Package org.keycloak.broker.oid4vp

Class ResponseEncryption

java.lang.Object

org.keycloak.broker.oid4vp.ResponseEncryption

public final class ResponseEncryption
extends Object

Response encryption for the OID4VP direct_post.jwt response mode, following HAIP. The verifier hands the wallet a fresh EphemeralKey with every authorization request (ephemeral JWEConstants.ECDH_ES over secp256r1) and decrypts the wallet's JWE with it.

See Also:

• OID4VP 1.0 §8.3 — Encrypted Responses

Field Summary

Fields

Modifier and Type	Field	Description
static final List<String>	CONTENT_ENCRYPTION_ALGS
static final String	KEY_MANAGEMENT_ALG

Method Summary

Modifier and Type	Method	Description
static String	decrypt(ParsedResponse parsed, PrivateKey privateKey)
static ParsedResponse	parse(String compactJwe)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

KEY_MANAGEMENT_ALG

public static final String KEY_MANAGEMENT_ALG

See Also:

• Constant Field Values

CONTENT_ENCRYPTION_ALGS

public static final List<String> CONTENT_ENCRYPTION_ALGS

Method Details

parse

public static ParsedResponse parse(String compactJwe)
                            throws JWEException

Throws:

JWEException

decrypt

public static String decrypt(ParsedResponse parsed,
 PrivateKey privateKey)
                      throws JWEException

Throws:

JWEException