Java SecretResolver.isInitialized方法代码示例

import org.wso2.securevault.SecretResolver; //导入方法依赖的package包/类
/**
 * Resolve carbon secure vault encrypted properties.
 * @param environment property values which need to construct the InitialContext
 */
private static void resolveEncryptedProperties(Hashtable environment) {
    if (environment != null) {
        Properties properties = convertToProperties(environment);
        SecretResolver secretResolver = SecretResolverFactory.create(properties);
        for (Object key : environment.keySet()) {
            if (secretResolver != null && secretResolver.isInitialized()) {
                String value = environment.get(key.toString()).toString();
                if(value != null && value.startsWith(SECRET_ALIAS_PREFIX)) {
                    value = value.split(SECRET_ALIAS_PREFIX)[1];
                }
                if (secretResolver.isTokenProtected(value)) {
                    environment.put(key.toString(), secretResolver.resolve(value));
                }
            }
        }
    }
}
 

import org.wso2.securevault.SecretResolver; //导入方法依赖的package包/类
/**
 * This method is called when the execution class is initialized.
 * All the execution classes are initialized only once.
 *
 * @param parameterMap the parameters that have been given in the
 *                     lifecycle configuration as the parameters of the executor.
 */
@Override
public void init(Map parameterMap) {
	SecretResolver secretResolver = SecretResolverFactory.create((OMElement) null, false);
	// Retrieves the secured password as follows
	secretResolver.init(GovernanceRegistryExtensionsComponent.getSecretCallbackHandlerService()
	                                                         .getSecretCallbackHandler());
	if (secretResolver.isInitialized()) {
		apimUsername = secretResolver.resolve(ExecutorConstants.APIM_USERNAME);
		apimPassword = secretResolver.resolve(ExecutorConstants.APIM_PASSWORD);
	}
	if (parameterMap.get(ExecutorConstants.APIM_ENDPOINT) != null) {
		apimEndpoint = parameterMap.get(ExecutorConstants.APIM_ENDPOINT).toString();
	}
	if (parameterMap.get(ExecutorConstants.APIM_USERNAME) != null) {
		apimUsername = parameterMap.get(ExecutorConstants.APIM_USERNAME).toString();
	}
	if (parameterMap.get(ExecutorConstants.APIM_PASSWORD) != null) {
		apimPassword = parameterMap.get(ExecutorConstants.APIM_PASSWORD).toString();
	}
}
 

import org.wso2.securevault.SecretResolver; //导入方法依赖的package包/类
/**
 * This method is called when the execution class is initialized. All the execution classes are initialized only
 * once.
 *
 * @param parameterMap Static parameter map given by the user. These are the parameters that have been given in the
 *                     lifecycle configuration as the parameters of the executor.
 *                     <p>
 *                     Eg:- <execution forEvent="Promote" class="org.wso2.carbon.governance.registry.extensions
 *                     .executors.ServiceVersionExecutor"> <parameter name="currentEnvironment"
 *                     value="/_system/governance/trunk/"/> <parameter name="targetEnvironment"
 *                     value="/_system/governance/branches/testing/"/> <parameter name="service.mediatype"
 *                     value="application/vnd.wso2-service+xml"/> </execution>
 *                     <p>
 *                     The parameters defined here are passed to the executor using this method.
 */
@Override
public void init(Map parameterMap) {
    SecretResolver secretResolver = SecretResolverFactory.create((OMElement) null, false);
    // Retrieves the secured password as follows
    secretResolver.init(GovernanceRegistryExtensionsComponent.getSecretCallbackHandlerService()
                                .getSecretCallbackHandler());
    if (secretResolver.isInitialized()) {
        apimUsername = secretResolver.resolve(APIM_USERNAME);
        apimPassword = secretResolver.resolve(APIM_PASSWORD);
    }
    if (parameterMap.get(APIM_ENDPOINT) != null) {
        apimEndpoint = parameterMap.get(APIM_ENDPOINT).toString();
    }
    if (parameterMap.get(APIM_USERNAME) != null) {
        apimUsername = parameterMap.get(APIM_USERNAME).toString();
    }
    if (parameterMap.get(APIM_PASSWORD) != null) {
        apimPassword = parameterMap.get(APIM_PASSWORD).toString();
    }
}
 

import org.wso2.securevault.SecretResolver; //导入方法依赖的package包/类
/**
 * There can be sensitive information like passwords in configuration file. If they are encrypted using secure
 * vault, this method will resolve them and replace with original values.
 */
private void resolveSecrets() {

