public class Service extends Object implements Serializable
Some properties correspond to the ones listed in OpenID Provider Metadata in OpenID Connect Discovery 1.0
| Constructor and Description |
|---|
Service() |
| Modifier and Type | Method and Description |
|---|---|
long |
getAccessTokenDuration()
Get the duration of access tokens in seconds; the value of
expires_in in access token responses. |
String |
getAccessTokenType()
Get the access token type; the value of
token_type in
access token responses. |
long |
getApiKey()
Get the API key.
|
String |
getApiSecret()
Get the API secret.
|
String |
getAuthenticationCallbackApiKey()
Get the API key to access the authentication callback endpoint.
|
String |
getAuthenticationCallbackApiSecret()
Get the API secret to access the authentication callback endpoint.
|
URI |
getAuthenticationCallbackEndpoint()
Get the URI of the authentication callback endpoint.
|
URI |
getAuthorizationEndpoint()
Get the URI of the authorization endpoint.
|
int |
getClientsPerDeveloper()
Get the number of client applications that one developer can create.
|
long |
getCreatedAt()
Get the time at which this service was created.
|
String |
getDescription()
Get the description.
|
String |
getDeveloperAuthenticationCallbackApiKey()
Get the API key to access the developer authentication callback endpoint.
|
String |
getDeveloperAuthenticationCallbackApiSecret()
Get the API secret to access the developer authentication callback endpoint.
|
URI |
getDeveloperAuthenticationCallbackEndpoint()
Get the URI of the developer authentication callback endpoint.
|
SnsCredentials[] |
getDeveloperSnsCredentials()
Get the list of SNS credentials that Authlete uses to support social login
at the developer console.
|
long |
getIdTokenDuration()
Get the duration of ID tokens in seconds.
|
String |
getIdTokenSignatureKeyId()
Get the key ID to identify a JWK used for ID token signature using
an asymmetric key.
|
URI |
getIssuer()
Get the issuer identifier of this OpenID provider.
|
String |
getJwks()
Get the JSON Web Key Set of the service.
|
URI |
getJwksUri()
Get the URI of the service's JSON Web Key Set.
|
Pair[] |
getMetadata()
Get metadata.
|
long |
getModifiedAt()
Get the time at which this service was last modified.
|
int |
getNumber()
Get the service number.
|
URI |
getPolicyUri()
Get the URI of that this OpenID Provider provides to the person
registering the client to read about the OP's requirements on
how the Relying Party can use the data provided by the OP.
|
long |
getRefreshTokenDuration()
Get the duration of refresh tokens in seconds.
|
URI |
getRegistrationEndpoint()
Get the URI of the registration endpoint.
|
URI |
getRevocationEndpoint()
Get the URI of the token revocation endpoint.
|
URI |
getServiceDocumentation()
Get the URI of a page containing human-readable information
that developers might want or need to know when using this
OpenID Provider.
|
String |
getServiceName()
Get the service name.
|
int |
getServiceOwnerNumber()
Get the service owner number.
|
SnsCredentials[] |
getSnsCredentials()
Get the list of SNS credentials that Authlete uses to support social login.
|
String[] |
getSupportedAcrs()
Get the supported ACRs (authentication context class references).
|
String[] |
getSupportedClaimLocales()
Get the supported claim locales.
|
String[] |
getSupportedClaims()
Get the supported claims.
|
ClaimType[] |
getSupportedClaimTypes()
Get the supported claim types.
|
Sns[] |
getSupportedDeveloperSnses()
Get the list of supported SNSes for social login at the developer console.
|
Display[] |
getSupportedDisplays()
Get the supported values of
display parameter passed to
the authorization endpoint. |
GrantType[] |
getSupportedGrantTypes()
Get the supported grant types.
|
ResponseType[] |
getSupportedResponseTypes()
Get the supported response types.
|
Scope[] |
getSupportedScopes()
Get the supported scopes.
