All Classes
-
All Classes Interface Summary Class Summary Enum Summary Exception Summary Annotation Types Summary Class Description AbstractAuthenticationDetailsProvider Root interface for classes providing some information needed to authenticate requests.AbstractFederationClient This class gets a security token from the auth service by signing the request with a PKI issued leaf certificate, passing along a temporary public key that is bounded to the the security token, and the leaf certificate.AbstractFederationClientAuthenticationDetailsProviderBuilder<B extends AbstractFederationClientAuthenticationDetailsProviderBuilder<B,P>,P extends AbstractAuthenticationDetailsProvider> Abstract builder base class for authentication details provider extendingAbstractRequestingAuthenticationDetailsProviderAbstractRequestingAuthenticationDetailsProvider Base class for authentication details providers that make remote requests.AbstractRequestingAuthenticationDetailsProvider.Builder<B extends AbstractRequestingAuthenticationDetailsProvider.Builder<B>> Base class for builders.AbstractRequestingAuthenticationDetailsProvider.CachingSessionKeySupplier Helper class to cache the private key as bytes so we don’t have to parse it every time.AbstractResponseIterator<REQUESTBUILDER,REQUEST,RESPONSE> Contains common functionality for classes which will iterate over the results of paginated list operations in a service.AbstractServiceAccountTokenSupplier AbstractTemplateRptPathProvider This abstract path provider has a string template with placeholders like {id}, and provides a way to get a mapping of substitutions to fill in.Algorithm Supported signing algorithms for signed request.ApacheConfigurator A ClientConfigurator implementation that uses the Apache HTTP Connector Provider for the Jersey Client configuration.ApacheConfigurator.NonBuffering ApacheConnectionPoolConfig The configurable parameters for a client’s connection poolApacheConnectionPoolConfig.Builder ApacheConnectionPoolingClientConfigDecorator A ClientConfigDecorator implementation that configure a connection pool for the client for a given ApacheConnectionPoolConfig.ApacheConnectorProperties ApacheConnectorProperties.ApacheConnectorPropertiesBuilder ApacheConnectorPropertiesClientConfigDecorator ApacheInputStreamEntity Class for ApacheInputStream.ApacheProxyConfig Defines the proxy configuration for clients.ApacheProxyConfig.ApacheProxyConfigBuilder ApacheProxyConfigDecorator A ClientConfigDecorator implementation that configures an HTTP or HTTPS proxy for the specific client instance.ApacheUtils Utility functions related to ApacheAsyncHandler<REQUEST,RESPONSE> Callback for asynchronous requests.AuthCachingPolicy AuthCachingPolicy provides the ability to annotation basic auth providers with what level of caching a request signer should try to follow.AuthClientException Authentication client exception.AuthClientForbiddenException Exception thrown when the client failed to authorize to the auth service using configured key suppliersAuthClientNotAuthorizedException Exception thrown when the client failed to authenticate to the auth service using configured key suppliers.AuthenticationDetailsProvider Interface defining a BasicAuthenticationDetailsProvider that also provides the individual components used to create the keyId.AuthnClientFilter Filter that injects authentication headers into the request.AuthServerException Exception thrown when something goes wrong on the authentication server.AuthServerUnavailableException Exception thrown when the authentication server is unavailable.AuthUtils Utilities dealing with authorization.AutoCloseableContentLengthVerifyingInputStream A wrapper over anInputStreamwhose length is known, which verifies that the length of the wrapped stream matches its known length and auto-closes the stream once the content length bytes of the stream have been read.BasicAuthenticationDetailsProvider Base interface used provide required information to sign requests to Oracle Cloud Infrastructure.BasicConfigFileAuthenticationProvider Interface defining AuthenticationDetailsProvider that also returns PEM file path and a list of ClientConfiguratorsBmcException BmcGenericRetrier A generic retrier that can be used to implement custom retry behavior for specific types of calls.BmcGenericWaiter BmcGenericWaiter is a Waiter that provides a generic foundation to build more custom waiters for specific types of calls.BmcGenericWaiter.WaitConditionFailedException Exception indicating the the condition being waited on was not met before the termination condition was satisfied.BmcRequest<B> Request base class.BmcRequest.Builder<T extends BmcRequest<B>,B> Builder interface for requests.BmcResponse CircuitBreakerUtils ClientBuilderBase<B extends ClientBuilderBase,C> Base client builder.ClientConfigDecorator Decorator allowing customization of theClientConfigfor a client.ClientConfiguration This class provides configuration options for client requests.ClientConfiguration.ClientConfigurationBuilder ClientConfigurator Configurator allowing SDK users to customize