net.adamcin.httpsig.api

Class Verifier

java.lang.Object

net.adamcin.httpsig.api.Verifier

public final class Verifier
extends Object

The Server-Side component of the protocol which verifies Authorization headers using SSH Public Keys

Field Summary

Fields

Modifier and Type	Field and Description
static long	DEFAULT_SKEW

Constructor Summary

Constructors

Constructor and Description
Verifier(Keychain keychain)
Verifier(Keychain keychain, KeyId keyId)

Method Summary

Methods

Modifier and Type	Method and Description
Keychain	getKeychain()
long	getSkew()
Key	selectKey(Authorization authorization) Selects an appropriate Key from the Keychain matching the keyId specified in the Authorization.
void	setSkew(long skew) set to a positive number to enforce date header check within server time +/- skew.
boolean	verify(Challenge challenge, RequestContent requestContent, Authorization authorization) Verifies the provided Authorization header against the original Challenge
VerifyResult	verifyWithResult(Challenge challenge, RequestContent requestContent, Authorization authorization) Verifies the provided Authorization header against the original Challenge

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

DEFAULT_SKEW

public static final long DEFAULT_SKEW

See Also:

Constant Field Values

Constructor Detail

Verifier

public Verifier(Keychain keychain)

Verifier

public Verifier(Keychain keychain,
        KeyId keyId)

Method Detail

getKeychain

public Keychain getKeychain()

getSkew

public long getSkew()

Returns:

server skew in milliseconds

setSkew

public void setSkew(long skew)

set to a positive number to enforce date header check within server time +/- skew. set to negative number to disable this check altogether.

Parameters:

skew - new server skew in milliseconds

selectKey

public Key selectKey(Authorization authorization)

Selects an appropriate Key from the Keychain matching the keyId specified in the Authorization. This method is called by verifyWithResult(Challenge, RequestContent, Authorization), but can be called by client code to retrieve the identified Key directly

Parameters:

authorization - the Authorization header

Returns:

a matching Key or null

Since:

1.0.6

verify

public boolean verify(Challenge challenge,
             RequestContent requestContent,
             Authorization authorization)

Verifies the provided Authorization header against the original Challenge

Parameters:

challenge - the WWW-Authenticate challenge sent to the client in the previous response

requestContent - the RequestContent containing the request header content

authorization - the Authorization header to verify

Returns:

true if valid (VerifyResult.SUCCESS), false otherwise

verifyWithResult

public VerifyResult verifyWithResult(Challenge challenge,
                            RequestContent requestContent,
                            Authorization authorization)

Verifies the provided Authorization header against the original Challenge

Parameters:

challenge - the WWW-Authenticate challenge sent to the client in the previous response

requestContent - the RequestContent containing the request header content

authorization - the Authorization header to verify

Returns: