Package org.keycloak.sdjwt

Class SdJwt

java.lang.Object

org.keycloak.sdjwt.SdJwt

public class SdJwt
extends Object

Main entry class for selective disclosure jwt (SD-JWT).

Author:

Francis Pouatcha

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	SdJwt.Builder

Field Summary

Fields

Modifier and Type	Field	Description
static final String	DELIMITER

Method Summary

Modifier and Type	Method	Description
com.fasterxml.jackson.databind.JsonNode	asNestedPayload()	Prepare to a nested payload to this SD-JWT.
static SdJwt.Builder	builder()
List<String>	getDisclosures()
IssuerSignedJWT	getIssuerSignedJWT()
String	toSdJwtString()
String	toString()
void	verify(List<SignatureVerifierContext> issuerVerifyingKeys, IssuerSignedJwtVerificationOpts verificationOpts)	Verifies SD-JWT as to whether the Issuer-signed JWT's signature and disclosures are valid.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Field Details

DELIMITER

public static final String DELIMITER

See Also:

• Constant Field Values

Method Details

asNestedPayload

public com.fasterxml.jackson.databind.JsonNode asNestedPayload()

Prepare to a nested payload to this SD-JWT.

dropping the algo claim.

Parameters:

nestedSdJwt -

Returns:

toSdJwtString

public String toSdJwtString()

toString

public String toString()

Overrides:

toString in class Object

getIssuerSignedJWT

public IssuerSignedJWT getIssuerSignedJWT()

getDisclosures

public List<String> getDisclosures()

verify

public void verify(List<SignatureVerifierContext> issuerVerifyingKeys,
 IssuerSignedJwtVerificationOpts verificationOpts)
            throws VerificationException

Verifies SD-JWT as to whether the Issuer-signed JWT's signature and disclosures are valid.

Parameters:

issuerVerifyingKeys - Verifying keys for validating the Issuer-signed JWT. The caller is responsible for establishing trust in that the keys belong to the intended issuer.

verificationOpts - Options to parameterize the Issuer-Signed JWT verification.

Throws:

VerificationException - if verification failed

builder

public static SdJwt.Builder builder()