Package net.shibboleth.oidc.security.impl

Utility classes for security related functions.

Class Summary

Class	Description
AbstractEncryptionAlgorithmsLookupStrategy	A base class for lookup strategies that return encryption algorithms and make use of the AlgorithmRegistry.
BaseJWTSignatureSecurityHandler	Base class for security message handlers which evaluate a JWT signature with a signature trust engine.
BaseSignedJWTTrustEngine<TrustBasisType>	A TrustEngine implementation for Signed JSON Web Tokens.
CheckClientJWTDecryptionConfiguration	An action that uses a OIDCClientInformation to verify the encryption parameters of an incoming encrypted JWT are compliant with configuration in the client metadata.
CheckClientJWTSignatureAlgorithmHandler	A MessageHandler that uses a OIDCClientInformation to verify the signature of a signed JWT uses expected algorithm.
ClientInformationJWTTrustEngine	An implementation of SignatureTrustEngine which evaluates the validity and trustworthiness of JWT signatures.
DecryptJWE	Decrypt the located JWE using the decryption parameters stored in the security context.
EncryptJWTHandler	A MessageHandler that encrypts a JWT using the EncryptionParameters found in the SecurityParametersContext.
ExplicitKeySignedJWTTrustEngine	An implementation of SignatureTrustEngine which evaluates the validity and trustworthiness of JWT signatures.
ExplicitKeyTrustEvaluator	Auxillary trust evaluator for evaluating an untrusted key or credential against a trusted key or credential.
JWETokenDecrypter	Supports decryption of encrypted JSON Web Tokens using the JSON Web Encryption standard.
JWTMessageSignatureSecurityHandler	A MessageHandler that uses a TrustEngine to evaluate the signature of a signed JWT.
JWTSignatureValidationUtil	Generic utility class for helping JWT signature validation.
OIDCDecryptionParameters	Deprecated, for removal: This API element is subject to removal in a future version.
OIDCSignatureValidationParameters	Deprecated, for removal: This API element is subject to removal in a future version.
SignJWTHandler	Message handler that signs a JWT and sets it back to the message context via an update consumer.