org.xdi.oxauth.model.jws.ECDSASigner クラス

org.xdi.oxauth.model.jws.ECDSASigner の継承関係図

org.xdi.oxauth.model.jws.ECDSASigner 連携図

公開メンバ関数
	ECDSASigner (SignatureAlgorithm signatureAlgorithm, ECDSAPrivateKey ecdsaPrivateKey)
	ECDSASigner (SignatureAlgorithm signatureAlgorithm, ECDSAPublicKey ecdsaPublicKey)
	ECDSASigner (SignatureAlgorithm signatureAlgorithm, Certificate certificate)
String	generateSignature (String signingInput) throws SignatureException
boolean	validateSignature (String signingInput, String signature) throws SignatureException
SignatureAlgorithm	getSignatureAlgorithm ()
Jwt	sign (Jwt jwt) throws InvalidJwtException, SignatureException
boolean	validate (Jwt jwt)
boolean	validateAuthorizationCode (String authorizationCode, Jwt idToken)
boolean	validateAccessToken (String accessToken, Jwt idToken)

非公開変数類
ECDSAPrivateKey	ecdsaPrivateKey
ECDSAPublicKey	ecdsaPublicKey

詳解

著者

Javier Rojas Blum

バージョン

July 31, 2016

構築子と解体子

ECDSASigner() [1/3]

org.xdi.oxauth.model.jws.ECDSASigner.ECDSASigner ( SignatureAlgorithm  signatureAlgorithm, ECDSAPrivateKey  ecdsaPrivateKey  )

inline

                                                                                               {
        super(signatureAlgorithm);
        this.ecdsaPrivateKey = ecdsaPrivateKey;
    }

ECDSASigner() [2/3]

org.xdi.oxauth.model.jws.ECDSASigner.ECDSASigner ( SignatureAlgorithm  signatureAlgorithm, ECDSAPublicKey  ecdsaPublicKey  )

inline

                                                                                             {
        super(signatureAlgorithm);
        this.ecdsaPublicKey = ecdsaPublicKey;
    }

ECDSASigner() [3/3]

org.xdi.oxauth.model.jws.ECDSASigner.ECDSASigner ( SignatureAlgorithm  signatureAlgorithm, Certificate  certificate  )

inline

                                                                                       {
        super(signatureAlgorithm);
        this.ecdsaPublicKey = certificate.getEcdsaPublicKey();
    }

関数詳解

generateSignature()

String org.xdi.oxauth.model.jws.ECDSASigner.generateSignature ( String  signingInput ) throws SignatureException

inline

                                                                                   {
        if (getSignatureAlgorithm() == null) {
            throw new SignatureException("The signature algorithm is null");
        }
        if (ecdsaPrivateKey == null) {
            throw new SignatureException("The ECDSA private key is null");
        }
        if (signingInput == null) {
            throw new SignatureException("The signing input is null");
        }

        try {
            ECParameterSpec ecSpec = ECNamedCurveTable.getParameterSpec(getSignatureAlgorithm().getCurve().getName());
            ECPrivateKeySpec privateKeySpec = new ECPrivateKeySpec(ecdsaPrivateKey.getD(), ecSpec);

            KeyFactory keyFactory = KeyFactory.getInstance("ECDSA", "BC");
            PrivateKey privateKey = keyFactory.generatePrivate(privateKeySpec);

            Signature signature = Signature.getInstance(getSignatureAlgorithm().getAlgorithm(), "BC");
            signature.initSign(privateKey);
            signature.update(signingInput.getBytes(Util.UTF8_STRING_ENCODING));

            return Base64Util.base64urlencode(signature.sign());
        } catch (InvalidKeySpecException e) {
            throw new SignatureException(e);
        } catch (InvalidKeyException e) {
            throw new SignatureException(e);
        } catch (NoSuchAlgorithmException e) {
            throw new SignatureException(e);
        } catch (NoSuchProviderException e) {
            throw new SignatureException(e);
        } catch (UnsupportedEncodingException e) {
            throw new SignatureException(e);
        } catch (Exception e) {
            throw new SignatureException(e);
        }
    }

getSignatureAlgorithm()

SignatureAlgorithm org.xdi.oxauth.model.jws.AbstractJwsSigner.getSignatureAlgorithm ( )

inlineinherited

org.xdi.oxauth.model.jws.JwsSignerを実装しています。

                                                      {
        return signatureAlgorithm;
    }

sign()

