Index
All Classes and Interfaces|All Packages|Constant Field Values
A
- actor() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
The actor or role name of the `wsse:Security` header.
- addInclusivePrefixes() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
If `true`, an `InclusiveNamespaces` `PrefixList` will be added as a `CanonicalizationMethod` child when generating Signatures using `WSConstants.C14N_EXCL_OMIT_COMMENTS`; otherwise the `PrefixList` will not be added.
- alwaysEncryptUt() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
Whether to always encrypt `UsernameTokens` that are defined as a `SupportingToken`.
- asymmetricKeyEncryptionAlgorithm() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
The Asymmetric Key Encryption Algorithm to set on the `org.apache.wss4j.policy.model.AlgorithmSuite.AlgorithmSuiteType`.
- asymmetricSignatureAlgorithm() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
This configuration tag allows the user to override the default Asymmetric Signature algorithm (RSA-SHA1) for use in WS-SecurityPolicy, as the WS-SecurityPolicy specification does not allow the use of other algorithms at present.
- audienceRestrictions() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.FutureStsConfig
-
This property contains a comma separated String corresponding to a list of audience restriction URIs.
- audienceRestrictionValidation() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
If `true`, then if the SAML Token contains Audience Restriction URIs, one of them must match one of the values in `audience.restrictions`; otherwise the SAML AudienceRestriction validation is disabled.
B
- beanRef - Enum constant in enum class io.quarkiverse.cxf.ws.security.WssConfigurationConstant.Transformer
-
Looks up the given bean reference in the CDI container
- bstTokenValidator() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ValidatorConfig
-
A xref:user-guide/configuration.adoc#beanRefs[reference] to a `org.apache.wss4j.stax.validate.Validator` bean to use to validate BinarySecurityTokens.
C
- cacheConfigFile() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
Set this property to point to a configuration file for the underlying caching implementation for the `TokenStore`.
- cacheIdentifier() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
The Cache Identifier to use with the TokenStore.
- cacheIssuedTokenInEndpoint() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.FutureStsConfig
-
Set this to "false" to not cache a SecurityToken per proxy object in the IssuedTokenInterceptorProvider.
- callbackHandler() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
A xref:user-guide/configuration.adoc#beanRefs[reference] to a `javax.security.auth.callback.CallbackHandler` bean used to obtain passwords, for both outbound and inbound requests.
- certConstraintsSeparator() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
The separator that is used to parse certificate constraints configured in `security.subject.cert.constraints` This option is experimental, because it is link:https://github.com/quarkiverse/quarkus-cxf/issues/1052[not covered by tests] yet.
- client() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.StsClientConfig
-
A xref:user-guide/configuration.adoc#beanRefs[reference] to a fully configured `org.apache.cxf.ws.security.trust.STSClient` bean to communicate with the STS.
- clients() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig
-
Client configurations.
- create() - Static method in class io.quarkiverse.cxf.ws.security.sts.client.STSClientBean
- CUSTOM_ALGORITHM_SUITE_NAME - Static variable in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
If algorithm suite with the identifier CustomizedAlgorithmSuite is used, it can be fully customized.
- customize(CXFClientInfo, JaxWsProxyFactoryBean) - Method in class io.quarkiverse.cxf.ws.security.WssFactoryCustomizer
- customize(CXFServletInfo, JaxWsServerFactoryBean) - Method in class io.quarkiverse.cxf.ws.security.WssFactoryCustomizer
- CxfWsSecurityConfig - Interface in io.quarkiverse.cxf.ws.security
- CxfWsSecurityConfig.ClientConfig - Interface in io.quarkiverse.cxf.ws.security
-
A class that provides configurable options of a CXF client.
- CxfWsSecurityConfig.ClientOrEndpointSecurityConfig - Interface in io.quarkiverse.cxf.ws.security
-
A class that provides configurable options of a CXF client.
- CxfWsSecurityConfig.ClientSecurityConfig - Interface in io.quarkiverse.cxf.ws.security
-
A class that provides configurable options of a CXF client.
- CxfWsSecurityConfig.EndpointConfig - Interface in io.quarkiverse.cxf.ws.security
-
A class that provides configurable options of a CXF client.
