Examples with SignatureException org.gluu.oxauth.model.exception.SignatureException used on opensource projects

Example 1 with SignatureException

use of org.gluu.oxauth.model.exception.SignatureException in project oxAuth by GluuFederation.

the class RawAuthenticationService method checkSignature.

public void checkSignature(String appId, ClientData clientData, RawAuthenticateResponse rawAuthenticateResponse, byte[] publicKey) throws BadInputException {
    String rawClientData = clientData.getRawClientData();
    byte[] signedBytes = packBytesToSign(signatureVerification.hash(appId), rawAuthenticateResponse.getUserPresence(), rawAuthenticateResponse.getCounter(), signatureVerification.hash(rawClientData));
    log.debug("Packed bytes to sign in HEX '{}'", Hex.encodeHexString(signedBytes));
    log.debug("Signature from authentication response in HEX '{}'", Hex.encodeHexString(rawAuthenticateResponse.getSignature()));
    try {
        boolean isValid = signatureVerification.checkSignature(signatureVerification.decodePublicKey(publicKey), signedBytes, rawAuthenticateResponse.getSignature());
        if (!isValid) {
            throw new BadInputException("Signature is not valid");
        }
    } catch (SignatureException ex) {
        throw new BadInputException("Failed to checkSignature", ex);
    }
}

Example 2 with SignatureException

use of org.gluu.oxauth.model.exception.SignatureException in project oxAuth by GluuFederation.

the class RawRegistrationService method checkSignature.

public void checkSignature(String appId, ClientData clientData, RawRegisterResponse rawRegisterResponse) throws BadInputException {
    String rawClientData = clientData.getRawClientData();
    byte[] signedBytes = packBytesToSign(signatureVerification.hash(appId), signatureVerification.hash(rawClientData), rawRegisterResponse.getKeyHandle(), rawRegisterResponse.getUserPublicKey());
    try {
        signatureVerification.checkSignature(rawRegisterResponse.getAttestationCertificate(), signedBytes, rawRegisterResponse.getSignature());
    } catch (SignatureException ex) {
        throw new BadInputException("Failed to checkSignature", ex);
    }
}

Example 3 with SignatureException

use of org.gluu.oxauth.model.exception.SignatureException in project oxAuth by GluuFederation.

the class SHA256withECDSASignatureVerification method decodePublicKey.

@Override
public PublicKey decodePublicKey(byte[] encodedPublicKey) throws SignatureException {
    X9ECParameters curve = SECNamedCurves.getByName("secp256r1");
    ECPoint point = curve.getCurve().decodePoint(encodedPublicKey);
    try {
        return KeyFactory.getInstance("ECDSA").generatePublic(new ECPublicKeySpec(point, new ECParameterSpec(curve.getCurve(), curve.getG(), curve.getN(), curve.getH())));
    } catch (GeneralSecurityException ex) {
        throw new SignatureException(ex);
    }
}

Example 4 with SignatureException

use of org.gluu.oxauth.model.exception.SignatureException in project oxAuth by GluuFederation.

the class SHA256withECDSASignatureVerification method checkSignature.

@Override
public boolean checkSignature(PublicKey publicKey, byte[] signedBytes, byte[] signature) throws SignatureException {
    boolean isValid = false;
    try {
        Signature ecdsaSignature = Signature.getInstance("SHA256withECDSA", "BC");
        ecdsaSignature.initVerify(publicKey);
        ecdsaSignature.update(signedBytes);
        isValid = ecdsaSignature.verify(signature);
    } catch (GeneralSecurityException ex) {
        throw new SignatureException(ex);
    }
    return isValid;
}