Package org.elasticsearch.xpack.security.authc.service

Class ServiceAccountService

java.lang.Object

org.elasticsearch.xpack.security.authc.service.ServiceAccountService

public class ServiceAccountService
extends Object

Constructor Summary

Constructors

Constructor	Description
ServiceAccountService(org.elasticsearch.client.internal.Client client, FileServiceAccountTokenStore fileServiceAccountTokenStore, IndexServiceAccountTokenStore indexServiceAccountTokenStore)

Method Summary

Modifier and Type	Method	Description
void	authenticateToken(ServiceAccountToken serviceAccountToken, String nodeName, org.elasticsearch.action.ActionListener<org.elasticsearch.xpack.core.security.authc.Authentication> listener)
void	createIndexToken(org.elasticsearch.xpack.core.security.authc.Authentication authentication, org.elasticsearch.xpack.core.security.action.service.CreateServiceAccountTokenRequest request, org.elasticsearch.action.ActionListener<org.elasticsearch.xpack.core.security.action.service.CreateServiceAccountTokenResponse> listener)
void	deleteIndexToken(org.elasticsearch.xpack.core.security.action.service.DeleteServiceAccountTokenRequest request, org.elasticsearch.action.ActionListener<Boolean> listener)
void	findTokensFor(org.elasticsearch.xpack.core.security.action.service.GetServiceAccountCredentialsRequest request, org.elasticsearch.action.ActionListener<org.elasticsearch.xpack.core.security.action.service.GetServiceAccountCredentialsResponse> listener)
void	getRoleDescriptor(org.elasticsearch.xpack.core.security.authc.Authentication authentication, org.elasticsearch.action.ActionListener<org.elasticsearch.xpack.core.security.authz.RoleDescriptor> listener)
void	getRoleDescriptorForPrincipal(String principal, org.elasticsearch.action.ActionListener<org.elasticsearch.xpack.core.security.authz.RoleDescriptor> listener)
static Collection<String>	getServiceAccountPrincipals()
static Map<String,ServiceAccount>	getServiceAccounts()
static boolean	isServiceAccountPrincipal(String principal)
static ServiceAccountToken	tryParseToken(org.elasticsearch.common.settings.SecureString bearerString)	Parses a token object from the content of a ServiceAccountToken.asBearerString() bearer string}.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

ServiceAccountService

public ServiceAccountService(org.elasticsearch.client.internal.Client client,
 FileServiceAccountTokenStore fileServiceAccountTokenStore,
 IndexServiceAccountTokenStore indexServiceAccountTokenStore)

Method Details

isServiceAccountPrincipal

public static boolean isServiceAccountPrincipal(String principal)

getServiceAccountPrincipals

public static Collection<String> getServiceAccountPrincipals()

getServiceAccounts

public static Map<String,ServiceAccount> getServiceAccounts()

tryParseToken

public static ServiceAccountToken tryParseToken(org.elasticsearch.common.settings.SecureString bearerString)

Parses a token object from the content of a ServiceAccountToken.asBearerString() bearer string}. This bearer string would typically be extracted from an HTTP authorization header.

This method does not validate the credential, it simply parses it. There is no guarantee that the secret is valid, or even that the account exists.

Parameters:

bearerString - A raw token string (if this is from an HTTP header, then the "Bearer " prefix must be removed before calling this method.

Returns:

An unvalidated token object.

authenticateToken

public void authenticateToken(ServiceAccountToken serviceAccountToken,
 String nodeName,
 org.elasticsearch.action.ActionListener<org.elasticsearch.xpack.core.security.authc.Authentication> listener)

createIndexToken

public void createIndexToken(org.elasticsearch.xpack.core.security.authc.Authentication authentication,
 org.elasticsearch.xpack.core.security.action.service.CreateServiceAccountTokenRequest request,
 org.elasticsearch.action.ActionListener<org.elasticsearch.xpack.core.security.action.service.CreateServiceAccountTokenResponse> listener)

deleteIndexToken

public void deleteIndexToken(org.elasticsearch.xpack.core.security.action.service.DeleteServiceAccountTokenRequest request,
 org.elasticsearch.action.ActionListener<Boolean> listener)

findTokensFor

public void findTokensFor(org.elasticsearch.xpack.core.security.action.service.GetServiceAccountCredentialsRequest request,
 org.elasticsearch.action.ActionListener<org.elasticsearch.xpack.core.security.action.service.GetServiceAccountCredentialsResponse> listener)

getRoleDescriptor

public void getRoleDescriptor(org.elasticsearch.xpack.core.security.authc.Authentication authentication,
 org.elasticsearch.action.ActionListener<org.elasticsearch.xpack.core.security.authz.RoleDescriptor> listener)

getRoleDescriptorForPrincipal

public void getRoleDescriptorForPrincipal(String principal,
 org.elasticsearch.action.ActionListener<org.elasticsearch.xpack.core.security.authz.RoleDescriptor> listener)