurityPrincipal in zeroecho.pki.server.http

Method parameters in zeroecho.pki.server.http with type arguments of type SecurityPrincipal

Modifier and Type	Method	Description
static AdministrativeAuthenticator	AdministrativeAuthenticator.create(PkiServerConfiguration.Authentication configuration, Function<String, SecurityPrincipal> principalResolver, BiFunction<String, String, AuthorizationEngine.Decision> forwardingAuthorization, Clock clock, ClassLoader loader)	Creates the configured authentication composition before listener startup.

Constructor parameters in zeroecho.pki.server.http with type arguments of type SecurityPrincipal

Modifier	Constructor	Description
	MutualTlsAuthenticator(List<PkiServerConfiguration.ClientCertificateMapping> mappings, Function<String, SecurityPrincipal> principalResolver, Clock clock)	Creates one immutable principal mapper.