Class DefaultKeyVaultSigningClient

java.lang.Object
io.micronaut.azure.secretmanager.client.DefaultKeyVaultSigningClient
All Implemented Interfaces:
KeyVaultSigningClient
@Singleton @Requires(classes=com.azure.security.keyvault.keys.cryptography.CryptographyClient.class) @Requires(property="azure.key-vault.keys.enabled",value="true") @Requires(property="azure.key-vault.keys.signing.enabled",value="true") public class DefaultKeyVaultSigningClient extends Object implements KeyVaultSigningClient
Default implementation that delegates to CryptographyClient.

Maintains a bounded LRU cache of CryptographyClient instances to avoid creating a new client for every signing operation while preventing unbounded memory growth.

Since:
5.13.0

  • Constructor Summary

    Constructors
    Constructor
    Description
    DefaultKeyVaultSigningClient(com.azure.core.credential.TokenCredential tokenCredential)
     

  • Method Summary

    Modifier and Type
    Method
    Description
    byte[]
    sign(@NonNull String keyId, @NonNull com.azure.security.keyvault.keys.cryptography.models.SignatureAlgorithm algorithm, @NonNull byte[] data)
    Sign the given data using the key identified by keyId.

    Methods inherited from class Object

    clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

  • Constructor Details

    • DefaultKeyVaultSigningClient

      public DefaultKeyVaultSigningClient(com.azure.core.credential.TokenCredential tokenCredential)
      Parameters:
      tokenCredential - Azure token credentials

  • Method Details

    • sign

      public byte[] sign(@NonNull @NonNull String keyId, @NonNull @NonNull com.azure.security.keyvault.keys.cryptography.models.SignatureAlgorithm algorithm, @NonNull @NonNull byte[] data)
      Description copied from interface: KeyVaultSigningClient
      Sign the given data using the key identified by keyId.
      Specified by:
      sign in interface KeyVaultSigningClient
      Parameters:
      keyId - the full key identifier
      algorithm - the signature algorithm
      data - the data to sign
      Returns:
      the signature bytes