Module io.inverno.mod.security.jose
Package io.inverno.mod.security.jose

Interface JOSEConfiguration

public interface JOSEConfiguration

JOSE module configuration.

Since:
1.5
Author:
Jeremy Kuhn

  • Method Summary

    Modifier and Type
    Method
    Description
    URI
    key_store()
    The path to the key store.
    String
    key_store_password()
    The password of the key store.
    default String
    key_store_type()
    The type of key store.
    default boolean
    resolve_jku()
    Enable/disable JWK URL (i.e.
    default boolean
    resolve_x5u()
    Enable/disable X.509 certificate URL (i.e.
    default Set<URI>
    trusted_jku()
    The list of trusted JWK URLs for which keys should be trusted.
    default boolean
    validate_certificate()
    Enable/disable X.509 certificates chain validation (x5c or x5u).

  • Method Details

    • key_store

      URI key_store()

      The path to the key store.

      Returns:
      the key store URI

    • key_store_type

      default String key_store_type()

      The type of key store.

      Defaults to "JKS".

      Returns:
      the key store type

    • key_store_password

      String key_store_password()

      The password of the key store.

      Returns:
      a password

    • resolve_jku

      default boolean resolve_jku()

      Enable/disable JWK URL (i.e. jku) resolution.

      Defaults to false.

      Returns:
      true to resolve JWK URL, false otherwise

    • trusted_jku

      default Set<URI> trusted_jku()

      The list of trusted JWK URLs for which keys should be trusted.

      Defaults to the empty list.

      Returns:
      the list of trusted JWK URLs

    • resolve_x5u

      default boolean resolve_x5u()

      Enable/disable X.509 certificate URL (i.e. x5u) resolution.

      Defaults to false.

      Returns:
      true to resolve X.509 certificate URL, false otherwise

    • validate_certificate

      default boolean validate_certificate()

      Enable/disable X.509 certificates chain validation (x5c or x5u).

      Defaults to false.

      Returns:
      true to validate X.509 certificates chain, false otherwise