org.xdi.oxauth.service.KeyGeneratorTimer クラス

org.xdi.oxauth.service.KeyGeneratorTimer 連携図

公開メンバ関数
void	initTimer ()
void	process (@Observes @Scheduled KeyGenerationEvent keyGenerationEvent)
String	updateKeys () throws JSONException, Exception

非公開メンバ関数
JSONObject	updateKeys (JSONObject jwks) throws Exception

非公開変数類
Logger	log
Event< TimerEvent >	timerEvent
ConfigurationFactory	configurationFactory
PersistenceEntryManager	ldapEntryManager
AppConfiguration	appConfiguration
AtomicBoolean	isActive

静的非公開変数類
static final String	EVENT_TYPE = "KeyGeneratorTimerEvent"
static final int	DEFAULT_INTERVAL = 48

詳解

著者

Javier Rojas Blum

バージョン

June 15, 2016

関数詳解

initTimer()

void org.xdi.oxauth.service.KeyGeneratorTimer.initTimer ( )

inline

                                {
                log.debug("Initializing Key Generator Timer");

                this.isActive = new AtomicBoolean(false);

                int interval = appConfiguration.getKeyRegenerationInterval();
                if (interval <= 0) {
                        interval = DEFAULT_INTERVAL;
                }

                interval = interval * 3600;
                timerEvent.fire(new TimerEvent(new TimerSchedule(interval, interval), new KeyGenerationEvent(),
                                Scheduled.Literal.INSTANCE));
        }

process()

void org.xdi.oxauth.service.KeyGeneratorTimer.process ( @Observes @Scheduled KeyGenerationEvent  keyGenerationEvent )

inline

                                                                                        {
                if (!appConfiguration.getKeyRegenerationEnabled()) {
                        return;
                }

                if (this.isActive.get()) {
                        return;
                }

                if (!this.isActive.compareAndSet(false, true)) {
                        return;
                }

                try {
                        updateKeys();
                } catch (Exception e) {
                        log.error(e.getMessage(), e);
                } finally {
                        this.isActive.set(false);
                }
        }

updateKeys() [1/2]

String org.xdi.oxauth.service.KeyGeneratorTimer.updateKeys ( ) throws JSONException, Exception

inline

                                                                   {
                String dn = configurationFactory.getPersistenceConfiguration().getConfiguration().getString("configurationEntryDN");
                Conf conf = ldapEntryManager.find(Conf.class, dn);

                JSONObject jwks = new JSONObject(conf.getWebKeys());
                conf.setWebKeys(updateKeys(jwks).toString());

                long nextRevision = conf.getRevision() + 1;
                conf.setRevision(nextRevision);
                ldapEntryManager.merge(conf);

                return conf.getWebKeys();
        }

updateKeys() [2/2]

JSONObject org.xdi.oxauth.service.KeyGeneratorTimer.updateKeys ( JSONObject  jwks ) throws Exception

inlineprivate

                                                                        {
                JSONObject jsonObject = AbstractCryptoProvider.generateJwks(appConfiguration.getKeyRegenerationInterval(),
                                appConfiguration.getIdTokenLifetime(), appConfiguration);

                JSONArray keys = jwks.getJSONArray(JSON_WEB_KEY_SET);
                for (int i = 0; i < keys.length(); i++) {
                        JSONObject key = keys.getJSONObject(i);

                        if (key.has(EXPIRATION_TIME) && !key.isNull(EXPIRATION_TIME)) {
                                GregorianCalendar now = new GregorianCalendar(TimeZone.getTimeZone("UTC"));
                                GregorianCalendar expirationDate = new GregorianCalendar(TimeZone.getTimeZone("UTC"));
                                expirationDate.setTimeInMillis(key.getLong(EXPIRATION_TIME));

                                if (expirationDate.before(now)) {
                                        // The expired key is not added to the array of keys
                                        log.debug("Removing JWK: {}, Expiration date: {}", key.getString(KEY_ID),
                                                        key.getString(EXPIRATION_TIME));
                                        AbstractCryptoProvider cryptoProvider = CryptoProviderFactory.getCryptoProvider(appConfiguration);
                                        cryptoProvider.deleteKey(key.getString(KEY_ID));
                                } else {
                                        jsonObject.getJSONArray(JSON_WEB_KEY_SET).put(key);
                                }
                        } else {
                                GregorianCalendar expirationTime = new GregorianCalendar(TimeZone.getTimeZone("UTC"));
                                expirationTime.add(GregorianCalendar.HOUR, appConfiguration.getKeyRegenerationInterval());
                                expirationTime.add(GregorianCalendar.SECOND, appConfiguration.getIdTokenLifetime());
                                key.put(EXPIRATION_TIME, expirationTime.getTimeInMillis());

                                jsonObject.getJSONArray(JSON_WEB_KEY_SET).put(key);
                        }
                }

                return jsonObject;
        }

メンバ詳解

appConfiguration

AppConfiguration org.xdi.oxauth.service.KeyGeneratorTimer.appConfiguration

private

configurationFactory

ConfigurationFactory org.xdi.oxauth.service.KeyGeneratorTimer.configurationFactory

private

DEFAULT_INTERVAL

final int org.xdi.oxauth.service.KeyGeneratorTimer.DEFAULT_INTERVAL = 48

staticprivate

EVENT_TYPE

final String org.xdi.oxauth.service.KeyGeneratorTimer.EVENT_TYPE = "KeyGeneratorTimerEvent"

staticprivate

isActive

AtomicBoolean org.xdi.oxauth.service.KeyGeneratorTimer.isActive

private

ldapEntryManager

PersistenceEntryManager org.xdi.oxauth.service.KeyGeneratorTimer.ldapEntryManager

private

log

Logger org.xdi.oxauth.service.KeyGeneratorTimer.log

private

timerEvent

Event<TimerEvent> org.xdi.oxauth.service.KeyGeneratorTimer.timerEvent

private

---

このクラス詳解は次のファイルから抽出されました:

• D:/AppData/OpenId/gluu/src/oxAuth/Server/src/main/java/org/xdi/oxauth/service/KeyGeneratorTimer.java