Package org.keycloak.protocol.oid4vc.issuance.keybinding

Class StaticAttestationKeyResolver

java.lang.Object

org.keycloak.protocol.oid4vc.issuance.keybinding.StaticAttestationKeyResolver

All Implemented Interfaces:

AttestationKeyResolver

public class StaticAttestationKeyResolver
extends Object
implements AttestationKeyResolver

Simple static implementation of AttestationKeyResolver using an in-memory trusted map.

Author:

Rodrick Awambeng

Constructor Summary

Constructors

Constructor	Description
StaticAttestationKeyResolver(Map<String,JWK> trustedKeys)
StaticAttestationKeyResolver(Map<String,JWK> trustedKeys, List<X509TrustMaterial> x509TrustMaterials)

Method Summary

Modifier and Type	Method	Description
JWK	resolveKey(String kid, Map<String,Object> header, Map<String,Object> payload)	Resolves a JWK for the given kid, header, and payload context.
JWK	resolveX5c(List<String> x5c, Map<String,Object> header, Map<String,Object> payload)	Resolves and validates an attestation certificate chain.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

StaticAttestationKeyResolver

public StaticAttestationKeyResolver(Map<String,JWK> trustedKeys)

StaticAttestationKeyResolver

public StaticAttestationKeyResolver(Map<String,JWK> trustedKeys,
 List<X509TrustMaterial> x509TrustMaterials)

Method Details

resolveKey

public JWK resolveKey(String kid,
 Map<String,Object> header,
 Map<String,Object> payload)

Description copied from interface: AttestationKeyResolver

Resolves a JWK for the given kid, header, and payload context. Returns null if the key cannot be resolved or is not trusted.

Specified by:

resolveKey in interface AttestationKeyResolver

resolveX5c

public JWK resolveX5c(List<String> x5c,
 Map<String,Object> header,
 Map<String,Object> payload)

Description copied from interface: AttestationKeyResolver

Resolves and validates an attestation certificate chain. Returning null means that none of the configured trust sources trusts the chain.

Specified by:

resolveX5c in interface AttestationKeyResolver