Class SignatureServiceImpl

java.lang.Object

co.ankatech.ankasecure.sdk.internal.service.impl.SignatureServiceImpl

All Implemented Interfaces:

SignatureService

public final class SignatureServiceImpl
extends Object
implements SignatureService

Thread-safe implementation of SignatureService.

Constructor Summary

Constructors

Constructor	Description
SignatureServiceImpl(co.ankatech.ankasecure.openapi.client.AnkaSecureOpenApiClient api)

Method Summary

Modifier and Type	Method	Description
ResignResult	resignBytes(String newKid, String oldJws)	Re-sign a Compact JWS switching to newKid.
ResignResult	resignFile(String newKid, Path oldJws, Path newJws)
ResignResult	resignFileStream(Path oldJws, String newKid, Path input, Path newSigOut)	Re-sign a detached-payload JWS in streaming mode. The existing *General-JSON* header (containing the old kid) is supplied in oldJwsHeader.
SignResult	signBytes(String kid, byte[] data)	Sign an in-memory payload with a server-side **private** key.
SignResult	signFile(String kid, Path input, Path jwsOut)
SignResult	signFileStream(String kid, Path input, Path sigOut)
VerifySignatureResult	verifySignature(Path jwsFile)
VerifySignatureResult	verifySignatureBytes(String jwsToken)	Verify a Compact JWS that is fully in memory.

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

SignatureServiceImpl

public SignatureServiceImpl(co.ankatech.ankasecure.openapi.client.AnkaSecureOpenApiClient api)

Method Details

signFile

public SignResult signFile(String kid,
 Path input,
 Path jwsOut)
                    throws AnkaSecureSdkException

Specified by:

signFile in interface SignatureService

Throws:

AnkaSecureSdkException

verifySignature

public VerifySignatureResult verifySignature(Path jwsFile)
                                      throws AnkaSecureSdkException

Specified by:

verifySignature in interface SignatureService

Throws:

AnkaSecureSdkException

resignFile

public ResignResult resignFile(String newKid,
 Path oldJws,
 Path newJws)
                        throws AnkaSecureSdkException

Specified by:

resignFile in interface SignatureService

Throws:

AnkaSecureSdkException

signFileStream

public SignResult signFileStream(String kid,
 Path input,
 Path sigOut)
                          throws AnkaSecureSdkException

Specified by:

signFileStream in interface SignatureService

Throws:

AnkaSecureSdkException

resignFileStream

public ResignResult resignFileStream(Path oldJws,
 String newKid,
 Path input,
 Path newSigOut)
                              throws AnkaSecureSdkException

Description copied from interface: SignatureService

Re-sign a detached-payload JWS in streaming mode.
The existing *General-JSON* header (containing the old kid) is supplied in oldJwsHeader. The payload itself is streamed from input.

Specified by:

resignFileStream in interface SignatureService

Parameters:

oldJws - UTF-8 file that contains the original JWS header (General-JSON, detached payload)

newKid - key identifier that must sign the refreshed JWS

input - data whose signature is being replaced

newSigOut - destination file that will receive the new signature

Throws:

AnkaSecureSdkException

signBytes

public SignResult signBytes(String kid,
 byte[] data)
                     throws AnkaSecureSdkException

Sign an in-memory payload with a server-side **private** key.

Specified by:

signBytes in interface SignatureService

Parameters:

kid - private-key ID in Anka Secure (must not be null)

data - bytes to be signed (must not be null)

Returns:

SignResult containing the detached Compact JWS and metadata

Throws:

AnkaSecureSdkException - on validation or remote failure

verifySignatureBytes

public VerifySignatureResult verifySignatureBytes(String jwsToken)
                                           throws AnkaSecureSdkException

Verify a Compact JWS that is fully in memory.

Specified by:

verifySignatureBytes in interface SignatureService

Parameters:

jwsToken - textual Compact JWS (UTF-8)

Returns:

outcome, metadata, and Base64 payload

Throws:

AnkaSecureSdkException - on validation or remote failure

resignBytes

public ResignResult resignBytes(String newKid,
 String oldJws)
                         throws AnkaSecureSdkException

Re-sign a Compact JWS switching to newKid.

Specified by:

resignBytes in interface SignatureService

Parameters:

newKid - private-key ID that must generate the new signature

oldJws - existing Compact JWS (UTF-8)

Returns:

dual-key metadata plus the new token

Throws:

AnkaSecureSdkException - on validation or remote failure