Package io.helidon.security.jwt.jwk

Class JwkEC

java.lang.Object

io.helidon.security.jwt.jwk.Jwk

io.helidon.security.jwt.jwk.JwkEC

public class JwkEC
extends Jwk

Elliptic curve JSON web key.

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	JwkEC.Builder Builder for JwkEC.

Field Summary

Fields

Modifier and Type	Field and Description
static java.lang.String	ALG_ES256 ECDSA using P-256 and SHA-256.
static java.lang.String	ALG_ES384 ECDSA using P-384 and SHA-384.
static java.lang.String	ALG_ES512 ECDSA using P-512 and SHA-512.
static java.lang.String	CURVE_P256 P-256 Curve.
static java.lang.String	CURVE_P384 P-384 Curve.
static java.lang.String	CURVE_P512 P-512 Curve.
static java.lang.String	PARAM_CURVE JWK parameter for EC curve.
static java.lang.String	PARAM_PRIVATE_KEY JWK parameter for private key.
static java.lang.String	PARAM_X_COORDINATE JWK parameter for X coordinate.
static java.lang.String	PARAM_X509_CHAIN JWK parameter for X.509 certificate chain array.
static java.lang.String	PARAM_X509_CHAIN_URL JWK parameter for X.509 certificate chain URL.
static java.lang.String	PARAM_X509_SHA_1 JWK parameter for SHA 1 Thumbprint of X.509 certificate.
static java.lang.String	PARAM_X509_SHA_256 JWK parameter for SHA 256 Thumbprint of X.509 certificate.
static java.lang.String	PARAM_Y_COODRINATE JWK parameter for X coordinate.
static java.lang.String	SECURITY_ALGORITHM The main Java security algorithm used.

Fields inherited from class io.helidon.security.jwt.jwk.Jwk

ALG_NONE, KEY_TYPE_EC, KEY_TYPE_OCT, KEY_TYPE_RSA, NONE_JWK, OPERATION_DECRYPT, OPERATION_DERIVE_BITS, OPERATION_DERIVE_KEY, OPERATION_ENCRYPT, OPERATION_SIGN, OPERATION_UNWRAP_KEY, OPERATION_VERIFY, OPERATION_WRAP_KEY, PARAM_ALGORITHM, PARAM_KEY_ID, PARAM_KEY_TYPE, PARAM_OPERATIONS, PARAM_USE, USE_ENCRYPTION, USE_SIGNATURE

Method Summary

Modifier and Type	Method and Description
static JwkEC.Builder	builder() Create a builder instance.
byte[]	doSign(byte[] bytesToSign)
boolean	doVerify(byte[] signedBytes, byte[] signatureToVerify)
static JwkEC	fromJson(JsonObject json) Create an instance from Json object.
java.util.Optional<java.util.List<java.security.cert.X509Certificate>>	getCertificateChain()
java.util.Optional<java.security.PrivateKey>	getPrivateKey()
java.security.PublicKey	getPublicKey()
java.util.Optional<byte[]>	getSha1Thumbprint()
java.util.Optional<byte[]>	getSha256Thumbprint()

Methods inherited from class io.helidon.security.jwt.jwk.Jwk

getAlgorithm, getKeyId, getKeyType, getOperations, getUsage, sign, toString, verifySignature

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Field Detail

SECURITY_ALGORITHM

public static final java.lang.String SECURITY_ALGORITHM

The main Java security algorithm used.

See Also:

Constant Field Values

ALG_ES256

public static final java.lang.String ALG_ES256

ECDSA using P-256 and SHA-256. See RFC 7518, section 7.1.2.

See Also:

Constant Field Values

ALG_ES384

public static final java.lang.String ALG_ES384

ECDSA using P-384 and SHA-384. See RFC 7518, section 7.1.2.

See Also:

Constant Field Values

ALG_ES512

public static final java.lang.String ALG_ES512

ECDSA using P-512 and SHA-512. See RFC 7518, section 7.1.2.

See Also:

Constant Field Values

CURVE_P256

public static final java.lang.String CURVE_P256

P-256 Curve. See RFC 7518, section 7.6.2.

See Also:

Constant Field Values

CURVE_P384

public static final java.lang.String CURVE_P384

P-384 Curve. See RFC 7518, section 7.6.2.

See Also:

Constant Field Values

CURVE_P512

public static final java.lang.String CURVE_P512

P-512 Curve. See RFC 7518, section 7.6.2.

See Also:

Constant Field Values

PARAM_CURVE

public static final java.lang.String PARAM_CURVE

JWK parameter for EC curve. See RFC 7518, section 6.2.1.1.

See Also:

CURVE_P256, CURVE_P384, CURVE_P512, Constant Field Values

PARAM_X_COORDINATE

public static final java.lang.String PARAM_X_COORDINATE

JWK parameter for X coordinate. See RFC 7518, section 6.2.1.2.

See Also:

Constant Field Values

PARAM_Y_COODRINATE

public static final java.lang.String PARAM_Y_COODRINATE

JWK parameter for X coordinate. See RFC 7518, section 6.2.1.3.

See Also:

Constant Field Values

PARAM_PRIVATE_KEY

public static final java.lang.String PARAM_PRIVATE_KEY

JWK parameter for private key. See RFC 7518, section 6.2.2.1.

See Also:

Constant Field Values

PARAM_X509_CHAIN_URL

public static final java.lang.String PARAM_X509_CHAIN_URL

JWK parameter for X.509 certificate chain URL. See RFC 7517, section 4.6.

See Also:

Constant Field Values

PARAM_X509_CHAIN

public static final java.lang.String PARAM_X509_CHAIN

JWK parameter for X.509 certificate chain array. See RFC 7517, section 4.7.

See Also:

Constant Field Values

PARAM_X509_SHA_1

public static final java.lang.String PARAM_X509_SHA_1

JWK parameter for SHA 1 Thumbprint of X.509 certificate. See RFC 7517, section 4.8.

See Also:

Constant Field Values

PARAM_X509_SHA_256

public static final java.lang.String PARAM_X509_SHA_256

JWK parameter for SHA 256 Thumbprint of X.509 certificate. See RFC 7517, section 4.9.

See Also:

Constant Field Values

Method Detail

builder

public static JwkEC.Builder builder()

Create a builder instance.

Returns:

builder ready to create a new JwkEC instance.

fromJson

public static JwkEC fromJson(JsonObject json)

Create an instance from Json object.

Parameters:

json - with definition of this EC web key

Returns:

new instance of this class constructed from json

See Also:

for generic method that can load any supported JWK type.

getPrivateKey

public java.util.Optional<java.security.PrivateKey> getPrivateKey()

getPublicKey

public java.security.PublicKey getPublicKey()

getCertificateChain

public java.util.Optional<java.util.List<java.security.cert.X509Certificate>> getCertificateChain()

getSha1Thumbprint

public java.util.Optional<byte[]> getSha1Thumbprint()

getSha256Thumbprint

public java.util.Optional<byte[]> getSha256Thumbprint()

doVerify

public boolean doVerify(byte[] signedBytes,
                        byte[] signatureToVerify)

doSign

public byte[] doSign(byte[] bytesToSign)