com.nimbusds.jose.crypto
Class MACSigner

java.lang.Object
  com.nimbusds.jose.crypto.MACSigner

All Implemented Interfaces:

JWSAlgorithmProvider, JWSSigner

@ThreadSafe
public class MACSigner
extends Object
implements JWSSigner

Message Authentication Code (MAC) signer of JWS objects. This class is thread-safe.

Supports the following JSON Web Algorithms (JWAs):

• JWSAlgorithm.HS256
• JWSAlgorithm.HS384
• JWSAlgorithm.HS512

Version:

$version$ (2012-10-23)

Author:

Vladimir Dzhuvinov

Constructor Summary

MACSigner(byte[] sharedSecret)
Creates a new Message Authentication (MAC) signer.

Method Summary

protected static Mac	getMAC(JWSAlgorithm alg) Gets a Message Authentication Code (MAC) service for the specified HMAC-based JSON Web Algorithm (JWA).
byte[]	getSharedSecret() Gets the shared secret.
Base64URL	sign(ReadOnlyJWSHeader header, byte[] signableContent) Signs the specified signable content of a JWS object.
Set<JWSAlgorithm>	supportedAlgorithms() Returns the names of the supported JWS algorithms.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface com.nimbusds.jose.JWSAlgorithmProvider

supportedAlgorithms

Constructor Detail

MACSigner

public MACSigner(byte[] sharedSecret)

Creates a new Message Authentication (MAC) signer.

Parameters:

sharedSecret - The shared secret. Must not be null.

Method Detail

sign

public Base64URL sign(ReadOnlyJWSHeader header,
                      byte[] signableContent)
               throws JOSEException

Description copied from interface: JWSSigner

Signs the specified signable content of a JWS object.

Specified by:

sign in interface JWSSigner

Parameters:

header - The JSON Web Signature (JWS) header. Must specify a supported JWS algorithm and must not be null.

signableContent - The content to sign. Must not be null.

Returns:

The resulting signature part (third part) of the JWS object.

Throws:

JOSEException - If the JWS algorithm is not supported or if signing failed for some other reason.

getSharedSecret

public byte[] getSharedSecret()

Gets the shared secret.

Returns:

The shared secret.

getMAC

protected static Mac getMAC(JWSAlgorithm alg)
                     throws JOSEException

Gets a Message Authentication Code (MAC) service for the specified HMAC-based JSON Web Algorithm (JWA).

Parameters:

alg - The JSON Web Algorithm (JWA). Must be supported and not null.

Returns:

A MAC service instance.

Throws:

JOSEException - If the algorithm is not supported.

supportedAlgorithms

public Set<JWSAlgorithm> supportedAlgorithms()

Description copied from interface: JWSAlgorithmProvider

Returns the names of the supported JWS algorithms. These correspond to the alg JWS header parameter.

Specified by:

supportedAlgorithms in interface JWSAlgorithmProvider

Returns:

The supported JWS algorithms, empty set if none.