    SecretResolver secretResolver = SecretResolverFactory.create(notificationMgtConfigProperties);
    Enumeration propertyNames = notificationMgtConfigProperties.propertyNames();
    if (secretResolver != null && secretResolver.isInitialized()) {
        // Iterate through whole config file and find encrypted properties and resolve them
        while (propertyNames.hasMoreElements()) {
            String key = (String) propertyNames.nextElement();
            if (secretResolver.isTokenProtected(key)) {
                if (log.isDebugEnabled()) {
                    log.debug("Resolving and replacing secret for " + key);
                }
                // Resolving the secret password.
                String value = secretResolver.resolve(key);
                // Replaces the original encrypted property with resolved property
                notificationMgtConfigProperties.put(key, value);
            } else {
                if (log.isDebugEnabled()) {
                    log.debug("No encryption done for value with key :" + key);
                }
            }
        }
    } else {
        if(log.isDebugEnabled()){
            log.debug("Secret Resolver is not present. Will not resolve encryptions in config file");
        }
    }
}
 

import org.wso2.securevault.SecretResolver; //导入方法依赖的package包/类
private static void resolveSecrets(Properties properties) {

        SecretResolver secretResolver = SecretResolverFactory.create(properties);
        Enumeration propertyNames = properties.propertyNames();
        if (secretResolver != null && secretResolver.isInitialized()) {
            // Iterate through config file, find encrypted properties and resolve them
            while (propertyNames.hasMoreElements()) {
                String key = (String) propertyNames.nextElement();
                if (StringUtils
                        .startsWith(properties.getProperty(key), IdentityManagementEndpointConstants.SECRET_ALIAS)) {
                    String secretAlias = properties.getProperty(key)
                                                   .split(IdentityManagementEndpointConstants.SECRET_ALIAS_SEPARATOR,
                                                          2)[1];
                    if (secretResolver.isTokenProtected(secretAlias)) {
                        if (log.isDebugEnabled()) {
                            log.debug("Resolving and replacing secret for " + secretAlias);
                        }
                        // Resolving the secret password.
                        String value = secretResolver.resolve(secretAlias);
                        // Replaces the original encrypted property with resolved property
                        properties.put(key, value);
                    } else {
                        if (log.isDebugEnabled()) {
                            log.debug("No encryption done for value with key :" + key);
                        }
                    }
                }
            }
        } else {
            log.warn("Secret Resolver is not present. Failed to resolve encryption in " +
                     IdentityManagementEndpointConstants.SERVICE_CONFIG_FILE_NAME + " file");
        }
    }
 

import org.wso2.securevault.SecretResolver; //导入方法依赖的package包/类
/**
 * Initialize analytics common configurations
 *
 * @param secretResolver
 * @param tAnalyticServer
 */
private void initAnalytics(SecretResolver secretResolver, TAnalyticServer tAnalyticServer) {
    // Get Enabled
    //this.analyticsEnabled = tAnalyticServer.getEnabled();
    if (this.isAnalyticsDashboardEnabled()) {
        // Get URL
        if (tAnalyticServer.getDASServerUrl().endsWith("/")) {
            this.analyticsServerURL = tAnalyticServer.getDASServerUrl().substring(0, tAnalyticServer.getDASServerUrl()
                                                                                          .length() - 1);
        } else {
            this.analyticsServerURL = tAnalyticServer.getDASServerUrl();
        }
        // Get Username
        this.analyticsServerUsername = tAnalyticServer.getUsername();
        // Get Password
        if (secretResolver != null && secretResolver.isInitialized()
            && secretResolver.isTokenProtected(BPMNAnalyticsCoreConstants.ANALYTICS_SERVER_PASSWORD_SECRET_ALIAS)) {
            this.analyticsServerPassword = secretResolver.resolve(BPMNAnalyticsCoreConstants
                                                                          .ANALYTICS_SERVER_PASSWORD_SECRET_ALIAS);
            if (log.isDebugEnabled()) {
                log.debug("Loaded  analytics  password from secure vault");
            }
        } else {
            if (tAnalyticServer.getPassword() != null) {
                this.analyticsServerPassword = tAnalyticServer.getPassword();
            }
        }
    }
}
 

import org.wso2.securevault.SecretResolver; //导入方法依赖的package包/类
/**
 * There can be sensitive information like passwords in configuration file. If they are encrypted using secure
 * vault, this method will resolve them and replace with original values.
 */
private static void resolveSecrets(Properties properties) {

