Examples of Nonce

com.bradmcevoy.http.http11.auth.Nonce
Represents a Nonce which has been issued and is stored in memory @author brad
com.google.nigori.common.Nonce
A data object representation of Nigori's "number used once" to check the freshness of a message. @author Alastair Beresford
com.nimbusds.openid.connect.sdk.Nonce
Nonce. This is a random, unique string value to associate a user-session with an ID Token and to mitigate replay attacks.
Example generation of a nonce with eight random mixed-case alphanumeric characters:
```
 Nonce nonce = new Nonce(8); 
```
Related specifications:
- OpenID Connect Core 1.0, section 3.1.2.1. and 15.5.2.
org.apache.cxf.rs.security.oauth2.tokens.mac.Nonce
org.jscep.transaction.Nonce
This class represents the senderNonce and recipientNonce types.

Examples of com.bradmcevoy.http.http11.auth.Nonce

    }


    public String createNonce( Resource resource, Request request ) {
        UUID id = UUID.randomUUID();
        Date now = new Date();
        Nonce n = new Nonce( id, now );
        memcache.put( n.getValue(), n, Expiration.byDeltaSeconds(nonceValiditySeconds));
        log.info( "created nonce: " + n.getValue() );
        return n.getValue().toString();
    }

View Full Code Here

Examples of com.bradmcevoy.http.http11.auth.Nonce

            value = UUID.fromString( nonce );
        } catch( Exception e ) {
            log.info( "couldnt parse nonce" );
            return NonceValidity.INVALID;
        }
        Nonce n = (Nonce)memcache.get(value);
        if( n == null ) {
            log.info( "not found in cache" );
            return NonceValidity.INVALID;
        } else {
            if( isExpired( n.getIssued() ) ) {
                log.info( "nonce has expired; that is unusual as it should have been evicted from the cache already." );
                return NonceValidity.EXPIRED;
            } else {
                if( nc == null ) {
                    log.info( "nonce ok" );
                    return NonceValidity.OK;
                } else {
                    if( enableNonceCountChecking && nc <= n.getNonceCount() ) {
                        log.warning( "nonce-count was not greater then previous, possible replay attack. new: " + nc + " old:" + n.getNonceCount() );
                        return NonceValidity.INVALID;
                    } else {
                        log.info( "nonce and nonce-count ok" );
                        Nonce newNonce = n.increaseNonceCount( nc );
                        memcache.put( newNonce.getValue(), newNonce, Expiration.byDeltaSeconds(nonceValiditySeconds));
                        return NonceValidity.OK;
                    }
                }
            }
        }

View Full Code Here

Examples of com.google.nigori.common.Nonce

  }


  @Test
  public void clearOldNonces() throws UserNotFoundException {
    database.clearOldNonces();
    Nonce oldNonce = new LyingNonce(0);
    Nonce freshNonce = new Nonce();
    database.addUser(publicKey, publicHash);
    User user = database.getUser(publicHash);
    try {
      assertTrue(database.checkAndAddNonce(oldNonce, publicHash));
      assertTrue(database.checkAndAddNonce(freshNonce, publicHash));

View Full Code Here

Examples of com.google.nigori.common.Nonce


    byte[] publicHash = auth.getPublicKey().toByteArray();
    List<byte[]> byteSig = Util.splitBytes(auth.getSig().toByteArray());
    byte[] dsaR = byteSig.get(0);
    byte[] dsaS = byteSig.get(1);
    Nonce nonce = new Nonce(auth.getNonce().toByteArray());
    String serverName = auth.getServerName();
    try {
      byte[] publicKey = database.getPublicKey(publicHash);


      DSASignature sig =
          new DSASignature(dsaR, dsaS, Util.joinBytes(toBytes(serverName), nonce.nt(), nonce.nr(), toBytes(command), Util.joinBytes(payload)));
      try {
        DSAVerify v = new DSAVerify(publicKey);


        if (v.verify(sig)) {
          boolean validNonce = database.checkAndAddNonce(nonce, publicHash);

View Full Code Here

Examples of com.google.nigori.common.Nonce

    assertFalse(database.haveUser(publicHash));
  }


  @Test
  public void newNoncePasses() {
    Nonce nonce = new Nonce();
    assertTrue(database.checkAndAddNonce(nonce, publicHash));
  }

View Full Code Here

Examples of com.google.nigori.common.Nonce

    assertTrue(database.checkAndAddNonce(nonce, publicHash));
  }


  @Test
  public void repeatedNonceFails() {
    Nonce nonce = new Nonce();
    assertTrue(database.checkAndAddNonce(nonce, publicHash));
    assertFalse(database.checkAndAddNonce(nonce, publicHash));
  }