the underlying REST client.ClientIdFilter Filter that adds the client identifier headers to every request.ClientRuntime This class provides client info that will be sent to the servers as part of each request.ClientThreadFactory A thread factory for use in clients.ClientThreadFactory.Builder CollectionFormatType For list collections that we send in the query string, describes the different ways we can encode it in the query string.CompositeClientConfigurator A client configurator composed of other client configurators.ConfigFileAuthenticationDetailsProvider Implementation ofAuthenticationDetailsProviderthat uses a standard OCI configuration file as an input.ConfigFileAuthenticationDetailsProvider.ConfigFileInstancePrincipalAuthenticationDetailsProvider ConfigFileAuthenticationDetailsProvider.ConfigFileResourcePrincipalAuthenticationDetailsProvider ConfigFileAuthenticationDetailsProvider.ConfigFileSimpleAuthenticationDetailsProvider ConfigFileDelegationTokenUtils This class allows users to load delegation token from the config fileConfigFileReader Simple implementation to read OCI configuration files.ConfigFileReader.ConfigFile ConfigFile represents a simple lookup mechanism for a OCI config file.ConfigurableRefreshOnNotAuthenticatedProvider<T> For authentication providers with refreshable authentication data (e.g. those which wrap a security token received from a remote service), this interface flags that when a caller receives a NotAuthenticated error (HTTP 401) that they can refresh the authentication data and retry their request.ConnectionPoolingApacheConfigurator ApacheConfiguratorconfigurator that applies connection-pool friendly defaults for the Jersey Apache connector.ConnectionPoolingApacheConfigurator.CustomConnectionKeepAliveStrategy Keep-alive strategy that honours the server-provided timeout when present while falling back to the configured default.Constants Consumer<T> Similar to Java8 Consumer.ContentLengthFilter A client request filter to remove content-length.ContentLengthVerifyingInputStream A wrapper over anInputStreamwhose length is known, which verifies that the length of the wrapped stream matches its known length.CrossTenancyRequestClientFilter Filter that injects authentication headers into the request.CrossTenancyRequestConfigurator A configurator that causes the client to set the cross-tenancy request header.CustomerAuthenticationDetailsProvider CustomerKeyIdFormatter Formatter used to create the correct ‘keyId’ needed for signing requests.DefaultConfigurator DefaultConfigurator handles basic configuration of clients under different environments.DefaultConfigurator.NonBuffering AClientConfiguratorfor a client that does not buffer requests in memory.DefaultEndpointConfiguration DefaultEndpointConfiguration provides a way to construct the host endpoint for a service given a template and some variables based on the default Oracle Cloud Infrastructure naming convention.DefaultLeafRptPathProvider This path provider makes sure the behavior happens with the correct fallback.DefaultRequestSigner Class that exposes a way to create aRequestSignerfor use with OCI.DefaultRequestSignerFactory Factory class to create RequestSigner instances.DefaultRetryCondition Class that represents the conditions documented in https://docs.oracle.com/iaas/Content/API/References/apierrors.htm for which the operation may be retried.DefaultRptPathProvider This path provider makes sure the behavior happens with the correct fallback.DefaultServiceAccountTokenProvider Implementation ofServiceAccountTokenSupplierthat allows to pass in a token path to read kubernetes service account token If not set, then use default service account token path /var/run/secrets/kubernetes.io/serviceaccount/tokeDelayStrategy Interface that defines how long to wait between poll attempts.DelegationTokenConfigurator Configurator that injects a delegation token on every request.DelegationTokenConfigurator.DelegationTokenClientFilter Filter that injects delegation token into the request (for either obo or delegation request)DuplicatableInputStream Interface describing an InputStream that can safely be duplicated from its start and used in a thread-safe manner.DuplicatableKeepOpenInputStream In Java we cannot specify a type parameter as requiring a type both extend an abstract class, such as InputStream and implement an interface such as DuplicatableInputStream.DuplicatableLengthLimitedInputStream LengthLimitedInputStream that is Duplicatable, see DuplicatableKeepOpenInputStream for additional commentary.EndpointBuilder EndpointBuilder provides a wrapper to construct the appropriate endpoint for a service.EndpointTemplateForOptionsUtils Utility class for handling endpoint templates with options.EntityFactory Factory to create Entity instances for POST/PUT/PATCH requests.EnvironmentRptPathProvider This path provider reads the path and resource id from environment variablesUse the contents of the OCI_RESOURCE_PRINCIPAL_RPT_PATH environment variable for the path and OCI_RESOURCE_PRINCIPAL_RPT_ID environment variable for the resource id,.