    SecretResolver secretResolver = SecretResolverFactory.create(properties);
    Enumeration propertyNames = properties.propertyNames();
    if (secretResolver != null && secretResolver.isInitialized()) {
        // Iterate through whole config file and find encrypted properties and resolve them
        while (propertyNames.hasMoreElements()) {
            String key = (String) propertyNames.nextElement();
            if (secretResolver.isTokenProtected(key)) {
                if (log.isDebugEnabled()) {
                    log.debug("Resolving and replacing secret for " + key);
                }
                // Resolving the secret password.
                String value = secretResolver.resolve(key);
                // Replaces the original encrypted property with resolved property
                properties.put(key, value);
            } else {
                if (log.isDebugEnabled()) {
                    log.debug("No encryption done for value with key :" + key);
                }
            }
        }
    } else {
        log.warn("Secret Resolver is not present. Will not resolve encryptions in " + Constants.TenantConstants
                .CONFIG_RELATIVE_PATH + " file");
    }
}
 

import org.wso2.securevault.SecretResolver; //导入方法依赖的package包/类
/**
 * Initialize analytics common configurations
 *
 * @param tAnalyticServer
 * @param secretResolver
 */
private void initAnalytics(SecretResolver secretResolver, TAnalyticServer tAnalyticServer) {

    // Get Auth URL Set
    this.analyticsAuthURLSet = tAnalyticServer.getAuthURLSet();

    // Get Receiver URL Set
    this.analyticsReceiverURLSet = tAnalyticServer.getReceiverURLSet();

    // Get Username
    this.analyticsServerUsername = tAnalyticServer.getUsername();
    // Get Password
    if (secretResolver != null && secretResolver.isInitialized()
            && secretResolver.isTokenProtected(AnalyticsPublisherConstants
            .BPS_BPMN_ANALYTICS_SERVER_PASSWORD_SECRET_ALIAS)) {
        this.analyticsServerPassword = secretResolver.resolve(AnalyticsPublisherConstants
                .BPS_BPMN_ANALYTICS_SERVER_PASSWORD_SECRET_ALIAS);
        if (log.isDebugEnabled()) {
            log.debug("Loaded analytics password from secure vault");
        }
    } else {
        if (tAnalyticServer.getPassword() != null) {
            this.analyticsServerPassword = tAnalyticServer.getPassword();
        }
    }

}
 

import org.wso2.securevault.SecretResolver; //导入方法依赖的package包/类
public static String getResolvedPassword(SecretResolver secretResolver,
                                         String configName, String password) {

    if (secretResolver != null && secretResolver.isInitialized()) {
        if (secretResolver.isTokenProtected("wso2registry." + configName + ".password")) {
            return secretResolver.resolve("wso2registry." + configName + ".password");
        } else {
            return password;
        }
    } else {
        return password;
    }
}
 

import org.wso2.securevault.SecretResolver; //导入方法依赖的package包/类
public static String resolveSecret(final OMElement docElt, final OMElement elt) {
    // retrieve the value using secure vault
    SecretResolver secretResolver = SecretResolverFactory.create(docElt, false);

    String alias = elt.getAttributeValue(new QName(
            ALIAS_NAMESPACE, ALIAS_ATTRIBUTE, ALIAS_ATTRIBUTE_PREFIX));

    // retrieve the secured password
    if (secretResolver != null && secretResolver.isInitialized() &&
            secretResolver.isTokenProtected(alias)) {
        return secretResolver.resolve(alias);
    }
    return null;
}
 

import org.wso2.securevault.SecretResolver; //导入方法依赖的package包/类
/**
 * Decrypt properties with secure vault and maintain on a separate hashmap for cross-reference.
 *
 * @param filePath File path to the configuration file in question
 * @throws FileNotFoundException
 * @throws JaxenException
 * @throws XMLStreamException
 */
private static void decryptConfigurationFromFile(String filePath) throws FileNotFoundException, JaxenException, XMLStreamException {

    cipherValueMap = new ConcurrentHashMap<String, String>();

