de.adorsys.multibanking.ing.oauth.ClientAuthenticationFactory Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of onlinebanking-ing Show documentation

There is a newer version: 5.5.34

package de.adorsys.multibanking.ing.oauth;

import de.adorsys.multibanking.ing.api.TokenResponse;

import javax.security.auth.x500.X500Principal;
import java.security.*;
import java.security.cert.CertificateEncodingException;
import java.security.cert.X509Certificate;
import java.util.Base64;

public class ClientAuthenticationFactory {
    private final Signature signature;
    private final MessageDigest digest;
    private final String tppSignatureCertificate;
    private final String keyId;

    public ClientAuthenticationFactory(X509Certificate certificate, PrivateKey privateKey) throws NoSuchAlgorithmException, InvalidKeyException, CertificateEncodingException {
        signature = Signature.getInstance("SHA256withRSA");
        signature.initSign(privateKey);
        digest = MessageDigest.getInstance("SHA-256");
        tppSignatureCertificate = base64(certificate.getEncoded());
        keyId = keyId(certificate);
    }

    private String keyId(X509Certificate certificate) {
        return "SN=" + certificate.getSerialNumber().toString(16)
            + ",CA=" + issuerNameRfc2253(certificate);
    }

    private String issuerNameRfc2253(X509Certificate qSealCertificate) {
        X500Principal issuerX500Principal = qSealCertificate.getIssuerX500Principal();
        return issuerX500Principal.getName(X500Principal.RFC2253);
    }

    private String base64(byte[] data) {
        return Base64.getEncoder().encodeToString(data);
    }

    ClientAuthentication newClientAuthenticationForApplicationToken() {
        return newClientAuthentication(keyId, null);
    }

    ClientAuthentication newClientAuthentication(TokenResponse applicationToken) {
        return newClientAuthentication(applicationToken.getClientId(), applicationToken.getAccessToken());
    }

    ClientAuthentication newClientAuthentication(String clientId, String accessToken) {
        return new ClientAuthentication(signature, digest, tppSignatureCertificate, clientId, accessToken);
    }
}