EnvironmentRptPathProvider.LeafResourceRptPathProvider This path provider reads the path and resource id for leaf resource from environment variablesUse the contents of the OCI_RESOURCE_PRINCIPAL_RPT_PATH_FOR_LEAF_RESOURCE environment variable for the path and OCI_RESOURCE_PRINCIPAL_RPT_ID_FOR_LEAF_RESOURCE environment variable for the resource id,.
EnvironmentVariablesHelper ErrorConsumer<REQUEST> Basic Consumer type to handle failed calls.ExplicitlySetBmcModel Base class for models implementing the explicitly set behavior.ExplicitlySetFilter ExponentialBackoffDelayStrategy Delay strategy that increases the wait time exponentially until a max time has been reached.ExponentialBackoffDelayStrategyWithJitter Delay strategy that increases the wait time exponentially until a max time has been reached.FederationClient Defines a basic interface for a federation endpoint that provides a security token for authentication.FileBasedKeySupplier FileBasedResourcePrincipalFederationClient This class gets a security token from file.FileUtils Utilities for interacting with files.FixedContentKeySupplier This is a SessionKeySupplier which fakes the ability to refresh its contained key.FixedContentResourcePrincipalFederationClient This class returns a security token, supplied as a fixed value.FixedTimeDelayStrategy Delay strategy that waits a constant amount of time between poll attempts.ForwardingAsyncHandler<REQUEST,RESPONSE> ForwardingInvocationBuilder ForwardingX509Certificate Simple forwarding X509Cerficate class.GenericWaiter Provides a basic waiter that will periodically poll for an update until a desired condition is met.GetResourcePrincipalSessionTokenRequest GetResourcePrincipalTokenResponse GuavaUtils Utilities helpful for eventually removing Guava.HasApacheConnectorProperties Interface implemented by classes that provide an ApacheClientPropertiesHasContentLength Interface implemented by requests that have a getter for contentLengthHasEffectiveClientConfigurator Interface implemented by classes that provide an effective ClientConfiguratorHeaderUtils Utilities to deal with header values.HttpDateUtils Date parsing utils.HttpUtils Utility functions related to HTTP calls.IdleConnectionMonitor ImdsRptPathProvider This path provider is used as a fallback when environment variables are not set.InstancePrincipalsAuthenticationDetailsProvider Implementation ofBasicAuthenticationDetailsProviderthat integrates with instance principal authentication endpoints to generate service tokens used for actual signing.InstancePrincipalsAuthenticationDetailsProvider.InstancePrincipalsAuthenticationDetailsProviderBuilder Builder for InstancePrincipalsAuthenticationDetailsProviderBuilder.InstancePrincipalUnavailableException Failed to fetch Instance Principal cert from the Instance Metadata Service.InternalSdk Annotation to indicate a class or method is only meant for internal SDK usage, and may break/change without notice.JavaRuntimeUtils Various runtime utils.JavaRuntimeUtils.JreVersion JRE version as interpreted by the SDK.JerseyDefaultConnectorConfigurator JerseyDefaultConnectorConfigurator handles basic configuration of clients under different environments.JerseyDefaultConnectorConfigurator.NonBuffering AClientConfiguratorfor a client that does not buffer requests in memory.JerseyLoggingClientConfigurator Configurator allowing SDK users to enable Jersey logging request & response on client-side.JsonConverter A helper class to support json related operationsJWK Representation of a RSA public key in JSON Web Key (JWK) format.JwtClaimsSet JSON Web Token Claim Set.KeepOpenInputStream A wrapper around anInputStreamthat turns the close method into a no-op, and requires the calling of the doClose method instead.KeyIdType An enum for KeyId types and associated patternsKeyPairAuthenticationDetailProvider Resource Principals V2 using public/private key to sign the request.KeySupplier<T> Interface for anything that can get supply a Key of type T given a keyIdLengthLimitedInputStream A wrapper over anFilterInputStreamwhich limits the reads of data from the input stream up to a specified length that is shorter than the actual length of the stream.LogHeadersFilter Filter that logs all of the outbound and inbound headers at debug level.MaxAttemptsTerminationStrategy Termination strategy that allows up to X attempts before terminating.MaxTimeTerminationStrategy Termination strategy that allows up to X milliseconds to have elapsed before terminating.NameUtils Utility functions related to