org.springframework.data.gemfire.config.annotation.EnableAuth Maven / Gradle / Ivy
/*
* Copyright 2012-2020 the original author or authors.
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* https://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*
*/
package org.springframework.data.gemfire.config.annotation;
import java.lang.annotation.Documented;
import java.lang.annotation.ElementType;
import java.lang.annotation.Inherited;
import java.lang.annotation.Retention;
import java.lang.annotation.RetentionPolicy;
import java.lang.annotation.Target;
import org.apache.geode.security.AccessControl;
import org.apache.geode.security.AuthInitialize;
import org.apache.geode.security.Authenticator;
import org.springframework.context.annotation.Configuration;
import org.springframework.context.annotation.Import;
/**
* The {@link EnableAuth} annotation marks a Spring {@link Configuration @Configuration} annotated {@link Class}
* to configure and enable Pivotal GemFire/Apache Geode's Authentication and Authorization framework and services.
*
* @author John Blum
* @see java.lang.annotation.Annotation
* @see org.apache.geode.security.AccessControl
* @see org.apache.geode.security.AuthInitialize
* @see org.apache.geode.security.Authenticator
* @see org.springframework.context.annotation.Import
* @see org.springframework.data.gemfire.config.annotation.AuthConfiguration
* @see Authentication
* @see Authorization
* @since 1.9.0
*/
@Target(ElementType.TYPE)
@Retention(RetentionPolicy.RUNTIME)
@Inherited
@Documented
@Import(AuthConfiguration.class)
@UsesGemFireProperties
@SuppressWarnings({ "deprecation", "unused" })
public @interface EnableAuth {
/**
* Used for authorization. Static creation method returning an {@link AccessControl} object, which determines
* authorization of client-server cache operations. This specifies the callback that should be invoked
* in the pre-operation phase, which is when the request for the operation is received from the client.
*
* Defaults to unset.
*
* Use the {@literal spring.data.gemfire.security.client.accessor} property in {@literal application.properties}.
*/
String clientAccessor() default "";
/**
* Used for authorization. The callback that should be invoked in the post-operation phase, which is
* when the operation has completed on the server but before the result is sent to the client.
* The post-operation callback is also invoked for the updates that are sent from server to client
* through the notification channel.
*
* Defaults to unset.
*
* Use the {@literal spring.data.gemfire.security.client.accessor-post-processor} property
* in {@literal application.properties}.
*/
String clientAccessorPostProcessor() default "";
/**
* Used for authentication. Static creation method returning an {@link AuthInitialize} object,
* which obtains credentials for clients. The obtained credentials should be acceptable
* to the {@link Authenticator} specified through the {@literal security-client-authenticator} property
* on the clients.
*
* Defaults to unset.
*
* Use the {@literal spring.data.gemfire.security.client.authentication-initializer} property
* in {@literal application.properties}.
*/
String clientAuthenticationInitializer() default "";
/**
* Used for authentication. Static creation method returning an {@link Authenticator} object,
* which is used by a server to verify the credentials of the connecting client.
*
* Defaults to unset.
*
* Use the {@literal spring.data.gemfire.security.client.authenticator} property
* in {@literal application.properties}.
*/
String clientAuthenticator() default "";
/**
* Used for authentication. For secure transmission of sensitive credentials like passwords, you can encrypt
* the credentials using the Diffie-Hellman key exchange algorithm. Do this by setting the
* {@literal security-client-dhalgo} system property on the clients to the name of a valid symmetric key cipher
* supported by the JDK.
*
* Defaults to unset.
*
* Use the {@literal spring.data.gemfire.security.client.diffie-hellman-algorithm} property
* in {@literal application.properties}.
*/
String clientDiffieHellmanAlgorithm() default "";
/**
* Used with authentication. Static creation method returning an {@link AuthInitialize} object, which obtains
* credentials for peers in a distributed system. The obtained credentials should be acceptable to the
* {@link Authenticator} specified through the {@literal security-peer-authenticator} property on the peers.
*
* Defaults to unset.
*
* Use the {@literal spring.data.gemfire.security.peer.authentication-initializer} property
* in {@literal application.properties}.
*/
String peerAuthenticationInitializer() default "";
/**
* Used with authentication. Static creation method returning an {@link Authenticator} object, which is used
* by a peer to verify the credentials of the connecting peer.
*
* Defaults to unset.
*
* Use the {@literal spring.data.gemfire.security.peer.authenticator} property in {@literal application.properties}.
*/
String peerAuthenticator() default "";
/**
* Used with authentication. Timeout in milliseconds used by a peer to verify membership of an unknown
* authenticated peer requesting a secure connection.
*
* Defaults to {@literal 1000} milliseconds.
*
* Use the {@literal spring.data.gemfire.security.peer.verify-member-timeout} property
* in {@literal application.properties}.
*/
long peerVerifyMemberTimeout() default AuthConfiguration.DEFAULT_PEER_VERIFY_MEMBER_TIMEOUT;
/**
* Used with authentication. The log file for security log messages. If not specified, the member’s
* regular log file is used.
*
* Defaults to unset.
*
* Use the {@literal spring.data.gemfire.security.log.file} property in {@literal application.properties}.
*/
String securityLogFile() default "";
/**
* Used with authentication. Logging level detail for security log messages.
*
* Valid values from lowest to highest are {@literal fine}, {@literal config}, {@literal info}, {@literal warning},
* {@literal error}, {@literal severe}, and {@literal none}.
*
* Defaults to {@literal config}.
*
* Use the {@literal spring.data.gemfire.security.log.level} property in {@literal application.properties}.
*/
String securityLogLevel() default AuthConfiguration.DEFAULT_SECURITY_LOG_LEVEL;
/**
* Used for authentication. Any custom properties needed by your {@link AuthInitialize}
* or {@link Authenticator} callbacks store in an external {@link java.util.Properties} file.
*
* Any security-related (properties that begin with {@literal security-*}) configuration properties
* that are normally configured in {@literal gemfire.properties} can be moved to a separate
* {@literal gfsecurity.properties} file. Placing these configuration settings in a separate file
* allows you to restrict access to security configuration data. This way, you can still allow read
* or write access for your {@literal gemfire.properties} file.
*
* Defaults to unset.
*
* Use the {@literal spring.data.gemfire.security.properties-file} property in {@literal application.properties}.
*/
String securityPropertiesFile() default "";
}