|
Sns[] |
getSupportedSnses()
Get the list of supported SNSes for social login at the authorization
endpoint.
|
ClientAuthMethod[] |
getSupportedTokenAuthMethods()
Get the supported client authentication methods at the token endpoint.
|
String[] |
getSupportedUiLocales()
Get the supported UI locales.
|
URI |
getTokenEndpoint()
Get the URI of the token endpoint.
|
URI |
getTosUri()
Get the URI that the OpenID Provider provides to the person
registering the client to read about the OP's terms of service.
|
URI |
getUserInfoEndpoint()
Get the URI of the user info endpoint.
|
String |
getUserInfoSignatureKeyId()
Get the key ID to identify a JWK used for user info signature using
an asymmetric key.
|
boolean |
isClientIdAliasEnabled()
Get the flag which indicates whether the 'Client ID Alias' feature
is enabled or not.
|
boolean |
isDirectAuthorizationEndpointEnabled()
Get the flag to indicate whether the direct authorization endpoint
is enabled or not.
|
boolean |
isDirectIntrospectionEndpointEnabled()
Get the flag to indicate whether the direct introspection endpoint
is enabled or not.
|
boolean |
isDirectJwksEndpointEnabled()
Get the flag to indicate whether the direct jwks endpoint
is enabled or not.
|
boolean |
isDirectRevocationEndpointEnabled()
Get the flag to indicate whether the direct revocation endpoint
is enabled or not.
|
boolean |
isDirectTokenEndpointEnabled()
Get the flag to indicate whether the direct token endpoint
is enabled or not.
|
boolean |
isDirectUserInfoEndpointEnabled()
Get the flag to indicate whether the direct userinfo endpoint
is enabled or not.
|
boolean |
isErrorDescriptionOmitted()
Get the flag to indicate whether the
error_description response
parameter is omitted. |
boolean |
isErrorUriOmitted()
Get the flag to indicate whether the
error_uri response
parameter is omitted. |
boolean |
isPkceRequired()
Get the flag to indicate whether the use of Proof Key for Code
Exchange (PKCE) is always required for authorization requests
by Authorization Code Flow.
|
boolean |
isRefreshTokenKept()
Get the flag to indicate whether a refresh token remains unchanged
or gets renewed after its use.
|
boolean |
isSingleAccessTokenPerSubject()
Get the flag to indicate whether the number of access tokens
per subject (and per client) is at most one or can be more.
|
Service |
setAccessTokenDuration(long duration)
Set the duration of access tokens in seconds; the value of
expires_in in access token responses. |
Service |
setAccessTokenType(String type)
Set the access token type; the value of
token_type in
access token responses. |
Service |
setApiKey(long apiKey)
Set the API key.
|
Service |
setApiSecret(String apiSecret)
Set the API secret.
|
Service |
setAuthenticationCallbackApiKey(String apiKey)
Set the API key to access the authentication callback endpoint.
|
Service |
setAuthenticationCallbackApiSecret(String apiSecret)
Set the API secret to access the authentication callback endpoint.
|
Service |
setAuthenticationCallbackEndpoint(URI endpoint)
Set the URI of the authentication callback endpoint.
|
Service |
setAuthorizationEndpoint(URI endpoint)
Set the URI of the authorization endpoint.
|
Service |
setClientIdAliasEnabled(boolean enabled)
Enable/disable the 'Client ID Alias' feature.
|
Service |
setClientsPerDeveloper(int count)
Set the number of client applications that one developer can create.
|
Service |
setCreatedAt(long createdAt)
Set the time at which this service was created.
|
Service |
setDescription(String description)
Set the description.
|
Service |
setDeveloperAuthenticationCallbackApiKey(String apiKey)
Set the API key to access the developer authentication callback endpoint.
|
Service |
setDeveloperAuthenticationCallbackApiSecret(String apiSecret)
Set the API secret to access the developer authentication callback endpoint.