namingNoOpAsyncHandler<REQUEST,RESPONSE> An async handler that doesn’t do anything.OCID Oracle Cloud Infrastructure unique ID.Options Options that can be set to control the behavior of the OCI Java SDK.Pem Services for working with PEM encoded private keys, public keys and certificates.Pem.Decoder Decodes PEM encoded text streams into the desired formatPem.Encoder Encode certificates, public keys and private keys into PEM encoded formatPem.Encryption Configures how private keys are encryptedPem.Encryption.Builder BuildPem.EncryptioninstancesPem.Format Denotes the specific syntax used for encoding public and private keys (Does not affect the encoding of certificates)Pem.Passphrase Holds a passphrase using a try-with-resources model to assure the passphrase plain-text is erased once it has been usedPemEncryptedKeyException PemEncryptionException PemException PEMFileRSAPrivateKeySupplier An implementation ofKeySupplierthat supplies a RSA private key from a PEM file.PEMFileRSAPrivateKeySupplier.PEMFileRSAPrivateKeySupplierException An exception in thePEMFileRSAPrivateKeySupplier.ProvidesClientConfigurators An interface that has the API to return a list of ClientConfiguratorsProvidesConfigurableRefresh An interface that has the API to return refresh security token after if the token expires within a configurable timeProvidesCustomRequestSigner Range Class specifying a range-request is being made.Realm Class containing all Identity realms.RealmSpecificEndpointTemplateUtils Utility class for working with realm-specific endpoint templates.ReflectionUtils Various utility functions to simplify reflection use cases.RefreshableOnNotAuthenticatedProvider<T> For authentication providers with refreshable authentication data (e.g. those which wrap a security token received from a remote service), this interface flags that when a caller receives a NotAuthenticated error (HTTP 401) that they can refresh the authentication data and retry their request.RefreshableSecurityTokenAdapter<T> An extension of @SecurityTokenAdapterthat allows the security token to be refreshedRefreshAuthTokenTransformingFuture<FROM,TO> Deprecated. in favor of RefreshAuthTokenWrapper – versions after 1.25.1 do not use RefreshAuthTokenTransformingFuture anymoreRefreshAuthTokenWrapper<REQUEST extends BmcRequest<?>,RESPONSE> Combined future and callbacks for asynchronous requests intended to work with some authenticated calls, like instance principals.RefreshAuthTokenWrappingAsyncHandler<REQUEST,RESPONSE> Deprecated. in favor of RefreshAuthTokenWrapper – versions after 1.25.1 do not use RefreshAuthTokenWrappingAsyncHandler anymoreRegion Class containing all of the known Regions that can be contacted.RegionalClientBuilder<B extends RegionalClientBuilder,C> A builder for clients that can be configured to target a certain regionRegionProvider A region provider has the API to return the region.RegionSchema Class representing RegionSchema blob that can be used for parsing out region info details.RequestBuilderAndToken<T> A container class for a request builder and next page token.RequestSigner Main entry point for signing a requestRequestSignerCacheConfiguration Configuration object used byBasicAuthenticationDetailsProviderimplementations to influence how request signer metadata should be cached.RequestSignerCacheConfiguration.Builder Builder forRequestSignerCacheConfiguration.RequestSignerCacheConfigurationProvider Optional marker forBasicAuthenticationDetailsProviderimplementations that wish to control request-signer caching behaviour.RequestSignerException RequestSignerFactory Factory class to create RequestSigner instances.RequestSignerImpl Implementation of the RequestSigner interfaceRequestSignerImpl.SigningConfiguration Basic configuration of what headers to sign.RequestSigningFilter Filter that adds authentication and User-Agent headers to a request.ResettableFileInputStream A wrapper around aFileInputStreamthat provides mark-and-reset capabilities.ResourcePrincipalAuthenticationDetailsProvider This constructs a default implementation of the
ResourcePrincipalAuthenticationDetailsProvider, constructed in accordance with the following environment variable settings:- OCI_RESOURCE_PRINCIPAL_VERSION:
