org.xdi.oxauth.service.fido.u2f.RawRegistrationService クラス

org.xdi.oxauth.service.fido.u2f.RawRegistrationService 連携図

公開メンバ関数
RawRegisterResponse	parseRawRegisterResponse (String rawDataBase64) throws BadInputException
void	checkSignature (String appId, ClientData clientData, RawRegisterResponse rawRegisterResponse) throws BadInputException
DeviceRegistration	createDevice (RawRegisterResponse rawRegisterResponse) throws BadInputException

静的公開変数類
static final byte	REGISTRATION_RESERVED_BYTE_VALUE = (byte) 0x05
static final byte	REGISTRATION_SIGNED_RESERVED_BYTE_VALUE = (byte) 0x00
static final long	INITIAL_DEVICE_COUNTER_VALUE = -1
static final String	REGISTER_FINISH_TYPE = "navigator.id.finishEnrollment"
static final String	REGISTER_CANCEL_TYPE = "navigator.id.cancelEnrollment"
static final String []	SUPPORTED_REGISTER_TYPES = new String[] { REGISTER_FINISH_TYPE, REGISTER_CANCEL_TYPE }

非公開メンバ関数
byte []	packBytesToSign (byte[] appIdHash, byte[] clientDataHash, byte[] keyHandle, byte[] userPublicKey)

非公開変数類
Logger	log
SHA256withECDSASignatureVerification	signatureVerification

詳解

Provides operations with U2F RAW registration response

著者

Yuriy Movchan Date: 05/20/2015

関数詳解

checkSignature()

void org.xdi.oxauth.service.fido.u2f.RawRegistrationService.checkSignature ( String  appId, ClientData  clientData, RawRegisterResponse  rawRegisterResponse  ) throws BadInputException

inline

                                                                                                                                          {
                String rawClientData = clientData.getRawClientData();
                byte[] signedBytes = packBytesToSign(signatureVerification.hash(appId), signatureVerification.hash(rawClientData), rawRegisterResponse.getKeyHandle(),
                                rawRegisterResponse.getUserPublicKey());
                try {
                        signatureVerification.checkSignature(rawRegisterResponse.getAttestationCertificate(), signedBytes, rawRegisterResponse.getSignature());
                } catch (SignatureException ex) {
                        throw new BadInputException("Failed to checkSignature", ex);
                }
        }

createDevice()

DeviceRegistration org.xdi.oxauth.service.fido.u2f.RawRegistrationService.createDevice ( RawRegisterResponse  rawRegisterResponse ) throws BadInputException

inline

                                                                                                                 {
                return new DeviceRegistration(Base64Util.base64urlencode(rawRegisterResponse.getKeyHandle()), Base64Util.base64urlencode(rawRegisterResponse
                                .getUserPublicKey()), rawRegisterResponse.getAttestationCertificate(), INITIAL_DEVICE_COUNTER_VALUE);
        }

packBytesToSign()

byte [] org.xdi.oxauth.service.fido.u2f.RawRegistrationService.packBytesToSign ( byte []  appIdHash, byte []  clientDataHash, byte []  keyHandle, byte []  userPublicKey  )

inlineprivate

                                                                                                                        {
                ByteArrayDataOutput encoded = ByteStreams.newDataOutput();
                encoded.write(REGISTRATION_SIGNED_RESERVED_BYTE_VALUE);
                encoded.write(appIdHash);
                encoded.write(clientDataHash);
                encoded.write(keyHandle);
                encoded.write(userPublicKey);

                return encoded.toByteArray();
        }

parseRawRegisterResponse()

RawRegisterResponse org.xdi.oxauth.service.fido.u2f.RawRegistrationService.parseRawRegisterResponse ( String  rawDataBase64 ) throws BadInputException

inline

                                                                                                           {
                ByteDataInputStream bis = new ByteDataInputStream(Base64Util.base64urldecode(rawDataBase64));
                try {
                        try {
                                byte reservedByte = bis.readSigned();
                                if (reservedByte != REGISTRATION_RESERVED_BYTE_VALUE) {
                                        throw new BadInputException("Incorrect value of reserved byte. Expected: " + REGISTRATION_RESERVED_BYTE_VALUE + ". Was: " + reservedByte);
                                }
                                return new RawRegisterResponse(bis.read(65), bis.read(bis.readUnsigned()), CertificateParser.parseDer(bis), bis.readAll());
                        } catch (IOException ex) {
                                throw new BadInputException("Failed to parse RAW register response", ex);
                        } catch (CertificateException e) {
                                throw new BadInputException("Malformed attestation certificate", e);
                        }
                } finally {
                        IOUtils.closeQuietly(bis);
                }
        }

メンバ詳解

INITIAL_DEVICE_COUNTER_VALUE

final long org.xdi.oxauth.service.fido.u2f.RawRegistrationService.INITIAL_DEVICE_COUNTER_VALUE = -1

static

log

Logger org.xdi.oxauth.service.fido.u2f.RawRegistrationService.log

private

REGISTER_CANCEL_TYPE

final String org.xdi.oxauth.service.fido.u2f.RawRegistrationService.REGISTER_CANCEL_TYPE = "navigator.id.cancelEnrollment"

static

REGISTER_FINISH_TYPE

final String org.xdi.oxauth.service.fido.u2f.RawRegistrationService.REGISTER_FINISH_TYPE = "navigator.id.finishEnrollment"

static

REGISTRATION_RESERVED_BYTE_VALUE

final byte org.xdi.oxauth.service.fido.u2f.RawRegistrationService.REGISTRATION_RESERVED_BYTE_VALUE = (byte) 0x05

static

REGISTRATION_SIGNED_RESERVED_BYTE_VALUE

final byte org.xdi.oxauth.service.fido.u2f.RawRegistrationService.REGISTRATION_SIGNED_RESERVED_BYTE_VALUE = (byte) 0x00

static

signatureVerification

SHA256withECDSASignatureVerification org.xdi.oxauth.service.fido.u2f.RawRegistrationService.signatureVerification

private

SUPPORTED_REGISTER_TYPES

final String [] org.xdi.oxauth.service.fido.u2f.RawRegistrationService.SUPPORTED_REGISTER_TYPES = new String[] { REGISTER_FINISH_TYPE, REGISTER_CANCEL_TYPE }

static

---

このクラス詳解は次のファイルから抽出されました:

• D:/AppData/OpenId/gluu/src/oxAuth/Server/src/main/java/org/xdi/oxauth/service/fido/u2f/RawRegistrationService.java