org.apache.nifi.web.security.jwt.key

Class StandardVerificationKeySelector

java.lang.Object

org.apache.nifi.web.security.jwt.key.StandardVerificationKeySelector

All Implemented Interfaces:

SigningKeyListener, VerificationKeyListener, VerificationKeySelector

public class StandardVerificationKeySelector
extends Object
implements SigningKeyListener, VerificationKeyListener, VerificationKeySelector

Standard Verification Key Selector implements listener interfaces for updating Key status

Field Summary

Fields

Modifier and Type	Field and Description
private Duration	keyRotationPeriod
private static org.slf4j.Logger	LOGGER
private VerificationKeyService	verificationKeyService

Constructor Summary

Constructors

Constructor and Description
StandardVerificationKeySelector(VerificationKeyService verificationKeyService, Duration keyRotationPeriod)

Method Summary

Modifier and Type	Method and Description
List<? extends Key>	getVerificationKeys(String keyIdentifier) Get Verification Keys
void	onSigningKeyUsed(String keyIdentifier, Instant expiration) On Signing Key Used set new expiration
void	onVerificationKeyGenerated(String keyIdentifier, Key key) On Verification Key Generated persist encoded Key with expiration

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

LOGGER

private static final org.slf4j.Logger LOGGER

verificationKeyService

private final VerificationKeyService verificationKeyService

keyRotationPeriod

private final Duration keyRotationPeriod

Constructor Detail

StandardVerificationKeySelector

public StandardVerificationKeySelector(VerificationKeyService verificationKeyService,
                                       Duration keyRotationPeriod)

Method Detail

onVerificationKeyGenerated

public void onVerificationKeyGenerated(String keyIdentifier,
                                       Key key)

On Verification Key Generated persist encoded Key with expiration

Specified by:

onVerificationKeyGenerated in interface VerificationKeyListener

Parameters:

keyIdentifier - Key Identifier

key - Key

getVerificationKeys

public List<? extends Key> getVerificationKeys(String keyIdentifier)

Get Verification Keys

Specified by:

getVerificationKeys in interface VerificationKeySelector

Parameters:

keyIdentifier - Key Identifier

Returns:

List of Keys

onSigningKeyUsed

public void onSigningKeyUsed(String keyIdentifier,
                             Instant expiration)

On Signing Key Used set new expiration

Specified by:

onSigningKeyUsed in interface SigningKeyListener

Parameters:

keyIdentifier - Key Identifier

expiration - JSON Web Token Expiration