cz.ues.platform.security.uutoken.internal

Class MACTokenCreator

java.lang.Object

cz.ues.platform.security.uutoken.internal.MACTokenCreator

All Implemented Interfaces:

TokenCreator

public class MACTokenCreator
extends java.lang.Object
implements TokenCreator

This class uses MAC signing and validates the token against configured web service.

Since:

UES7-10

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
private static class	MACTokenCreator.InsecureHostnameVerifier Trustful implementation of the interface HostnameVerifier.
private static class	MACTokenCreator.InsecureTrustManager Trustful implementation of the interface X509TrustManager.

Field Summary

Fields

Modifier and Type	Field and Description
private static java.lang.String	AUTHORIZATION_HEADER Authorization token.
private static java.lang.String	DP Default password.
private static java.lang.String	HANDSHAKE_SERVICE URL path for Hand shake service used for JWT token validation.
private static java.lang.String	HASH_ALGORITHM Algorithm used for hashing.
private java.security.Key	key Key used for message authentication code algorithm initialization.
private static java.lang.String	KSP Key specification default password.
private static java.util.logging.Logger	LOGGER Logger instance.
private static java.lang.String	MAC_PASSWORD Key for password parameter.
private java.lang.String	macPassword MAC password.
private static java.lang.String	PAR_SERVER_URL Name of properties parameter used for obtaining host address.
private static java.lang.String	PREFIX Prefix for parameters configured in a properties file.
private static java.lang.String	SERVICE_URL Key for web service used for token validation.
private java.lang.String	serviceUrl URL of web service used to token validation.
private static int	STATUS_OK HTTP response status OK.
private static java.lang.String	TRUST_CERT Parameter name for trusting server certificate.
private static java.lang.String	TRUST_NAME Parameter name for trusting server name.

Constructor Summary

Constructors

Constructor and Description
MACTokenCreator()

Method Summary

Methods

Modifier and Type	Method and Description
java.lang.String	create(JWTClaimsSet claimsSet) Creates token value.
private java.lang.String	getConfigFilePath() Returns path to the ues-client.properties file which contains configuration used for calling a web service.
private java.lang.String	getValidationWebServiceURL() Determines URL of web service which is used for token validation.
private java.lang.String	hash(java.lang.String value) Generates hash from the specified value.
private void	checkRemotely(java.lang.String token) Checks specified token by invoking a web service.
void	init(java.util.Properties parameters) Initializes token verifier instance.
private boolean	isTrue(java.lang.String value) Determines whether the given value means boolean true value.
JWTClaimsSet	parse(java.lang.String token) Parse secured form of JWT token to JWTClaimsSet instance.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

LOGGER

private static final LOGGER

Logger instance.

HANDSHAKE_SERVICE

private static final HANDSHAKE_SERVICE

URL path for Hand shake service used for JWT token validation.

See Also:

Constant Field Values

PAR_SERVER_URL

private static final PAR_SERVER_URL

Name of properties parameter used for obtaining host address.

See Also:

Constant Field Values

PREFIX

private static final PREFIX

Prefix for parameters configured in a properties file.

See Also:

Constant Field Values

MAC_PASSWORD

private static final MAC_PASSWORD

Key for password parameter.

See Also:

Constant Field Values

SERVICE_URL

private static final SERVICE_URL

Key for web service used for token validation.

See Also:

Constant Field Values

DP

private static final DP

Default password.

See Also:

Constant Field Values

KSP

private static final KSP

Key specification default password.

See Also:

Constant Field Values

HASH_ALGORITHM

private static final HASH_ALGORITHM

Algorithm used for hashing.

See Also:

Constant Field Values

AUTHORIZATION_HEADER

private static final AUTHORIZATION_HEADER

Authorization token.

See Also:

Constant Field Values

TRUST_CERT

private static final TRUST_CERT

Parameter name for trusting server certificate.

See Also:

Constant Field Values

TRUST_NAME

private static final TRUST_NAME

Parameter name for trusting server name.

See Also:

Constant Field Values

STATUS_OK

private static final STATUS_OK

HTTP response status OK.

See Also:

Constant Field Values

macPassword

private macPassword

MAC password.

serviceUrl

private serviceUrl

URL of web service used to token validation.

key

private key

Key used for message authentication code algorithm initialization.

Constructor Detail

MACTokenCreator

public MACTokenCreator()

Method Detail

init

public void init(java.util.Properties parameters)

Initializes token verifier instance.

Specified by:

init in interface TokenCreator

Parameters:

parameters - Parameters for the token verifier instance.

Since:

UES7-10

See Also:

TokenCreator.init(java.util.Properties)

hash

private java.lang.String hash(java.lang.String value)

Generates hash from the specified value.

Parameters:

value - Value used as input data for hash function.

Returns:

Hash of the original value.

Since:

UES7-10

create

public java.lang.String create(JWTClaimsSet claimsSet)

Creates token value.

Specified by:

create in interface TokenCreator

Parameters:

claimsSet - Claims set to be used for token creation.

Returns:

Token value.

Since:

UES7-10

See Also:

cz.ues.platform.security.uutoken.internal.TokenCreator#create(com.nimbusds.jwt.JWTClaimsSet)

parse

public JWTClaimsSet parse(java.lang.String token)

Parse secured form of JWT token to JWTClaimsSet instance.

Specified by:

parse in interface TokenCreator

Parameters:

token - Value to be parsed.

Returns:

JWTClaimsSet instance.

Since:

UES7-10

See Also:

TokenCreator.parse(java.lang.String)

checkRemotely

private void checkRemotely(java.lang.String token)

Checks specified token by invoking a web service.

Parameters:

token - Token to be checked.

Since:

UES7-10

isTrue

private boolean isTrue(java.lang.String value)

Determines whether the given value means boolean true value.

Parameters:

value - Tested value.

Returns:

The value true if the value is "true"; otherwise false.

Since:

UES7-10

getConfigFilePath

private java.lang.String getConfigFilePath()

Returns path to the ues-client.properties file which contains configuration used for calling a web service.

Returns:

Path to the ues-client.properties file. The path contains ${ues.home} expression.

Since:

UES7-10

getValidationWebServiceURL

private java.lang.String getValidationWebServiceURL()

Determines URL of web service which is used for token validation.

Returns:

Web service URL.

Since:

UES7-10