@ThreadSafety(level=COMPLETELY_THREADSAFE) public final class DNLogFieldSyntax extends LogFieldSyntax<DN>
redacted={REDACTED}
". If a DN is completely tokenized,
then the tokenized representation will be
"tokenized={TOKENIZED:token-value}
", where token-value will be
replaced with a generated value.
NOTE: This class, and other classes within the
com.unboundid.ldap.sdk.unboundidds
package structure, are only
supported for use against Ping Identity, UnboundID, and
Nokia/Alcatel-Lucent 8661 server products. These classes provide support
for proprietary functionality or for external specifications that are not
considered stable or mature enough to be guaranteed to work in an
interoperable way with other types of LDAP servers.
Modifier and Type | Field and Description |
---|---|
static java.lang.String |
SYNTAX_NAME
The name for this syntax.
|
CARRIAGE_RETURN_CODE_POINT, DOUBLE_QUOTE_CODE_POINT, NEWLINE_CODE_POINT, OCTOTHORPE_CODE_POINT, REDACTED_STRING, TAB_CODE_POINT, TOKEN_PREFIX_STRING, TOKEN_SUFFIX_STRING
Constructor and Description |
---|
DNLogFieldSyntax(int maxStringLengthCharacters,
Schema schema,
java.util.Collection<java.lang.String> includedSensitiveAttributes,
java.util.Collection<java.lang.String> excludedSensitiveAttributes)
Creates a new DN log field syntax instance that can optionally define
specific attributes to include in or exclude from redaction or
tokenization.
|
Modifier and Type | Method and Description |
---|---|
boolean |
completelyRedactedValueConformsToSyntax()
Indicates whether values that have been completely redacted still conform
to this syntax.
|
boolean |
completelyTokenizedValueConformsToSyntax()
Indicates whether values that have been completely tokenized still conform
to this syntax.
|
java.util.Set<java.lang.String> |
getExcludedSensitiveAttributes()
Retrieves a set containing the names and/or OIDs of the attributes that
will not be considered sensitive and will have not their values redacted or
tokenized in methods that operate on DN components.
|
java.util.Set<java.lang.String> |
getIncludedSensitiveAttributes()
Retrieves a set containing the names and/or OIDs of the attributes that
will be considered sensitive and will have their values redacted or
tokenized in methods that operate on DN components.
|
java.lang.String |
getSyntaxName()
Retrieves the name for this syntax.
|
void |
logCompletelyRedactedFieldToJSONFormattedLog(java.lang.String fieldName,
JSONBuffer buffer)
Appends a completely redacted representation of the specified field (both
field name and value) for a JSON-formatted log message to the given buffer.
|
void |
logCompletelyRedactedFieldToTextFormattedLog(java.lang.String fieldName,
ByteStringBuffer buffer)
Appends a completely redacted representation of the specified field (both
field name and value) for a text-formatted log message to the given buffer.
|
void |
logCompletelyRedactedValueToJSONFormattedLog(JSONBuffer buffer)
Appends a completely redacted representation of a value (without a field
name, as might be suitable for a value included in a JSON array) for a
JSON-formatted log message to the given buffer.
|
void |
logCompletelyTokenizedFieldToJSONFormattedLog(java.lang.String fieldName,
DN fieldValue,
byte[] pepper,
JSONBuffer buffer)
Appends a completely tokenized representation of the specified field (both
field name and value) for a JSON-formatted log message to the given buffer.
|
void |
logCompletelyTokenizedFieldToTextFormattedLog(java.lang.String fieldName,
DN fieldValue,
byte[] pepper,
ByteStringBuffer buffer)
Appends a completely tokenized representation of the specified field (both
field name and value) for a text-formatted log message to the given buffer.
|
void |
logCompletelyTokenizedValueToJSONFormattedLog(DN value,
byte[] pepper,
JSONBuffer buffer)
Appends a completely tokenized representation of the provided value
(without a field name, as might be suitable for a value included in a JSON
array) for a JSON-formatted log message to the given buffer.
|
void |
logRedactedComponentsFieldToJSONFormattedLog(java.lang.String fieldName,
DN fieldValue,
JSONBuffer buffer)
Appends a representation of the specified field (both field name and value)
with redacted value components for a JSON-formatted log message to the
given buffer.
|
void |
logRedactedComponentsFieldToTextFormattedLog(java.lang.String fieldName,
DN fieldValue,
ByteStringBuffer buffer)
Appends a representation of the specified field (both field name and value)
with redacted value components for a text-formatted log message to the
given buffer.
