org.apache.hadoop.security.token

类 SecretManager<T extends TokenIdentifier>

java.lang.Object

org.apache.hadoop.security.token.SecretManager<T>

类型参数:

T - The type of the token identifier

直接已知子类:

AbstractDelegationTokenSecretManager, BlockTokenSecretManager, JobTokenSecretManager

public abstract class SecretManager<T extends TokenIdentifier>
extends Object

The server-side secret manager for each token type.

嵌套类概要

嵌套类

限定符和类型	类和说明
static class	SecretManager.InvalidToken The token was invalid and the message explains why.

构造器概要

构造器

构造器和说明
SecretManager()

方法概要

方法

限定符和类型	方法和说明
abstract T	createIdentifier() Create an empty token identifier.
protected static byte[]	createPassword(byte[] identifier, SecretKey key) Compute HMAC of the identifier using the secret key and return the output as password
protected abstract byte[]	createPassword(T identifier) Create the password for the given identifier.
protected static SecretKey	createSecretKey(byte[] key) Convert the byte[] to a secret key
protected SecretKey	generateSecret() Generate a new random secret key.
abstract byte[]	retrievePassword(T identifier) Retrieve the password for the given token identifier.

从类继承的方法 java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

构造器详细资料

SecretManager

public SecretManager()

方法详细资料

createPassword

protected abstract byte[] createPassword(T identifier)

Create the password for the given identifier. identifier may be modified inside this method.

参数:

identifier - the identifier to use

返回:

the new password

retrievePassword

public abstract byte[] retrievePassword(T identifier)
                                 throws SecretManager.InvalidToken

Retrieve the password for the given token identifier. Should check the date or registry to make sure the token hasn't expired or been revoked. Returns the relevant password.

参数:

identifier - the identifier to validate

返回:

the password to use

抛出:

SecretManager.InvalidToken - the token was invalid

createIdentifier

public abstract T createIdentifier()

Create an empty token identifier.

返回:

the newly created empty token identifier

generateSecret

protected SecretKey generateSecret()

Generate a new random secret key.

返回:

the new key

createPassword

protected static byte[] createPassword(byte[] identifier,
                    SecretKey key)

Compute HMAC of the identifier using the secret key and return the output as password

参数:

identifier - the bytes of the identifier

key - the secret key

返回:

the bytes of the generated password

createSecretKey

protected static SecretKey createSecretKey(byte[] key)

Convert the byte[] to a secret key

参数:

key - the byte[] to create a secret key from

返回:

the secret key