com.byteplus.auth

Class OidcCredentialProvider

java.lang.Object

com.byteplus.auth.OidcCredentialProvider

All Implemented Interfaces:

Provider

public class OidcCredentialProvider
extends Object
implements Provider

Provider that obtains temporary credentials via STS AssumeRoleWithOIDC.

Follows the Provider CQS contract:

• isExpired() / retrieve() are pure reads.
• refresh() is the only method that mutates state.

Intended to be wrapped in a CredentialProvider, which serializes refresh through a ReadWriteLock and guarantees the isExpired → refresh → retrieve sequence. Direct use (without wrapping) is not a supported mode.

Constructor Summary

Constructors

Constructor and Description
OidcCredentialProvider(String roleTrn, String roleSessionName, String oidcTokenFile, String rolePolicy, String stsEndpoint)

Method Summary

Modifier and Type	Method and Description
static OidcCredentialProvider	fromEnvironment()
boolean	isExpired()
void	refresh()
CredentialValue	retrieve()
void	setDurationSeconds(int durationSeconds)
void	setExpireBufferSeconds(int expireBufferSeconds)
void	setMaxRetries(int maxRetries)
void	setRetryIntervalMs(int retryIntervalMs)
void	setSchema(String schema)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

OidcCredentialProvider

public OidcCredentialProvider(String roleTrn,
                              String roleSessionName,
                              String oidcTokenFile,
                              String rolePolicy,
                              String stsEndpoint)

Method Detail

fromEnvironment

public static OidcCredentialProvider fromEnvironment()
                                              throws ApiException

Throws:

ApiException

isExpired

public boolean isExpired()

Specified by:

isExpired in interface Provider

refresh

public void refresh()
             throws ApiException

Specified by:

refresh in interface Provider

Throws:

ApiException

retrieve

public CredentialValue retrieve()
                         throws ApiException

Specified by:

retrieve in interface Provider

Throws:

ApiException

setDurationSeconds

public void setDurationSeconds(int durationSeconds)

setExpireBufferSeconds

public void setExpireBufferSeconds(int expireBufferSeconds)

setSchema

public void setSchema(String schema)

setMaxRetries

public void setMaxRetries(int maxRetries)

setRetryIntervalMs

public void setRetryIntervalMs(int retryIntervalMs)