Uses of Class
org.apache.hadoop.fs.s3a.auth.delegation.AbstractS3ATokenIdentifier

Packages that use AbstractS3ATokenIdentifier

Package	Description
org.apache.hadoop.fs.s3a	S3A Filesystem.
org.apache.hadoop.fs.s3a.auth.delegation	Extensible delegation token support for the S3A connector.

Uses of AbstractS3ATokenIdentifier in org.apache.hadoop.fs.s3a

Methods in org.apache.hadoop.fs.s3a that return types with arguments of type AbstractS3ATokenIdentifier

Modifier and Type	Method and Description
org.apache.hadoop.security.token.Token<AbstractS3ATokenIdentifier>	S3AFileSystem.getDelegationToken(String renewer) Get a delegation token if the FS is set up for them.

Uses of AbstractS3ATokenIdentifier in org.apache.hadoop.fs.s3a.auth.delegation

Subclasses of AbstractS3ATokenIdentifier in org.apache.hadoop.fs.s3a.auth.delegation

Modifier and Type	Class and Description
class	FullCredentialsTokenIdentifier The full credentials payload is the same of that for a session token, but a different token kind is used.
class	RoleTokenIdentifier Role token identifier.
class	SessionTokenIdentifier A token identifier which contains a set of AWS session credentials, credentials which will be valid until they expire.

Methods in org.apache.hadoop.fs.s3a.auth.delegation with type parameters of type AbstractS3ATokenIdentifier

Modifier and Type	Method and Description
protected <T extends AbstractS3ATokenIdentifier> T	AbstractDelegationTokenBinding.convertTokenIdentifier(AbstractS3ATokenIdentifier identifier, Class<T> expectedClass) Verify that a token identifier is of a specific class.

Methods in org.apache.hadoop.fs.s3a.auth.delegation that return AbstractS3ATokenIdentifier

Modifier and Type	Method and Description
abstract AbstractS3ATokenIdentifier	AbstractDelegationTokenBinding.createEmptyIdentifier() Create a new subclass of AbstractS3ATokenIdentifier.
AbstractS3ATokenIdentifier	FullCredentialsTokenBinding.createEmptyIdentifier()
AbstractS3ATokenIdentifier	AbstractDelegationTokenBinding.TokenSecretManager.createIdentifier()
abstract AbstractS3ATokenIdentifier	AbstractDelegationTokenBinding.createTokenIdentifier(Optional<RoleModel.Policy> policy, EncryptionSecrets encryptionSecrets, org.apache.hadoop.io.Text renewer) Create a token identifier with all the information needed to be included in a delegation token.
AbstractS3ATokenIdentifier	FullCredentialsTokenBinding.createTokenIdentifier(Optional<RoleModel.Policy> policy, EncryptionSecrets encryptionSecrets, org.apache.hadoop.io.Text renewer) Create a new delegation token.
AbstractS3ATokenIdentifier	S3ADelegationTokens.extractIdentifier(org.apache.hadoop.security.token.Token<? extends AbstractS3ATokenIdentifier> token) From a token, get the session token identifier.

Methods in org.apache.hadoop.fs.s3a.auth.delegation that return types with arguments of type AbstractS3ATokenIdentifier

