Package com.northconcepts.datapipeline.security

A DecryptingReader for fields written by an AsymmetricEncryptingReader; it recovers the symmetric key from the first value it decrypts, using the private key, and uses it for all values.

A CredentialsResolver decorator that caches its delegate's credentials, re-fetching when: the cached credentials report expiry within CachingCredentialsResolver.getExpirySkewMilliseconds() (see Credentials.isExpired(long)), the optional time-to-live has elapsed, or CachingCredentialsResolver.refresh() is called. Gives rotation with backpressure — remote secret stores are only called when needed.

Assembles Credentials from key-value pairs and an optional expiry; see Credentials.builder().

A thread-safe mapping of logical ids to CredentialsResolvers, enabling "reference, not secret" late binding: serialized pipelines and sources/sinks carry only a resolver id and are re-wired to the live resolver on load.

Base class for proxy readers that encrypt the selected fields of each record in place, or every field when none are selected.

A CredentialsResolver that reads credential values from a Java properties file, re-reading it whenever the file's last-modified time changes.

A CredentialsResolver that delegates each resolve to a Supplier.

An EncryptingReader that encrypts fields with a symmetric key, storing each as Base64 text from which a SymmetricDecryptingReader restores the original type and value.