Package net.shibboleth.oidc.security.jose.impl

Class BasicDecryptionConfiguration

java.lang.Object

org.opensaml.xmlsec.impl.BasicAlgorithmPolicyConfiguration

net.shibboleth.oidc.security.jose.impl.BasicDecryptionConfiguration

All Implemented Interfaces:

DecryptionConfiguration, AlgorithmPolicyConfiguration

public class BasicDecryptionConfiguration
extends BasicAlgorithmPolicyConfiguration
implements DecryptionConfiguration

Basic implementation of DecryptionConfiguration for handling JWEs.

Since:

2.2.0

Nested Class Summary

Nested classes/interfaces inherited from interface org.opensaml.xmlsec.AlgorithmPolicyConfiguration

AlgorithmPolicyConfiguration.Precedence

Field Summary

Fields

Modifier and Type	Field	Description
private JOSEObjectCredentialResolver	contentEncryptionKeyCredentialResolver	The content encryption key (CEK) resolver.
private JOSEObjectCredentialResolver	kekKeyCredentialResolver	The EncryptedKey's credential resolver.

Fields inherited from class org.opensaml.xmlsec.impl.BasicAlgorithmPolicyConfiguration

DEFAULT_PRECEDENCE

Constructor Summary

Constructors

Constructor	Description
BasicDecryptionConfiguration()

Method Summary

Modifier and Type	Method	Description
JOSEObjectCredentialResolver	getContentEncryptionKeyCredentialResolver()	Get the CredentialResolver to use when processing the encrypted content.
JOSEObjectCredentialResolver	getKEKCredentialResolver()	Get the CredentialResolver to use when processing the EncryptedKey (the Key Encryption Key or KEK).
void	setContentEncryptionKeyCredentialResolver(JOSEObjectCredentialResolver resolver)	Set the KeyInfoCredentialResolver to use when processing the encrypted content.
void	setKEKCredentialResolver(JOSEObjectCredentialResolver resolver)	Set the CredentialResolver to use when processing the EncryptedKey (the Key Encryption Key or KEK).

Methods inherited from class org.opensaml.xmlsec.impl.BasicAlgorithmPolicyConfiguration

getExcludedAlgorithms, getIncludedAlgorithms, getIncludeExcludePrecedence, isExcludeMerge, isIncludeMerge, setExcludedAlgorithms, setExcludeMerge, setIncludedAlgorithms, setIncludeExcludePrecedence, setIncludeMerge

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.opensaml.xmlsec.AlgorithmPolicyConfiguration

getExcludedAlgorithms, getIncludedAlgorithms, getIncludeExcludePrecedence, isExcludeMerge, isIncludeMerge

Field Details

kekKeyCredentialResolver

@Nullable
private JOSEObjectCredentialResolver kekKeyCredentialResolver

The EncryptedKey's credential resolver.

contentEncryptionKeyCredentialResolver

@Nullable
private JOSEObjectCredentialResolver contentEncryptionKeyCredentialResolver

The content encryption key (CEK) resolver.

Constructor Details

BasicDecryptionConfiguration

public BasicDecryptionConfiguration()

Method Details

getContentEncryptionKeyCredentialResolver

@Nullable
public JOSEObjectCredentialResolver getContentEncryptionKeyCredentialResolver()

Description copied from interface: DecryptionConfiguration

Get the CredentialResolver to use when processing the encrypted content.

Specified by:

getContentEncryptionKeyCredentialResolver in interface DecryptionConfiguration

Returns:

the KeyInfoCredentialResolver instance

setContentEncryptionKeyCredentialResolver

public void setContentEncryptionKeyCredentialResolver(@Nullable
 JOSEObjectCredentialResolver resolver)

Set the KeyInfoCredentialResolver to use when processing the encrypted content.

Parameters:

resolver - the CredentialResolver instance

getKEKCredentialResolver

@Nullable
public JOSEObjectCredentialResolver getKEKCredentialResolver()

Description copied from interface: DecryptionConfiguration

Get the CredentialResolver to use when processing the EncryptedKey (the Key Encryption Key or KEK).

Specified by:

getKEKCredentialResolver in interface DecryptionConfiguration

Returns:

the CredentialResolver instance

setKEKCredentialResolver

public void setKEKCredentialResolver(@Nullable
 JOSEObjectCredentialResolver resolver)

Set the CredentialResolver to use when processing the EncryptedKey (the Key Encryption Key or KEK).

Parameters:

resolver - the CredentialResolver instance