- CxfWsSecurityConfig.FutureStsConfig - Interface in io.quarkiverse.cxf.ws.security
-
Ready for future use
- CxfWsSecurityConfig.StsClientConfig - Interface in io.quarkiverse.cxf.ws.security
- CxfWsSecurityConfig.ValidatorConfig - Interface in io.quarkiverse.cxf.ws.security
-
Ready for future use
- CxfWsSecuritySubstitutions - Class in io.quarkiverse.cxf.ws.security.graal
- CxfWsSecuritySubstitutions() - Constructor for class io.quarkiverse.cxf.ws.security.graal.CxfWsSecuritySubstitutions
D
- delegatedCredential() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
A xref:user-guide/configuration.adoc#beanRefs[reference] to a Kerberos `org.ietf.jgss.GSSCredential` bean to use for WS-Security.
- digestAlgorithm() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
The Digest Algorithm to set on the `org.apache.wss4j.policy.model.AlgorithmSuite.AlgorithmSuiteType`.
- disableReqClientCertCheck() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
If `true`, the enforcement of the WS-SecurityPolicy `RequireClientCertificate` policy will be disabled; otherwise the enforcement of the WS-SecurityPolicy `RequireClientCertificate` policy is enabled.
- disableStsClientWsmexCallUsingEprAddress() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.FutureStsConfig
-
Whether to avoid STS client trying send WS-MetadataExchange call using STS EPR WSA address when the endpoint contract contains no WS-MetadataExchange info.
E
- enableNonceCache() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
If `true`, the `UsernameToken` nonces will be cached for both message initiators and recipients; otherwise they won't be cached for neither message initiators nor recipients.
- enableRevocation() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
If `true`, Certificate Revocation List (CRL) checking is enabled when verifying trust in a certificate; otherwise it is not enabled.
- enableSamlOneTimeUseCache() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
If `true` and in case the token contains a `OneTimeUse` Condition, the SAML2 Token Identifiers will be cached for both message initiators and recipients; otherwise they won't be cached for neither message initiators nor recipients.
- enableStreaming() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
If `true`, the new streaming (StAX) implementation of WS-Security is used; otherwise the old DOM implementation is used.
- enableTimestampCache() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
If `true`, the `Timestamp` `Created` Strings (these are only cached in conjunction with a message Signature) will be cached for both message initiators and recipients; otherwise they won't be cached for neither message initiators nor recipients.
- enableUnsignedSamlAssertionPrincipal() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
If `true`, unsigned SAML assertions will be allowed as SecurityContext Principals; otherwise they won't be allowed as SecurityContext Principals.
- encryptionAlgorithm() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
The Encryption Algorithm to set on the `org.apache.wss4j.policy.model.AlgorithmSuite.AlgorithmSuiteType`.
- encryptionCertificate() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
A message property for prepared X509 certificate to be used for encryption.
- encryptionCrypto() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
A xref:user-guide/configuration.adoc#beanRefs[reference] to a `org.apache.wss4j.common.crypto.Crypto` to be used for encryption.
- encryptionCrypto() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.StsClientConfig
-
A xref:user-guide/configuration.adoc#beanRefs[reference] to a `org.apache.wss4j.common.crypto.Crypto` to be used for encryption.
- encryptionDerivedKeyLength() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
The Encryption Derived Key Length (number of bits) to set on the `org.apache.wss4j.policy.model.AlgorithmSuite.AlgorithmSuiteType`.
- encryptionKeyDerivation() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
The Encryption Key Derivation to set on the `org.apache.wss4j.policy.model.AlgorithmSuite.AlgorithmSuiteType`.
- encryptionProperties() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
The Crypto property configuration to use for encryption, if `encryption.crypto` is not set.
- encryptionProperties() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.StsClientConfig
-
The Crypto property configuration to use for encryption, if `encryption.crypto` is not set.
- encryptionUsername() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
The user's name for encryption.
- encryptionUsername() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.StsClientConfig
-
The user's name for encryption.
- endpointName() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.StsClientConfig
-
A fully qualified name of the STS endpoint name.
- endpoints() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig
-
Endpoint configurations.
- expandXopInclude() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
If `true`, the `xop:Include` elements will be searched for encryption and signature (on the outbound side) or for signature verification (on the inbound side); otherwise the search won't happen.
I
- io.quarkiverse.cxf.ws.security - package io.quarkiverse.cxf.ws.security
- io.quarkiverse.cxf.ws.security.graal - package io.quarkiverse.cxf.ws.security.graal
- io.quarkiverse.cxf.ws.security.sts.client - package io.quarkiverse.cxf.ws.security.sts.client
- isBspCompliant() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
If `true`, the compliance with the Basic Security Profile (BSP) 1.1 will be ensured; otherwise it will not be ensured.
K
- kerberosClient() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
A xref:user-guide/configuration.adoc#beanRefs[reference] to a `org.apache.cxf.ws.security.kerberos.KerberosClient` bean used to obtain a service ticket.