|
void |
logRedactedComponentsValueToJSONFormattedLog(DN value,
JSONBuffer buffer)
Appends a representation of the provided value (without a field name, as
might be suitable for a value included in a JSON array) with redacted
components for a JSON-formatted log message to the given buffer.
|
void |
logSanitizedFieldToJSONFormattedLog(java.lang.String fieldName,
DN fieldValue,
JSONBuffer buffer)
Appends a sanitized representation of the specified field (both field name
and value) for a JSON-formatted log message to the given buffer.
|
void |
logSanitizedFieldToTextFormattedLog(java.lang.String fieldName,
DN fieldValue,
ByteStringBuffer buffer)
Appends a sanitized representation of the specified field (both field name
and value) for a text-formatted log message to the given buffer.
|
void |
logSanitizedValueToJSONFormattedLog(DN value,
JSONBuffer buffer)
Appends a sanitized representation of the provided value (without a field
name, as might be suitable for a value included in a JSON array) for a
JSON-formatted log message to the given buffer.
|
void |
logTokenizedComponentsFieldToJSONFormattedLog(java.lang.String fieldName,
DN fieldValue,
byte[] pepper,
JSONBuffer buffer)
Appends a representation of the specified field (both field name and value)
with tokenized value components for a JSON-formatted log message to the
given buffer.
|
void |
logTokenizedComponentsFieldToTextFormattedLog(java.lang.String fieldName,
DN fieldValue,
byte[] pepper,
ByteStringBuffer buffer)
Appends a representation of the specified field (both field name and value)
with tokenized value components for a text-formatted log message to the
given buffer.
|
void |
logTokenizedComponentsValueToJSONFormattedLog(DN value,
byte[] pepper,
JSONBuffer buffer)
Appends a representation of the provided value (without a field name, as
might be suitable for a value included in a JSON array) with tokenized
value components for a JSON-formatted log message to the given buffer.
|
DN |
parseValue(java.lang.String valueString)
Attempts to parse the provided string as a value in accordance with this
syntax.
|
void |
redactComponents(DN value,
ByteStringBuffer buffer)
Appends a string representation of the given value with redacted components
to the provided buffer.
|
void |
redactEntireValue(ByteStringBuffer buffer)
Appends a string representation of a redacted entire value to the provided
buffer.
|
boolean |
supportsRedactedComponents()
Indicates whether this syntax supports redacting individual components of
the entire value.
|
boolean |
supportsTokenizedComponents()
Indicates whether this syntax supports tokenizing individual components of
the entire value.
|
void |
tokenizeComponents(DN value,
byte[] pepper,
ByteStringBuffer buffer)
Appends a string representation of the given value with zero or more of its
components tokenized to the provided buffer.
|
void |
tokenizeEntireValue(DN value,
byte[] pepper,
ByteStringBuffer buffer)
Appends a tokenized representation of the provided value to the given
buffer.
|
boolean |
valueStringIsCompletelyRedacted(java.lang.String valueString)
Determines whether the provided value string represents a value that has
been completely redacted.
|
boolean |
valueStringIsCompletelyTokenized(java.lang.String valueString)
Determines whether the provided value string represents a value that has
been completely tokenized.
|
void |
valueToSanitizedString(DN value,
ByteStringBuffer buffer)
Encodes the provided value to a sanitized string representation suitable
for inclusion in a log message.
|
boolean |
valueWithRedactedComponentsConformsToSyntax()
Indicates whether values with one or more redacted components still conform
to this syntax.
|
boolean |
valueWithTokenizedComponentsConformsToSyntax()
Indicates whether values with one or more tokenized components still
conform to this syntax.
|
getMaxStringLengthCharacters, getTemporaryBuffer, redactComponents, redactEntireValue, releaseTemporaryBuffer, sanitize, sanitize, sha256, tokenize, tokenize, tokenize, tokenizeComponents, tokenizeEntireValue, valueStringIncludesRedactedComponent, valueStringIncludesTokenizedComponent, valueToSanitizedString
@NotNull public static final java.lang.String SYNTAX_NAME
public DNLogFieldSyntax(int maxStringLengthCharacters, @Nullable Schema schema, @Nullable java.util.Collection<java.lang.String> includedSensitiveAttributes, @Nullable java.util.Collection<java.lang.String> excludedSensitiveAttributes)
maxStringLengthCharacters
- The maximum length (in characters) to
use for strings within values.
