Examples with ECDHDecrypter com.nimbusds.jose.crypto.ECDHDecrypter used on opensource projects

Example 1 with ECDHDecrypter

use of com.nimbusds.jose.crypto.ECDHDecrypter in project gravitee-access-management by gravitee-io.

the class JWEEllipticCurveTest method encryptIdToken.

@Test
public void encryptIdToken() {
    try {
        // prepare encryption private & public key
        com.nimbusds.jose.jwk.ECKey jwk = new ECKeyGenerator(this.crv).generate();
        ECKey key = new ECKey();
        key.setKid("ecEnc");
        key.setUse("enc");
        key.setCrv(jwk.getCurve().getName());
        key.setX(jwk.getX().toString());
        key.setY(jwk.getY().toString());
        Client client = new Client();
        client.setIdTokenEncryptedResponseAlg(alg);
        client.setIdTokenEncryptedResponseEnc(enc);
        when(jwkService.getKeys(client)).thenReturn(Maybe.just(new JWKSet()));
        when(jwkService.filter(any(), any())).thenReturn(Maybe.just(key));
        TestObserver testObserver = jweService.encryptIdToken("JWT", client).test();
        testObserver.assertNoErrors();
        testObserver.assertComplete();
        testObserver.assertValue(jweString -> {
            JWEObject jwe = JWEObject.parse((String) jweString);
            jwe.decrypt(new ECDHDecrypter(jwk));
            return "JWT".equals(jwe.getPayload().toString());
        });
    } catch (JOSEException e) {
        fail(e.getMessage());
    }
}

Example 2 with ECDHDecrypter

use of com.nimbusds.jose.crypto.ECDHDecrypter in project gravitee-access-management by gravitee-io.

the class JWEEllipticCurveTest method encryptUserinfo.

@Test
public void encryptUserinfo() {
    try {
        // prepare encryption private & public key
        com.nimbusds.jose.jwk.ECKey jwk = new ECKeyGenerator(this.crv).generate();
        ECKey key = new ECKey();
        key.setKid("ecEnc");
        key.setUse("enc");
        key.setCrv(jwk.getCurve().getName());
        key.setX(jwk.getX().toString());
        key.setY(jwk.getY().toString());
        Client client = new Client();
        client.setUserinfoEncryptedResponseAlg(alg);
        client.setUserinfoEncryptedResponseEnc(enc);
        when(jwkService.getKeys(client)).thenReturn(Maybe.just(new JWKSet()));
        when(jwkService.filter(any(), any())).thenReturn(Maybe.just(key));
        TestObserver testObserver = jweService.encryptUserinfo("JWT", client).test();
        testObserver.assertNoErrors();
        testObserver.assertComplete();
        testObserver.assertValue(jweString -> {
            JWEObject jwe = JWEObject.parse((String) jweString);
            jwe.decrypt(new ECDHDecrypter(jwk));
            return "JWT".equals(jwe.getPayload().toString());
        });
    } catch (JOSEException e) {
        fail(e.getMessage());
    }
}

Example 3 with ECDHDecrypter

use of com.nimbusds.jose.crypto.ECDHDecrypter in project OpenID-Connect-Java-Spring-Server by mitreid-connect.

the class DefaultJWTEncryptionAndDecryptionService method buildEncryptersAndDecrypters.

/**
 * Builds all the encrypters and decrypters for this service based on the key map.
 * @throws
 * @throws InvalidKeySpecException
 * @throws NoSuchAlgorithmException
 * @throws JOSEException
 */
private void buildEncryptersAndDecrypters() throws NoSuchAlgorithmException, InvalidKeySpecException, JOSEException {
    for (Map.Entry<String, JWK> jwkEntry : keys.entrySet()) {
        String id = jwkEntry.getKey();
        JWK jwk = jwkEntry.getValue();
        if (jwk instanceof RSAKey) {
            // build RSA encrypters and decrypters
            // there should always at least be the public key
            RSAEncrypter encrypter = new RSAEncrypter((RSAKey) jwk);
            encrypter.getJCAContext().setProvider(BouncyCastleProviderSingleton.getInstance());
            encrypters.put(id, encrypter);
            if (jwk.isPrivate()) {
                // we can decrypt!
                RSADecrypter decrypter = new RSADecrypter((RSAKey) jwk);
                decrypter.getJCAContext().setProvider(BouncyCastleProviderSingleton.getInstance());
                decrypters.put(id, decrypter);
            } else {
                logger.warn("No private key for key #" + jwk.getKeyID());
            }
        } else if (jwk instanceof ECKey) {
            // build EC Encrypters and decrypters
            ECDHEncrypter encrypter = new ECDHEncrypter((ECKey) jwk);
            encrypter.getJCAContext().setProvider(BouncyCastleProviderSingleton.getInstance());
            encrypters.put(id, encrypter);
            if (jwk.isPrivate()) {
                // we can decrypt too
                ECDHDecrypter decrypter = new ECDHDecrypter((ECKey) jwk);
                decrypter.getJCAContext().setProvider(BouncyCastleProviderSingleton.getInstance());
                decrypters.put(id, decrypter);
            } else {
                logger.warn("No private key for key # " + jwk.getKeyID());
            }
        } else if (jwk instanceof OctetSequenceKey) {
            // build symmetric encrypters and decrypters
            DirectEncrypter encrypter = new DirectEncrypter((OctetSequenceKey) jwk);
            encrypter.getJCAContext().setProvider(BouncyCastleProviderSingleton.getInstance());
            DirectDecrypter decrypter = new DirectDecrypter((OctetSequenceKey) jwk);
            decrypter.getJCAContext().setProvider(BouncyCastleProviderSingleton.getInstance());
            encrypters.put(id, encrypter);
            decrypters.put(id, decrypter);
        } else {
            logger.warn("Unknown key type: " + jwk);
        }
    }
}