- kerberosIsUsernameInServicenameForm() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
If `true`, the Kerberos username is in servicename form; otherwise the Kerberos username is not in servicename form.
- kerberosJaasContextName() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
The JAAS Context name to use for Kerberos.
- kerberosRequestCredentialDelegation() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
If `true`, credential delegation is requested in the KerberosClient; otherwise the credential delegation is not in the KerberosClient.
- kerberosSpn() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
The Kerberos Service Provider Name (spn) to use.
- kerberosUseCredentialDelegation() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
If `true`, GSSCredential bean is retrieved from the Message Context using the `delegated.credential` property and then it is used to obtain a service ticket.
- key() - Element in annotation interface io.quarkiverse.cxf.ws.security.WssConfigurationConstant
-
The name of a constant from
ConfigurationConstants
to which the annotated method should be mapped.
M
- maximumAsymmetricKeyLength() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
The Maximum Symmetric Key Length (number of bits) to set on the `org.apache.wss4j.policy.model.AlgorithmSuite.AlgorithmSuiteType`.
- maximumSymmetricKeyLength() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
The Maximum Symmetric Key Length to set on the `org.apache.wss4j.policy.model.AlgorithmSuite.AlgorithmSuiteType`.
- minimumAsymmetricKeyLength() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
The Minimum Symmetric Key Length (number of bits) to set on the `org.apache.wss4j.policy.model.AlgorithmSuite.AlgorithmSuiteType`.
- minimumSymmetricKeyLength() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
The Minimum Symmetric Key Length (number of bits) to set on the `org.apache.wss4j.policy.model.AlgorithmSuite.AlgorithmSuiteType`.
- mustUnderstand() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
If `true`, the SOAP `mustUnderstand` header is included in security headers based on a WS-SecurityPolicy; otherwise the header is always omitted.
N
- nonceCacheInstance() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
A xref:user-guide/configuration.adoc#beanRefs[reference] to a `org.apache.wss4j.common.cache.ReplayCache` bean used to cache `UsernameToken` nonces.
P
- password() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
The user's password when a `callback-handler` is not defined.
- password() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.StsClientConfig
-
The password associated with the `username`.
- passwordEncryptorInstance() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
A xref:user-guide/configuration.adoc#beanRefs[reference] to a `org.apache.wss4j.common.crypto.PasswordEncryptor` bean, which is used to encrypt or decrypt passwords in the Merlin Crypto implementation (or any custom Crypto implementations).
- policyValidatorMap() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ValidatorConfig
-
This refers to a Map of QName, SecurityPolicyValidator, which retrieves a SecurityPolicyValidator implementation to validate a particular security policy, based on the QName of the policy.
- preferWsmexOverStsClientConfig() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.FutureStsConfig
-
Whether to prefer to use WS-MEX over a STSClient's location/wsdlLocation properties when making an STS RequestSecurityToken call.
- properties - Enum constant in enum class io.quarkiverse.cxf.ws.security.WssConfigurationConstant.Transformer
-
Makes
Properties
out of a Map<String, String>
R
- returnSecurityError() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
If `true`, detailed security error messages are sent to clients; otherwise the details are omitted and only a generic error message is sent.
S
- saml1TokenValidator() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ValidatorConfig
-
A xref:user-guide/configuration.adoc#beanRefs[reference] to a `org.apache.wss4j.stax.validate.Validator` bean to use to validate SAML 1.1 Tokens.
- saml2TokenValidator() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ValidatorConfig
-
A xref:user-guide/configuration.adoc#beanRefs[reference] to a `org.apache.wss4j.stax.validate.Validator` bean to use to validate SAML 2.0 Tokens.
- samlCallbackHandler() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
A xref:user-guide/configuration.adoc#beanRefs[reference] to a `javax.security.auth.callback.CallbackHandler` implementation used to construct SAML Assertions.
- samlOneTimeUseCacheInstance() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
A xref:user-guide/configuration.adoc#beanRefs[reference] to a `org.apache.wss4j.common.cache.ReplayCache` bean used to cache SAML2 Token Identifier Strings (if the token contains a `OneTimeUse` condition).
- samlRoleAttributename() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
The attribute URI of the SAML `AttributeStatement` where the role information is stored.
- scFromJaasSubject() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
If `true`, security context can be created from JAAS Subject; otherwise it must not be created from JAAS Subject.
- sctTokenValidator() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ValidatorConfig
-
A xref:user-guide/configuration.adoc#beanRefs[reference] to a `org.apache.wss4j.stax.validate.Validator` bean to use to validate SecurityContextTokens.
