org.onehippo.sso

Class CredentialCipher

java.lang.Object

org.onehippo.sso.CredentialCipher

public final class CredentialCipher
extends Object

Symmetric cipher that encrypts and decrypts jcr Credentials. It's key is generated dynamically, being unique for the lifetime of the class.

When using the this class to encrypt or decrypt using provided methods, make sure that the same "instance" is used for both the operations. Otherwise you might get exception while decrypting.

Field Summary

Fields

Modifier and Type	Field and Description
static String	HIPPO_CLUSTER_KEY

Method Summary

Modifier and Type	Method and Description
javax.jcr.Credentials	decrypt(String key, byte[] bytes)
javax.jcr.Credentials	decryptFromString(String key, String credentialString) Get the Credentials by decrypting UrlSafeBase64 encoded String.
byte[]	encrypt(String key, javax.jcr.SimpleCredentials credentials)
String	getEncryptedString(String key, javax.jcr.SimpleCredentials credentials) Get the credentials as UrlSafeBase64 encoded String.
static CredentialCipher	getInstance()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

HIPPO_CLUSTER_KEY

public static final String HIPPO_CLUSTER_KEY

See Also:

Constant Field Values

Method Detail

getInstance

public static CredentialCipher getInstance()

encrypt

public byte[] encrypt(String key,
                      javax.jcr.SimpleCredentials credentials)

getEncryptedString

public String getEncryptedString(String key,
                                 javax.jcr.SimpleCredentials credentials)

Get the credentials as UrlSafeBase64 encoded String.

Parameters:

credentials - JCR Simple Credentials

Returns:

Base64 Encoded string of the encrypted credentials.

decryptFromString

public javax.jcr.Credentials decryptFromString(String key,
                                               String credentialString)
                                        throws SignatureException

Get the Credentials by decrypting UrlSafeBase64 encoded String.

Parameters:

credentialString - UrlSafeBase64 encoded string which contains encrypted JCR credential String.

Returns:

JcrCredentials (SimpleCredentials).

Throws:

SignatureException

decrypt

public javax.jcr.Credentials decrypt(String key,
                                     byte[] bytes)
                              throws SignatureException

Throws:

SignatureException