http4k-core/org.http4k.security

Package-level declarations

Types

CredentialsProvider

fun interface CredentialsProvider<T> : Function0<T?>

ExpiringCredentials

data class ExpiringCredentials<T>(val credentials: T, val expiry: Instant)

HmacSha256

object HmacSha256

RefreshCredentials

fun interface RefreshCredentials<T> : Function1<T?, ExpiringCredentials<T>?>

Sha256

object Sha256

Functions

Refreshing

fun <T> CredentialsProvider.Companion.Refreshing(gracePeriod: Duration = Duration.ofSeconds(10), clock: Clock = Clock.systemUTC(), refreshFn: RefreshCredentials<T>): CredentialsProvider<T>

fun <T> CredentialsProvider.Companion.Refreshing(gracePeriod: Duration = Duration.ofSeconds(10), timeSource: () -> Instant, refreshFn: RefreshCredentials<T>): CredentialsProvider<T>

secureEquals

fun secureEquals(first: String?, second: String?): Boolean

Constant-time string comparison for secrets/tokens. Avoids leaking how many leading bytes matched via timing. Null inputs never match (including null vs null) to prevent fail-open behaviour when a secret is absent. Both sides are hashed before comparison so input length is not observable.