net.adamcin.httpsig.api

Class Verifier

java.lang.Object

net.adamcin.httpsig.api.Verifier

public final class Verifier
extends Object

The Server-Side component of the protocol which verifies Authorization headers using SSH Public Keys

Field Summary

Fields

Modifier and Type	Field and Description
static long	DEFAULT_SKEW

Constructor Summary

Constructors

Constructor and Description
Verifier(Keychain keychain)
Verifier(Keychain keychain, KeyIdentifier keyIdentifier)

Method Summary

Methods

Modifier and Type	Method and Description
Keychain	getKeychain()
long	getSkew()
void	setSkew(long skew)
boolean	verify(Challenge challenge, SignatureBuilder signatureBuilder, Authorization authorization) Verifies the provided Authorization header against the original Challenge
VerifyResult	verifyWithResult(Challenge challenge, SignatureBuilder signatureBuilder, Authorization authorization) Verifies the provided Authorization header against the original Challenge

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

DEFAULT_SKEW

public static final long DEFAULT_SKEW

See Also:

Constant Field Values

Constructor Detail

Verifier

public Verifier(Keychain keychain)

Verifier

public Verifier(Keychain keychain,
        KeyIdentifier keyIdentifier)

Method Detail

getKeychain

public Keychain getKeychain()

getSkew

public long getSkew()

Returns:

server skew in milliseconds

setSkew

public void setSkew(long skew)

Parameters:

skew - new server skew in milliseconds

verify

public boolean verify(Challenge challenge,
             SignatureBuilder signatureBuilder,
             Authorization authorization)

Verifies the provided Authorization header against the original Challenge

Parameters:

challenge - the WWW-Authenticate challenge sent to the client in the previous response

signatureBuilder - the SignatureBuilder containing the request header content

authorization - the Authorization header to verify

Returns:

true if valid (VerifyResult.SUCCESS), false otherwise

verifyWithResult

public VerifyResult verifyWithResult(Challenge challenge,
                            SignatureBuilder signatureBuilder,
                            Authorization authorization)

Verifies the provided Authorization header against the original Challenge

Parameters:

challenge - the WWW-Authenticate challenge sent to the client in the previous response

signatureBuilder - the SignatureBuilder containing the request header content

authorization - the Authorization header to verify

Returns: