Package com.nimbusds.openid.connect.provider.jwkset

Class JWKSetSpec

java.lang.Object

com.nimbusds.openid.connect.provider.jwkset.JWKSetSpec

public final class JWKSetSpec
extends Object

Connect2id server OpenID Provider / OAuth 2.0 authorisation server JWK set specification.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	JWKSetSpec.HMAC	HMAC key for the subject sessions, authorisation codes, etc.
static class	JWKSetSpec.RefreshTokenEncryption	AES/SIV key for refresh token payload encryption.
static class	JWKSetSpec.RotatedAccessTokenDirectEncryption	Rotated AES and ChaCha20 direct encryption keys for JWT-encoded access tokens.
static class	JWKSetSpec.RotatedECDHEncryption	Rotated ECDH encryption keys.
static class	JWKSetSpec.RotatedECSigning	Rotated signing EC keys.
static class	JWKSetSpec.RotatedEdDSASigning	Rotated signing EdDSA keys.
static class	JWKSetSpec.RotatedRSAEncryption	Rotated encryption RSA keys.
static class	JWKSetSpec.RotatedRSASigning	Rotated signing RSA keys.
static class	JWKSetSpec.SubjectEncryption	AES/SIV key for pairwise subject encryption.

Field Summary

Fields

Modifier and Type	Field	Description
static int[]	RSA_KEY_BIT_SIZES	The permitted RSA signing and encryption key bit sizes.

Constructor Summary

Constructors

Constructor	Description
JWKSetSpec()

Method Summary

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

RSA_KEY_BIT_SIZES

public static final int[] RSA_KEY_BIT_SIZES

The permitted RSA signing and encryption key bit sizes. The weak 1024-bit key requires a special jose.allowWeakKeys=true Connect2id server configuration to be accepted.

Constructor Detail

JWKSetSpec

public JWKSetSpec()