Module io.inverno.mod.security.jose

Package io.inverno.mod.security.jose.internal.jwk

Class SwitchableJWKURLResolver

java.lang.Object

io.inverno.mod.security.jose.internal.jwk.SwitchableJWKURLResolver

All Implemented Interfaces:

JWKURLResolver

public class SwitchableJWKURLResolver
extends Object
implements JWKURLResolver

A wrapper for the JWKURLResolver which can switch off JWK Set URL and X.509 certificate URL resolution by configuration.

The JWKURLResolver is used in GenericJWKService.read(java.net.URI) to resolve JWK sets explicitly and indirectly in JOSEObjectBuilder to resolve keys from the jku properties. We only want to disable resolution when building or reading JOSE objects and always have it enabled otherwise.

The URL resolution can be disabled by configuration (see JOSEConfiguration.resolve_jku() and JOSEConfiguration.resolve_x5u()).

Since:

1.5

Author:

Jeremy Kuhn

Constructor Summary

Constructors

Constructor	Description
SwitchableJWKURLResolver(JOSEConfiguration configuration, JWKURLResolver urlResolver)	Wraps the specified JWK URL resolver to make it switchable.

Method Summary

Modifier and Type	Method	Description
org.reactivestreams.Publisher<Map<String,Object>>	resolveJWKSetURL(URI jku)	Resolves a JSON JWK or JWK set at the specified location and returns corresponding keys represented as maps.
reactor.core.publisher.Mono<List<X509Certificate>>	resolveX509CertificateURL(URI x5u)	Resolves the X.509 certificates chain at the specified location as defined by RFC7515 Section 4.1.5

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

SwitchableJWKURLResolver

public SwitchableJWKURLResolver(JOSEConfiguration configuration,
 JWKURLResolver urlResolver)

Wraps the specified JWK URL resolver to make it switchable.

Parameters:

configuration - the JOSE module configuration

urlResolver - the modume JWK URL resolver

Method Details

resolveJWKSetURL

public org.reactivestreams.Publisher<Map<String,Object>> resolveJWKSetURL(URI jku)
                                                                   throws JWKResolveException

Description copied from interface: JWKURLResolver

Resolves a JSON JWK or JWK set at the specified location and returns corresponding keys represented as maps.

Specified by:

resolveJWKSetURL in interface JWKURLResolver

Parameters:

jku - the URI of the JSON JWK or JWK set resource

Returns:

a publisher of parsed keys represented as maps

Throws:

JWKResolveException - if there was an error resolving the resource

resolveX509CertificateURL

public reactor.core.publisher.Mono<List<X509Certificate>> resolveX509CertificateURL(URI x5u)
                                                                             throws JWKResolveException

Description copied from interface: JWKURLResolver

Resolves the X.509 certificates chain at the specified location as defined by RFC7515 Section 4.1.5

Specified by:

resolveX509CertificateURL in interface JWKURLResolver

Parameters:

x5u - the URI of the X.509 certificate chain

Returns:

a single X.509 certificates chain publisher

Throws:

JWKResolveException - if there was an error resolving the certificates chain