Package net.shibboleth.oidc.profile.config

Class JSONSecurityConfiguration

java.lang.Object
org.opensaml.security.config.BasicSecurityConfiguration
net.shibboleth.oidc.profile.config.JSONSecurityConfiguration
All Implemented Interfaces:
Component, IdentifiableComponent, IdentifiedComponent, SecurityConfiguration
public class JSONSecurityConfiguration extends BasicSecurityConfiguration
Class extends SecurityConfiguration to support separate configuration for various encryption and signature validation operations.
Since:
2.2.0

  • Field Details

    • jwtDecryptConfig

      @Nullable private DecryptionConfiguration jwtDecryptConfig
      Configuration used when decrypting JWE tokens.

    • jwtEncryptConfig

      @Nullable private EncryptionConfiguration jwtEncryptConfig
      Configuration used when encrypting JWE tokens.

    • jwtSignatureSigningConfig

      @Nullable private SignatureSigningConfiguration jwtSignatureSigningConfig
      Configuration used when JWS tokens.

    • jwtSignatureValidationConfig

      @Nullable private SignatureValidationConfiguration jwtSignatureValidationConfig
      Configuration used when validating JWS signatures.

  • Constructor Details

    • JSONSecurityConfiguration

      public JSONSecurityConfiguration()
      Constructor.
      Since:
      3.1.0

    • JSONSecurityConfiguration

      public JSONSecurityConfiguration(@Nonnull @ParameterName(name="clockSkew") Duration skew, @Nonnull @ParameterName(name="idGenerator") IdentifierGenerationStrategy generator)
      Constructor.
      Parameters:
      skew - the clock skew, must be greater than 0
      generator - the identifier generator, must not be null
      Since:
      3.1.0

  • Method Details

    • setJwtDecryptionConfiguration

      public void setJwtDecryptionConfiguration(@Nullable DecryptionConfiguration config)
      Set the configuration used to decrypt JWE tokens.
      Parameters:
      config - configuration used when decrypting JWE tokens, or null

    • getJwtDecryptionConfiguration

      @Nullable public DecryptionConfiguration getJwtDecryptionConfiguration()
      Get the configuration used when decrypting JWE tokens.
      Returns:
      configuration used when decrypting id_tokens, or null

    • setJwtEncryptionConfiguration

      public void setJwtEncryptionConfiguration(@Nullable EncryptionConfiguration config)
      Set the configuration used to encrypt JWE tokens.
      Parameters:
      config - configuration used when encrypting JWE tokens, or null

    • getJwtEncryptionConfiguration

      @Nullable public EncryptionConfiguration getJwtEncryptionConfiguration()
      Get the configuration used when encrypting JWE tokens.
      Returns:
      configuration used when encrypting JWE tokens, or null

    • setJwtSignatureSigningConfiguration

      public void setJwtSignatureSigningConfiguration(@Nullable SignatureSigningConfiguration config)
      Set the configuration used when signing JWS tokens.
      Parameters:
      config - used when signing JWS tokens, or null

    • getJwtSignatureSigningConfiguration

      @Nullable public SignatureSigningConfiguration getJwtSignatureSigningConfiguration()
      Get the configuration used when signing JWS tokens.
      Returns:
      configuration used when signing JWS tokens, or null

    • setJwtSignatureValidationConfiguration

      public void setJwtSignatureValidationConfiguration(@Nullable SignatureValidationConfiguration config)
      Set the configuration used when validating JWS tokens.
      Parameters:
      config - used when validating JWS tokens, or null

    • getJwtSignatureValidationConfiguration

      @Nullable public SignatureValidationConfiguration getJwtSignatureValidationConfiguration()
      Get the configuration used when validating JWS tokens.
      Returns:
      configuration used when validating JWS tokens, or null