    StAXOMBuilder stAXOMBuilder = new StAXOMBuilder(new FileInputStream(new File(filePath)));
    OMElement dom = stAXOMBuilder.getDocumentElement();

    //Initialize the SecretResolver providing the configuration element.
    SecretResolver secretResolver = SecretResolverFactory.create(dom, false);

    AXIOMXPath xpathExpression = new AXIOMXPath("//*[@*[local-name() = 'secretAlias']]");
    List nodeList = xpathExpression.selectNodes(dom);

    for (Object o : nodeList) {

        String secretAlias = ((OMElement) o).getAttributeValue(SECURE_VAULT_QNAME);
        String decryptedValue = "";

        if (secretResolver != null && secretResolver.isInitialized()) {
            if (secretResolver.isTokenProtected(secretAlias)) {
                decryptedValue = secretResolver.resolve(secretAlias);
            }
        } else {
            log.warn("Error while trying to decipher secure property with secretAlias : " + secretAlias);
        }

        cipherValueMap.put(secretAlias, decryptedValue);
    }

}
 

import org.wso2.securevault.SecretResolver; //导入方法依赖的package包/类
/**
 * This method is called when the execution class is initialized.
 * All the execution classes are initialized only once.
 *
 * @param parameterMap the parameters that have been given in the
 *                     lifecycle configuration as the parameters of the executor.
 */
@Override
public void init(Map parameterMap) {
	SecretResolver secretResolver = SecretResolverFactory.create((OMElement) null, false);
	// Retrieves the secured password as follows
	secretResolver.init(GovernanceRegistryExtensionsComponent.getSecretCallbackHandlerService()
	                                                         .getSecretCallbackHandler());
	if (secretResolver.isInitialized()) {
		apimUsername = secretResolver.resolve(ExecutorConstants.APIM_USERNAME);
		apimPassword = secretResolver.resolve(ExecutorConstants.APIM_PASSWORD);
	}

	if (parameterMap.get(ExecutorConstants.APIM_ENDPOINT) != null) {
		apimEndpoint = parameterMap.get(ExecutorConstants.APIM_ENDPOINT).toString();
	}
	if (parameterMap.get(ExecutorConstants.APIM_USERNAME) != null) {
		apimUsername = parameterMap.get(ExecutorConstants.APIM_USERNAME).toString();
	}
	if (parameterMap.get(ExecutorConstants.APIM_PASSWORD) != null) {
		apimPassword = parameterMap.get(ExecutorConstants.APIM_PASSWORD).toString();
	}
	if (parameterMap.get(ExecutorConstants.DEFAULT_TIER) != null) {
		defaultTier = parameterMap.get(ExecutorConstants.DEFAULT_TIER).toString();
	}
	if (parameterMap.get(ExecutorConstants.THROTTLING_TIER) != null) {
		apiThrottlingTier = parameterMap.get(ExecutorConstants.THROTTLING_TIER).toString();
	}
}
 

import org.wso2.securevault.SecretResolver; //导入方法依赖的package包/类
/**
 * This method is called when the execution class is initialized.
 * All the execution classes are initialized only once.
 *
 * @param parameterMap Static parameter map given by the user.
 *                     These are the parameters that have been given in the
 *                     lifecycle configuration as the parameters of the executor.
 */
public void init(Map parameterMap) {

    SecretResolver secretResolver = SecretResolverFactory.create((OMElement) null, false);
    // Retrieves the secured password as follows
    secretResolver.init(GovernanceRegistryExtensionsComponent.getSecretCallbackHandlerService()
                                                             .getSecretCallbackHandler());
    if (secretResolver != null && secretResolver.isInitialized()) {
        apimUsername = secretResolver.resolve("apim.username");
    }
    if (secretResolver != null && secretResolver.isInitialized()) {
        apimPassword = secretResolver.resolve("apim.password");
    }

