Examples with JWK com.nimbusds.jose.jwk.JWK used on opensource projects

Example 41 with JWK

use of com.nimbusds.jose.jwk.JWK in project spring-security by spring-projects.

the class DefaultPasswordTokenResponseClientTests method getTokenResponseWhenAuthenticationPrivateKeyJwtThenFormParametersAreSent.

@Test
public void getTokenResponseWhenAuthenticationPrivateKeyJwtThenFormParametersAreSent() throws Exception {
    // @formatter:off
    String accessTokenSuccessResponse = "{\n" + "	\"access_token\": \"access-token-1234\",\n" + "   \"token_type\": \"bearer\",\n" + "   \"expires_in\": \"3600\"\n" + "}\n";
    // @formatter:on
    this.server.enqueue(jsonResponse(accessTokenSuccessResponse));
    // @formatter:off
    ClientRegistration clientRegistration = this.clientRegistration.clientAuthenticationMethod(ClientAuthenticationMethod.PRIVATE_KEY_JWT).build();
    // @formatter:on
    // Configure Jwt client authentication converter
    JWK jwk = TestJwks.DEFAULT_RSA_JWK;
    Function<ClientRegistration, JWK> jwkResolver = (registration) -> jwk;
    configureJwtClientAuthenticationConverter(jwkResolver);
    OAuth2PasswordGrantRequest passwordGrantRequest = new OAuth2PasswordGrantRequest(clientRegistration, this.username, this.password);
    this.tokenResponseClient.getTokenResponse(passwordGrantRequest);
    RecordedRequest recordedRequest = this.server.takeRequest();
    assertThat(recordedRequest.getHeader(HttpHeaders.AUTHORIZATION)).isNull();
    String formParameters = recordedRequest.getBody().readUtf8();
    assertThat(formParameters).contains("client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer");
    assertThat(formParameters).contains("client_assertion=");
}

Example 42 with JWK

use of com.nimbusds.jose.jwk.JWK in project spring-security by spring-projects.

the class ReactiveRemoteJWKSourceTests method getWhenMatchThenCreatesKeys.

@Test
public void getWhenMatchThenCreatesKeys() {
    given(this.matcher.matches(any())).willReturn(true);
    List<JWK> keys = this.source.get(this.selector).block();
    assertThat(keys).hasSize(2);
    JWK key1 = keys.get(0);
    assertThat(key1.getKeyID()).isEqualTo("1923397381d9574bb873202a90c32b7ceeaed027");
    assertThat(key1.getAlgorithm().getName()).isEqualTo("RS256");
    assertThat(key1.getKeyType()).isEqualTo(KeyType.RSA);
    assertThat(key1.getKeyUse()).isEqualTo(KeyUse.SIGNATURE);
    JWK key2 = keys.get(1);
    assertThat(key2.getKeyID()).isEqualTo("7ddf54d3032d1f0d48c3618892ca74c1ac30ad77");
    assertThat(key2.getAlgorithm().getName()).isEqualTo("RS256");
    assertThat(key2.getKeyType()).isEqualTo(KeyType.RSA);
    assertThat(key2.getKeyUse()).isEqualTo(KeyUse.SIGNATURE);
}

Example 43 with JWK

use of com.nimbusds.jose.jwk.JWK in project spring-security by spring-projects.

the class NimbusJwtEncoder method encode.

@Override
public Jwt encode(JwtEncoderParameters parameters) throws JwtEncodingException {
    Assert.notNull(parameters, "parameters cannot be null");
    JwsHeader headers = parameters.getJwsHeader();
    if (headers == null) {
        headers = DEFAULT_JWS_HEADER;
    }
    JwtClaimsSet claims = parameters.getClaims();
    JWK jwk = selectJwk(headers);
    headers = addKeyIdentifierHeadersIfNecessary(headers, jwk);
    String jws = serialize(headers, claims, jwk);
    return new Jwt(jws, claims.getIssuedAt(), claims.getExpiresAt(), headers.getHeaders(), claims.getClaims());
}

Example 44 with JWK

use of com.nimbusds.jose.jwk.JWK in project data-transfer-project by google.

the class JWEPublicKeySerializer method serialize.

private String serialize(PublicKey publicKey) throws SecurityException {
    String kid = UUID.randomUUID().toString();
    JWK jwk = new RSAKey.Builder((RSAPublicKey) publicKey).keyID(kid).build();
    return jwk.toString();
}