Package org.apache.cxf.rs.security.httpsignature

Class HTTPSignatureConstants

java.lang.Object

org.apache.cxf.rt.security.rs.RSSecurityConstants

org.apache.cxf.rs.security.httpsignature.HTTPSignatureConstants

public final class HTTPSignatureConstants
extends org.apache.cxf.rt.security.rs.RSSecurityConstants

Some security constants to be used with HTTP Signature.

Field Summary

Fields

Modifier and Type	Field	Description
static final String	REQUEST_TARGET
static final String	RSSEC_HTTP_SIGNATURE_DIGEST_ALGORITHM	The digest algorithm to use when digesting the payload.
static final String	RSSEC_HTTP_SIGNATURE_IN_HEADERS	This is a list of String values which correspond to the list of HTTP headers that must be signed in the inbound request.
static final String	RSSEC_HTTP_SIGNATURE_KEY_ID	The signature key id.
static final String	RSSEC_HTTP_SIGNATURE_OUT_HEADERS	This is a list of String values which correspond to the list of HTTP headers that will be signed in the outbound request.

Fields inherited from class org.apache.cxf.rt.security.rs.RSSecurityConstants

RSSEC_ENABLE_REVOCATION, RSSEC_KEY_PSWD, RSSEC_KEY_PSWD_PROVIDER, RSSEC_KEY_STORE, RSSEC_KEY_STORE_ALIAS, RSSEC_KEY_STORE_FILE, RSSEC_KEY_STORE_PSWD, RSSEC_KEY_STORE_TYPE, RSSEC_SIGNATURE_ALGORITHM, RSSEC_SIGNATURE_IN_PROPS, RSSEC_SIGNATURE_OUT_PROPS, RSSEC_SIGNATURE_PROPS

Method Summary

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

REQUEST_TARGET

public static final String REQUEST_TARGET

See Also:

• Constant Field Values

RSSEC_HTTP_SIGNATURE_KEY_ID

public static final String RSSEC_HTTP_SIGNATURE_KEY_ID

The signature key id. This is a required configuration option on the outbound side.

See Also:

• Constant Field Values

RSSEC_HTTP_SIGNATURE_OUT_HEADERS

public static final String RSSEC_HTTP_SIGNATURE_OUT_HEADERS

This is a list of String values which correspond to the list of HTTP headers that will be signed in the outbound request. The default is to sign all message headers. In addition, by default a client will include "(request-target)" in the signed headers list.

See Also:

• Constant Field Values

RSSEC_HTTP_SIGNATURE_IN_HEADERS

public static final String RSSEC_HTTP_SIGNATURE_IN_HEADERS

This is a list of String values which correspond to the list of HTTP headers that must be signed in the inbound request. By default, a client request must sign "(request-target)". In addition, both a client request and service response must sign "digest", unless it is a GET request.

See Also:

• Constant Field Values

RSSEC_HTTP_SIGNATURE_DIGEST_ALGORITHM

public static final String RSSEC_HTTP_SIGNATURE_DIGEST_ALGORITHM

The digest algorithm to use when digesting the payload. The default algorithm if not specified is "SHA-256".

See Also:

• Constant Field Values