Jwt org.xdi.oxauth.model.jws.AbstractJwsSigner.sign ( Jwt  jwt ) throws InvalidJwtException, SignatureException

inlineinherited

org.xdi.oxauth.model.jws.JwsSignerを実装しています。

                                                                            {
        String signature = generateSignature(jwt.getSigningInput());
        jwt.setEncodedSignature(signature);
        return jwt;
    }

validate()

boolean org.xdi.oxauth.model.jws.AbstractJwsSigner.validate ( Jwt  jwt )

inlineinherited

org.xdi.oxauth.model.jws.JwsSignerを実装しています。

                                     {
        try {
            String signingInput = jwt.getSigningInput();
            String signature = jwt.getEncodedSignature();

            return validateSignature(signingInput, signature);
        } catch (InvalidJwtException e) {
            LOG.error(e.getMessage(), e);
            return false;
        } catch (SignatureException e) {
            LOG.error(e.getMessage(), e);
            return false;
        } catch (Exception e) {
            LOG.error(e.getMessage(), e);
            return false;
        }
    }

validateAccessToken()

boolean org.xdi.oxauth.model.jws.AbstractJwsSigner.validateAccessToken ( String  accessToken, Jwt  idToken  )

inlineinherited

                                                                        {
        return validateHash(accessToken, idToken.getClaims().getClaimAsString(JwtClaimName.ACCESS_TOKEN_HASH));
    }

validateAuthorizationCode()

boolean org.xdi.oxauth.model.jws.AbstractJwsSigner.validateAuthorizationCode ( String  authorizationCode, Jwt  idToken  )

inlineinherited

                                                                                    {
        return validateHash(authorizationCode, idToken.getClaims().getClaimAsString(JwtClaimName.CODE_HASH));
    }

validateSignature()

boolean org.xdi.oxauth.model.jws.ECDSASigner.validateSignature ( String  signingInput, String  signature  ) throws SignatureException

inline

                                                                                                      {
        if (getSignatureAlgorithm() == null) {
            throw new SignatureException("The signature algorithm is null");
        }
        if (ecdsaPublicKey == null) {
            throw new SignatureException("The ECDSA public key is null");
        }
        if (signingInput == null) {
            throw new SignatureException("The signing input is null");
        }

        String algorithm;
        String curve;
        switch (getSignatureAlgorithm()) {
            case ES256:
                algorithm = "SHA256WITHECDSA";
                curve = "P-256";
                break;
            case ES384:
                algorithm = "SHA384WITHECDSA";
                curve = "P-384";
                break;
            case ES512:
                algorithm = "SHA512WITHECDSA";
                curve = "P-521";
                break;
            default:
                throw new SignatureException("Unsupported signature algorithm");
        }

        try {
            byte[] sigBytes = Base64Util.base64urldecode(signature);
            byte[] sigInBytes = signingInput.getBytes(Util.UTF8_STRING_ENCODING);

            ECParameterSpec ecSpec = ECNamedCurveTable.getParameterSpec(curve);
            BigInteger q = ((ECCurve.AbstractFp) ecSpec.getCurve()).getField().getCharacteristic();
            ECFieldElement xFieldElement = new ECFieldElement.Fp(q, ecdsaPublicKey.getX());
            ECFieldElement yFieldElement = new ECFieldElement.Fp(q, ecdsaPublicKey.getY());
            ECPoint pointQ = new ECPoint.Fp(ecSpec.getCurve(), xFieldElement, yFieldElement);
            ECPublicKeySpec publicKeySpec = new ECPublicKeySpec(pointQ, ecSpec);

            KeyFactory keyFactory = KeyFactory.getInstance("ECDSA", "BC");
            PublicKey publicKey = keyFactory.generatePublic(publicKeySpec);

            Signature sig = Signature.getInstance(algorithm, "BC");
            sig.initVerify(publicKey);
            sig.update(sigInBytes);
            return sig.verify(sigBytes);
        } catch (InvalidKeySpecException e) {
            throw new SignatureException(e);
        } catch (InvalidKeyException e) {
            throw new SignatureException(e);
        } catch (NoSuchAlgorithmException e) {
            throw new SignatureException(e);
        } catch (NoSuchProviderException e) {
            throw new SignatureException(e);
        } catch (UnsupportedEncodingException e) {
            throw new SignatureException(e);
        } catch (Exception e) {
            throw new SignatureException(e);
        }
    }

メンバ詳解

ecdsaPrivateKey

ECDSAPrivateKey org.xdi.oxauth.model.jws.ECDSASigner.ecdsaPrivateKey

private

ecdsaPublicKey

ECDSAPublicKey org.xdi.oxauth.model.jws.ECDSASigner.ecdsaPublicKey

private

---

このクラス詳解は次のファイルから抽出されました:

• D:/AppData/OpenId/gluu/src/oxAuth/Model/src/main/java/org/xdi/oxauth/model/jws/ECDSASigner.java