Package org.keycloak.authorization.client.util.crypto

Class AuthzClientCryptoProvider

java.lang.Object

org.keycloak.authorization.client.util.crypto.AuthzClientCryptoProvider

All Implemented Interfaces:

CryptoProvider

public class AuthzClientCryptoProvider
extends Object
implements CryptoProvider

Simple crypto provider to be used with the authz-client.

Author:

rmartinc

Constructor Summary

Constructors

Constructor	Description
AuthzClientCryptoProvider()

Method Summary

Modifier and Type	Method	Description
ECParameterSpec	createECParams(String curveName)	Create the param spec for the EC curve
Cipher	getAesCbcCipher()
Cipher	getAesGcmCipher()
<T> T	getAlgorithmProvider(Class<T> clazz, String algorithm)	Get some algorithm provider implementation.
Provider	getBouncyCastleProvider()
CertificateUtilsProvider	getCertificateUtils()	Get CertificateUtils implementation.
CertPathBuilder	getCertPathBuilder()
CertStore	getCertStore(CollectionCertStoreParameters collectionCertStoreParameters)
ECDSACryptoProvider	getEcdsaCryptoProvider()
UserIdentityExtractorProvider	getIdentityExtractorProvider()
KeyFactory	getKeyFactory(String algorithm)
KeyPairGenerator	getKeyPairGen(String algorithm)
KeyStore	getKeyStore(KeystoreUtil.KeystoreFormat format)
<T> T	getOCSPProver(Class<T> clazz)
PemUtilsProvider	getPemUtils()	Get PEMUtils implementation.
SecretKeyFactory	getSecretKeyFact(String keyAlgorithm)
Signature	getSignature(String sigAlgName)
CertificateFactory	getX509CertFactory()
int	order()	Order of this provider.
SSLSocketFactory	wrapFactoryForTruststore(SSLSocketFactory delegate)	Wrap given SSLSocketFactory and decorate it with some additional functionality.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.keycloak.common.crypto.CryptoProvider

getSupportedKeyStoreTypes, getSupportedRsaKeySizes

Constructor Details

AuthzClientCryptoProvider

public AuthzClientCryptoProvider()

Method Details

getBouncyCastleProvider

public Provider getBouncyCastleProvider()

Specified by:

getBouncyCastleProvider in interface CryptoProvider

Returns:

BouncyCastle security provider. Can be either non-FIPS or FIPS based provider

order

public int order()

Description copied from interface: CryptoProvider

Order of this provider. This allows to specify which CryptoProvider will have preference in case that more of them are on the classpath. The higher number has preference over the lower number

Specified by:

order in interface CryptoProvider

getAlgorithmProvider

public <T> T getAlgorithmProvider(Class<T> clazz,
 String algorithm)

Description copied from interface: CryptoProvider

Get some algorithm provider implementation. Returned implementation can be dependent according to if we have non-fips bouncycastle or fips bouncycastle on the classpath.

Specified by:

getAlgorithmProvider in interface CryptoProvider

Parameters:

clazz - Returned class.

algorithm - Type of the algorithm, which we want to return

Returns:

getCertificateUtils

public CertificateUtilsProvider getCertificateUtils()

Description copied from interface: CryptoProvider

Get CertificateUtils implementation. Returned implementation can be dependent according to if we have non-fips bouncycastle or fips bouncycastle on the classpath.

Specified by:

getCertificateUtils in interface CryptoProvider

Returns:

getPemUtils

public PemUtilsProvider getPemUtils()

Description copied from interface: CryptoProvider

Get PEMUtils implementation. Returned implementation can be dependent according to if we have non-fips bouncycastle or fips bouncycastle on the classpath.

