org.dcache.xrootd.plugins.alice

Class EncryptedAuthzToken

java.lang.Object

org.dcache.xrootd.plugins.alice.EncryptedAuthzToken

public class EncryptedAuthzToken
extends Object

This class does the decoding/decryption of a given authorization token which has to apply to the follwing format: -----BEGIN SEALED CIPHER----- .. .. (Base64-encoded cipher) .. -----END SEALED CIPHER----- -----BEGIN SEALED ENVELOPE----- .. .. (Base64-encoded envelope) .. -----END SEALED ENVELOPE----- The result is an authorization token object.

Author:

Martin Radicke

Constructor Summary

Constructors

Constructor and Description
EncryptedAuthzToken(String rawToken, RSAPrivateKey privKey, RSAPublicKey pubKey) Creates a new decryption instance.

Method Summary

Modifier and Type	Method and Description
String	decrypt() Does the actual decryption/decoding of the raw token.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

EncryptedAuthzToken

public EncryptedAuthzToken(String rawToken,
                           RSAPrivateKey privKey,
                           RSAPublicKey pubKey)
                    throws CorruptedEnvelopeException

Creates a new decryption instance.

Parameters:

rawToken - rawToken the sealed token which is going to be decrypted

privKey - the local private RSA key

pubKey - the remote public RSA key

Throws:

CorruptedEnvelopeException

Method Detail

decrypt

public String decrypt()
               throws NoSuchProviderException,
                      InvalidKeyException,
                      NoSuchAlgorithmException,
                      NoSuchPaddingException,
                      InvalidAlgorithmParameterException,
                      BadPaddingException,
                      IllegalBlockSizeException,
                      SignatureException

Does the actual decryption/decoding of the raw token. This method should not be called for more than one times.

Returns:

the decrypted envelope or NULL if signature could not be verified

Throws:

NoSuchProviderException

InvalidKeyException

NoSuchAlgorithmException

NoSuchPaddingException

InvalidAlgorithmParameterException

BadPaddingException

IllegalBlockSizeException

SignatureException