Package org.keycloak.crypto

Interface SignatureSignerContext

All Known Implementing Classes:

AsymmetricSignatureSignerContext, ECDSASignatureSignerContext, MacSignatureSignerContext, ServerAsymmetricSignatureSignerContext, ServerECDSASignatureSignerContext, ServerEdDSASignatureSignerContext, ServerMacSignatureSignerContext

public interface SignatureSignerContext

Method Summary

Modifier and Type	Method	Description
String	getAlgorithm()
default List<X509Certificate>	getCertificateChain()	Returns the X.509 certificate chain associated with this signer, if available.
String	getHashAlgorithm()
String	getKid()
byte[]	sign(byte[] data)

Method Details

getKid

String getKid()

getAlgorithm

String getAlgorithm()

getHashAlgorithm

String getHashAlgorithm()

sign

byte[] sign(byte[] data)
     throws SignatureException

Throws:

SignatureException

getCertificateChain

default List<X509Certificate> getCertificateChain()

Returns the X.509 certificate chain associated with this signer, if available. Returns null if certificates are not available (e.g., for MAC-based signers). This allows access to certificates without requiring a separate KeyWrapper parameter.

Returns:

List of X.509 certificates, or null if not available