Package de.otto.kafka.messaging.e2ee.vault

Class VaultEncryptionKeyProvider

java.lang.Object

de.otto.kafka.messaging.e2ee.vault.VaultEncryptionKeyProvider

All Implemented Interfaces:

EncryptionKeyProvider

public final class VaultEncryptionKeyProvider
extends Object
implements EncryptionKeyProvider

Nested Class Summary

Nested classes/interfaces inherited from interface de.otto.kafka.messaging.e2ee.EncryptionKeyProvider

EncryptionKeyProvider.KeyVersion

Constructor Summary

Constructors

Constructor	Description
VaultEncryptionKeyProvider(VaultEncryptionKeyProviderConfig config)

Method Summary

Modifier and Type	Method	Description
boolean	isEncryptedTopic(String kafkaTopicName)
String	retrieveKeyForDecryption(String topic, int version)
String	retrieveKeyForDecryption(String topic, int version, String encryptionKeyAttributeName)
EncryptionKeyProvider.KeyVersion	retrieveKeyForEncryption(String kafkaTopicName)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

VaultEncryptionKeyProvider

public VaultEncryptionKeyProvider(VaultEncryptionKeyProviderConfig config)

Method Details

retrieveKeyForEncryption

public EncryptionKeyProvider.KeyVersion retrieveKeyForEncryption(String kafkaTopicName)

Specified by:

retrieveKeyForEncryption in interface EncryptionKeyProvider

Parameters:

kafkaTopicName - the name of the topic to encrypt

Returns:

a key for encryption or null if encryption is not needed

retrieveKeyForDecryption

public String retrieveKeyForDecryption(String topic,
 int version)

Specified by:

retrieveKeyForDecryption in interface EncryptionKeyProvider

Parameters:

topic - the name of the topic to decrypt

version - the version of the key

Returns:

base64 and URL-Encoded encoded key

retrieveKeyForDecryption

public String retrieveKeyForDecryption(String topic,
 int version,
 String encryptionKeyAttributeName)

Specified by:

retrieveKeyForDecryption in interface EncryptionKeyProvider

Parameters:

topic - the name of the topic to decrypt

version - the version of the key

encryptionKeyAttributeName - the name of the encryption key within the vault. When null then the default value must be used.

Returns:

base64 and URL-Encoded encoded key

isEncryptedTopic

public boolean isEncryptedTopic(String kafkaTopicName)

Specified by:

isEncryptedTopic in interface EncryptionKeyProvider

Parameters:

kafkaTopicName - the name of the topic

Returns:

true when the topic can contain encrypted payloads