- security() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientConfig
-
WS-Security related client configuration
- security() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.EndpointConfig
-
WS-Security related client configuration
- securityContextCreator() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
A xref:user-guide/configuration.adoc#beanRefs[reference] to a `org.apache.cxf.ws.security.wss4j.WSS4JSecurityContextCreator` bean that is used to create a CXF SecurityContext from the set of WSS4J processing results.
- securityTokenLifetime() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
The security token lifetime value (in milliseconds).
- serviceName() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.StsClientConfig
-
A fully qualified name of the STS service.
- signatureCrypto() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
A xref:user-guide/configuration.adoc#beanRefs[reference] to a `org.apache.wss4j.common.crypto.Crypto` bean to be used for signature.
- signatureDerivedKeyLength() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
The Signature Derived Key Length (number of bits) to set on the `org.apache.wss4j.policy.model.AlgorithmSuite.AlgorithmSuiteType`.
- signatureKeyDerivation() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
The Signature Key Derivation to set on the `org.apache.wss4j.policy.model.AlgorithmSuite.AlgorithmSuiteType`.
- signaturePassword() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
The user's password for signature when a `callback-handler` is not defined.
- signatureProperties() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
The Crypto property configuration to use for signing, if `signature.crypto` is not set.
- signatureTokenValidator() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ValidatorConfig
-
A xref:user-guide/configuration.adoc#beanRefs[reference] to a `org.apache.wss4j.stax.validate.Validator` bean to use to validate trust in credentials used in Signature verification.
- signatureUsername() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
The user's name for signature.
- soap12Binding() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.StsClientConfig
-
If `true` the STS client will be set to send Soap 1.2 messages; otherwise it will send SOAP 1.1 messages.
- spnegoClientAction() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
A xref:user-guide/configuration.adoc#beanRefs[reference] to a `org.apache.wss4j.common.spnego.SpnegoClientAction` bean to use for SPNEGO.
- storeBytesInAttachment() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
Whether to store bytes (CipherData or BinarySecurityToken) in an attachment.
- sts() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientSecurityConfig
-
STS configuration.
- stsAppliesTo() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.FutureStsConfig
-
The "AppliesTo" address to send to the STS.
- stsCheckForRecursiveCall() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.FutureStsConfig
-
Check that we are not invoking on the STS using its own IssuedToken policy - in which case we will end up with a recursive loop.
- STSClientBean - Class in io.quarkiverse.cxf.ws.security.sts.client
-
A subclass of
STSClient
with a no-args constructor to be able to use it as a CDI bean. - STSClientBean() - Constructor for class io.quarkiverse.cxf.ws.security.sts.client.STSClientBean
- stsIssueAfterFailedRenew() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.FutureStsConfig
-
Whether to fall back to calling "issue" after failing to renew an expired token.
- stsTokenActAs() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.FutureStsConfig
-
The token to be sent to the STS in an "ActAs" field.
- stsTokenCacherImpl() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.FutureStsConfig
-
An implementation of the STSTokenCacher interface, if you want to plug in custom caching behaviour for STS clients.
- stsTokenDoCancel() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.FutureStsConfig
-
Whether to cancel a token when using SecureConversation after successful invocation.
- stsTokenImminentExpiryValue() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.FutureStsConfig
-
This is the value in seconds within which a token is considered to be expired by the client.
- stsTokenOnBehalfOf() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.FutureStsConfig
-
The token to be sent to the STS in an "OnBehalfOf" field.
- subjectCertConstraints() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
A String of regular expressions (separated by the value specified in `security.cert.constraints.separator`) which will be applied to the subject DN of the certificate used for signature validation, after trust verification of the certificate chain associated with the certificate.
- subjectRoleClassifier() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
The Subject Role Classifier to use.
- subjectRoleClassifierType() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
The Subject Role Classifier Type to use.
- symmetricKeyEncryptionAlgorithm() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
The Symmetric Key Encryption Algorithm to set on the `org.apache.wss4j.policy.model.AlgorithmSuite.AlgorithmSuiteType`.
- symmetricSignatureAlgorithm() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
This configuration tag allows the user to override the default Symmetric Signature algorithm (HMAC-SHA1) for use in WS-SecurityPolicy, as the WS-SecurityPolicy specification does not allow the use of other algorithms at present.
T
- timestampCacheInstance() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
A xref:user-guide/configuration.adoc#beanRefs[reference] to a `org.apache.wss4j.common.cache.ReplayCache` bean used to cache `Timestamp` `Created` Strings.