View Full Code Here

Examples of com.google.nigori.common.Nonce


  @Override
  public void clearOldNonces() {
    for (Set<Nonce> nonceSet : nonces.values()){
      Iterator<Nonce> nonceIterator = nonceSet.iterator();
      Nonce nonce;
      while (nonceIterator.hasNext()){
        nonce = nonceIterator.next();
        if (!nonce.isRecent()){
          nonceIterator.remove();
        }
      }
    }
  }

View Full Code Here

Examples of com.nimbusds.openid.connect.sdk.Nonce

    IDTokenClaimsSet idTokenClaimsSet = new IDTokenClaimsSet(issuer, subject, audList, expirationTime, issueTime);


    Date authenticationTime = DateUtils.fromSecondsSinceEpoch(300000l);
    idTokenClaimsSet.setAuthenticationTime(authenticationTime);


    Nonce nonce = new Nonce();
    idTokenClaimsSet.setNonce(nonce);


    AccessTokenHash accessTokenHash = new AccessTokenHash("123");
    idTokenClaimsSet.setAccessTokenHash(accessTokenHash);


    CodeHash codeHash = new CodeHash("456");
    idTokenClaimsSet.setCodeHash(codeHash);


    ACR acr = new ACR("1");
    idTokenClaimsSet.setACR(acr);


    List<AMR> amrList = new LinkedList<>();
    amrList.add(new AMR("A"));
    idTokenClaimsSet.setAMR(amrList);


    AuthorizedParty authorizedParty = new AuthorizedParty("azp");
    idTokenClaimsSet.setAuthorizedParty(authorizedParty);


    // Mandatory claims
    assertEquals("iss", idTokenClaimsSet.getIssuer().getValue());
    assertEquals("sub", idTokenClaimsSet.getSubject().getValue());
    assertEquals("aud", idTokenClaimsSet.getAudience().get(0).getValue());
    assertEquals(100000l, idTokenClaimsSet.getExpirationTime().getTime() / 1000);
    assertEquals(200000l, idTokenClaimsSet.getIssueTime().getTime() / 1000);


    // Optional claims
    assertEquals(300000l, idTokenClaimsSet.getAuthenticationTime().getTime() / 1000);
    assertEquals(nonce.getValue(), idTokenClaimsSet.getNonce().getValue());
    assertEquals(accessTokenHash.getValue(), idTokenClaimsSet.getAccessTokenHash().getValue());
    assertEquals(codeHash.getValue(), idTokenClaimsSet.getCodeHash().getValue());
    assertEquals(acr.getValue(), idTokenClaimsSet.getACR().getValue());
    assertEquals("A", idTokenClaimsSet.getAMR().get(0).getValue());
    assertEquals(authorizedParty.getValue(), idTokenClaimsSet.getAuthorizedParty().getValue());


    String json = idTokenClaimsSet.toJSONObject().toJSONString();


    // Try to JWT claims set too
    idTokenClaimsSet.toJWTClaimsSet();


    idTokenClaimsSet = IDTokenClaimsSet.parse(json);


    // Mandatory claims
    assertEquals("iss", idTokenClaimsSet.getIssuer().getValue());
    assertEquals("sub", idTokenClaimsSet.getSubject().getValue());
    assertEquals("aud", idTokenClaimsSet.getAudience().get(0).getValue());
    assertEquals(100000l, idTokenClaimsSet.getExpirationTime().getTime() / 1000);
    assertEquals(200000l, idTokenClaimsSet.getIssueTime().getTime() / 1000);


    // Optional claims
    assertEquals(300000l, idTokenClaimsSet.getAuthenticationTime().getTime() / 1000);
    assertEquals(nonce.getValue(), idTokenClaimsSet.getNonce().getValue());
    assertEquals(accessTokenHash.getValue(), idTokenClaimsSet.getAccessTokenHash().getValue());
    assertEquals(codeHash.getValue(), idTokenClaimsSet.getCodeHash().getValue());
    assertEquals(acr.getValue(), idTokenClaimsSet.getACR().getValue());
    assertEquals("A", idTokenClaimsSet.getAMR().get(0).getValue());
    assertEquals(authorizedParty.getValue(), idTokenClaimsSet.getAuthorizedParty().getValue());

View Full Code Here

Examples of com.nimbusds.openid.connect.sdk.Nonce

      new Date(),
      new Date());


    assertFalse(claimsSet.hasRequiredClaims(responseType));


    claimsSet.setNonce(new Nonce());
    claimsSet.setAccessTokenHash(new AccessTokenHash("at_hash"));


    assertTrue(claimsSet.hasRequiredClaims(responseType));
  }

View Full Code Here

Examples of com.nimbusds.openid.connect.sdk.Nonce


    assertFalse(claimsSet.hasRequiredClaims(responseType));


    claimsSet.setCodeHash(new CodeHash("c_hash"));


    claimsSet.setNonce(new Nonce());
    claimsSet.setAccessTokenHash(new AccessTokenHash("at_hash"));


    assertTrue(claimsSet.hasRequiredClaims(responseType));
  }

View Full Code Here

0 1

TOP

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.