io.fabric8.kubernetes.client.utils

Class OpenIDConnectionUtils

java.lang.Object

io.fabric8.kubernetes.client.utils.OpenIDConnectionUtils

public class OpenIDConnectionUtils
extends Object

Utility class for OpenID token refresh.

Field Summary

Fields

Modifier and Type	Field and Description
static String	ACCESS_TOKEN_PARAM
static String	CLIENT_ID_KUBECONFIG
static String	CLIENT_ID_PARAM
static String	CLIENT_SECRET_KUBECONFIG
static String	CLIENT_SECRET_PARAM
static String	EMPTY
static String	GRANT_TYPE_PARAM
static String	GRANT_TYPE_REFRESH_TOKEN
static String	ID_TOKEN_KUBECONFIG
static String	ID_TOKEN_PARAM
static String	IDP_CERT_DATA
static String	ISSUER_KUBECONFIG
static String	JWT_PARTS_DELIMITER_REGEX
static String	REFRESH_TOKEN_KUBECONFIG
static String	REFRESH_TOKEN_PARAM
static String	TOKEN_ENDPOINT_PARAM
static String	WELL_KNOWN_OPENID_CONFIGURATION

Method Summary

Modifier and Type	Method and Description
static boolean	idTokenExpired(Config config)
static boolean	persistKubeConfigWithUpdatedAuthInfo(Config currentConfig, Consumer<io.fabric8.kubernetes.api.model.AuthInfo> updateAction) Return true if the Config can be updated.
static CompletableFuture<String>	resolveOIDCTokenFromAuthConfig(Config currentConfig, Map<String,String> currentAuthProviderConfig, HttpClient.Builder clientBuilder) Fetch OpenID Connect token from Kubeconfig, check whether it's still valid or not; If expired handle token refresh with OpenID Connection provider APIs

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

EMPTY

public static final String EMPTY

See Also:

Constant Field Values

ID_TOKEN_KUBECONFIG

public static final String ID_TOKEN_KUBECONFIG

See Also:

Constant Field Values

ISSUER_KUBECONFIG

public static final String ISSUER_KUBECONFIG

See Also:

Constant Field Values

REFRESH_TOKEN_KUBECONFIG

public static final String REFRESH_TOKEN_KUBECONFIG

See Also:

Constant Field Values

REFRESH_TOKEN_PARAM

public static final String REFRESH_TOKEN_PARAM

See Also:

Constant Field Values

GRANT_TYPE_PARAM

public static final String GRANT_TYPE_PARAM

See Also:

Constant Field Values

CLIENT_ID_PARAM

public static final String CLIENT_ID_PARAM

See Also:

Constant Field Values

CLIENT_SECRET_PARAM

public static final String CLIENT_SECRET_PARAM

See Also:

Constant Field Values

ID_TOKEN_PARAM

public static final String ID_TOKEN_PARAM

See Also:

Constant Field Values

ACCESS_TOKEN_PARAM

public static final String ACCESS_TOKEN_PARAM

See Also:

Constant Field Values

CLIENT_ID_KUBECONFIG

public static final String CLIENT_ID_KUBECONFIG

See Also:

Constant Field Values

CLIENT_SECRET_KUBECONFIG

public static final String CLIENT_SECRET_KUBECONFIG

See Also:

Constant Field Values

IDP_CERT_DATA

public static final String IDP_CERT_DATA

See Also:

Constant Field Values

TOKEN_ENDPOINT_PARAM

public static final String TOKEN_ENDPOINT_PARAM

See Also:

Constant Field Values

WELL_KNOWN_OPENID_CONFIGURATION

public static final String WELL_KNOWN_OPENID_CONFIGURATION

See Also:

Constant Field Values

GRANT_TYPE_REFRESH_TOKEN

public static final String GRANT_TYPE_REFRESH_TOKEN

See Also:

Constant Field Values

JWT_PARTS_DELIMITER_REGEX

public static final String JWT_PARTS_DELIMITER_REGEX

See Also:

Constant Field Values

Method Detail

resolveOIDCTokenFromAuthConfig

public static CompletableFuture<String> resolveOIDCTokenFromAuthConfig(Config currentConfig,
                                                                       Map<String,String> currentAuthProviderConfig,
                                                                       HttpClient.Builder clientBuilder)

Fetch OpenID Connect token from Kubeconfig, check whether it's still valid or not; If expired handle token refresh with OpenID Connection provider APIs

Parameters:

currentAuthProviderConfig - current AuthInfo's AuthProvider config as a map

Returns:

access token for interacting with Kubernetes API

persistKubeConfigWithUpdatedAuthInfo

public static boolean persistKubeConfigWithUpdatedAuthInfo(Config currentConfig,
                                                           Consumer<io.fabric8.kubernetes.api.model.AuthInfo> updateAction)
                                                    throws IOException

Return true if the Config can be updated. false if not for a variety of reasons: - a kubeconfig file was not used - there's no current context

Throws:

IOException

idTokenExpired

public static boolean idTokenExpired(Config config)