com.nimbusds.jose.proc.JWEDecryptionKeySelector Maven / Gradle / Ivy
Go to download
Show more of this group Show more artifacts with this name
Show all versions of nimbus-jose-jwt Show documentation
Show all versions of nimbus-jose-jwt Show documentation
Java library for Javascript Object Signing and Encryption (JOSE) and
JSON Web Tokens (JWT)
/*
* nimbus-jose-jwt
*
* Copyright 2012-2019, Connect2id Ltd.
*
* Licensed under the Apache License, Version 2.0 (the "License"); you may not use
* this file except in compliance with the License. You may obtain a copy of the
* License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software distributed
* under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
* CONDITIONS OF ANY KIND, either express or implied. See the License for the
* specific language governing permissions and limitations under the License.
*/
package com.nimbusds.jose.proc;
import com.nimbusds.jose.EncryptionMethod;
import com.nimbusds.jose.JWEAlgorithm;
import com.nimbusds.jose.JWEHeader;
import com.nimbusds.jose.KeySourceException;
import com.nimbusds.jose.jwk.JWK;
import com.nimbusds.jose.jwk.JWKMatcher;
import com.nimbusds.jose.jwk.JWKSelector;
import com.nimbusds.jose.jwk.KeyConverter;
import com.nimbusds.jose.jwk.source.JWKSource;
import net.jcip.annotations.ThreadSafe;
import javax.crypto.SecretKey;
import java.security.Key;
import java.security.PrivateKey;
import java.util.Collections;
import java.util.LinkedList;
import java.util.List;
import java.util.Objects;
/**
* Key selector for decrypting JWE objects, where the key candidates are
* retrieved from a {@link JWKSource JSON Web Key (JWK) source}.
*
* @author Vladimir Dzhuvinov
* @version 2024-04-20
*/
@ThreadSafe
public class JWEDecryptionKeySelector extends AbstractJWKSelectorWithSource implements JWEKeySelector {
/**
* The expected JWE algorithm.
*/
private final JWEAlgorithm jweAlg;
/**
* The expected JWE encryption method.
*/
private final EncryptionMethod jweEnc;
/**
* Creates a new decryption key selector.
*
* @param jweAlg The expected JWE algorithm for the objects to be
* decrypted. Must not be {@code null}.
* @param jweEnc The expected JWE encryption method for the objects
* to be decrypted. Must not be {@code null}.
* @param jwkSource The JWK source. Must include the private keys and
* must not be {@code null}.
*/
public JWEDecryptionKeySelector(final JWEAlgorithm jweAlg,
final EncryptionMethod jweEnc,
final JWKSource jwkSource) {
super(jwkSource);
this.jweAlg = Objects.requireNonNull(jweAlg);
this.jweEnc = Objects.requireNonNull(jweEnc);
}
/**
* Returns the expected JWE algorithm.
*
* @return The expected JWE algorithm.
*/
public JWEAlgorithm getExpectedJWEAlgorithm() {
return jweAlg;
}
/**
* The expected JWE encryption method.
*
* @return The expected JWE encryption method.
*/
public EncryptionMethod getExpectedJWEEncryptionMethod() {
return jweEnc;
}
/**
* Creates a JWK matcher for the expected JWE algorithms and the
* specified JWE header.
*
* @param jweHeader The JWE header. Must not be {@code null}.
*
* @return The JWK matcher, {@code null} if none could be created.
*/
protected JWKMatcher createJWKMatcher(final JWEHeader jweHeader) {
if (! getExpectedJWEAlgorithm().equals(jweHeader.getAlgorithm())) {
return null;
}
if (! getExpectedJWEEncryptionMethod().equals(jweHeader.getEncryptionMethod())) {
return null;
}
return JWKMatcher.forJWEHeader(jweHeader);
}
@Override
public List selectJWEKeys(final JWEHeader jweHeader, final C context)
throws KeySourceException {
if (! jweAlg.equals(jweHeader.getAlgorithm()) || ! jweEnc.equals(jweHeader.getEncryptionMethod())) {
// Unexpected JWE alg or enc
return Collections.emptyList();
}
JWKMatcher jwkMatcher = createJWKMatcher(jweHeader);
List jwkMatches = getJWKSource().get(new JWKSelector(jwkMatcher), context);
List sanitizedKeyList = new LinkedList<>();
for (Key key: KeyConverter.toJavaKeys(jwkMatches)) {
if (key instanceof PrivateKey || key instanceof SecretKey) {
sanitizedKeyList.add(key);
} // skip public keys
}
return sanitizedKeyList;
}
}
© 2015 - 2024 Weber Informatics LLC | Privacy Policy