Strings that are longer than this
should be truncated before inclusion
in the log. This value must be
greater than or equal to zero.schema
- The schema to use in processing. It
may optionally be null
if no
schema should be used.includedSensitiveAttributes
- The set of names and OIDs for the
specific attributes whose values
should be considered sensitive and
should have their values redacted or
tokenized by methods that operate on
value components. This may be
null
or empty if no included
sensitive attributes should be
defined.excludedSensitiveAttributes
- The set of names and OIDs for the
specific attributes whose values
should not be considered sensitive and
should not have their values redacted
or tokenized by methods that operate
on value components. This may be
null
or empty if no excluded
sensitive attributes should be
defined.@NotNull public java.util.Set<java.lang.String> getIncludedSensitiveAttributes()
@NotNull public java.util.Set<java.lang.String> getExcludedSensitiveAttributes()
@NotNull public java.lang.String getSyntaxName()
getSyntaxName
in class LogFieldSyntax<DN>
public void valueToSanitizedString(@NotNull DN value, @NotNull ByteStringBuffer buffer)
valueToSanitizedString
in class LogFieldSyntax<DN>
value
- The value to be encoded. It must not be null
.buffer
- The buffer to which the string representation should be
appended. It must not be null
.public void logSanitizedFieldToTextFormattedLog(@NotNull java.lang.String fieldName, @NotNull DN fieldValue, @NotNull ByteStringBuffer buffer)
logSanitizedFieldToTextFormattedLog
in class LogFieldSyntax<DN>
fieldName
- The name for the field. It must not be null
.fieldValue
- The value to use for the field. It must not be
null
.buffer
- The buffer to which the sanitized log field should be
appended. It must not be null
.public void logSanitizedFieldToJSONFormattedLog(@NotNull java.lang.String fieldName, @NotNull DN fieldValue, @NotNull JSONBuffer buffer)
logSanitizedFieldToJSONFormattedLog
in class LogFieldSyntax<DN>
fieldName
- The name for the field. It must not be null
.fieldValue
- The value to use for the field. It must not be
null
.buffer
- The buffer to which the sanitized log field should be
appended. It must not be null
.public void logSanitizedValueToJSONFormattedLog(@NotNull DN value, @NotNull JSONBuffer buffer)
logSanitizedValueToJSONFormattedLog
in class LogFieldSyntax<DN>
value
- The value to be appended to the buffer. It must not be
null
.buffer
- The buffer to which the sanitized value should be appended.
It must not be null
.@NotNull public DN parseValue(@NotNull java.lang.String valueString) throws RedactedValueException, TokenizedValueException, LogSyntaxException
parseValue
in class LogFieldSyntax<DN>
valueString
- The string to be parsed.RedactedValueException
- If the provided value has been redacted
(either the complete value or one or more
of its components), and the redacted form
cannot be represented in this syntax.TokenizedValueException
- If the provided value has been tokenized
(either the complete value or one or more
of its components), and the redacted form
cannot be represented in this syntax.LogSyntaxException
- If the provided value cannot be parsed in
accordance with this syntax.public boolean valueStringIsCompletelyRedacted(@NotNull java.lang.String valueString)
valueStringIsCompletelyRedacted
in class LogFieldSyntax<DN>
valueString
- The value for which to make the determination. It
must not be null
.true
if the provided value string represents a value that
has been completely redacted, or false
if not.public boolean completelyRedactedValueConformsToSyntax()
completelyRedactedValueConformsToSyntax
in class LogFieldSyntax<DN>
true
if values that have been completely redacted still
conform to this syntax, or false
if not.public void redactEntireValue(@NotNull ByteStringBuffer buffer)
redactEntireValue
in class LogFieldSyntax<DN>
buffer
- The buffer to which the redacted string representation
should be appended. It must not be null
.public void logCompletelyRedactedFieldToTextFormattedLog(@NotNull java.lang.String fieldName, @NotNull ByteStringBuffer buffer)
logCompletelyRedactedFieldToTextFormattedLog
in class LogFieldSyntax<DN>
fieldName
- The name for the field. It must not be null
.buffer
- The buffer to which the sanitized log field should be
appended. It must not be null
.public void logCompletelyRedactedFieldToJSONFormattedLog(@NotNull java.lang.String fieldName, @NotNull JSONBuffer buffer)
logCompletelyRedactedFieldToJSONFormattedLog
in class LogFieldSyntax<DN>
fieldName
- The name for the field. It must not be null
.buffer
- The buffer to which the sanitized log field should be
appended. It must not be null
.public void logCompletelyRedactedValueToJSONFormattedLog(@NotNull JSONBuffer buffer)
logCompletelyRedactedValueToJSONFormattedLog
in class LogFieldSyntax<DN>
buffer
- The buffer to which the redacted value should be appended.