ResourcePrincipalAuthenticationDetailsProvider.ClaimKeys ResourcePrincipalAuthenticationDetailsProvider.ResourcePrincipalAuthenticationDetailsProviderBuilder Builder for ResourcePrincipalAuthenticationDetailsProvider that understands the V2.2 configurationResourcePrincipalsFederationClient This class gets a security token from the auth service by signing the request with a PKI issued leaf certificate, passing along a temporary public key that is bounded to the the security token, and the leaf certificate.ResourcePrincipalsV3AuthenticationDetailsProvider This constructs a default implementation of theResourcePrincipalAuthenticationDetailsProvider, integrates with resource principal authentication services to generate resource principal session token used for actual signing.ResourcePrincipalsV3AuthenticationDetailsProvider.ResourcePrincipalsV3AuthenticationDetailsProviderBuilder Builder for ResourcePrincipalsAuthenticationDetailsProviderBuilder.ResourcePrincipalsV3FederationClient This class gets a security token from the auth service by fetching the RPST1 and then passing along the RPST1 to get RPT2 and further get security token RPST2 from the auth service, this nested fetching of security token continues for 10 levels or when the opc-parent-url header in the rpt response is the same as the rpt endpointResourcePrincipalV2FederationClient This class gets a security token from the auth service by signing the request with the provided private key.ResponseConversionFunctionFactory Deprecated. all clients of this version or newer useResponseConversionFunctionFactoryV2insteadResponseConversionFunctionFactoryV2 Factory class to create the appropriate type of Function to convert a REST Response into its final form.ResponseHelper A BmcException exception is thrown in response to failures from a REST endpoint.ResponseHelper.ErrorCodeAndMessage ResponseHelper.ErrorCodeAndMessage.Builder ResponseIterable<REQUESTBUILDER,REQUEST,RESPONSE> An iterable which can be used to iterate over responses returned from calling a list operation.ResponseIterator<REQUESTBUILDER,REQUEST,RESPONSE> An iterator for iterating over response objects returned from a list operation.ResponseRecordIterable<REQUESTBUILDER,REQUEST,RESPONSE,ITEMTYPE> An iterable which can be used to iterate over the models/resources returned by a list operation.ResponseRecordIterator<REQUESTBUILDER,REQUEST,RESPONSE,ITEMTYPE> An iterator for iterating over response objects returned from a list operation.RestClient A REST client that can make synchronous and asynchronous calls.
For asynchronous call, please refer to https://dennis-xlc.gitbooks.io/restful-java-with-jax-rs-2-0-2rd-edition/en/part1/chapter13/async_invoker_client_api.html to understand why we’d better not mix to using callback or Java Future.RestClientFactory RestClientFactory is responsible for creating a new REST client whenever a specific service instance is created.RestClientFactoryBuilder Builder forRestClientFactory.RestClientUtils Utilities forRestClient.Retriers Group of utility methods to configure the SDK retry behaviorRetryCondition Interface that defines the condition for which a retry may be attempted.RetryConfiguration Configuration used for retrying.RetryConfiguration.Builder Builder class for retry configuration.RetryOnOpenCircuitBreakerDefaultRetryCondition Class that may retry for the conditions documented in https://docs.oracle.com/iaas/Content/API/References/apierrors.htm and when the CircuitBreaker is OPEN.RetryOptions Defines the options when retryingRetryTokenUtils Utility class that adds the opc-retry-token header to the requestRetryUtils RFC3339DateFormat Swagger uses RFC3339 formats for date.RptPathProvider Root interface for classes providing the complete path for resource principal token.SdkClients Internal Annotation to trigger the creation of SDK clients.SecurityTokenAdapter Serialization Serialization gives access to the serializer/deserializer used by the OCI Java SDK.Service Interface representing a service definition.ServiceAccountTokenSupplier A ServiceAccountTokenSupplier is responsible for providing kubernetes service account token used for oke workload identityServiceDetails Class representing details of the serviceServices Factory class to create newServiceinstances.Services.ServiceBuilder SessionKeySupplier A session key supplier is responsible for providing public/private key pairs that will be used to both fetch federated service tokens and to sign individual requests to OCI.SessionTokenAuthenticationDetailsProvider Implementation ofAuthenticationDetailsProviderthat uses a session token for authentication.SetsClientBuilderProperties Interface implemented by classes that set the underlying client configuration properties on the ClientBuilderSignatureSigner The SignatureSigner is used to actually sign a message with a private