Examples with ECDHEncrypter com.nimbusds.jose.crypto.ECDHEncrypter used on opensource projects

Example 1 with ECDHEncrypter

use of com.nimbusds.jose.crypto.ECDHEncrypter in project OpenID-Connect-Java-Spring-Server by mitreid-connect.

the class DefaultJWTEncryptionAndDecryptionService method buildEncryptersAndDecrypters.

/**
 * Builds all the encrypters and decrypters for this service based on the key map.
 * @throws
 * @throws InvalidKeySpecException
 * @throws NoSuchAlgorithmException
 * @throws JOSEException
 */
private void buildEncryptersAndDecrypters() throws NoSuchAlgorithmException, InvalidKeySpecException, JOSEException {
    for (Map.Entry<String, JWK> jwkEntry : keys.entrySet()) {
        String id = jwkEntry.getKey();
        JWK jwk = jwkEntry.getValue();
        if (jwk instanceof RSAKey) {
            // build RSA encrypters and decrypters
            // there should always at least be the public key
            RSAEncrypter encrypter = new RSAEncrypter((RSAKey) jwk);
            encrypter.getJCAContext().setProvider(BouncyCastleProviderSingleton.getInstance());
            encrypters.put(id, encrypter);
            if (jwk.isPrivate()) {
                // we can decrypt!
                RSADecrypter decrypter = new RSADecrypter((RSAKey) jwk);
                decrypter.getJCAContext().setProvider(BouncyCastleProviderSingleton.getInstance());
                decrypters.put(id, decrypter);
            } else {
                logger.warn("No private key for key #" + jwk.getKeyID());
            }
        } else if (jwk instanceof ECKey) {
            // build EC Encrypters and decrypters
            ECDHEncrypter encrypter = new ECDHEncrypter((ECKey) jwk);
            encrypter.getJCAContext().setProvider(BouncyCastleProviderSingleton.getInstance());
            encrypters.put(id, encrypter);
            if (jwk.isPrivate()) {
                // we can decrypt too
                ECDHDecrypter decrypter = new ECDHDecrypter((ECKey) jwk);
                decrypter.getJCAContext().setProvider(BouncyCastleProviderSingleton.getInstance());
                decrypters.put(id, decrypter);
            } else {
                logger.warn("No private key for key # " + jwk.getKeyID());
            }
        } else if (jwk instanceof OctetSequenceKey) {
            // build symmetric encrypters and decrypters
            DirectEncrypter encrypter = new DirectEncrypter((OctetSequenceKey) jwk);
            encrypter.getJCAContext().setProvider(BouncyCastleProviderSingleton.getInstance());
            DirectDecrypter decrypter = new DirectDecrypter((OctetSequenceKey) jwk);
            decrypter.getJCAContext().setProvider(BouncyCastleProviderSingleton.getInstance());
            encrypters.put(id, encrypter);
            decrypters.put(id, decrypter);
        } else {
            logger.warn("Unknown key type: " + jwk);
        }
    }
}