Package io.mosip.authentication.common.service.transaction.manager

Class IdAuthSecurityManager

java.lang.Object

io.mosip.authentication.common.service.transaction.manager.IdAuthSecurityManager

@Component
public class IdAuthSecurityManager
extends Object

The Class IdAuthSecurityManager.

Author:

Manoj SP

Constructor Summary

Constructors

Constructor	Description
IdAuthSecurityManager()

Method Summary

Modifier and Type	Method	Description
byte[]	asymmetricEncryption(byte[] dataToEncrypt, String partnerCertificate)
byte[]	combineDataToEncrypt(byte[] encryptedData, byte[] encryptedSymmetricKey)	Combine data to encrypt.
String	createRandomToken(byte[] dataToEncrypt)	Creates the random token.
static byte[]	decodeHex(String hexData)	Decode hex.
byte[]	decrypt(String dataToDecrypt, String refId, String aad, String saltToDecrypt, Boolean isThumbprintEnabled)	Decrypt.
static String	digestAsPlainText(byte[] data)	Digest as plain text.
byte[]	encrypt(String dataToEncrypt, String refId, String aad, String saltToEncrypt)	Encrypt.
reactor.util.function.Tuple2<byte[],byte[]>	encrypt(PublicKey publicKey, byte[] dataToEncrypt)	Encrypt.
reactor.util.function.Tuple3<String,String,String>	encryptData(byte[] data, String partnerCertificate)	Encrypt data.
String	generateArgon2Hash(String anyString, String salt)
static byte[]	generateHash(byte[] data)	Generate hash.
static String	generateHashAndDigestAsPlainText(byte[] data)	Generate hash and digest as plain text.
Map.Entry<String,String>	generateKeyBindingCertificate(PublicKey publicKey, io.mosip.kernel.core.keymanager.model.CertificateParameters certParams)
String	generateKeyedHash(byte[] bytesToHash)
static byte[]	getBytesFromThumbprint(String thumbprint)	Gets the bytes from thumbprint.
int	getSaltKeyForId(String id)
String	getUser()	Gets the user.
String	hash(String id)
String	jwsSignWithPayload(String data)
String	jwtEncrypt(String dataToEncrypt, String certificateData)
void	reEncryptAndStoreRandomKey(String index, String key)	Re encrypt and store random key.
String	reEncryptRandomKey(String encryptedKey)	Re encrypt random key.
String	sign(String data)	Sign.
String	signWithPayload(String data)
static String	toHex(byte[] bytes)	To hex.
static String	trimBeginEnd(String pKey)	Trim begin end.
boolean	verifySignature(String signature, String domain, String requestData, Boolean isTrustValidationRequired)	Verify signature.
Map<String,String>	zkDecrypt(String id, Map<String,String> encryptedAttributes)	Zk decrypt.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

IdAuthSecurityManager

public IdAuthSecurityManager()

Method Detail

getUser

public String getUser()

Gets the user.

Returns:

the user

encrypt

public byte[] encrypt(String dataToEncrypt,
                      String refId,
                      String aad,
                      String saltToEncrypt)
               throws IdAuthenticationBusinessException

Encrypt.

Parameters:

dataToEncrypt - the data to encrypt

refId - the ref id

aad - the aad

saltToEncrypt - the salt to encrypt

Returns:

the byte[]

Throws:

IdAuthenticationBusinessException - the id authentication business exception

decrypt

public byte[] decrypt(String dataToDecrypt,
                      String refId,
                      String aad,
                      String saltToDecrypt,
                      Boolean isThumbprintEnabled)
               throws IdAuthenticationBusinessException

Decrypt.

Parameters:

dataToDecrypt - the data to decrypt

refId - the ref id

aad - the aad

saltToDecrypt - the salt to decrypt

isThumbprintEnabled - the is thumbprint enabled

Returns:

the byte[]

Throws:

IdAuthenticationBusinessException - the id authentication business exception

reEncryptRandomKey

public String reEncryptRandomKey(String encryptedKey)

Re encrypt random key.

Parameters:

encryptedKey - the encrypted key

Returns:

the string

reEncryptAndStoreRandomKey

public void reEncryptAndStoreRandomKey(String index,
                                       String key)

Re encrypt and store random key.

