org.apache.knox.gateway.services.security.token

Class TokenUtils

java.lang.Object

org.apache.knox.gateway.services.security.token.TokenUtils

public class TokenUtils
extends Object

Field Summary

Fields

Modifier and Type	Field and Description
static String	SIGNING_HMAC_SECRET_ALIAS

Constructor Summary

Constructors

Constructor and Description
TokenUtils()

Method Summary

Modifier and Type	Method and Description
static String	getSignatureAlgorithm(String configuredSignatureAlgorithm, AliasService aliasService, String signingKeystoreName)
static String	getThumbprint(RSAPublicKey publicKey, String hashAlgorithm) Utility method to calculate public key thumbprint
static String	getTokenId(JWT token) Extract the unique Knox token identifier from the specified JWT's claim set.
static boolean	isServerManagedTokenStateEnabled(javax.servlet.FilterConfig filterConfig) Determine if server-managed token state is enabled for a provider, based on configuration.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

SIGNING_HMAC_SECRET_ALIAS

public static final String SIGNING_HMAC_SECRET_ALIAS

See Also:

Constant Field Values

Constructor Detail

TokenUtils

public TokenUtils()

Method Detail

getTokenId

public static String getTokenId(JWT token)

Extract the unique Knox token identifier from the specified JWT's claim set.

Parameters:

token - A JWT

Returns:

The unique identifier, or null.

isServerManagedTokenStateEnabled

public static boolean isServerManagedTokenStateEnabled(javax.servlet.FilterConfig filterConfig)

Determine if server-managed token state is enabled for a provider, based on configuration. The analysis includes checking the provider params and the gateway configuration.

Parameters:

filterConfig - A FilterConfig object.

Returns:

true, if server-managed state is enabled; Otherwise, false.

getSignatureAlgorithm

public static String getSignatureAlgorithm(String configuredSignatureAlgorithm,
                                           AliasService aliasService,
                                           String signingKeystoreName)
                                    throws AliasServiceException

Returns:

configuredSignatureAlgorithm if any OR the default HMAC algorithm if useHMAC(char[], String) is true; the default RSA algorithm otherwise

Throws:

AliasServiceException

getThumbprint

public static String getThumbprint(RSAPublicKey publicKey,
                                   String hashAlgorithm)
                            throws com.nimbusds.jose.JOSEException

Utility method to calculate public key thumbprint

Parameters:

publicKey -

hashAlgorithm -

Returns:

Throws:

com.nimbusds.jose.JOSEException