nl.open.jwtdependency.org.bouncycastle.x509.PKIXAttrCertChecker Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of java-jwt-nodependencies Show documentation

This is a drop in replacement for the auth0 java-jwt library (see https://github.com/auth0/java-jwt). This jar makes sure there are no external dependencies (e.g. fasterXml, Apacha Commons) needed. This is useful when deploying to an application server (e.g. tomcat with Alfreso or Pega).

The newest version!

package org.bouncycastle.x509;

import java.security.cert.CertPath;
import java.security.cert.CertPathValidatorException;
import java.util.Collection;
import java.util.Set;

public abstract class PKIXAttrCertChecker
    implements Cloneable
{

    /**
     * Returns an immutable Set of X.509 attribute certificate
     * extensions that this PKIXAttrCertChecker supports or
     * null if no extensions are supported.
     * 
     * Each element of the set is a String representing the
     * Object Identifier (OID) of the X.509 extension that is supported.
     * 
     * All X.509 attribute certificate extensions that a
     * PKIXAttrCertChecker might possibly be able to process
     * should be included in the set.
     * 
     * @return an immutable Set of X.509 extension OIDs (in
     *         String format) supported by this
     *         PKIXAttrCertChecker, or null if no
     *         extensions are supported
     */
    public abstract Set getSupportedExtensions();

    /**
     * Performs checks on the specified attribute certificate. Every handled
     * extension is rmeoved from the unresolvedCritExts
     * collection.
     * 
     * @param attrCert The attribute certificate to be checked.
     * @param certPath The certificate path which belongs to the attribute
     *            certificate issuer public key certificate.
     * @param holderCertPath The certificate path which belongs to the holder
     *            certificate.
     * @param unresolvedCritExts a Collection of OID strings
     *            representing the current set of unresolved critical extensions
     * @throws CertPathValidatorException if the specified attribute certificate
     *             does not pass the check.
     */
    public abstract void check(X509AttributeCertificate attrCert, CertPath certPath,
                                 CertPath holderCertPath, Collection unresolvedCritExts)
        throws CertPathValidatorException;

    /**
     * Returns a clone of this object.
     * 
     * @return a copy of this PKIXAttrCertChecker
     */
    public abstract Object clone();
}