Examples with SignatureVerifierContext org.keycloak.crypto.SignatureVerifierContext used on opensource projects

Example 6 with SignatureVerifierContext

use of org.keycloak.crypto.SignatureVerifierContext in project keycloak by keycloak.

the class AuthenticationManager method expireUserSessionCookie.

public static boolean expireUserSessionCookie(KeycloakSession session, UserSessionModel userSession, RealmModel realm, UriInfo uriInfo, HttpHeaders headers, ClientConnection connection) {
    try {
        // check to see if any identity cookie is set with the same session and expire it if necessary
        Cookie cookie = CookieHelper.getCookie(headers.getCookies(), KEYCLOAK_IDENTITY_COOKIE);
        if (cookie == null)
            return true;
        String tokenString = cookie.getValue();
        TokenVerifier<AccessToken> verifier = TokenVerifier.create(tokenString, AccessToken.class).realmUrl(Urls.realmIssuer(uriInfo.getBaseUri(), realm.getName())).checkActive(false).checkTokenType(false).withChecks(VALIDATE_IDENTITY_COOKIE);
        String kid = verifier.getHeader().getKeyId();
        String algorithm = verifier.getHeader().getAlgorithm().name();
        SignatureVerifierContext signatureVerifier = session.getProvider(SignatureProvider.class, algorithm).verifier(kid);
        verifier.verifierContext(signatureVerifier);
        AccessToken token = verifier.verify().getToken();
        UserSessionModel cookieSession = session.sessions().getUserSession(realm, token.getSessionState());
        if (cookieSession == null || !cookieSession.getId().equals(userSession.getId()))
            return true;
        expireIdentityCookie(realm, uriInfo, connection);
        return true;
    } catch (Exception e) {
        return false;
    }
}

Example 7 with SignatureVerifierContext

use of org.keycloak.crypto.SignatureVerifierContext in project keycloak by keycloak.

the class AccessTokenIntrospectionProvider method verifyAccessToken.

protected AccessToken verifyAccessToken(String token) {
    AccessToken accessToken;
    try {
        TokenVerifier<AccessToken> verifier = TokenVerifier.create(token, AccessToken.class).realmUrl(Urls.realmIssuer(session.getContext().getUri().getBaseUri(), realm.getName()));
        SignatureVerifierContext verifierContext = session.getProvider(SignatureProvider.class, verifier.getHeader().getAlgorithm().name()).verifier(verifier.getHeader().getKeyId());
        verifier.verifierContext(verifierContext);
        accessToken = verifier.verify().getToken();
    } catch (VerificationException e) {
        logger.debugf("JWT check failed: %s", e.getMessage());
        return null;
    }
    RealmModel realm = this.session.getContext().getRealm();
    return tokenManager.checkTokenValidForIntrospection(session, realm, accessToken, false) ? accessToken : null;
}