com.github.robertomanfreda.java.jwt.core.JWTSEVerifier Maven / Gradle / Ivy

package com.github.robertomanfreda.java.jwt.core;

import com.github.robertomanfreda.java.jwt.core.interfaces.IJWTSEVerifier;
import com.github.robertomanfreda.java.jwt.exceptions.InvalidTokenException;
import com.nimbusds.jose.JWEObject;
import com.nimbusds.jose.Payload;
import com.nimbusds.jose.crypto.RSADecrypter;
import com.nimbusds.jose.crypto.RSASSAVerifier;
import com.nimbusds.jwt.SignedJWT;

public class JWTSEVerifier implements IJWTSEVerifier {

    private final JWTEDecrypter jwTeDecrypter;
    private final JWTSVerifier jwTsVerifier;

    JWTSEVerifier(RSASSAVerifier rsassaVerifier, RSADecrypter rsaDecrypter) {
        jwTeDecrypter = new JWTEDecrypter(rsaDecrypter);
        jwTsVerifier = new JWTSVerifier(rsassaVerifier);
    }

    @Override
    public SignedJWT decryptToJWTS(String encryptedSignedJWT) throws Exception {
        JWEObject jweObjectEncrypted = JWEObject.parse(encryptedSignedJWT);
        JWEObject jweObjectDecrypted = jwTeDecrypter.decrypt(jweObjectEncrypted.serialize());
        return jweObjectDecrypted.getPayload().toSignedJWT();
    }

    @Override
    public boolean verifyJWTs(String encryptedSignedJWT) throws Exception {
        SignedJWT signedJWT = decryptToJWTS(encryptedSignedJWT);
        String serialized = signedJWT.serialize();
        return jwTsVerifier.verify(serialized);
    }

    @Override
    public Payload decrypt(SignedJWT signedJWT) {
        return signedJWT.getPayload();
    }

    @Override
    public Payload verifyAndDecrypt(String encryptedSignedJWT) throws Exception {
        SignedJWT signedJWT = decryptToJWTS(encryptedSignedJWT);
        boolean verified = verifyJWTs(encryptedSignedJWT);

        if (verified) {
            return decrypt(signedJWT);
        }

        throw new InvalidTokenException("Invalid.");
    }
}