io.confluent.security.authentication.oauthbearer

Class ConstrainedVerificationKeyResolver

java.lang.Object

io.confluent.security.authentication.oauthbearer.ConstrainedVerificationKeyResolver

All Implemented Interfaces:

org.jose4j.keys.resolvers.VerificationKeyResolver

public final class ConstrainedVerificationKeyResolver
extends Object
implements org.jose4j.keys.resolvers.VerificationKeyResolver

Extends VerificationKeyResolver with ability to add custom Constraints.

Constructor Summary

Constructors

Constructor and Description
ConstrainedVerificationKeyResolver(org.jose4j.keys.resolvers.VerificationKeyResolver keyResolver, Collection<Constraint> constraints) Constructs a new VerificationKeyResolver with a collection of Constraint.

Method Summary

Modifier and Type	Method and Description
org.jose4j.keys.resolvers.VerificationKeyResolver	getDelegate()
Key	resolveKey(org.jose4j.jws.JsonWebSignature jws, List<org.jose4j.jwx.JsonWebStructure> nestingContext) Chooses the key to be used for signature verification on the given JWS.

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ConstrainedVerificationKeyResolver

public ConstrainedVerificationKeyResolver(org.jose4j.keys.resolvers.VerificationKeyResolver keyResolver,
                                          Collection<Constraint> constraints)

Constructs a new VerificationKeyResolver with a collection of Constraint.

Parameters:

keyResolver - VerificationKeyResolver

constraints - Constraint

Method Detail

resolveKey

public Key resolveKey(org.jose4j.jws.JsonWebSignature jws,
                      List<org.jose4j.jwx.JsonWebStructure> nestingContext)
               throws org.jose4j.lang.UnresolvableKeyException

Chooses the key to be used for signature verification on the given JWS. Key selection subject to additional constraints if registered with the constructor.

Specified by:

resolveKey in interface org.jose4j.keys.resolvers.VerificationKeyResolver

Parameters:

jws - Signed Json Web Token

nestingContext - a list of JOSE objects, if any, in which the JWS was nested.

Returns:

Key

Throws:

org.jose4j.lang.UnresolvableKeyException - if no appropriate key can be found

getDelegate

public org.jose4j.keys.resolvers.VerificationKeyResolver getDelegate()