- timestampFutureTtl() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
The time in seconds in the future within which the `Created` time of an incoming `Timestamp` is valid.
- timestampTokenValidator() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ValidatorConfig
-
A xref:user-guide/configuration.adoc#beanRefs[reference] to a `org.apache.wss4j.stax.validate.Validator` bean to use to validate Timestamps.
- timestampTtl() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
The time in seconds to add to the Creation value of an incoming `Timestamp` to determine whether to accept it as valid or not.
- toInteger - Enum constant in enum class io.quarkiverse.cxf.ws.security.WssConfigurationConstant.Transformer
-
Calls
Integer.parseInt()
on the given type'stoString()
- tokenCrypto() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.StsClientConfig
-
A xref:user-guide/configuration.adoc#beanRefs[reference] to a `org.apache.wss4j.common.crypto.Crypto` to be used for the STS.
- tokenProperties() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.StsClientConfig
-
The Crypto property configuration to use for encryption, if `encryption.crypto` is not set.
- tokenStoreCacheInstance() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
A xref:user-guide/configuration.adoc#beanRefs[reference] to a `org.apache.cxf.ws.security.tokenstore.TokenStore` bean to use for caching security tokens.
- tokenUsecert() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.StsClientConfig
-
Whether to write out an X509Certificate structure in UseKey/KeyInfo, or whether to write out a KeyValue structure.
- tokenUsername() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.StsClientConfig
-
The alias name in the keystore to get the user's public key to send to the STS for the PublicKey KeyType case.
- toString - Enum constant in enum class io.quarkiverse.cxf.ws.security.WssConfigurationConstant.Transformer
-
Calls the given type's
toString()
on the given value - transformer() - Element in annotation interface io.quarkiverse.cxf.ws.security.WssConfigurationConstant
-
The kind of transformer that should be used to map the value returned by the annotated method to a value suitable for
WSS4J[In|Out]Interceptor
properties.
U
- useAttachmentEncryptionContentOnlyTransform() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
If `true`, `Attachment-Content-Only` transform will be used when an Attachment is encrypted via a WS-SecurityPolicy expression; otherwise `Attachment-Complete` transform will be used when an Attachment is encrypted via a WS-SecurityPolicy expression.
- username() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
The user's name.
- username() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.StsClientConfig
-
The user name to use when authenticating against the STS.
- usernametokenFutureTtl() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
The time in seconds in the future within which the `Created` time of an incoming `UsernameToken` is valid.
- usernametokenTtl() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
The time in seconds to append to the Creation value of an incoming `UsernameToken` to determine whether to accept it as valid or not.
- usernameTokenValidator() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ValidatorConfig
-
A xref:user-guide/configuration.adoc#beanRefs[reference] to a `org.apache.wss4j.stax.validate.Validator` bean to use to validate UsernameTokens.
- useStrTransform() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
If `true`, the STR (Security Token Reference) Transform will be used when (externally) signing a SAML Token; otherwise the STR (Security Token Reference) Transform will not be used.
V
- validateSamlSubjectConfirmation() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
If `true`, the `SubjectConfirmation` requirements of a received SAML Token (sender-vouches or holder-of-key) will be validated; otherwise they won't be validated.
- validateToken() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
-
If `true`, the password of a received `UsernameToken` will be validated; otherwise it won't be validated.
- valueOf(String) - Static method in enum class io.quarkiverse.cxf.ws.security.WssConfigurationConstant.Transformer
-
Returns the enum constant of this class with the specified name.
- values() - Static method in enum class io.quarkiverse.cxf.ws.security.WssConfigurationConstant.Transformer
-
Returns an array containing the constants of this enum class, in the order they are declared.
W
- wsdl() - Method in interface io.quarkiverse.cxf.ws.security.CxfWsSecurityConfig.StsClientConfig
-
A URL, resource path or local filesystem path pointing to a WSDL document to use when generating the service proxy of the STS client.
- WssConfigurationConstant - Annotation Interface in io.quarkiverse.cxf.ws.security
-
Because
CxfWsSecurityConfig.ClientOrEndpointSecurityConfig
has so many options that all map to someWSS4J[In|Out]Interceptor
property value, we use this annotation to make the mapping a bit more declarative and less error prone. - WssConfigurationConstant.Transformer - Enum Class in io.quarkiverse.cxf.ws.security
- WssFactoryCustomizer - Class in io.quarkiverse.cxf.ws.security
- WssFactoryCustomizer() - Constructor for class io.quarkiverse.cxf.ws.security.WssFactoryCustomizer
All Classes and Interfaces|All Packages|Constant Field Values