Module io.inverno.mod.security.jose
Package io.inverno.mod.security.jose.jwk
package io.inverno.mod.security.jose.jwk
JSON Web Key API.
-
ClassDescriptionAn asymmetric JSON Web Key based on asymmetric public and private keys.A
JWKStore
implementation that stores and read JWK from concurrent maps in memory.A JSON Web Key as defined by RFC7517.A JWK builder is used to build JSON Web Keys.Thrown by aJWKBuilder
to indicate an error while building a JWK.A JWK factory is used to build, read or generate a particular type of key.Thrown by aJWKGenerator
to indicate an error while generating a key.a JWK generator is used to generate JSON Web Keys.A JWK key resolver is used within aJWKBuilder
to resolve keys (symmetric, private or public keys) from key ids, X.509 SHA1 or X.509 SHA256 thumbprints typically specified in JOSE headers.PKIX Parameters used to validate X.509 certificate path.Thrown to indicate a general JWK processing error.Thrown by aJWKService
to indicate an error while reading a JWK.Thrown to indicate an error while resolving a JWK (e.g. resolve keys, resolve JWK urls, validate certificate paths, consistency checks...)The JWK Service is the main entry point for creating, reading and generating JSON Web Keys.A JWK Set as defined by RFC7517 Section 5A JWK store is used to store frequently used keys and make them available toJWKFactory
andJWKBuilder
so keys can be automatically resolved when building or reading JOSE objects.Thrown by aJWKStore
to indicate an erro accessing a JWK store.A JWK URL resolver is used withinJWKFactory
andJWKBuilder
to resolve JWK Set resources from JWK Set URL (i.e.A symmetric JSON Web Key based on a symmetric key.An asymmetric JSON Web key that supports X.509 JOSE header parameters: x5u, x5c, x5t and x5t#S256.X509JWKBuilder<A extends PublicKey,B extends PrivateKey, C extends X509JWK<A, B>, D extends X509JWKBuilder<A, B, C, D>> An X.509 JWK builder is used to build X.509 asymmetric JSON Web Keys that support X.509 JOSE header parameters: x5u, x5c, x5t and x5t#S256.An X.509 certificates path validator is used by aJWKBuilder
to validate a certificates chain.X509JWKFactory<A extends PublicKey,B extends PrivateKey, C extends X509JWK<A, B>, D extends X509JWKBuilder<A, B, C, D>, E extends X509JWKGenerator<A, B, C, E>> An X.509 JWK factory used to build, read or generate JSON Web Keys that support X.509 JOSE header parameters: x5u, x5c, x5t and x5t#S256.X509JWKGenerator<A extends PublicKey,B extends PrivateKey, C extends X509JWK<A, B>, D extends X509JWKGenerator<A, B, C, D>> An X.509 JWK generator used to generate JSON Web Keys that support X.509 JOSE header parameters: x5u, x5c, x5t and x5t#S256.