Package org.keycloak.protocol.oid4vc.issuance.signing

Class AbstractCredentialSigner<T>

java.lang.Object

org.keycloak.protocol.oid4vc.issuance.signing.AbstractCredentialSigner<T>

All Implemented Interfaces:

CredentialSigner<T>, org.keycloak.provider.Provider

Direct Known Subclasses:

JwtCredentialSigner, LDCredentialSigner, SdJwtCredentialSigner

public abstract class AbstractCredentialSigner<T>
extends Object
implements CredentialSigner<T>

Field Summary

Fields

Modifier and Type	Field	Description
protected final org.keycloak.models.KeycloakSession	keycloakSession

Constructor Summary

Constructors

Modifier	Constructor	Description
protected	AbstractCredentialSigner(org.keycloak.models.KeycloakSession keycloakSession)

Method Summary

Modifier and Type	Method	Description
protected org.keycloak.crypto.KeyWrapper	getKey(String keyId, String algorithm)	Returns the key stored under keyId, or the active key for the given jws algorithm.
protected org.keycloak.crypto.KeyWrapper	getKeyWithKidSubstitute(String keyId, String algorithm, String keyIdSubstitute)	Returns the key stored under keyId, or the active key for the given jws algorithm.
protected org.keycloak.crypto.SignatureSignerContext	getSigner(CredentialBuildConfig credentialBuildConfig)	Reconstruct a signer matching a credential build configuration.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.keycloak.protocol.oid4vc.issuance.signing.CredentialSigner

close, signCredential

Field Details

keycloakSession

protected final org.keycloak.models.KeycloakSession keycloakSession

Constructor Details

AbstractCredentialSigner

protected AbstractCredentialSigner(org.keycloak.models.KeycloakSession keycloakSession)

Method Details

getSigner

protected org.keycloak.crypto.SignatureSignerContext getSigner(CredentialBuildConfig credentialBuildConfig)

Reconstruct a signer matching a credential build configuration.

getKeyWithKidSubstitute

protected org.keycloak.crypto.KeyWrapper getKeyWithKidSubstitute(String keyId,
 String algorithm,
 String keyIdSubstitute)

Returns the key stored under keyId, or the active key for the given jws algorithm. Additionally, the function clones the key retrieved from Keycloak, replacing the original key ID by the substitute one if provided. This makes it possible to have a custom kid header when producing JSON web signatures.

getKey

protected org.keycloak.crypto.KeyWrapper getKey(String keyId,
 String algorithm)

Returns the key stored under keyId, or the active key for the given jws algorithm.