Package net.shibboleth.oidc.security.jose.impl

Class DefaultDataEncryptionAlgorithmsLookupStrategy

java.lang.Object

net.shibboleth.oidc.security.impl.AbstractEncryptionAlgorithmsLookupStrategy

net.shibboleth.oidc.security.jose.impl.DefaultDataEncryptionAlgorithmsLookupStrategy

All Implemented Interfaces:

BiFunction<CriteriaSet,Predicate<String>,List<String>>

Direct Known Subclasses:

ClientInformationDataEncryptionAlgorithmsLookupStrategy, ProviderMetadataDataEncryptionAlgorithmsLookupStrategy

public class DefaultDataEncryptionAlgorithmsLookupStrategy
extends AbstractEncryptionAlgorithmsLookupStrategy

A BiFunction which pulls data encryption (content encryption) algorithms to use from the encryption configuration and filters them. Algorithms are removed (filtered) if not supported by the runtime or are explicitly excluded or not included.

Since:

2.2.0

Constructor Summary

Constructors

Modifier	Constructor	Description
protected	DefaultDataEncryptionAlgorithmsLookupStrategy(AlgorithmRegistry registry)	Constructor.

Method Summary

Modifier and Type	Method	Description
List<String>	apply(CriteriaSet criteria, Predicate<String> includeExcludePredicate)
protected List<String>	getDataEncryptionAlgorithmsFromConfiguration(CriteriaSet criteria, Predicate<String> includeExcludePredicate)	Get the data encryption 'enc' algorithms from the EncryptionConfiguration inside the criteria set.

Methods inherited from class net.shibboleth.oidc.security.impl.AbstractEncryptionAlgorithmsLookupStrategy

findAlgorithmIntersection, getAlgorithmRegistry, getAlgorithmRuntimeSupportedPredicate

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface java.util.function.BiFunction

andThen

Constructor Detail

DefaultDataEncryptionAlgorithmsLookupStrategy

protected DefaultDataEncryptionAlgorithmsLookupStrategy(@Nullable
                                                        AlgorithmRegistry registry)

Constructor.

Parameters:

registry - the algorithm registry to use when resolving algorithm URIs. Can be null to use the global registry.

Method Detail

apply

@Nonnull
public List<String> apply(@Nonnull
                          CriteriaSet criteria,
                          @Nonnull
                          Predicate<String> includeExcludePredicate)

getDataEncryptionAlgorithmsFromConfiguration

@Nonnull
protected List<String> getDataEncryptionAlgorithmsFromConfiguration(@Nonnull
                                                                    CriteriaSet criteria,
                                                                    @Nonnull
                                                                    Predicate<String> includeExcludePredicate)

Get the data encryption 'enc' algorithms from the EncryptionConfiguration inside the criteria set.

Parameters:

criteria - to pull out the EncryptionConfiguration

includeExcludePredicate - the include and exclude predicates to filter the credentials with

Returns:

the data/content encryption algorithms from the configuration, an empty list otherwise