Module io.inverno.mod.security.jose

Package io.inverno.mod.security.jose.internal.jwe

Class RecipientJWEReader<A>

java.lang.Object

io.inverno.mod.security.jose.internal.AbstractJOSEObjectReader<A,JWEHeader,JWE<A>,GenericJWEReader<A>>

io.inverno.mod.security.jose.internal.jwe.GenericJWEReader<A>

io.inverno.mod.security.jose.internal.jwe.RecipientJWEReader<A>

Type Parameters:

A - the expected payload type

All Implemented Interfaces:

JOSEObjectReader<A,JWEHeader,JWE<A>,GenericJWEReader<A>>, JWEReader<A,GenericJWEReader<A>>

public class RecipientJWEReader<A>
extends GenericJWEReader<A>

JSON JWE recipient specific JWE reader used to read recipient specific JWE when reading a JSON JWE.

Since:

1.5

Author:

Jeremy Kuhn

Field Summary

Fields inherited from class io.inverno.mod.security.jose.internal.AbstractJOSEObjectReader

applicationProcessedParameters, dataConversionService, jwkService, keys, mapper, type

Constructor Summary

Constructors

Constructor	Description
RecipientJWEReader(com.fasterxml.jackson.databind.ObjectMapper mapper, io.inverno.mod.security.jose.internal.converter.DataConversionService dataConversionService, JWKService jwkService, Type type, org.reactivestreams.Publisher<? extends JWK> keys, List<JWEZip> zips, GenericJWEHeader jweHeader, byte[] aad)	Creates a JSON JWE recipient reader.

Method Summary

Modifier and Type	Method	Description
protected byte[]	getAdditionalAuthenticationData(GenericJWEHeader jweHeader)	Returns expected additional authentication data.
protected GenericJWEHeader	readJWEHeader(String encodedHeader)	Reads the JWE header.

Methods inherited from class io.inverno.mod.security.jose.internal.jwe.GenericJWEReader

checkHeader, getPayloadZip, read, read

Methods inherited from class io.inverno.mod.security.jose.internal.AbstractJOSEObjectReader

checkCriticalParameters, getKeys, getPayloadDecoder, getProcessedParameters, processedParameters

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface io.inverno.mod.security.jose.JOSEObjectReader

processedParameters, read

Constructor Details

RecipientJWEReader

public RecipientJWEReader(com.fasterxml.jackson.databind.ObjectMapper mapper,
 io.inverno.mod.security.jose.internal.converter.DataConversionService dataConversionService,
 JWKService jwkService,
 Type type,
 org.reactivestreams.Publisher<? extends JWK> keys,
 List<JWEZip> zips,
 GenericJWEHeader jweHeader,
 byte[] aad)

Creates a JSON JWE recipient reader.

Parameters:

mapper - an object mapper

dataConversionService - a data conversion service

jwkService - a JWK service

type - a payload type

keys - the recipient specific keys to consider to decrypt the CEK

zips - a list of supported JWE compression algorithms

jweHeader - the recipient JWE header

aad - the additional authentication data

Method Details

readJWEHeader

protected GenericJWEHeader readJWEHeader(String encodedHeader)
                                  throws JWEReadException,
JOSEObjectReadException,
JOSEProcessingException

Description copied from class: GenericJWEReader

Reads the JWE header.

Overrides:

readJWEHeader in class GenericJWEReader<A>

Parameters:

encodedHeader - the Base64URL encoded JWE header

Returns:

the JWE header

Throws:

JWEReadException - if there was an error reading the JWE header

JOSEObjectReadException - if there was an error reading the JWE header

JOSEProcessingException - if there was a JOSE processing error

getAdditionalAuthenticationData

protected byte[] getAdditionalAuthenticationData(GenericJWEHeader jweHeader)

Description copied from class: GenericJWEReader

Returns expected additional authentication data.

For a compact JWE it should be ASCII(Encoded Protected Header). For a JSON JWE it should be ASCII(Encoded Protected Header || '.' || BASE64URL(JWE AAD)).

Overrides:

getAdditionalAuthenticationData in class GenericJWEReader<A>

Parameters:

jweHeader - the JWE header

Returns:

the additional authentication data