|
Service |
setDeveloperAuthenticationCallbackEndpoint(URI endpoint)
Set the URI of the developer authentication callback endpoint.
|
Service |
setDeveloperSnsCredentials(SnsCredentials[] snsCredentials)
Set the list of SNS credentials that Authlete uses to support social login
at the developer console.
|
Service |
setDirectAuthorizationEndpointEnabled(boolean enabled)
Set the flag to indicate whether the direct authorization endpoint
is enabled or not.
|
Service |
setDirectIntrospectionEndpointEnabled(boolean enabled)
Set the flag to indicate whether the direct introspection endpoint
is enabled or not.
|
Service |
setDirectJwksEndpointEnabled(boolean enabled)
Set the flag to indicate whether the direct jwks endpoint
is enabled or not.
|
Service |
setDirectRevocationEndpointEnabled(boolean enabled)
Set the flag to indicate whether the direct revocation endpoint
is enabled or not.
|
Service |
setDirectTokenEndpointEnabled(boolean enabled)
Set the flag to indicate whether the direct token endpoint
is enabled or not.
|
Service |
setDirectUserInfoEndpointEnabled(boolean enabled)
Set the flag to indicate whether the direct userinfo endpoint
is enabled or not.
|
Service |
setErrorDescriptionOmitted(boolean omitted)
Omit or embed the
error_description response parameter in
error responses. |
Service |
setErrorUriOmitted(boolean omitted)
Omit or embed the
error_uri response parameter in error
responses. |
Service |
setIdTokenDuration(long duration)
Set the duration of ID tokens in seconds.
|
Service |
setIdTokenSignatureKeyId(String keyId)
Set the key ID to identify a JWK used for ID token signature using
an asymmetric key.
|
Service |
setIssuer(URI issuer)
Set the issuer identifier of this OpenID provider.
|
Service |
setJwks(String jwks)
Set the JSON Web Key Set of the service.
|
Service |
setJwksUri(URI uri)
Set the URI of the service's JSON Web Key Set.
|
Service |
setMetadata(Pair[] metadata)
Set metadata.
|
Service |
setModifiedAt(long modifiedAt)
Set the time at which this service was last modified.
|
Service |
setNumber(int number)
Set the service number.
|
Service |
setPkceRequired(boolean required)
Set the flag to indicate whether the use of Proof Key for Code
Exchange (PKCE) is always required for authorization requests
by Authorization Code Flow.
|
Service |
setPolicyUri(URI uri)
Set the URI of that this OpenID Provider provides to the person
registering the client to read about the OP's requirements on
how the Relying Party can use the data provided by the OP.
|
Service |
setRefreshTokenDuration(long duration)
Set the duration of refresh tokens in seconds.
|
Service |
setRefreshTokenKept(boolean kept)
Set the flag to indicate whether a refresh token remains unchanged
or gets renewed after its use.
|
Service |
setRegistrationEndpoint(URI endpoint)
Set the URI of the registration endpoint.
|
Service |
setRevocationEndpoint(URI endpoint)
Set the URI of the token revocation endpoint.
|
Service |
setServiceDocumentation(URI uri)
Set the URI of a page containing human-readable information
that developers might want or need to know when using this
OpenID Provider.
|
Service |
setServiceName(String serviceName)
Set the service name.
|
Service |
setServiceOwnerNumber(int serviceOwnerNumber)
Set the service owner number
|
Service |
setSingleAccessTokenPerSubject(boolean single)
Set the flag to indicate whether the number of access tokens
per subject (and per client) is at most one or can be more.
|
Service |
setSnsCredentials(SnsCredentials[] snsCredentials)
Set the list of SNS credentials that Authlete uses to support social login.
|
Service |
setSupportedAcrs(String[] acrs)
Set the supported ACRs (authentication context class references).
