Package org.elasticsearch.xpack.security.authc.service

Class CachingServiceAccountTokenStore

java.lang.Object

org.elasticsearch.xpack.security.authc.service.CachingServiceAccountTokenStore

All Implemented Interfaces:

ServiceAccountTokenStore, CacheInvalidatorRegistry.CacheInvalidator

Direct Known Subclasses:

FileServiceAccountTokenStore, IndexServiceAccountTokenStore

public abstract class CachingServiceAccountTokenStore
extends Object
implements ServiceAccountTokenStore, CacheInvalidatorRegistry.CacheInvalidator

Nested Class Summary

Nested classes/interfaces inherited from interface org.elasticsearch.xpack.security.authc.service.ServiceAccountTokenStore

ServiceAccountTokenStore.StoreAuthenticationResult

Field Summary

Fields

Modifier and Type	Field	Description
static final org.elasticsearch.common.settings.Setting<String>	CACHE_HASH_ALGO_SETTING
static final org.elasticsearch.common.settings.Setting<Integer>	CACHE_MAX_TOKENS_SETTING
static final org.elasticsearch.common.settings.Setting<org.elasticsearch.core.TimeValue>	CACHE_TTL_SETTING

Method Summary

Modifier and Type	Method	Description
void	authenticate(ServiceAccountToken token, org.elasticsearch.action.ActionListener<ServiceAccountTokenStore.StoreAuthenticationResult> listener)	Verify the given token for encapsulated service account and credential
protected org.elasticsearch.common.settings.Settings	getSettings()
protected org.elasticsearch.threadpool.ThreadPool	getThreadPool()
final void	invalidate(Collection<String> qualifiedTokenNames)	Invalidate cache entries with keys matching to the specified qualified token names.
final void	invalidateAll()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.elasticsearch.xpack.security.support.CacheInvalidatorRegistry.CacheInvalidator

shouldClearOnSecurityIndexStateChange

Field Details

CACHE_HASH_ALGO_SETTING

public static final org.elasticsearch.common.settings.Setting<String> CACHE_HASH_ALGO_SETTING

CACHE_TTL_SETTING

public static final org.elasticsearch.common.settings.Setting<org.elasticsearch.core.TimeValue> CACHE_TTL_SETTING

CACHE_MAX_TOKENS_SETTING

public static final org.elasticsearch.common.settings.Setting<Integer> CACHE_MAX_TOKENS_SETTING

Method Details

authenticate

public void authenticate(ServiceAccountToken token,
 org.elasticsearch.action.ActionListener<ServiceAccountTokenStore.StoreAuthenticationResult> listener)

Description copied from interface: ServiceAccountTokenStore

Verify the given token for encapsulated service account and credential

Specified by:

authenticate in interface ServiceAccountTokenStore

invalidate

public final void invalidate(Collection<String> qualifiedTokenNames)

Invalidate cache entries with keys matching to the specified qualified token names.

Specified by:

invalidate in interface CacheInvalidatorRegistry.CacheInvalidator

Parameters:

qualifiedTokenNames - The list of qualified toke names. If a name has trailing slash, it is treated as a prefix wildcard, i.e. all keys with this prefix are considered matching.

invalidateAll

public final void invalidateAll()

Specified by:

invalidateAll in interface CacheInvalidatorRegistry.CacheInvalidator

getSettings

protected org.elasticsearch.common.settings.Settings getSettings()

getThreadPool

protected org.elasticsearch.threadpool.ThreadPool getThreadPool()