Package net.shibboleth.oidc.security.jose

Class DecryptionParameters

java.lang.Object
org.opensaml.xmlsec.AlgorithmPolicyParameters
net.shibboleth.oidc.security.jose.DecryptionParameters
public class DecryptionParameters extends AlgorithmPolicyParameters
Describes the decryption parameters the system is required to use to decrypt a JWE.
Since:
2.2.0

  • Field Details

    • additionalCriteria

      @Nonnull private final CriteriaSet additionalCriteria
      Carries additional criterion made available to the resolvers at runtime.

    • kekKeyCredentialResolver

      @Nullable private JOSEObjectCredentialResolver kekKeyCredentialResolver
      The encrypted content encrypted key's (CEK) credential resolver.

    • contentEncryptionKeyCredentialResolver

      @Nullable private JOSEObjectCredentialResolver contentEncryptionKeyCredentialResolver
      The content encryption key (CEK) resolver.

  • Constructor Details

    • DecryptionParameters

      public DecryptionParameters()
      Constructor .

  • Method Details

    • getAdditionalCriteria

      @Nonnull public CriteriaSet getAdditionalCriteria()
      Get the criteria set to add additional criterion too.
      Returns:
      the criteria set.

    • getContentEncryptionKeyCredentialResolver

      @Nullable public CredentialResolver getContentEncryptionKeyCredentialResolver()
      Get the CredentialResolver to use when processing the encrypted content.
      Returns:
      the KeyInfoCredentialResolver instance

    • setContentEncryptionKeyCredentialResolver

      public void setContentEncryptionKeyCredentialResolver(@Nullable JOSEObjectCredentialResolver resolver)
      Set the KeyInfoCredentialResolver to use when processing the encrypted content.
      Parameters:
      resolver - the CredentialResolver instance

    • getKEKCredentialResolver

      @Nullable public CredentialResolver getKEKCredentialResolver()
      Get the CredentialResolver to use when processing the EncryptedKey (the Key Encryption Key or KEK).
      Returns:
      the CredentialResolver instance

    • setKEKCredentialResolver

      public void setKEKCredentialResolver(@Nullable JOSEObjectCredentialResolver resolver)
      Set the CredentialResolver to use when processing the EncryptedKey (the Key Encryption Key or KEK).
      Parameters:
      resolver - the CredentialResolver instance