Specified by:

getPemUtils in interface CryptoProvider

Returns:

getOCSPProver

public <T> T getOCSPProver(Class<T> clazz)

Specified by:

getOCSPProver in interface CryptoProvider

getIdentityExtractorProvider

public UserIdentityExtractorProvider getIdentityExtractorProvider()

Specified by:

getIdentityExtractorProvider in interface CryptoProvider

getEcdsaCryptoProvider

public ECDSACryptoProvider getEcdsaCryptoProvider()

Specified by:

getEcdsaCryptoProvider in interface CryptoProvider

createECParams

public ECParameterSpec createECParams(String curveName)

Description copied from interface: CryptoProvider

Create the param spec for the EC curve

Specified by:

createECParams in interface CryptoProvider

Returns:

getKeyPairGen

public KeyPairGenerator getKeyPairGen(String algorithm)
                               throws NoSuchAlgorithmException,
NoSuchProviderException

Specified by:

getKeyPairGen in interface CryptoProvider

Throws:

NoSuchAlgorithmException

NoSuchProviderException

getKeyFactory

public KeyFactory getKeyFactory(String algorithm)
                         throws NoSuchAlgorithmException,
NoSuchProviderException

Specified by:

getKeyFactory in interface CryptoProvider

Throws:

NoSuchAlgorithmException

NoSuchProviderException

getAesCbcCipher

public Cipher getAesCbcCipher()
                       throws NoSuchAlgorithmException,
NoSuchProviderException,
NoSuchPaddingException

Specified by:

getAesCbcCipher in interface CryptoProvider

Throws:

NoSuchAlgorithmException

NoSuchProviderException

NoSuchPaddingException

getAesGcmCipher

public Cipher getAesGcmCipher()
                       throws NoSuchAlgorithmException,
NoSuchProviderException,
NoSuchPaddingException

Specified by:

getAesGcmCipher in interface CryptoProvider

Throws:

NoSuchAlgorithmException

NoSuchProviderException

NoSuchPaddingException

getSecretKeyFact

public SecretKeyFactory getSecretKeyFact(String keyAlgorithm)
                                  throws NoSuchAlgorithmException,
NoSuchProviderException

Specified by:

getSecretKeyFact in interface CryptoProvider

Throws:

NoSuchAlgorithmException

NoSuchProviderException

getKeyStore

public KeyStore getKeyStore(KeystoreUtil.KeystoreFormat format)
                     throws KeyStoreException,
NoSuchProviderException

Specified by:

getKeyStore in interface CryptoProvider

Throws:

KeyStoreException

NoSuchProviderException

getX509CertFactory

public CertificateFactory getX509CertFactory()
                                      throws CertificateException,
NoSuchProviderException

Specified by:

getX509CertFactory in interface CryptoProvider

Throws:

CertificateException

NoSuchProviderException

getCertStore

public CertStore getCertStore(CollectionCertStoreParameters collectionCertStoreParameters)
                       throws InvalidAlgorithmParameterException,
NoSuchAlgorithmException,
NoSuchProviderException

Specified by:

getCertStore in interface CryptoProvider

Throws:

InvalidAlgorithmParameterException

NoSuchAlgorithmException

NoSuchProviderException

getCertPathBuilder

public CertPathBuilder getCertPathBuilder()
                                   throws NoSuchAlgorithmException,
NoSuchProviderException

Specified by:

getCertPathBuilder in interface CryptoProvider

Throws:

NoSuchAlgorithmException

NoSuchProviderException

getSignature

public Signature getSignature(String sigAlgName)
                       throws NoSuchAlgorithmException,
NoSuchProviderException

Specified by:

getSignature in interface CryptoProvider

Throws:

NoSuchAlgorithmException

NoSuchProviderException

wrapFactoryForTruststore

public SSLSocketFactory wrapFactoryForTruststore(SSLSocketFactory delegate)

Description copied from interface: CryptoProvider

Wrap given SSLSocketFactory and decorate it with some additional functionality. This method is used in the context of truststore (where Keycloak is SSL client)

Specified by:

wrapFactoryForTruststore in interface CryptoProvider

Parameters:

delegate - The original factory to wrap. Usually default java SSLSocketFactory

Returns:

decorated factory