Giter Club home page Giter Club logo

strongdm-sdk-java's Introduction

strongDM SDK for Java

This is the official strongDM SDK for the Java programming language.

Learn more with our 📚strongDM API docs or 📓browse the SDK reference.

Installation

Gradle:

repositories {
    mavenCentral()
}

dependencies {
    compile "io.github.strongdm:strongdm-sdk-java:${strongdm.version}"
	...

strongDM uses semantic versioning. We do not guarantee compatibility between major versions. Be sure to use version constraints to pin your dependency to the desired major version of the strongDM SDK.

Authentication

If you don't already have them you will need to generate a set of API keys, instructions are here: API Credentials

Add the keys as environment variables; the SDK will need to access these keys for every request.

$ export SDM_API_ACCESS_KEY=<YOUR ACCESS KEY>
$ export SDM_API_SECRET_KEY=<YOUR SECRET KEY>

List Users

The following code lists all registered users:

try {
	client = new Client(System.getenv("SDM_API_ACCESS_KEY"),System.getenv("SDM_API_SECRET_KEY"));
	Iterable<Account> resp = client.accounts().list("");
	for (Account n : resp) {
		if (n instanceof User) {
			User u = (User)n;
			System.out.println(u.getEmail());
		}
	}
} catch (Exception e) {
	e.printStackTrace();
}

Useful Links

License

Apache 2

Contributing

Currently, we are not accepting pull requests directly to this repository, but our users are some of the most resourceful and ambitious folks out there. So, if you have something to contribute, find a bug, or just want to give us some feedback, please email [email protected].

strongdm-sdk-java's People

Contributors

200sc avatar britt avatar curiosity26 avatar etodd avatar jmccarthy avatar kjamieson-sdm avatar kungfukennyg avatar philhassey avatar supportsdm avatar ucirello avatar wcraigjones avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

strongdm-sdk-java's Issues

CVE-2022-3171 - protobuf-java has a potential Denial of Service issue

GHSA-h4h5-3hr4-j3g2

A potential Denial of Service issue in protobuf-java core and lite was discovered in the parsing procedure for binary and text format data. Input streams containing multiple instances of non-repeated embedded messages with repeated or unknown fields causes objects to be converted back-n-forth between mutable and immutable forms, resulting in potentially long garbage collection pauses.

Reporter: OSS Fuzz

Affected versions: This issue affects both the Java full and lite Protobuf runtimes, as well as Protobuf for Kotlin and JRuby, which themselves use the Java Protobuf runtime.

WS-2020-0408 - High Severity Vulnerability

Vulnerable Library - netty-handler-4.1.67.Final.jar
Library home page: https://netty.io/

Path to dependency file: /pom.xml

Path to vulnerable library: /home/wss-scanner/.m2/repository/io/netty/netty-handler/4.1.67.Final/netty-handler-4.1.67.Final.jar

Dependency Hierarchy:

strongdm-sdk-java-3.4.0.jar (Root Library)
grpc-netty-1.42.2.jar
netty-codec-http2-4.1.67.Final.jar
❌ netty-handler-4.1.67.Final.jar (Vulnerable Library)

Vulnerability Details

An issue was found in all versions of io.netty:netty-all. Host verification in Netty is disabled by default. This can lead to MITM attack in which an attacker can forge valid SSL/TLS certificates for a different hostname in order to intercept traffic that doesn’t intend for him. This is an issue because the certificate is not matched with the host.

Publish Date: 2020-06-22

URL: WS-2020-0408

CVSS 2 Score Details (7.4)

Fix Resolution: io.netty:netty-all - 4.1.68.Final-redhat-00001,4.0.0.Final,4.1.67.Final-redhat-00002;io.netty:netty-handler - 4.1.68.Final-redhat-00001,4.1.67.Final-redhat-00001

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.