It must not be null
.public boolean supportsRedactedComponents()
supportsRedactedComponents
in class LogFieldSyntax<DN>
true
if this syntax supports redacting individual
components of the entire value, or false
if not.public boolean valueWithRedactedComponentsConformsToSyntax()
valueWithRedactedComponentsConformsToSyntax
in class LogFieldSyntax<DN>
true
if values with one or more redacted components still
conform to this syntax.public void redactComponents(@NotNull DN value, @NotNull ByteStringBuffer buffer)
redactComponents
in class LogFieldSyntax<DN>
value
- The value for which to obtain the redacted representation.
It must not be null
.buffer
- The buffer to which the redacted string representation
should be appended. It must not be null
.public void logRedactedComponentsFieldToTextFormattedLog(@NotNull java.lang.String fieldName, @NotNull DN fieldValue, @NotNull ByteStringBuffer buffer)
logRedactedComponentsFieldToTextFormattedLog
in class LogFieldSyntax<DN>
fieldName
- The name for the field. It must not be null
.fieldValue
- The value to use for the field. It must not be
null
.buffer
- The buffer to which the sanitized log field should be
appended. It must not be null
.public void logRedactedComponentsFieldToJSONFormattedLog(@NotNull java.lang.String fieldName, @NotNull DN fieldValue, @NotNull JSONBuffer buffer)
logRedactedComponentsFieldToJSONFormattedLog
in class LogFieldSyntax<DN>
fieldName
- The name for the field. It must not be null
.fieldValue
- The value to use for the field. It must not be
null
.buffer
- The buffer to which the sanitized log field should be
appended. It must not be null
.public void logRedactedComponentsValueToJSONFormattedLog(@NotNull DN value, @NotNull JSONBuffer buffer)
logRedactedComponentsValueToJSONFormattedLog
in class LogFieldSyntax<DN>
value
- The value to be appended to the buffer in redacted form.
It must not be null
.buffer
- The buffer to which the redacted value should be appended.
It must not be null
.public boolean valueStringIsCompletelyTokenized(@NotNull java.lang.String valueString)
valueStringIsCompletelyTokenized
in class LogFieldSyntax<DN>
valueString
- The value for which to make the determination. It
must not be null
.true
if the provided value string represents a value that
has been completely tokenized, or false
if not.public boolean completelyTokenizedValueConformsToSyntax()
completelyTokenizedValueConformsToSyntax
in class LogFieldSyntax<DN>
true
if values that have been completely tokenized still
conform to this syntax, or false
if not.public void tokenizeEntireValue(@NotNull DN value, @NotNull byte[] pepper, @NotNull ByteStringBuffer buffer)
tokenizeEntireValue
in class LogFieldSyntax<DN>
value
- The value for which to generate the token. It must not be
null
.pepper
- A pepper used to provide brute-force protection for the
resulting token. The pepper value should be kept secret so
that it is not available to unauthorized users who might be
able to view log information, although the same pepper
value should be consistently provided when tokenizing
values so that the same value will consistently yield the
same token. It must not be null
and should not be
empty.buffer
- The buffer to which the tokenized representation should be
appended. It must not be null
.public void logCompletelyTokenizedFieldToTextFormattedLog(@NotNull java.lang.String fieldName, @NotNull DN fieldValue, @NotNull byte[] pepper, @NotNull ByteStringBuffer buffer)
logCompletelyTokenizedFieldToTextFormattedLog
in class LogFieldSyntax<DN>
fieldName
- The name for the field. It must not be null
.fieldValue
- The value to use for the field. It must not be
null
.pepper
- A pepper used to provide brute-force protection for the
resulting token. The pepper value should be kept
secret so that it is not available to unauthorized
users who might be able to view log information,
although the same pepper value should be consistently
provided when tokenizing values so that the same value
will consistently yield the same token. It must not be
null
and should not be empty.buffer
- The buffer to which the sanitized log field should be
appended. It must not be null
.public void logCompletelyTokenizedFieldToJSONFormattedLog(@NotNull java.lang.String fieldName, @NotNull DN fieldValue, @NotNull byte[] pepper, @NotNull JSONBuffer buffer)
logCompletelyTokenizedFieldToJSONFormattedLog
in class LogFieldSyntax<DN>
fieldName
- The name for the field. It must not be null
.fieldValue
- The value to use for the field. It must not be
null
.pepper
- A pepper used to provide brute-force protection for the
resulting token. The pepper value should be kept
secret so that it is not available to unauthorized
users who might be able to view log information,
although the same pepper value should be consistently
provided when tokenizing values so that the same value
will consistently yield the same token. It must not be
null
and should not be empty.buffer
- The buffer to which the sanitized log field should be
appended. It must not be null
.public void logCompletelyTokenizedValueToJSONFormattedLog(@NotNull DN value, @NotNull byte[] pepper, @NotNull JSONBuffer buffer)
logCompletelyTokenizedValueToJSONFormattedLog
in class LogFieldSyntax<DN>
value
- The value to be appended to the buffer in tokenized form.
