org.mitre.openid.connect.util.IdTokenHashUtils クラス

org.mitre.openid.connect.util.IdTokenHashUtils 連携図

静的公開メンバ関数
static Base64URL	getCodeHash (JWSAlgorithm signingAlg, String code)
static Base64URL	getAccessTokenHash (JWSAlgorithm signingAlg, OAuth2AccessTokenEntity token)
static Base64URL	getHash (JWSAlgorithm signingAlg, byte[] bytes)

静的非公開変数類
static final Logger	logger = LoggerFactory.getLogger(IdTokenHashUtils.class)

詳解

Utility class for generating hashes for access tokens and authorization codes to be included in an ID Token.

著者

Amanda Anganes

関数詳解

getAccessTokenHash()

static Base64URL org.mitre.openid.connect.util.IdTokenHashUtils.getAccessTokenHash ( JWSAlgorithm  signingAlg, OAuth2AccessTokenEntity  token  )

inlinestatic

Compute the SHA hash of a token

引数

signingAlg
token

戻り値

                                                                                                           {

                byte[] tokenBytes = token.getJwt().serialize().getBytes();

                return getHash(signingAlg, tokenBytes);

        }

getCodeHash()

static Base64URL org.mitre.openid.connect.util.IdTokenHashUtils.getCodeHash ( JWSAlgorithm  signingAlg, String  code  )

inlinestatic

Compute the SHA hash of an authorization code

引数

signingAlg
code

戻り値

                                                                                  {
                return getHash(signingAlg, code.getBytes());
        }

getHash()

static Base64URL org.mitre.openid.connect.util.IdTokenHashUtils.getHash ( JWSAlgorithm  signingAlg, byte []  bytes  )

inlinestatic

                                                                               {

                //Switch based on the given signing algorithm - use SHA-xxx with the same 'xxx' bitnumber
                //as the JWSAlgorithm to hash the token.
                String hashAlg = null;

                if (signingAlg.equals(JWSAlgorithm.HS256) || signingAlg.equals(JWSAlgorithm.ES256) || signingAlg.equals(JWSAlgorithm.RS256) || signingAlg.equals(JWSAlgorithm.PS256)) {
                        hashAlg = "SHA-256";
                }

                else if (signingAlg.equals(JWSAlgorithm.ES384) || signingAlg.equals(JWSAlgorithm.HS384) || signingAlg.equals(JWSAlgorithm.RS384) || signingAlg.equals(JWSAlgorithm.PS384)) {
                        hashAlg = "SHA-384";
                }

                else if (signingAlg.equals(JWSAlgorithm.ES512) || signingAlg.equals(JWSAlgorithm.HS512) || signingAlg.equals(JWSAlgorithm.RS512) || signingAlg.equals(JWSAlgorithm.PS512)) {
                        hashAlg = "SHA-512";
                }

                if (hashAlg != null) {

                        try {
                                MessageDigest hasher = MessageDigest.getInstance(hashAlg);
                                hasher.reset();
                                hasher.update(bytes);

                                byte[] hashBytes = hasher.digest();
                                byte[] hashBytesLeftHalf = Arrays.copyOf(hashBytes, hashBytes.length / 2);
                                Base64URL encodedHash = Base64URL.encode(hashBytesLeftHalf);

                                return encodedHash;

                        } catch (NoSuchAlgorithmException e) {

                                logger.error("No such algorithm error: ", e);

                        }

                }

                return null;
        }

メンバ詳解

logger

final Logger org.mitre.openid.connect.util.IdTokenHashUtils.logger = LoggerFactory.getLogger(IdTokenHashUtils.class)

staticprivate

Logger for this class

---

このクラス詳解は次のファイルから抽出されました:

• D:/AppData/OpenId/mitreid-connect/src/openid-connect-server/src/main/java/org/mitre/openid/connect/util/IdTokenHashUtils.java