org.xdi.oxauth.service.fido.u2f.RawAuthenticationService クラス

org.xdi.oxauth.service.fido.u2f.RawAuthenticationService 連携図

公開メンバ関数
RawAuthenticateResponse	parseRawAuthenticateResponse (String rawDataBase64)
void	checkSignature (String appId, ClientData clientData, RawAuthenticateResponse rawAuthenticateResponse, byte[] publicKey) throws BadInputException

静的公開変数類
static final String	AUTHENTICATE_GET_TYPE = "navigator.id.getAssertion"
static final String	AUTHENTICATE_CANCEL_TYPE = "navigator.id.cancelAssertion"
static final String []	SUPPORTED_AUTHENTICATE_TYPES = new String[] { AUTHENTICATE_GET_TYPE, AUTHENTICATE_CANCEL_TYPE }

非公開メンバ関数
byte []	packBytesToSign (byte[] appIdHash, byte userPresence, long counter, byte[] challengeHash)

非公開変数類
Logger	log
SHA256withECDSASignatureVerification	signatureVerification

詳解

Provides operations with U2F RAW authentication response

著者

Yuriy Movchan Date: 05/20/2015

関数詳解

checkSignature()

void org.xdi.oxauth.service.fido.u2f.RawAuthenticationService.checkSignature ( String  appId, ClientData  clientData, RawAuthenticateResponse  rawAuthenticateResponse, byte []  publicKey  ) throws BadInputException

inline

                                                                                                                                                                    {
                String rawClientData = clientData.getRawClientData();

                byte[] signedBytes = packBytesToSign(signatureVerification.hash(appId), rawAuthenticateResponse.getUserPresence(),
                                rawAuthenticateResponse.getCounter(), signatureVerification.hash(rawClientData));
                try {
                        signatureVerification.checkSignature(signatureVerification.decodePublicKey(publicKey), signedBytes, rawAuthenticateResponse.getSignature());
                } catch (SignatureException ex) {
                        throw new BadInputException("Failed to checkSignature", ex);
                }
        }

packBytesToSign()

byte [] org.xdi.oxauth.service.fido.u2f.RawAuthenticationService.packBytesToSign ( byte []  appIdHash, byte  userPresence, long  counter, byte []  challengeHash  )

inlineprivate

                                                                                                                {
                ByteArrayDataOutput encoded = ByteStreams.newDataOutput();
                encoded.write(appIdHash);
                encoded.write(userPresence);
                encoded.writeInt((int) counter);
                encoded.write(challengeHash);

                return encoded.toByteArray();
        }

parseRawAuthenticateResponse()

RawAuthenticateResponse org.xdi.oxauth.service.fido.u2f.RawAuthenticationService.parseRawAuthenticateResponse ( String  rawDataBase64 )

inline

                                                                                          {
                ByteDataInputStream bis = new ByteDataInputStream(Base64Util.base64urldecode(rawDataBase64));
                try {
                        return new RawAuthenticateResponse(bis.readSigned(), bis.readInt(), bis.readAll());
                } catch (IOException ex) {
                        throw new BadInputException("Failed to parse RAW authenticate response", ex);
                } finally {
                        IOUtils.closeQuietly(bis);
                }
        }

メンバ詳解

AUTHENTICATE_CANCEL_TYPE

final String org.xdi.oxauth.service.fido.u2f.RawAuthenticationService.AUTHENTICATE_CANCEL_TYPE = "navigator.id.cancelAssertion"

static

AUTHENTICATE_GET_TYPE

final String org.xdi.oxauth.service.fido.u2f.RawAuthenticationService.AUTHENTICATE_GET_TYPE = "navigator.id.getAssertion"

static

log

Logger org.xdi.oxauth.service.fido.u2f.RawAuthenticationService.log

private

signatureVerification

SHA256withECDSASignatureVerification org.xdi.oxauth.service.fido.u2f.RawAuthenticationService.signatureVerification

private

SUPPORTED_AUTHENTICATE_TYPES

final String [] org.xdi.oxauth.service.fido.u2f.RawAuthenticationService.SUPPORTED_AUTHENTICATE_TYPES = new String[] { AUTHENTICATE_GET_TYPE, AUTHENTICATE_CANCEL_TYPE }

static

---

このクラス詳解は次のファイルから抽出されました:

• D:/AppData/OpenId/gluu/src/oxAuth/Server/src/main/java/org/xdi/oxauth/service/fido/u2f/RawAuthenticationService.java