key.SignedRequestException Generic exception exposed to callers of the HTTP Signature codeSignedRequestVersion List of supported signed request versions with associated version rules.SigningStrategy Enum for the various signing strategies used by OCI.SimpleAuthenticationDetailsProvider Basic implementation ofAuthenticationDetailsProviderthat just returns configured values.SimpleAuthenticationDetailsProvider.SimpleAuthenticationDetailsProviderBuilder SimplePrivateKeySupplier Simple Supplier for the private key that handles missing files.SimpleWaiterImpl<REQUEST,RESPONSE> SimpleWaiterImpl is a basic wrapper around a Callable that executes an action, and provides methods to either execute it synchronously or asynchronously.SpiClientConfigurator Configurator allowing internal SDK users to enable downstream propagation of opc-request-id.SpiClientConfiguratorUtils Utility class that helps manage and configure instances ofSpiClientConfigurator.StreamClosingAsyncHandler<REQUEST extends BmcRequest<?>,RESPONSE> A wrapper around an async handler that closes the stream at the end of a request, if the body is a stream.StreamUtils Utility methods to work with streams.StringPrivateKeySupplier Supplier for private key in String formatStringRptPathProvider This path provider directly takes a string and returns it.StringUtils String manipulation utilities.SuccessConsumer<REQUEST,RESPONSE> Basic Consumer to handle successful calls.SuppliedServiceAccountTokenProvider Implementation ofServiceAccountTokenSupplierthat allows to pass in a token to be used as a kubernetes service account token.SupplierBasedResourcePrincipalFederationClient<T> This class returns a security token.TerminationStrategy Defines the strategy that determines when no more poll attempts should be made.TokenRefreshRetrier A custom retrier that refreshes tokens and retries the operation in case of authentication failures.TransformingFuture<FROM,TO> Future that both delegates to another one and provides the ability to transform the response to another type.URLBasedX509CertificateSupplier X509CertificateSupplierimplementation that reads both certificate and private key off of URL.URLBasedX509CertificateSupplier.ResourceDetails URLBasedX509CertificateSupplier.ResourceDetails.ResourceDetailsBuilder Utf8Utils It seems really unnecessary to spin up a different thread for the conversion; unfortunately, without this, we might see this method throw ClosedByInterruptException.Validate Argument validation.Version The rules for a signed request version, i.e., supported algorithms, supported keyId formats.Version.Error VisibleForTesting Waiter<REQUEST,RESPONSE> Waiter provides a standard interface for waiting on some condition in either a blocking or asynchronous manner.WaiterConfiguration Configuration used when invoking a waiter loop.WaiterConfiguration.WaitContext The context that should be maintained by the wait loop.Waiters WithHeaders<T> Represents a result with HTTP headersWrappedByteArrayInputStream Basic extension toByteArrayInputStreamthat lets you create duplicate streams from the same underlying byte buffer.WrappedFileInputStream Simple wrapper over FileInputStream that also exposes the File used to create the stream.WrappedInvocationBuilder AnInvocation.Builderthat stores the headers being set, allowing access to them.WrappedResponseInputStream A wrapper over anInputStreamthat ensures that the delegateResponseis closed when the delegate input stream is closed.WrappedWebTarget AWebTargetthat delegates to anotherWebTarget, but createsWrappedInvocationBuilderinstances instead of plainInvocation.Builderinstances.X509CertificateSupplier An interface to provide X509 certificate for a federated client.X509CertificateSupplier.CertificateAndPrivateKeyPair X509CertificateWithOriginalPem X509CertificateWithOriginalPem is specifically used so that we can keep track of the original PEM encoded certificate, along with the parsed X509Certificate that it creates.X509FederationClient This class gets a security token from the auth service by signing the request with a PKI issued leaf certificate, passing along a temporary public key that is bounded to the the security token, and the leaf certificate.X509FederationClient.SecurityToken X509FederationClient.X509FederationRequest Yubikey YubikeyAuthenticationDetailsProvider Implementation ofAuthenticationDetailsProviderthat uses yubikey for authentication.YubikeyAuthenticationDetailsProvider.YubikeyAuthenticationDetailsProviderBuilder YubikeyConfig YubikeyConfig.YubikeyConfigBuilder