Package net.shibboleth.oidc.security.impl
package net.shibboleth.oidc.security.impl
Utility classes for security related functions.
-
ClassesClassDescriptionA base class for lookup strategies that return encryption algorithms and make use of the
AlgorithmRegistry.Base class for security message handlers which evaluate a JWT signature with a signature trust engine.BaseSignedJWTTrustEngine<TrustBasisType>ATrustEngineimplementation for Signed JSON Web Tokens.An action that uses aOIDCClientInformationto verify the encryption parameters of an incoming encrypted JWT are compliant with configuration in the client metadata.AMessageHandlerthat uses aOIDCClientInformationto verify the signature of a signed JWT uses expected algorithm.An implementation ofSignatureTrustEnginewhich evaluates the validity and trustworthiness of JWT signatures.Decrypt the located JWE using the decryption parameters stored in the security context.AMessageHandlerthat encrypts a JWT using theEncryptionParametersfound in theSecurityParametersContext.An implementation ofSignatureTrustEnginewhich evaluates the validity and trustworthiness of JWT signatures.Auxillary trust evaluator for evaluating an untrusted key or credential against a trusted key or credential.Supports decryption of encrypted JSON Web Tokens using the JSON Web Encryption standard.Supports signing a JSON Web Token (JWT) claims set using the JSON Web Signature standard using the algorithm and credential contained inside theSignatureSigningParameters.AMessageHandlerthat uses aTrustEngineto evaluate the signature of a signed JWT.Generic utility class for helping JWT signature validation.Message handler that signs a JWT and sets it back to the message context via an update consumer.ATrustEngineimplementation for Signed JSON Web Tokens.