org.keycloak.crypto

public Class PublicKeysWrapper

Class Inheritance

extends Object

java.lang.Object
org.keycloak.crypto.PublicKeysWrapper

Imports

java.util.Collections, .List, .Objects, java.util.function.Predicate, java.util.stream.Collectors, .Stream

Author: Marek Posolda

Field Summary

Modifier and Type	Field and Description
public static final PublicKeysWrapper	EMPTY
private final List<KeyWrapper>	keys

Constructor Summary

Access	Constructor and Description
public	PublicKeysWrapper(List<KeyWrapper> keys)

Method Summary

Modifier and Type	Method and Description
public KeyWrapper	Returns: `KeyWrapper` matching given parameters getKeyByKidAndAlg(String rfc7517 KID parameter kid, String rfc7517 alg parameter alg) Find an appropriate key given a KID and algorithm.
public KeyWrapper	Returns: The first key that matches the predicate or null getKeyByPredicate(Predicate<KeyWrapper> The predicate predicate) Returns the first key that matches the predicate.
public List<KeyWrapper>	getKeys()
public List<String>	getKids()

Inherited from java.lang.Object:: clone equals finalize getClass hashCode notify notifyAll toString wait wait wait

Field Detail

EMPTY	back to summary
public static final PublicKeysWrapper EMPTY

keys	back to summary
private final List<KeyWrapper> keys

Constructor Detail

PublicKeysWrapper	back to summary
public PublicKeysWrapper(List<KeyWrapper> keys)

Method Detail

getKeyByKidAndAlg back to summary

getKeyByKidAndAlg	back to summary
public KeyWrapper getKeyByKidAndAlg(String kid, String alg) Find an appropriate key given a KID and algorithm. Prefer matching on both parameters, but may partially match on KID only. Or if KID is not provided, the algorithm. Will use a flagged default client certificate otherwise, if a match is not found. Parameters kid:String rfc7517 KID parameter alg:String rfc7517 alg parameter Returns:KeyWrapper `KeyWrapper` matching given parameters

public KeyWrapper getKeyByKidAndAlg(String kid, String alg)

Find an appropriate key given a KID and algorithm. Prefer matching on both parameters, but may partially match on KID only. Or if KID is not provided, the algorithm. Will use a flagged default client certificate otherwise, if a match is not found.

Parameters

kid:String: rfc7517 KID parameter
alg:String: rfc7517 alg parameter

Returns:KeyWrapper

KeyWrapper matching given parameters

getKeyByPredicate	back to summary
public KeyWrapper getKeyByPredicate(Predicate<KeyWrapper> predicate) Returns the first key that matches the predicate. Parameters predicate:Predicate<KeyWrapper> The predicate Returns:KeyWrapper The first key that matches the predicate or null

getKeyByPredicate

back to summary

public KeyWrapper getKeyByPredicate(Predicate<KeyWrapper> predicate)

Returns the first key that matches the predicate.

Parameters

predicate:Predicate<KeyWrapper>: The predicate

Returns:KeyWrapper

The first key that matches the predicate or null

getKeys	back to summary
public List<KeyWrapper> getKeys()

getKids	back to summary
public List<String> getKids()