com.google.crypto.tink.jwt

Class JwtRsaSsaPkcs1Parameters.KidStrategy

java.lang.Object

com.google.crypto.tink.jwt.JwtRsaSsaPkcs1Parameters.KidStrategy

Enclosing class:

JwtRsaSsaPkcs1Parameters

@Immutable
public static final class JwtRsaSsaPkcs1Parameters.KidStrategy
extends Object

Specifies how the "kid" header is handled.

Field Summary

Fields

Modifier and Type	Field and Description
static JwtRsaSsaPkcs1Parameters.KidStrategy	BASE64_ENCODED_KEY_ID The "kid" is the URL safe (RFC 4648 Section 5) base64-encoded big-endian key_id in the keyset.
static JwtRsaSsaPkcs1Parameters.KidStrategy	CUSTOM The "kid" is fixed.
static JwtRsaSsaPkcs1Parameters.KidStrategy	IGNORED The "kid" header is ignored.

Method Summary

Modifier and Type	Method and Description
String	toString()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Field Detail

BASE64_ENCODED_KEY_ID

public static final JwtRsaSsaPkcs1Parameters.KidStrategy BASE64_ENCODED_KEY_ID

The "kid" is the URL safe (RFC 4648 Section 5) base64-encoded big-endian key_id in the keyset.

In PublicKeySign#signAndEncode Tink always adds the KID.

In PublicKeyVerify#verifyAndDecode Tink checks that the kid is present and equal to this value.

This strategy is recommended by Tink.

IGNORED

public static final JwtRsaSsaPkcs1Parameters.KidStrategy IGNORED

The "kid" header is ignored.

In PublicKeySign#signAndEncode Tink does not write a "kid" header.

In PublicKeyVerify#verifyAndDecode Tink ignores the "kid" header.

CUSTOM

public static final JwtRsaSsaPkcs1Parameters.KidStrategy CUSTOM

The "kid" is fixed. It can be obtained from parameters.getCustomKid().

In PublicKeySign#signAndEncode Tink writes the "kid" header to the value given by parameters.getCustomKid().

In PublicKeyVerify#verifyAndDecode, if the kid is present, it needs to match parameters.getCustomKid(). If the kid is absent, it will be accepted.

Note: Tink does not allow to randomly generate new JwtRsaSsaPkcs1Key objects from parameters objects with KidStrategy equals to CUSTOM.

Method Detail

toString

public String toString()

Overrides:

toString in class Object