Modifier and Type	Method and Description
org.apache.hadoop.security.token.Token<AbstractS3ATokenIdentifier>	S3ADelegationTokens.createDelegationToken(EncryptionSecrets encryptionSecrets, org.apache.hadoop.io.Text renewer) Create a delegation token for the user.
org.apache.hadoop.security.token.Token<AbstractS3ATokenIdentifier>	AbstractDelegationTokenBinding.createDelegationToken(Optional<RoleModel.Policy> policy, EncryptionSecrets encryptionSecrets, org.apache.hadoop.io.Text renewer) Create a delegation token for the user.
protected org.apache.hadoop.security.token.SecretManager<AbstractS3ATokenIdentifier>	AbstractDelegationTokenBinding.createSecretMananger() Create a secret manager.
Optional<org.apache.hadoop.security.token.Token<AbstractS3ATokenIdentifier>>	S3ADelegationTokens.getBoundDT() Get any bound DT.
org.apache.hadoop.security.token.Token<AbstractS3ATokenIdentifier>	S3ADelegationTokens.getBoundOrNewDT(EncryptionSecrets encryptionSecrets, org.apache.hadoop.io.Text renewer) Get any bound DT or create a new one.
Optional<AbstractS3ATokenIdentifier>	S3ADelegationTokens.getDecodedIdentifier() Get any decoded identifier from the bound DT; empty if not bound.
static org.apache.hadoop.security.token.Token<AbstractS3ATokenIdentifier>	S3ADelegationTokens.lookupS3ADelegationToken(org.apache.hadoop.security.Credentials credentials, URI uri) Look for any S3A token for the given FS service.
static org.apache.hadoop.security.token.Token<AbstractS3ATokenIdentifier>	S3ADelegationTokens.lookupToken(org.apache.hadoop.security.Credentials credentials, org.apache.hadoop.io.Text service) Look up any token from the service; cast it to one of ours.
static org.apache.hadoop.security.token.Token<AbstractS3ATokenIdentifier>	S3ADelegationTokens.lookupToken(org.apache.hadoop.security.Credentials credentials, org.apache.hadoop.io.Text service, org.apache.hadoop.io.Text kind) Look up a token from the credentials, verify it is of the correct kind.
org.apache.hadoop.security.token.Token<AbstractS3ATokenIdentifier>	S3ADelegationTokens.selectTokenFromFSOwner() Find a token for the FS user and canonical filesystem URI.

Methods in org.apache.hadoop.fs.s3a.auth.delegation with parameters of type AbstractS3ATokenIdentifier

Modifier and Type	Method and Description
AWSCredentialProviderList	AbstractDelegationTokenBinding.bindToTokenIdentifier(AbstractS3ATokenIdentifier retrievedIdentifier) Bind to the token identifier, returning the credential providers to use for the owner to talk to S3 and related AWS Services.
AWSCredentialProviderList	FullCredentialsTokenBinding.bindToTokenIdentifier(AbstractS3ATokenIdentifier retrievedIdentifier)
AWSCredentialProviderList	SessionTokenBinding.bindToTokenIdentifier(AbstractS3ATokenIdentifier retrievedIdentifier) Sets the field SessionTokenBinding.tokenIdentifier to the extracted/cast session token identifier, and SessionTokenBinding.expirationDateTime to any expiration passed in.
AWSCredentialProviderList	RoleTokenBinding.bindToTokenIdentifier(AbstractS3ATokenIdentifier retrievedIdentifier) Returns a (wrapped) MarshalledCredentialProvider which requires the marshalled credentials to contain session secrets.
protected <T extends AbstractS3ATokenIdentifier> T	AbstractDelegationTokenBinding.convertTokenIdentifier(AbstractS3ATokenIdentifier identifier, Class<T> expectedClass) Verify that a token identifier is of a specific class.
protected byte[]	AbstractDelegationTokenBinding.TokenSecretManager.createPassword(AbstractS3ATokenIdentifier identifier)
DelegationBindingInfo	AbstractDelegationTokenBinding.deploy(AbstractS3ATokenIdentifier retrievedIdentifier) Deploy, returning the binding information.
byte[]	AbstractDelegationTokenBinding.TokenSecretManager.retrievePassword(AbstractS3ATokenIdentifier identifier)

Method parameters in org.apache.hadoop.fs.s3a.auth.delegation with type arguments of type AbstractS3ATokenIdentifier

Modifier and Type	Method and Description
void	S3ADelegationTokens.bindToDelegationToken(org.apache.hadoop.security.token.Token<AbstractS3ATokenIdentifier> token) Bind to a delegation token retrieved for this filesystem.
AbstractS3ATokenIdentifier	S3ADelegationTokens.extractIdentifier(org.apache.hadoop.security.token.Token<? extends AbstractS3ATokenIdentifier> token) From a token, get the session token identifier.

Constructor parameters in org.apache.hadoop.fs.s3a.auth.delegation with type arguments of type AbstractS3ATokenIdentifier

Constructor and Description
AbstractS3ATokenIdentifier(org.apache.hadoop.io.Text kind, org.apache.hadoop.security.token.Token<AbstractS3ATokenIdentifier> token) Build from a token.