It must not be null
.pepper
- A pepper used to provide brute-force protection for the
resulting token. The pepper value should be kept secret so
that it is not available to unauthorized users who might be
able to view log information, although the same pepper
value should be consistently provided when tokenizing
values so that the same value will consistently yield the
same token. It must not be null
and should not be
empty.buffer
- The buffer to which the tokenized value should be appended.
It must not be null
.public boolean supportsTokenizedComponents()
supportsTokenizedComponents
in class LogFieldSyntax<DN>
true
if this syntax supports tokenizing individual
components of the entire value, or false
if not.public boolean valueWithTokenizedComponentsConformsToSyntax()
valueWithTokenizedComponentsConformsToSyntax
in class LogFieldSyntax<DN>
true
if values with one or more tokenized components still
conform to this syntax.public void tokenizeComponents(@NotNull DN value, @NotNull byte[] pepper, @NotNull ByteStringBuffer buffer)
tokenizeComponents
in class LogFieldSyntax<DN>
value
- The value whose components should be tokenized. It must
not be null
.pepper
- A pepper used to provide brute-force protection for the
resulting token. The pepper value should be kept secret so
that it is not available to unauthorized users who might be
able to view log information, although the same pepper
value should be consistently provided when tokenizing
values so that the same value will consistently yield the
same token. It must not be null
and should not be
empty.buffer
- The buffer to which the tokenized representation should be
appended. It must not be null
.public void logTokenizedComponentsFieldToTextFormattedLog(@NotNull java.lang.String fieldName, @NotNull DN fieldValue, @NotNull byte[] pepper, @NotNull ByteStringBuffer buffer)
logTokenizedComponentsFieldToTextFormattedLog
in class LogFieldSyntax<DN>
fieldName
- The name for the field. It must not be null
.fieldValue
- The value to use for the field. It must not be
null
.pepper
- A pepper used to provide brute-force protection for the
resulting token. The pepper value should be kept
secret so that it is not available to unauthorized
users who might be able to view log information,
although the same pepper value should be consistently
provided when tokenizing values so that the same value
will consistently yield the same token. It must not be
null
and should not be empty.buffer
- The buffer to which the sanitized log field should be
appended. It must not be null
.public void logTokenizedComponentsFieldToJSONFormattedLog(@NotNull java.lang.String fieldName, @NotNull DN fieldValue, @NotNull byte[] pepper, @NotNull JSONBuffer buffer)
logTokenizedComponentsFieldToJSONFormattedLog
in class LogFieldSyntax<DN>
fieldName
- The name for the field. It must not be null
.fieldValue
- The value to use for the field. It must not be
null
.pepper
- A pepper used to provide brute-force protection for the
resulting token. The pepper value should be kept
secret so that it is not available to unauthorized
users who might be able to view log information,
although the same pepper value should be consistently
provided when tokenizing values so that the same value
will consistently yield the same token. It must not be
null
and should not be empty.buffer
- The buffer to which the sanitized log field should be
appended. It must not be null
.public void logTokenizedComponentsValueToJSONFormattedLog(@NotNull DN value, @NotNull byte[] pepper, @NotNull JSONBuffer buffer)
logTokenizedComponentsValueToJSONFormattedLog
in class LogFieldSyntax<DN>
value
- The value to be appended to the buffer in tokenized form.
It must not be null
.pepper
- A pepper used to provide brute-force protection for the
resulting token. The pepper value should be kept secret so
that it is not available to unauthorized users who might be
able to view log information, although the same pepper
value should be consistently provided when tokenizing
values so that the same value will consistently yield the
same token. It must not be null
and should not be
empty.buffer
- The buffer to which the tokenized value should be appended.
It must not be null
.