    this.parameterMap = parameterMap;
    if (parameterMap.get(APIM_ENDPOINT) != null) {
        apimEndpoint = parameterMap.get(APIM_ENDPOINT).toString();
    }
    if (parameterMap.get(APIM_USERNAME) != null) {
        apimUsername = parameterMap.get(APIM_USERNAME).toString();
    }
    if (parameterMap.get(APIM_PASSWORD) != null) {
        apimPassword = parameterMap.get(APIM_PASSWORD).toString();
    }
    if (parameterMap.get(DEFAULT_TIER) != null) {
        defaultTier = parameterMap.get(DEFAULT_TIER).toString();
    }
    if (parameterMap.get(THROTTLING_TIER) != null) {
        apiThrottlingTier = parameterMap.get(THROTTLING_TIER).toString();
    }
    if (parameterMap.get(Constants.APIM_ENV) != null) {
        apimEnv = parameterMap.get(Constants.APIM_ENV).toString();
    }
}
 

import org.wso2.securevault.SecretResolver; //导入方法依赖的package包/类
/**
 * This method is called when the execution class is initialized.
 * All the execution classes are initialized only once.
 *
 * @param parameterMap Static parameter map given by the user.
 *                     These are the parameters that have been given in the
 *                     lifecycle configuration as the parameters of the executor.
 */
@Override
public void init(Map parameterMap) {
    SecretResolver secretResolver = SecretResolverFactory.create((OMElement) null, false);
    // Retrieves the secured password as follows
    secretResolver.init(GovernanceRegistryExtensionsComponent.getSecretCallbackHandlerService()
            .getSecretCallbackHandler());
    if (secretResolver.isInitialized()) {
        apimUsername = secretResolver.resolve(APIM_USERNAME);
        apimPassword = secretResolver.resolve(APIM_PASSWORD);
    }
    if (parameterMap.get(APIM_ENDPOINT) != null) {
        apimEndpoint = parameterMap.get(APIM_ENDPOINT).toString();
    }
    if (parameterMap.get(APIM_USERNAME) != null) {
        apimUsername = parameterMap.get(APIM_USERNAME).toString();
    }
    if (parameterMap.get(APIM_PASSWORD) != null) {
        apimPassword = parameterMap.get(APIM_PASSWORD).toString();
    }
    if (parameterMap.get(Constants.APIM_ENV) != null) {
        apimEnv = parameterMap.get(Constants.APIM_ENV).toString();
    }
    if (parameterMap.get(DEFAULT_TIER) != null) {
        defaultTier = parameterMap.get(DEFAULT_TIER).toString();
    }
    if (parameterMap.get(THROTTLING_TIER) != null) {
        apiThrottlingTier = parameterMap.get(THROTTLING_TIER).toString();
    }

}
 

import org.wso2.securevault.SecretResolver; //导入方法依赖的package包/类
/**
    * This method is called when the execution class is initialized.
    * All the execution classes are initialized only once.
    *
    * @param parameterMap Static parameter map given by the user.
    *                     These are the parameters that have been given in the
    *                     lifecycle configuration as the parameters of the executor.
    */
public void init(Map parameterMap) {

       SecretResolver secretResolver = SecretResolverFactory.create((OMElement) null, false) ;
       // Retrieves the secured password as follows
       secretResolver.init(GovernanceRegistryExtensionsComponent.getSecretCallbackHandlerService()
               .getSecretCallbackHandler());
       if (secretResolver != null && secretResolver.isInitialized()) {
        apimUsername = secretResolver.resolve("apim.username");
       }
       if (secretResolver != null && secretResolver.isInitialized()) {
        apimPassword = secretResolver.resolve("apim.password");
       }

       this.parameterMap = parameterMap;
	if (parameterMap.get(APIM_ENDPOINT) != null) {
		apimEndpoint = parameterMap.get(APIM_ENDPOINT).toString();
	}
	if (parameterMap.get(APIM_USERNAME) != null) {
		apimUsername = parameterMap.get(APIM_USERNAME).toString();
	}
	if (parameterMap.get(APIM_PASSWORD) != null) {
		apimPassword = parameterMap.get(APIM_PASSWORD).toString();
	}
	if (parameterMap.get(DEFAULT_TIER) != null) {
		defaultTier = parameterMap.get(DEFAULT_TIER).toString();
	}
	if (parameterMap.get(THROTTLING_TIER) != null) {
		apiThrottlingTier = parameterMap.get(THROTTLING_TIER).toString();
	}
}