|
Service |
setSupportedClaimLocales(String[] supportedClaimLocales)
Set the supported claim locales.
|
Service |
setSupportedClaims(String[] supportedClaims)
Set the supported claims.
|
Service |
setSupportedClaimTypes(ClaimType[] claimTypes)
Set the supported claim types.
|
Service |
setSupportedDeveloperSnses(Sns[] supportedSnses)
Set the list of supported SNSes for social login at the developer console.
|
Service |
setSupportedDisplays(Display[] displays)
Set the supported values of
display parameter passed to
the authorization endpoint. |
Service |
setSupportedGrantTypes(GrantType[] grantTypes)
Set the supported grant types.
|
Service |
setSupportedResponseTypes(ResponseType[] responseTypes)
Set the supported response types.
|
Service |
setSupportedScopes(Scope[] supportedScopes)
Set the supported scopes.
|
Service |
setSupportedSnses(Sns[] supportedSnses)
Set the list of supported SNSes for social login at the authorization
endpoint.
|
Service |
setSupportedTokenAuthMethods(ClientAuthMethod[] methods)
Set the number of client authentication methods at the token endpoint.
|
Service |
setSupportedUiLocales(String[] supportedUiLocales)
Set the supported UI locales.
|
Service |
setTokenEndpoint(URI endpoint)
Set the URI of the token endpoint.
|
Service |
setTosUri(URI uri)
Set the URI that the OpenID Provider provides to the person
registering the client to read about the OP's terms of service.
|
Service |
setUserInfoEndpoint(URI endpoint)
Set the URI of the user info endpoint.
|
Service |
setUserInfoSignatureKeyId(String keyId)
Set the key ID to identify a JWK used for user info signature using
an asymmetric key.
|
public int getNumber()
public Service setNumber(int number)
number - The service number.this object.public int getServiceOwnerNumber()
public Service setServiceOwnerNumber(int serviceOwnerNumber)
serviceOwnerNumber - The service owner number.this object.public String getServiceName()
public Service setServiceName(String serviceName)
serviceName - The service name.this object.public long getApiKey()
public Service setApiKey(long apiKey)
apiKey - The API key.this object.public String getApiSecret()
public Service setApiSecret(String apiSecret)
apiSecret - The API secret.this object.public URI getIssuer()
public Service setIssuer(URI issuer)
issuer - The issuer identifier.this object.public URI getAuthorizationEndpoint()
public Service setAuthorizationEndpoint(URI endpoint)
endpoint - The URI of the authorization endpoint.this object.public URI getTokenEndpoint()
public Service setTokenEndpoint(URI endpoint)
endpoint - The URI of the token endpoint.this object.public URI getRevocationEndpoint()
public Service setRevocationEndpoint(URI endpoint)
endpoint - The URI of the token revocation endpoint.this object.public URI getUserInfoEndpoint()
public Service setUserInfoEndpoint(URI endpoint)
endpoint - The URI of the user info endpoint.this object.public URI getJwksUri()
public Service setJwksUri(URI uri)
uri - The URI of the service's JSON Web Key Set.this object.public String getJwks()
public Service setJwks(String jwks)
jwks - The JSON Web Key Set of the service.this object.public URI getRegistrationEndpoint()
public Service setRegistrationEndpoint(URI endpoint)
endpoint - The URI of the registration endpoint.this object.public Scope[] getSupportedScopes()
public Service setSupportedScopes(Scope[] supportedScopes)
supportedScopes - The supported scopes.this object.public ResponseType[] getSupportedResponseTypes()
public Service setSupportedResponseTypes(ResponseType[] responseTypes)
responseTypes - The supported response types.this object.public GrantType[] getSupportedGrantTypes()
public Service setSupportedGrantTypes(GrantType[] grantTypes)
grantTypes - The supported grant types.this object.public String[] getSupportedAcrs()
public Service setSupportedAcrs(String[] acrs)
