com.nimbusds.openid.connect.sdk.id

Class HashingSubjectIdentifierGenerator

java.lang.Object

com.nimbusds.openid.connect.sdk.id.PairwiseSubjectIdentifierGenerator

com.nimbusds.openid.connect.sdk.id.HashingSubjectIdentifierGenerator

public class HashingSubjectIdentifierGenerator
extends PairwiseSubjectIdentifierGenerator

SHA-256 based generator of pairwise subject identifiers.

Algorithm:

 sub = SHA-256 ( sector_identifier | local_account_id | salt )
 

Related specifications:

• OpenID Connect Core 1.0, section 8.1.

Field Summary

Fields

Modifier and Type	Field and Description
static String	HASH_ALGORITHM The hashing algorithm.

Constructor Summary

Constructors

Constructor and Description
HashingSubjectIdentifierGenerator(String salt) Creates a new SHA-256 based generator of pairwise subject identifiers.

Method Summary

Methods

Modifier and Type	Method and Description
Subject	generate(String sectorIdentifier, Subject localSub) Generates a new pairwise subject identifier from the specified sector identifier and local subject.
byte[]	saltBytes() Returns the salt bytes.

Methods inherited from class com.nimbusds.openid.connect.sdk.id.PairwiseSubjectIdentifierGenerator

generate

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

HASH_ALGORITHM

public static final String HASH_ALGORITHM

The hashing algorithm.

See Also:

Constant Field Values

Constructor Detail

HashingSubjectIdentifierGenerator

public HashingSubjectIdentifierGenerator(String salt)
                                  throws NoSuchAlgorithmException

Creates a new SHA-256 based generator of pairwise subject identifiers.

Parameters:

salt - The string to use for the salt. Must not be empty, blank or null.

Throws:

NoSuchAlgorithmException - If SHA-256 isn't supported by the underlying JVM.

Method Detail

saltBytes

public byte[] saltBytes()

Returns the salt bytes.

Returns:

The salt bytes.

generate

public Subject generate(String sectorIdentifier,
               Subject localSub)

Description copied from class: PairwiseSubjectIdentifierGenerator

Generates a new pairwise subject identifier from the specified sector identifier and local subject.

Specified by:

generate in class PairwiseSubjectIdentifierGenerator

Parameters:

sectorIdentifier - The sector identifier. Must not be null.

localSub - The local subject identifier. Must not be null.

Returns:

The pairwise subject identifier.