Parameters:

index - the index

key - the key

zkDecrypt

public Map<String,String> zkDecrypt(String id,
                                          Map<String,String> encryptedAttributes)
                                   throws IdAuthenticationBusinessException

Zk decrypt.

Parameters:

id - the id

encryptedAttributes - the encrypted attributes

Returns:

the map

Throws:

IdAuthenticationBusinessException - the id authentication business exception

createRandomToken

public String createRandomToken(byte[] dataToEncrypt)
                         throws IdAuthenticationBusinessException

Creates the random token.

Parameters:

dataToEncrypt - the data to encrypt

Returns:

the string

Throws:

IdAuthenticationBusinessException - the id authentication business exception

sign

public String sign(String data)

Sign.

Parameters:

data - the data

Returns:

the string

verifySignature

public boolean verifySignature(String signature,
                               String domain,
                               String requestData,
                               Boolean isTrustValidationRequired)

Verify signature.

Parameters:

signature - the signature

domain - the domain

requestData - the request data

isTrustValidationRequired - the is trust validation required

Returns:

true, if successful

hash

public String hash(String id)
            throws IdAuthenticationBusinessException

Throws:

IdAuthenticationBusinessException

getSaltKeyForId

public int getSaltKeyForId(String id)

encryptData

public reactor.util.function.Tuple3<String,String,String> encryptData(byte[] data,
                                                                                  String partnerCertificate)
                                                                           throws IdAuthenticationBusinessException

Encrypt data.

Parameters:

data - the data

partnerCertificate - the partner certificate

Returns:

the tuple 2

Throws:

IdAuthenticationBusinessException - the id authentication business exception

asymmetricEncryption

public byte[] asymmetricEncryption(byte[] dataToEncrypt,
                                   String partnerCertificate)
                            throws IdAuthenticationBusinessException

Throws:

IdAuthenticationBusinessException

encrypt

public reactor.util.function.Tuple2<byte[],byte[]> encrypt(PublicKey publicKey,
                                                                 byte[] dataToEncrypt)

Encrypt.

Parameters:

publicKey - the public key

dataToEncrypt - the data to encrypt

Returns:

the byte[]

combineDataToEncrypt

public byte[] combineDataToEncrypt(byte[] encryptedData,
                                   byte[] encryptedSymmetricKey)

Combine data to encrypt.

Parameters:

encryptedData - the encrypted data

encryptedSymmetricKey - the encrypted symmetric key

Returns:

the byte[]

trimBeginEnd

public static String trimBeginEnd(String pKey)

Trim begin end.

Parameters:

pKey - the key

Returns:

the string

digestAsPlainText

public static String digestAsPlainText(byte[] data)

Digest as plain text.

Parameters:

data - the data

Returns:

the string

generateHashAndDigestAsPlainText

public static String generateHashAndDigestAsPlainText(byte[] data)

Generate hash and digest as plain text.

Parameters:

data - the data

Returns:

the string

generateHash

public static byte[] generateHash(byte[] data)
                           throws NoSuchAlgorithmException

Generate hash.

Parameters:

data - the data

Returns:

the byte[]

Throws:

NoSuchAlgorithmException - the no such algorithm exception

decodeHex

public static byte[] decodeHex(String hexData)
                        throws org.apache.commons.codec.DecoderException

Decode hex.

Parameters:

hexData - the hex data

Returns:

the byte[]

Throws:

org.apache.commons.codec.DecoderException - the decoder exception

toHex

public static String toHex(byte[] bytes)

To hex.

Parameters:

bytes - the bytes

Returns:

the string

getBytesFromThumbprint

public static byte[] getBytesFromThumbprint(String thumbprint)

Gets the bytes from thumbprint.

Parameters:

thumbprint - the thumbprint

Returns:

the bytes from thumbprint

generateKeyedHash

public String generateKeyedHash(byte[] bytesToHash)

signWithPayload

public String signWithPayload(String data)

jwsSignWithPayload

public String jwsSignWithPayload(String data)

generateKeyBindingCertificate

public Map.Entry<String,String> generateKeyBindingCertificate(PublicKey publicKey,
                                                                    io.mosip.kernel.core.keymanager.model.CertificateParameters certParams)
                                                             throws CertificateEncodingException

Throws:

CertificateEncodingException

jwtEncrypt

public String jwtEncrypt(String dataToEncrypt,
                         String certificateData)

generateArgon2Hash

public String generateArgon2Hash(String anyString,
                                 String salt)