Package org.keycloak.sdjwt

Class IssuerSignedJWT

java.lang.Object

org.keycloak.sdjwt.SdJws

org.keycloak.sdjwt.IssuerSignedJWT

public class IssuerSignedJWT
extends SdJws

Handle verifiable credentials (SD-JWT VC), enabling the parsing of existing VCs as well as the creation and signing of new ones. It integrates with Keycloak's SignatureSignerContext to facilitate the generation of issuer signature.

Author:

Francis Pouatcha

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	IssuerSignedJWT.Builder

Field Summary

Fields

Modifier and Type	Field	Description
static final String	CLAIM_NAME_SD_HASH_ALGORITHM
static final String	CLAIM_NAME_SELECTIVE_DISCLOSURE

Constructor Summary

Constructors

Constructor	Description
IssuerSignedJWT(com.fasterxml.jackson.databind.JsonNode payload, SignatureSignerContext signer, String jwsType)

Method Summary

Modifier and Type	Method	Description
static IssuerSignedJWT.Builder	builder()
static IssuerSignedJWT	fromJws(String jwsString)
Optional<com.fasterxml.jackson.databind.JsonNode>	getCnfClaim()	Returns `cnf` claim (establishing key binding)
String	getSdHashAlg()	Returns declared hash algorithm from SD hash claim.
void	verifySdHashAlgorithm()	Verifies that the SD hash algorithm is understood and deemed secure.

Methods inherited from class org.keycloak.sdjwt.SdJws

getHeader, getPayload, sign, toJws, verifyAge, verifyExpClaim, verifyIssClaim, verifyIssuedAtClaim, verifyNotBeforeClaim, verifySignature, verifyVctClaim

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

CLAIM_NAME_SELECTIVE_DISCLOSURE

public static final String CLAIM_NAME_SELECTIVE_DISCLOSURE

See Also:

• Constant Field Values

CLAIM_NAME_SD_HASH_ALGORITHM

public static final String CLAIM_NAME_SD_HASH_ALGORITHM

See Also:

• Constant Field Values

Constructor Details

IssuerSignedJWT

public IssuerSignedJWT(com.fasterxml.jackson.databind.JsonNode payload,
 SignatureSignerContext signer,
 String jwsType)

Method Details

fromJws

public static IssuerSignedJWT fromJws(String jwsString)

getCnfClaim

public Optional<com.fasterxml.jackson.databind.JsonNode> getCnfClaim()

Returns `cnf` claim (establishing key binding)

getSdHashAlg

public String getSdHashAlg()

Returns declared hash algorithm from SD hash claim.

verifySdHashAlgorithm

public void verifySdHashAlgorithm()
                           throws VerificationException

Verifies that the SD hash algorithm is understood and deemed secure.

Throws:

VerificationException - if not

builder

public static IssuerSignedJWT.Builder builder()