de.adorsys.datasafe.privatestore.api.actions

Interface EncryptedResourceResolver

public interface EncryptedResourceResolver

Resolves logical resource location into encrypted absolute location and vice-versa. For example, when user requests some/path/to/file this resolver will provide physical location of this resource by encrypting its relative path (example: some/path/to/file -> encryptedSome/encryptedPath/encryptedTo/encryptedFile) and resolving it against user private files folder, so that some/path/to/file will be converted to example: s3://bucket/user/privatespace/encryptedSome/encryptedPath/encryptedTo/encryptedFile

Method Summary

Modifier and Type	Method and Description
Function<PrivateResource,AbsoluteLocation<PrivateResource>>	decryptingResolver(UserIDAuth auth, PrivateResource root, StorageIdentifier identifier) Decrypts resource location (relative or absolute) and resolves it against user private files.
AbsoluteLocation<PrivateResource>	encryptAndResolvePath(UserIDAuth auth, PrivateResource resource, StorageIdentifier identifier) Encrypts relative resource location and resolves it against user private files.

Method Detail

encryptAndResolvePath

AbsoluteLocation<PrivateResource> encryptAndResolvePath(UserIDAuth auth,
                                                        PrivateResource resource,
                                                        StorageIdentifier identifier)

Encrypts relative resource location and resolves it against user private files. For example some/path/to/file transforms to s3://bucket/user/privatespace/encryptedSome/encryptedPath/encryptedTo/encryptedFile

Parameters:

auth - User authorization

resource - Relative resource location

Returns:

Encrypted relative resource location

decryptingResolver

Function<PrivateResource,AbsoluteLocation<PrivateResource>> decryptingResolver(UserIDAuth auth,
                                                                               PrivateResource root,
                                                                               StorageIdentifier identifier)

Decrypts resource location (relative or absolute) and resolves it against user private files. For example s3://bucket/user/privatespace/encryptedSome/encryptedPath/encryptedTo/encryptedFile transforms to some/path/to/file encryptedSome/encryptedPath/encryptedTo/encryptedFile transforms to some/path/to/file

Parameters:

auth - User authorization

Returns:

Function that allows to decrypt and resolve resource path against root Function: Resource within private space (unencrypted) -> Absolute encrypted resource location