Package org.keycloak.crypto

Class AsymmetricSignatureSignerContext

java.lang.Object

org.keycloak.crypto.AsymmetricSignatureSignerContext

All Implemented Interfaces:

SignatureSignerContext

Direct Known Subclasses:

ECDSASignatureSignerContext, ServerAsymmetricSignatureSignerContext, ServerEdDSASignatureSignerContext

public class AsymmetricSignatureSignerContext
extends Object
implements SignatureSignerContext

Field Summary

Fields

Modifier and Type	Field	Description
protected final KeyWrapper	key

Constructor Summary

Constructors

Constructor	Description
AsymmetricSignatureSignerContext(KeyWrapper key)

Method Summary

Modifier and Type	Method	Description
String	getAlgorithm()
List<X509Certificate>	getCertificateChain()	Returns the X.509 certificate chain associated with this signer, if available.
String	getHashAlgorithm()
String	getKid()
byte[]	sign(byte[] data)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

key

protected final KeyWrapper key

Constructor Details

AsymmetricSignatureSignerContext

public AsymmetricSignatureSignerContext(KeyWrapper key)
                                 throws SignatureException

Throws:

SignatureException

Method Details

getKid

public String getKid()

Specified by:

getKid in interface SignatureSignerContext

getAlgorithm

public String getAlgorithm()

Specified by:

getAlgorithm in interface SignatureSignerContext

getHashAlgorithm

public String getHashAlgorithm()

Specified by:

getHashAlgorithm in interface SignatureSignerContext

sign

public byte[] sign(byte[] data)
            throws SignatureException

Specified by:

sign in interface SignatureSignerContext

Throws:

SignatureException

getCertificateChain

public List<X509Certificate> getCertificateChain()

Description copied from interface: SignatureSignerContext

Returns the X.509 certificate chain associated with this signer, if available. Returns null if certificates are not available (e.g., for MAC-based signers). This allows access to certificates without requiring a separate KeyWrapper parameter.

Specified by:

getCertificateChain in interface SignatureSignerContext

Returns:

List of X.509 certificates, or null if not available