acrs - The supported ACRs.this object.public ClientAuthMethod[] getSupportedTokenAuthMethods()
public Service setSupportedTokenAuthMethods(ClientAuthMethod[] methods)
methods - The supported client authentication methods.this object.public Display[] getSupportedDisplays()
display parameter passed to
the authorization endpoint.display parameter.public Service setSupportedDisplays(Display[] displays)
display parameter passed to
the authorization endpoint.displays - The supported values of display parameter.this object.public ClaimType[] getSupportedClaimTypes()
public Service setSupportedClaimTypes(ClaimType[] claimTypes)
claimTypes - The supported claim types.this object.public String[] getSupportedClaims()
public Service setSupportedClaims(String[] supportedClaims)
supportedClaims - The supported claims.this object.public URI getServiceDocumentation()
public Service setServiceDocumentation(URI uri)
uri - The URI of the service documentation.this object.public String[] getSupportedClaimLocales()
public Service setSupportedClaimLocales(String[] supportedClaimLocales)
supportedClaimLocales - The supported claim locales.this object.public String[] getSupportedUiLocales()
public Service setSupportedUiLocales(String[] supportedUiLocales)
supportedUiLocales - The supported UI locales.this object.public URI getPolicyUri()
public Service setPolicyUri(URI uri)
uri - The URI of the policy page.this object.public URI getTosUri()
public Service setTosUri(URI uri)
uri - The URI of the Terms-of-Service page.this object.public String getDescription()
public Service setDescription(String description)
description - The description.this object.public String getAccessTokenType()
token_type in
access token responses.public Service setAccessTokenType(String type)
token_type in
access token responses.type - The access token type.this object.public long getAccessTokenDuration()
expires_in in access token responses.public Service setAccessTokenDuration(long duration)
expires_in in access token responses.duration - The duration of access tokens in seconds.this object.public long getRefreshTokenDuration()
public Service setRefreshTokenDuration(long duration)
duration - The duration of refresh tokens in seconds.this object.public long getIdTokenDuration()
public Service setIdTokenDuration(long duration)
duration - The duration of ID tokens in seconds.this object.public URI getAuthenticationCallbackEndpoint()
public Service setAuthenticationCallbackEndpoint(URI endpoint)
endpoint - The URI of the authentication callback endpoint.this object.public String getAuthenticationCallbackApiKey()
public Service setAuthenticationCallbackApiKey(String apiKey)
apiKey - The API key to access the authentication callback endpoint.this object.public String getAuthenticationCallbackApiSecret()
public Service setAuthenticationCallbackApiSecret(String apiSecret)
apiSecret - The API secret to access the authentication callback endpoint.this object.public Sns[] getSupportedSnses()
public Service setSupportedSnses(Sns[] supportedSnses)
supportedSnses - The list of SNSes.this object.public SnsCredentials[] getSnsCredentials()
public Service setSnsCredentials(SnsCredentials[] snsCredentials)
snsCredentials - The list of SNS credentials.this object.public long getCreatedAt()
public Service setCreatedAt(long createdAt)
createdAt - The time at which this service was created.this object.public long getModifiedAt()
public Service setModifiedAt(long modifiedAt)
modifiedAt - The time at which this service was modified.this object.public Pair[] getMetadata()
The content of the returned array depends on contexts.
| Key | Description |
|---|---|
"clientCount" |
The number of client applications which belong to this service. |
Pair.public Service setMetadata(Pair[] metadata)
metadata - Metadata. The type is an array of Pair.
