com.nimbusds.openid.connect.provider.jwksetgen

Class FederationJWKSetGenerator

java.lang.Object

com.nimbusds.openid.connect.provider.jwksetgen.FederationJWKSetGenerator

public class FederationJWKSetGenerator
extends Object

JWK set generator for OpenID Connect Federation 1.0 entities.

Field Summary

Fields

Modifier and Type	Field and Description
static int	RSA_KEY_BIT_SIZE The RSA key bit size.

Constructor Summary

Constructors

Constructor and Description
FederationJWKSetGenerator()

Method Summary

Modifier and Type	Method and Description
com.nimbusds.jose.jwk.JWKSet	generate(Consumer<String> eventMessageSink) Generates a new JWK set for an OpenID Connect Federation 1.0 entity.
com.nimbusds.jose.jwk.JWKSet	generateAndPrefixNewKeys(com.nimbusds.jose.jwk.JWKSet oldJWKSet, Consumer<String> eventMessageSink) A generates a new set of signing keys and prefixes them to the specified OpenID Connect Federation 1.0 entity JWK set.
List<com.nimbusds.jose.jwk.JWK>	generateRotatingKeys(KeyIDs reservedKeyIDs, Consumer<String> eventMessageSink) Generates a new set of rotating signature keys for a OpenID Connect Federation 1.0 entity.
static com.nimbusds.jose.jwk.RSAKey	generateSigningRSAKey(String kid) Generates a 2048 bit RSA signing key with the specified key ID.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

RSA_KEY_BIT_SIZE

public static final int RSA_KEY_BIT_SIZE

The RSA key bit size.

See Also:

Constant Field Values

Constructor Detail

FederationJWKSetGenerator

public FederationJWKSetGenerator()

Method Detail

generateSigningRSAKey

public static com.nimbusds.jose.jwk.RSAKey generateSigningRSAKey(String kid)
                                                          throws com.nimbusds.jose.JOSEException

Generates a 2048 bit RSA signing key with the specified key ID.

Parameters:

kid - The key ID, null if not specified.

Returns:

The RSA key pair.

Throws:

com.nimbusds.jose.JOSEException

generateRotatingKeys

public List<com.nimbusds.jose.jwk.JWK> generateRotatingKeys(KeyIDs reservedKeyIDs,
                                                            Consumer<String> eventMessageSink)
                                                     throws com.nimbusds.jose.JOSEException

Generates a new set of rotating signature keys for a OpenID Connect Federation 1.0 entity.

Parameters:

reservedKeyIDs - The reserved key IDs, empty if none.

eventMessageSink - Optional sink for event messages, null if not specified.

Returns:

The generated rotating keys.

Throws:

com.nimbusds.jose.JOSEException

generate

public com.nimbusds.jose.jwk.JWKSet generate(Consumer<String> eventMessageSink)
                                      throws com.nimbusds.jose.JOSEException

Generates a new JWK set for an OpenID Connect Federation 1.0 entity.

Parameters:

eventMessageSink - Optional sink for event messages, null if not specified.

Returns:

The JWK set.

Throws:

com.nimbusds.jose.JOSEException

generateAndPrefixNewKeys

public com.nimbusds.jose.jwk.JWKSet generateAndPrefixNewKeys(com.nimbusds.jose.jwk.JWKSet oldJWKSet,
                                                             Consumer<String> eventMessageSink)
                                                      throws Exception

A generates a new set of signing keys and prefixes them to the specified OpenID Connect Federation 1.0 entity JWK set.

Parameters:

oldJWKSet - The OpenID Connect Federation 1.0 entity JWK set. Must not be null.

eventMessageSink - Optional sink for event messages, null if not specified.

Returns:

The updated JWK set.

Throws:

Exception