/*
* Copyright 2012-2014 Brian Campbell
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
package org.jose4j.jwk;
import org.jose4j.base64url.Base64Url;
import org.jose4j.keys.AesKey;
import org.jose4j.lang.JsonHelp;
import javax.crypto.spec.SecretKeySpec;
import java.security.Key;
import java.util.Map;
/**
*/
public class OctetSequenceJsonWebKey extends JsonWebKey
{
public static final String KEY_TYPE = "oct";
public static final String KEY_VALUE_MEMBER_NAME = "k";
private byte[] octetSequence;
public OctetSequenceJsonWebKey(Key key)
{
super(key);
octetSequence = key.getEncoded();
}
public OctetSequenceJsonWebKey(Map<String, Object> params)
{
super(params);
Base64Url base64Url = new Base64Url();
String b64KeyBytes = JsonHelp.getString(params, KEY_VALUE_MEMBER_NAME);
octetSequence = base64Url.base64UrlDecode(b64KeyBytes);
// um... how could I know the alg? I don't see a reliable way to know.
// Maybe infer from the alg parameter but it's optional.
// Currently it's really either AES or HMAC and only the AES algorithm
// implementations seem to actually care. So I'm gonna just go w/ AES for now.
String alg = AesKey.ALGORITHM;
key = new SecretKeySpec(octetSequence, alg);
}
@Override
public String getKeyType()
{
return KEY_TYPE;
}
public byte[] getOctetSequence()
{
return octetSequence;
}
@Override
protected void fillTypeSpecificParams(Map<String, Object> params, OutputControlLevel outputLevel)
{
if (OutputControlLevel.INCLUDE_SYMMETRIC.compareTo(outputLevel) >= 0)
{
Base64Url base64Url = new Base64Url();
String encodedBytes = base64Url.base64UrlEncode(octetSequence);
params.put(KEY_VALUE_MEMBER_NAME, encodedBytes);
}
}
}