com.nimbusds.jose.jwk.source.JWKSetBasedJWKSource Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of nimbus-jose-jwt Show documentation

Java library for Javascript Object Signing and Encryption (JOSE) and JSON Web Tokens (JWT)

There is a newer version: 9.48

/*
 * nimbus-jose-jwt
 *
 * Copyright 2012-2016, Connect2id Ltd.
 *
 * Licensed under the Apache License, Version 2.0 (the "License"); you may not use
 * this file except in compliance with the License. You may obtain a copy of the
 * License at
 *
 *	http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software distributed
 * under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
 * CONDITIONS OF ANY KIND, either express or implied. See the License for the
 * specific language governing permissions and limitations under the License.
 */

package com.nimbusds.jose.jwk.source;


import java.io.Closeable;
import java.io.IOException;
import java.util.List;
import java.util.Objects;

import net.jcip.annotations.ThreadSafe;

import com.nimbusds.jose.KeySourceException;
import com.nimbusds.jose.jwk.JWK;
import com.nimbusds.jose.jwk.JWKSelector;
import com.nimbusds.jose.jwk.JWKSet;
import com.nimbusds.jose.proc.SecurityContext;


/**
 * JSON Web Key (JWK) set based JWK source.
 *
 * @author Thomas Rørvik Skjølberg
 * @author Vladimir Dzhuvinov
 * @version 2022-11-22
 */
@ThreadSafe
public class JWKSetBasedJWKSource implements JWKSource, Closeable {

	
	private final JWKSetSource source;
	
	
	/**
	 * Creates a new JWK set based JWK source.
	 *
	 * @param source The JWK set source. Must not be {@code null}.
	 */
	public JWKSetBasedJWKSource(final JWKSetSource source) {
		Objects.requireNonNull(source);
		this.source = source;
	}

	
	@Override
	public List get(final JWKSelector jwkSelector, final C context) throws KeySourceException {
		
		long currentTime = System.currentTimeMillis();
		
		// Get the list of JWKs and match against the selector.
		// If no matches, attempt to refresh the list of JWKs
		// and repeat the matching.
		
		// So for the no-match scenario, what we have is a
		// read-write-read type transaction. In order to identify
		// whether another thread has already performed the write operation,
		// an evaluator for the original read operation is passed along
		// and used internally to check whether the cache is up-to-date; preventing
		// unnecessary external calls
		
		JWKSet jwkSet = source.getJWKSet(JWKSetCacheRefreshEvaluator.noRefresh(), currentTime, context);
		
		List select = jwkSelector.select(jwkSet);
		if (select.isEmpty()) {
			JWKSet recentJwkSet = source.getJWKSet(JWKSetCacheRefreshEvaluator.referenceComparison(jwkSet), currentTime, context);
			select = jwkSelector.select(recentJwkSet);
		}
		return select;
	}
	
	/**
	 * Returns the underlying JWK set source.
	 *
	 * @return The JWK set source.
	 */
	public JWKSetSource getJWKSetSource() {
		return source;
	}
	
	
	@Override
	public void close() throws IOException {
		source.close();
	}
}