Skip to content

opentdf/java-sdk

Repository files navigation

OpenTDF Java SDK

A Java implementation of the OpenTDF protocol, and access library for the services provided by the OpenTDF platform. This SDK is available from Maven central as:

 <dependency> <groupId>io.opentdf/platform</groupId> <artifactId>sdk</artifactId> </dependency>

Additional Maven Modules

  • cmdline: Command line utility

Quick Start Example

package io.opentdf.platform; import io.opentdf.platform.sdk.Config; import io.opentdf.platform.sdk.Reader; import io.opentdf.platform.sdk.SDK; import io.opentdf.platform.sdk.SDKBuilder; import java.io.IOException; import java.io.InputStream; import java.io.FileInputStream; import java.nio.channels.FileChannel; import java.nio.channels.SeekableByteChannel; import java.nio.file.Path; import java.nio.file.StandardOpenOption; public class Example { public static void main(String[] args) throws IOException { SDK sdk = new SDKBuilder() .clientSecret("myClient", "token") .platformEndpoint("https://your.cluster/") .build(); // Encrypt a file try (InputStream in = new FileInputStream("input.plaintext")) { Config.TDFConfig c = Config.newTDFConfig(Config.withDataAttributes("attr1", "attr2")); sdk.createTDF(in, System.out, c); } // Decrypt a file try (SeekableByteChannel in = FileChannel.open(Path.of("input.ciphertext"), StandardOpenOption.READ)) { Reader reader = sdk.loadTDF(in, Config.newTDFReaderConfig()); reader.readPayload(System.out); } } }

Cryptography Library

This SDK uses the Bouncy Castle Security library library. Note: When using this SDK, it may be necessary to register the Bouncy Castle Provider as follows:

 static { Security.addProvider(new BouncyCastleProvider()); }

Logging

The Java SDK makes use of the slf4j library, without providing a backend. log4j2 in leveraged within the included automated tests.

SSL - Untrusted Certificates

Leverage the SDKBuilder.withSSL methods to create an SDKBuilder as follows:

  • An SSLFactory: sdkBuilder.sslFactory(mySSLFactory)
  • Directory containing trusted certificates: sdkBuilder.sslFactoryFromDirectory(myDirectoryWithCerts)
  • Java Keystore: sdkBuilder.sslFactoryFromKeyStore(keystorepath, keystorePassword)

Buf

Create an account, link that account with GitHub and then under User settings create a token

[INFO] --- antrun:3.1.0:run (generateSources) @ sdk --- [INFO] Executing tasks [INFO] [exec] Failure: too many requests [INFO] [exec] [INFO] [exec] Please see https://buf.build/docs/bsr/rate-limits for details about BSR rate limiting.

Release Process

SNAPSHOT

Snapshots are from main latest

mvn versions:set -DnewVersion=1.2.3-SNAPSHOT

RELEASE

Releases are from tags created by the GitHub release process. Enter 'Release Please' to trigger the release process.