From 954e9f4467bc50f686ee3c0813c467ddea998d5a Mon Sep 17 00:00:00 2001
From: Morten Tokle <mortent@yahooinc.com>
Date: Tue, 28 Jun 2022 09:53:56 +0200
Subject: Expose role certificate

---
 .../com/yahoo/container/jdisc/AthenzIdentityProviderProvider.java    | 5 +++++
 .../com/yahoo/container/jdisc/athenz/AthenzIdentityProvider.java     | 1 +
 2 files changed, 6 insertions(+)

(limited to 'container-disc')

diff --git a/container-disc/src/main/java/com/yahoo/container/jdisc/AthenzIdentityProviderProvider.java b/container-disc/src/main/java/com/yahoo/container/jdisc/AthenzIdentityProviderProvider.java
index 33d357e8b6b..f04e2291ee8 100644
--- a/container-disc/src/main/java/com/yahoo/container/jdisc/AthenzIdentityProviderProvider.java
+++ b/container-disc/src/main/java/com/yahoo/container/jdisc/AthenzIdentityProviderProvider.java
@@ -75,6 +75,11 @@ public class AthenzIdentityProviderProvider implements Provider<AthenzIdentityPr
             throw new UnsupportedOperationException(message);
         }
 
+        @Override
+        public X509Certificate getRoleCertificate(String domain, String role) {
+            throw new UnsupportedOperationException(message);
+        }
+
         @Override
         public PrivateKey getPrivateKey() {
             throw new UnsupportedOperationException(message);
diff --git a/container-disc/src/main/java/com/yahoo/container/jdisc/athenz/AthenzIdentityProvider.java b/container-disc/src/main/java/com/yahoo/container/jdisc/athenz/AthenzIdentityProvider.java
index c1c60612b37..af5133eceac 100644
--- a/container-disc/src/main/java/com/yahoo/container/jdisc/athenz/AthenzIdentityProvider.java
+++ b/container-disc/src/main/java/com/yahoo/container/jdisc/athenz/AthenzIdentityProvider.java
@@ -21,6 +21,7 @@ public interface AthenzIdentityProvider {
     String getAccessToken(String domain);
     String getAccessToken(String domain, List<String> roles);
     List<X509Certificate> getIdentityCertificate();
+    X509Certificate getRoleCertificate(String domain, String role);
     PrivateKey getPrivateKey();
     Path trustStorePath();
 
-- 
cgit v1.2.3