Uses of Interface
net.shibboleth.oidc.security.credential.JWKCredential

Packages that use JWKCredential

Package	Description
net.shibboleth.oidc.security	OIDC security .
net.shibboleth.oidc.security.credential	JWK Credentials.
net.shibboleth.oidc.security.impl	Utility classes for security related functions.
net.shibboleth.oidc.security.jose.impl	Implementation of cryptographic primitives that support JOSE objects.

Uses of JWKCredential in net.shibboleth.oidc.security

Methods in net.shibboleth.oidc.security that return JWKCredential

Modifier and Type	Method	Description
static JWKCredential	CredentialConversionUtil.copySymmetricCredentialWithNewSecret(JWKCredential credential, String newKid, SecretKey derivedKey)	Create a shallow copy of the input credential, replacing the secrete key and keyID with those supplied.

Methods in net.shibboleth.oidc.security with parameters of type JWKCredential

Modifier and Type	Method	Description
static JWKCredential	CredentialConversionUtil.copySymmetricCredentialWithNewSecret(JWKCredential credential, String newKid, SecretKey derivedKey)	Create a shallow copy of the input credential, replacing the secrete key and keyID with those supplied.

Uses of JWKCredential in net.shibboleth.oidc.security.credential

Subinterfaces of JWKCredential in net.shibboleth.oidc.security.credential

Modifier and Type	Interface	Description
interface	ExpiringJWKCredential	A credential that expires at some duration in seconds after 1970-01-01T0:0:0Z.

Classes in net.shibboleth.oidc.security.credential that implement JWKCredential

Modifier and Type	Class	Description
class	BasicExpiringJWKCredential	Basic implementation of an ExpiringJWKCredential.
class	BasicJWKCredential	A basic implementation of JWKCredential.

Methods in net.shibboleth.oidc.security.credential that return JWKCredential

Modifier and Type	Method	Description
static JWKCredential	JWKCredentialSupport.deriveSymmetricKeyForAlgAndEnc(JWKCredential credential, com.nimbusds.jose.JWEAlgorithm alg, com.nimbusds.jose.EncryptionMethod enc)	Derive a *new* symmetric key credential suitable for the given 'alg' and 'enc' algorithms.
JWKCredential	ClientSecretCredential.toEncryptionCredential(com.nimbusds.jose.JWEAlgorithm alg, com.nimbusds.jose.EncryptionMethod enc)	Create a symmetric encryption key derived from the client_secret and compatible with the key management mode and encryption algorithm specified.
JWKCredential	DefaultClientSecretCredential.toEncryptionCredential(com.nimbusds.jose.JWEAlgorithm alg, com.nimbusds.jose.EncryptionMethod enc)
JWKCredential	ClientSecretCredential.toSigningCredential()	Create a MAC singing key from the client_secret.
JWKCredential	DefaultClientSecretCredential.toSigningCredential()

Methods in net.shibboleth.oidc.security.credential with parameters of type JWKCredential

Modifier and Type	Method	Description
static JWKCredential	JWKCredentialSupport.deriveSymmetricKeyForAlgAndEnc(JWKCredential credential, com.nimbusds.jose.JWEAlgorithm alg, com.nimbusds.jose.EncryptionMethod enc)	Derive a *new* symmetric key credential suitable for the given 'alg' and 'enc' algorithms.

Uses of JWKCredential in net.shibboleth.oidc.security.impl

Fields in net.shibboleth.oidc.security.impl with type parameters of type JWKCredential

Modifier and Type	Field	Description
private List<JWKCredential>	OIDCSignatureValidationParameters.validationCredentials	Deprecated, for removal: This API element is subject to removal in a future version. The list of validation credentials.

Methods in net.shibboleth.oidc.security.impl that return types with arguments of type JWKCredential

Modifier and Type	Method	Description
List<JWKCredential>	OIDCSignatureValidationParameters.getValidationCredentials()	Deprecated, for removal: This API element is subject to removal in a future version. Get the list of validation credentials.

Methods in net.shibboleth.oidc.security.impl with parameters of type JWKCredential

Modifier and Type	Method	Description
private com.nimbusds.jose.EncryptionMethod	JWETokenDecrypter.validateContentEncryptionAlgorithm(com.nimbusds.jwt.EncryptedJWT encryptedObject, JWKCredential cred)	Validates the 'enc' algorithm in the header matches the encryption algorithm specified for the credential, and validates against the include and exclude algorithm URI lists.
private com.nimbusds.jose.JWEAlgorithm	JWETokenDecrypter.validateKeyManagmentAlgorithm(com.nimbusds.jwt.EncryptedJWT encryptedObject, JWKCredential cred)	If the credential contains algorithm 'alg' information, validate the 'alg' algorithm in the JWT JOSE header matches the algorithm specified for the credential.

Method parameters in net.shibboleth.oidc.security.impl with type arguments of type JWKCredential

Modifier and Type	Method	Description
static String	JWTSignatureValidationUtil.validateSignature(List<JWKCredential> credentials, com.nimbusds.jwt.SignedJWT signedJwt, String invalidJwtEventId)	Deprecated, for removal: This API element is subject to removal in a future version.

Uses of JWKCredential in net.shibboleth.oidc.security.jose.impl

Methods in net.shibboleth.oidc.security.jose.impl with parameters of type JWKCredential

Modifier and Type	Method	Description
private boolean	DefaultEncryptionParametersResolver.checkKeyWithAlgorithm(JWKCredential credential, com.nimbusds.jose.JWEAlgorithm algorithm)	Check the credential supports the algorithm given.