Module iu.util.auth.config

Package iu.auth.config

Interface IuTrustedIssuer

All Superinterfaces:

IuAuthConfig

All Known Implementing Classes:

CaVerifier, PkiVerifier

public interface IuTrustedIssuer
extends IuAuthConfig

Represents a configured private key principal trusted as a token issuer.

Method Summary

Modifier and Type	Method	Description
IuPrincipalIdentity	getPrincipal(IuPrivateKeyPrincipal privateKeyPrincipal)	Gets a verifiable IuPrincipalIdentity that corresponds to a configured private key principal, if the private key was registered as trusted.

Methods inherited from interface iu.auth.config.IuAuthConfig

getAuthenticationEndpoint, getAuthScheme, getRealm

Method Details

getPrincipal

IuPrincipalIdentity getPrincipal(IuPrivateKeyPrincipal privateKeyPrincipal)

Gets a verifiable IuPrincipalIdentity that corresponds to a configured private key principal, if the private key was registered as trusted.

If the private key is held locally by the incoming config, the principal returned by this method will verify as authoritative. If a certificate in the private key's well-known certificate chain is held, but not the private key itself, the principal returned will verify as non-authoritative.

Parameters:

privateKeyPrincipal - private key principal configuration

Returns:

Verifiable IuPrincipalIdentity if trusted; else null