com.nimbusds.jose.proc

Class JWSVerificationKeySelector<C extends SecurityContext>

java.lang.Object

com.nimbusds.jose.proc.JWSVerificationKeySelector<C>

All Implemented Interfaces:

JWSKeySelector<C>

@ThreadSafe
public class JWSVerificationKeySelector<C extends SecurityContext>
extends Object
implements JWSKeySelector<C>

Key selector for verifying JWS objects, where the key candidates are retrieved from a JSON Web Key (JWK) source.

Version:

2016-06-21

Author:

Vladimir Dzhuvinov

Constructor Summary

Constructors

Constructor and Description
JWSVerificationKeySelector(JWSAlgorithm jwsAlg, JWKSource<C> jwkSource) Creates a new JWS verification key selector.

Method Summary

Modifier and Type	Method and Description
protected JWKMatcher	createJWKMatcher(JWSHeader jwsHeader) Creates a JWK matcher for the expected JWS algorithm and the specified JWS header.
JWSAlgorithm	getExpectedJWSAlgorithm() Returns the expected JWS algorithm.
JWKSource<C>	getJWKSource() Returns the JWK source.
List<Key>	selectJWSKeys(JWSHeader jwsHeader, C context) Selects key candidates for verifying a JWS object.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

JWSVerificationKeySelector

public JWSVerificationKeySelector(JWSAlgorithm jwsAlg,
                                  JWKSource<C> jwkSource)

Creates a new JWS verification key selector.

Parameters:

jwsAlg - The expected JWS algorithm for the objects to be verified. Must not be null.

jwkSource - The JWK source. Must not be null.

Method Detail

getExpectedJWSAlgorithm

public JWSAlgorithm getExpectedJWSAlgorithm()

Returns the expected JWS algorithm.

Returns:

The expected JWS algorithm.

createJWKMatcher

protected JWKMatcher createJWKMatcher(JWSHeader jwsHeader)

Creates a JWK matcher for the expected JWS algorithm and the specified JWS header.

Parameters:

jwsHeader - The JWS header. Must not be null.

Returns:

The JWK matcher, null if none could be created.

selectJWSKeys

public List<Key> selectJWSKeys(JWSHeader jwsHeader,
                               C context)
                        throws KeySourceException

Description copied from interface: JWSKeySelector

Selects key candidates for verifying a JWS object.

Specified by:

selectJWSKeys in interface JWSKeySelector<C extends SecurityContext>

Parameters:

jwsHeader - The header of the JWS object. Must not be null.

context - Optional context of the JWS object, null if not required.

Returns:

The key candidates in trial order, empty list if none.

Throws:

KeySourceException - If a key sourcing exception is encountered, e.g. on remote JWK retrieval.

getJWKSource

public JWKSource<C> getJWKSource()

Returns the JWK source.

Returns:

The JWK source.