Package com.nimbusds.jwt

Examples of com.nimbusds.jwt.EncryptedJWT

143
144
145
146
147
148
149
150
151
152
153
      JwtEncryptionAndDecryptionService encrypter = encrypters.getEncrypter(client.getJwksUri());

      if (encrypter != null) {

        EncryptedJWT idToken = new EncryptedJWT(new JWEHeader(client.getIdTokenEncryptedResponseAlg(), client.getIdTokenEncryptedResponseEnc()), idClaims);

        encrypter.encryptJwt(idToken);

        idTokenEntity.setJwt(idToken);
View Full Code Here
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
        // if we got here, we're OK, keep processing

      } else if (jwt instanceof EncryptedJWT) {

        EncryptedJWT encryptedJWT = (EncryptedJWT)jwt;

        // decrypt the jwt if we can

        encryptionService.decryptJwt(encryptedJWT);

        // TODO: what if the content is a signed JWT? (#525)

        if (!encryptedJWT.getState().equals(State.DECRYPTED)) {
          throw new InvalidClientException("Unable to decrypt the request object");
        }

        // need to check clientId first so that we can load the client to check other fields
        if (request.getClientId() == null) {
          request.setClientId(encryptedJWT.getJWTClaimsSet().getStringClaim("client_id"));
        }

        ClientDetailsEntity client = clientDetailsService.loadClientByClientId(request.getClientId());

        if (client == null) {
View Full Code Here
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
    // Optional parameters
    for (Entry<String, String> option : options.entrySet()) {
      claims.setClaim(option.getKey(), option.getValue());
    }

    EncryptedJWT jwt = new EncryptedJWT(new JWEHeader(alg, enc), claims);

    JwtEncryptionAndDecryptionService encryptor = encrypterService.getEncrypter(serverConfig.getJwksUri());

    encryptor.encryptJwt(jwt);

    try {
      URIBuilder uriBuilder = new URIBuilder(serverConfig.getAuthorizationEndpointUri());
      uriBuilder.addParameter("request", jwt.serialize());

      // build out the URI
      return uriBuilder.build().toString();
    } catch (URISyntaxException e) {
      throw new AuthenticationServiceException("Malformed Authorization Endpoint Uri", e);
View Full Code Here
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
        JwtEncryptionAndDecryptionService encrypter = encrypters.getEncrypter(client.getJwksUri());

        if (encrypter != null) {

          EncryptedJWT encrypted = new EncryptedJWT(new JWEHeader(client.getIdTokenEncryptedResponseAlg(), client.getIdTokenEncryptedResponseEnc()), claims);

          encrypter.encryptJwt(encrypted);


          Writer out = response.getWriter();
          out.write(encrypted.serialize());

        } else {
          logger.error("Couldn't find encrypter for client: " + client.getClientId());
        }
      } else {
View Full Code Here
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
    assertEquals(RSAkid,service.getDefaultEncryptionKeyId());
    assertEquals(RSAkid,service.getDefaultDecryptionKeyId());

    JWEHeader header = new JWEHeader(JWEAlgorithm.RSA_OAEP, EncryptionMethod.A256GCM);

    EncryptedJWT jwt = new EncryptedJWT(header, claimsSet);

    service.encryptJwt(jwt);
    String serialized = jwt.serialize();

    EncryptedJWT encryptedJwt = EncryptedJWT.parse(serialized);
    assertThat(encryptedJwt.getJWTClaimsSet(), nullValue());
    service.decryptJwt(encryptedJwt);

    ReadOnlyJWTClaimsSet resultClaims = encryptedJwt.getJWTClaimsSet();

    assertEquals(claimsSet.getIssuer(), resultClaims.getIssuer());
    assertEquals(claimsSet.getSubject(), resultClaims.getSubject());
  }
View Full Code Here
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
    assertEquals(RSAkid,service.getDefaultEncryptionKeyId());
    assertEquals(RSAkid,service.getDefaultDecryptionKeyId());

    JWEHeader header = new JWEHeader(JWEAlgorithm.RSA_OAEP, EncryptionMethod.A256GCM);

    EncryptedJWT jwt = new EncryptedJWT(header, claimsSet);

    service.encryptJwt(jwt);
    String serialized = jwt.serialize();

    EncryptedJWT encryptedJwt = EncryptedJWT.parse(serialized);
    assertThat(encryptedJwt.getJWTClaimsSet(), nullValue());
    service.decryptJwt(encryptedJwt);

    ReadOnlyJWTClaimsSet resultClaims = encryptedJwt.getJWTClaimsSet();

    assertEquals(claimsSet.getIssuer(), resultClaims.getIssuer());
    assertEquals(claimsSet.getSubject(), resultClaims.getSubject());
  }
View Full Code Here
242
243
244
245
246
247
248
249
250
251
    service_2.setDefaultEncryptionKeyId(null);
    assertEquals(null, service_2.getDefaultEncryptionKeyId());

    JWEHeader header = new JWEHeader(JWEAlgorithm.RSA_OAEP, EncryptionMethod.A256GCM);

    EncryptedJWT jwt = new EncryptedJWT(header, claimsSet);

    service_2.encryptJwt(jwt);
    assertEquals(null, service_2.getDefaultEncryptionKeyId());
  }
View Full Code Here
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
    assertEquals(RSAkid, service_2.getDefaultEncryptionKeyId());
    assertEquals(null, service_2.getDefaultDecryptionKeyId());

    JWEHeader header = new JWEHeader(JWEAlgorithm.RSA_OAEP, EncryptionMethod.A256GCM);

    EncryptedJWT jwt = new EncryptedJWT(header, claimsSet);
    service_2.encryptJwt(jwt);
    String serialized = jwt.serialize();

    EncryptedJWT encryptedJwt = EncryptedJWT.parse(serialized);
    assertThat(encryptedJwt.getJWTClaimsSet(), nullValue());

    assertEquals(null, service_2.getDefaultDecryptionKeyId());
    service_2.decryptJwt(encryptedJwt);
  }
View Full Code Here
216
217
218
219
220
221
222
223
224
225
226
     
      return verify(signedJWT);

    } else if (jwt instanceof EncryptedJWT) {
   
      EncryptedJWT encryptedJWT = (EncryptedJWT)jwt;
     
      return decrypt(encryptedJWT);
     
    } else {
   
View Full Code Here
TOP

Related Classes of com.nimbusds.jwt.EncryptedJWT

  • com.nimbusds.jose.Payload
  • com.nimbusds.openid.connect.sdk.util.DefaultJWTDecoder
  • net.minidev.json.JSONObject
  • org.mitre.jwt.encryption.service.impl.TestDefaultJwtEncryptionAndDecryptionService
  • org.mitre.openid.connect.client.service.impl.EncryptedAuthRequestUrlBuilder
  • org.mitre.openid.connect.ConnectOAuth2RequestFactory
  • org.mitre.openid.connect.service.impl.DefaultOIDCTokenService
  • org.mitre.openid.connect.view.UserInfoJwtView
  • java.text.ParseException
    • Copyright © 2018 www.massapicom. All rights reserved.
    All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.