null may be returned.this object.public URI getDeveloperAuthenticationCallbackEndpoint()
public Service setDeveloperAuthenticationCallbackEndpoint(URI endpoint)
endpoint - The URI of the developer authentication callback endpoint.this object.public String getDeveloperAuthenticationCallbackApiKey()
public Service setDeveloperAuthenticationCallbackApiKey(String apiKey)
apiKey - The API key to access the developer authentication callback endpoint.this object.public String getDeveloperAuthenticationCallbackApiSecret()
public Service setDeveloperAuthenticationCallbackApiSecret(String apiSecret)
apiSecret - The API secret to access the developer authentication callback endpoint.this object.public Sns[] getSupportedDeveloperSnses()
public Service setSupportedDeveloperSnses(Sns[] supportedSnses)
supportedSnses - The list of SNSes.this object.public SnsCredentials[] getDeveloperSnsCredentials()
public Service setDeveloperSnsCredentials(SnsCredentials[] snsCredentials)
snsCredentials - The list of SNS credentials.this object.public int getClientsPerDeveloper()
public Service setClientsPerDeveloper(int count)
count - The number of client applications that one developer can create.
0 means no limit.this object.public boolean isDirectAuthorizationEndpointEnabled()
/api/auth/authorization/direct/{serviceApiKey}true if enabled.public Service setDirectAuthorizationEndpointEnabled(boolean enabled)
/api/auth/authorization/direct/{serviceApiKey}enabled - true to enable the direct endpoint.this object.public boolean isDirectTokenEndpointEnabled()
/api/auth/token/direct/{serviceApiKey}true if enabled.public Service setDirectTokenEndpointEnabled(boolean enabled)
/api/auth/token/direct/{serviceApiKey}enabled - true to enable the direct endpoint.this object.public boolean isDirectRevocationEndpointEnabled()
/api/auth/revocation/direct/{serviceApiKey}true if enabled.public Service setDirectRevocationEndpointEnabled(boolean enabled)
/api/auth/revocation/direct/{serviceApiKey}enabled - true to enable the direct endpoint.this object.public boolean isDirectUserInfoEndpointEnabled()
/api/auth/userinfo/direct/{serviceApiKey}true if enabled.public Service setDirectUserInfoEndpointEnabled(boolean enabled)
/api/auth/userinfo/direct/{serviceApiKey}enabled - true to enable the direct endpoint.this object.public boolean isDirectJwksEndpointEnabled()
/api/service/jwks/get/direct/{serviceApiKey}true if enabled.public Service setDirectJwksEndpointEnabled(boolean enabled)
/api/service/jwks/get/direct/{serviceApiKey}enabled - true to enable the direct endpoint.this object.public boolean isDirectIntrospectionEndpointEnabled()
/api/auth/introspection/direct/{serviceApiKey}true if enabled.public Service setDirectIntrospectionEndpointEnabled(boolean enabled)
/api/auth/introspection/direct/{serviceApiKey}enabled - true to enable the direct endpoint.this object.public boolean isSingleAccessTokenPerSubject()
If this flag is true, an attempt to issue a new access
token invalidates existing access tokens associated with the
same subject and the same client.
Note that, however, attempts by Client Credentials Flow do not
invalidate existing access tokens because access tokens issued
by Client Credentials Flow are not associated with any end-user's
subject. Also note that an attempt by Refresh Token Flow
invalidates the coupled access token only and this invalidation
is always performed regardless of whether this flag is true or false.
true if the number of access tokens per subject
(and per client) is at most one.public Service setSingleAccessTokenPerSubject(boolean single)
If true is set, an attempt to issue a new access token
invalidates existing access tokens associated with the same
subject and the same client.
Note that, however, attempts by Client Credentials Flow do not
invalidate existing access tokens because access tokens issued
by Client Credentials Flow are not associated with any end-user's
subject. Also note that an attempt by Refresh Token Flow
invalidates the coupled access token only and this invalidation
is always performed regardless of whether this flag is true or false.
single - true to set the maximum number of access tokens
per subject (and per client) to 1.this object.public boolean isPkceRequired()
true if PKCE is always required for authorization
requests by Authorization Code Flow.public Service setPkceRequired(boolean required)
required - true to always require PKCE for authorization
requests by Authorization Code Flow.this object.public boolean isRefreshTokenKept()
true if a refresh token remains unchanged after its use.
false if a new refresh token is issued after its use.public Service setRefreshTokenKept(boolean kept)
kept - true to keep a refresh token valid after its use.
false to renew a refresh token after its use.this object.public boolean isErrorDescriptionOmitted()
error_description response
parameter is omitted.
According to RFC 6749, an authorization server may include the error_description response parameter in error responses. When this
errorDescriptionOmitted property is true, Authlete does
not embed the error_description response parameter in error
responses.
true if the error_description response parameter
is omitted. false if the error_description
response parameter is included in error responses from the
authorization server.public Service setErrorDescriptionOmitted(boolean omitted)
error_description response parameter in
error responses.omitted - true to omit the error_description response
parameter. false to embed the parameter.this object.public boolean isErrorUriOmitted()
error_uri response
parameter is omitted.
According to RFC 6749, an authorization server may include the
error_uri response parameter in error responses. When
this errorUriOmitted property is true, Authlete
does not embed the error_uri response parameter in error
responses.
true if the error_uri response parameter
is omitted. false if the error_uri
response parameter is included in error responses from
the authorization server.public Service setErrorUriOmitted(boolean omitted)
error_uri response parameter in error
responses.omitted - true to omit the error_uri response parameter.
false to embed the parameter.this object.public boolean isClientIdAliasEnabled()
true if the 'Client ID Alias' feature is enabled.
false if the feature is disabled.public Service setClientIdAliasEnabled(boolean enabled)
When a new client is created, Authlete generates a numeric value
and assigns it as a client ID to the newly created client. In
addition to the client ID, each client can have a client ID alias.
The client ID alias is, however, recognized only when this property
(clientIdAliasEnabled) is true.
enabled - true to enable the 'Client ID Alias' feature.
false to disable it.this object.public String getIdTokenSignatureKeyId()
A JWK Set can be registered as a property of a Service. A JWK Set can contain 0 or more JWKs (See RFC 7517 for details about JWK). Authlete Server has to pick up one JWK for signature from the JWK Set when it generates an ID token and signature using an asymmetric key is required. Authlete Server searches the registered JWK Set for a JWK which satisfies conditions for ID token signature. If the number of JWK candidates which satisfy the conditions is 1, there is no problem. On the other hand, if there exist multiple candidates, a Key ID is needed to be specified so that Authlete Server can pick up one JWK from among the JWK candidates.
This idTokenSignatureKeyId property exists for the purpose
described above. For key rotation (OpenID Connect Core 1.0, 10.1.1. Rotation of Asymmetric Signing Keys), this mechanism is
needed.
null.public Service setIdTokenSignatureKeyId(String keyId)
See the description of getIdTokenSignatureKeyId() for details.
keyId - A key ID of a JWK. This may be null.this object.public String getUserInfoSignatureKeyId()
A JWK Set can be registered as a property of a Service. A JWK Set can contain 0 or more JWKs (See RFC 7517 for details about JWK). Authlete Server has to pick up one JWK for signature from the JWK Set when it is required to sign user info (which is returned from UserInfo Endpoint) using an asymmetric key. Authlete Server searches the registered JWK Set for a JWK which satisfies conditions for user info signature. If the number of JWK candidates which satisfy the conditions is 1, there is no problem. On the other hand, if there exist multiple candidates, a Key ID is needed to be specified so that Authlete Server can pick up one JWK from among the JWK candidates.
This userInfoSignatureKeyId property exists for the purpose
described above. For key rotation (OpenID Connect Core 1.0, 10.1.1. Rotation of Asymmetric Signing Keys), this mechanism is
needed.
null.public Service setUserInfoSignatureKeyId(String keyId)
See the description of getUserInfoSignatureKeyId() for details.
keyId - A key ID of a JWK. This may be null.this object.Copyright © 2017. All rights reserved.