Gets the value of this key type. Values are case sensitive. @return The key type.

Sets the operations ({@code key_ops}) of the JWK. @param ops The key operations, {@code null} if not specified. @return This builder.

Parses a JSON object. <p>Specific JSON to Java entity mapping (as per JSON Smart): <ul> <li>JSON true|false map to {@code java.lang.Boolean}.

Parses a JSON Web Token (JWT) claims set from the specified JSON object representation. @param json The JSON object to parse. Must not be {@code null

Signs the specified {@link JWSObject#getSigningInput input} of a {@link JWSObject JWS object}. @param header The JSON Web Signature (JWS) heade

Checks if the specified key use and key operations are consistent. @param use The key use. May be {@code null}. @param ops The key operations. May be

Returns the value of this octet sequence key. @return The key value. It is represented as the Base64URL encoding of the value's big endian re

Returns a standard {@code java.security.interfaces.RSAPublicKey} representation of this RSA JWK. @return The public RSA key. @throws JOSEException I

Gets the subject ({@code sub}) claim. @return The subject claim, {@code null} if not specified.

Parses a JWS object from the specified string in compact format. The parsed JWS object will be given a {@link State#SIGNED} state. @param s The strin

Gets the other primes information ({@code oth}) for the private RSA key, should they exist. @return The RSA other primes information, {@code null} or

Check if the specified date is after the specified reference, given the maximum accepted negative clock skew. <p>Formula: <pre> return date + clock_

Returns the bit length of the specified byte length, preventing integer overflow. @param byteLength The byte length. @return The bit length. @throw

Returns the JSON object representation of the claims set. The claims are serialised according to their insertion order. @return The JSON object repre

Gets the length of the associated Content Encryption Key (CEK). @return The Content Encryption Key (CEK) bit length, zero if not specified.

Returns {@code true} if this JWK contains private or sensitive (non-public) parameters. @return {@code true} if this JWK contains private parameters,

Parses a JWE algorithm from the specified string. @param s The string to parse. Must not be {@code null}. @return The JWE algorithm (matching standa

Parses a JWS header from the specified JSON object. @param jsonObject The JSON object to parse. Must not be {@code null}. @return

Returns a standard {@code java.security.interfaces.RSAPrivateKey} representation of this RSA JWK. @return The private RSA key, {@code null} if not sp

Gets the first Chinese Remainder Theorem (CRT) coefficient ({@code qi})} of the private RSA key. @return The RSA first CRT coefficient. It is represe

Gets the first factor Chinese Remainder Theorem (CRT) exponent ({@code dp}) of the private RSA key. @return The RSA first factor CRT exponent. It is

Gets the first prime factor ({@code p}) of the private RSA key. @return The RSA first prime factor. It is represented as the Base64URL encodi

Gets the second factor Chinese Remainder Theorem (CRT) exponent ({@code dq}) of the private RSA key. @return The RSA second factor CRT exponent. It i

Gets the second prime factor ({@code q}) of the private RSA key. @return The RSA second prime factor. It is represented as the Base64URL enco

Selects the keys from the specified JWK set according to the matcher's criteria. @param jwkSet The JWK set. May be {@code null}. @return The selecte

Encodes a byte array into a base 64 encoded string. @param byteArray The bytes to convert. If {@code null} or length 0 an empty arra

Gets the cryptographic curve(s) for the specified JWS algorithm. @param alg The JWS algorithm. May be {@code null}. @return The curve(s), {@code nul

Gets the algorithm ({@code alg}) parameter. @return The algorithm parameter.

Gets the specific JCA provider for the MAC computation (where required by the JWE encryption method). @return The applicable JCA provider, {@code nul

Returns the names of the critical ({@code crit}) header parameters that are understood and processed by the JWS verifier / JWE decrypter. @return The

Gets the public 'x' parameter. @return The public 'x' parameter.

Sets the issuer ({@code iss}) claim. @param iss The issuer claim, {@code null} if not specified. @return This builder.

Computes the required digest (hashing) cycles for the specified message digest length and derived key length. @param digestLengthBits The length of t

Computes the base 64 encoded character length for the specified input byte length. @param inputLength The input byte length. @param urlSafe {@cod

Gets the original Base64URL used to create this header. @return The parsed Base64URL, {@code null} if the header was created from scratch.

Returns {@code true} if keys with a set use are matched. @return {@code true} if keys with a set ID are matched, else {@code false}.

Sets the JSON Web Key (JWK) Set URL ({@code jku}) parameter. @param jku The JSON Web Key (JWK) Set URL parameter, {@code null} if not spec

Parses a JWS algorithm from the specified string. @param s The string to parse. Must not be {@code null}. @return The JWS algorithm (matching standa

Reads the content of the specified file into a string. @param file The file. Must not be {@code null}. @param charset The expected character set.

Returns a four byte array representation of the specified integer. @param intValue The integer to be converted. @return The byte array representatio

Gets the specific JCA provider for the content encryption. @return The applicable JCA provider, {@code null} implies the default system provi

Gets the Ephemeral Public Key ({@code epk}) parameter. @return The Ephemeral Public Key parameter, {@code null} if not specified.

Gets the JSON Web Key (JWK) Set URL ({@code jku}) parameter. @return The JSON Web Key (JWK) Set URL parameter, {@code null} if not specified.

Returns the key sizes. @return The key sizes in bits, {@code null} if not specified.

Returns the standard object identifier (OID) of this cryptographic curve. @return The OID, {@code null} if not specified.

Returns the standard name of this cryptographic curve. @return The standard name, {@code null} if not specified.

Resolves the matching EC DSA algorithm for the specified EC key (public or private). @param ecKey The EC key. Must not be {@code null}. @return The

Serialises this JWS object to its compact format consisting of Base64URL-encoded parts delimited by period ('.') characters. It must be in a {@link St

Verifies the specified {@link JWSObject#getSignature signature} of a {@link JWSObject JWS object}. @param header The JSON Web Signature (JWS) h

Sets the agreement PartyUInfo ({@code apu}) parameter. @param apu The agreement PartyUInfo parameter, {@code null} if not specified. @ret

Sets the agreement PartyVInfo ({@code apv}) parameter. @param apv The agreement PartyVInfo parameter, {@code null} if not specified. @ret

Computes the SHA-256 thumbprint of this JWK. See RFC 7638 for more information. @return The SHA-256 thumbprint. @throws JOSEException If the SHA-256

Base64-encodes the specified byte array. @param bytes The byte array to encode. Must not be {@code null}. @return The resulting Base64 object.

Returns the Base64URL encoding of the specified elliptic curve 'x', 'y' or 'd' coordinate, with leading zero padding up to the specified field size in

Generates a Content Encryption Key (CEK) for the specified JOSE encryption method. @param enc The encryption method. Must not be {@code null}.

Gets the private 'd' parameter. @return The private 'd' coordinate, {@code null} if not specified (for a public key).

Gets the expiration time ({@code exp}) claim. @return The expiration time, {@code null} if not specified.

Gets the original parsed string used to create the JSON Web Token (JWT). @see #getParsedParts @return The parsed string used to create the JWT, {@co

Gets the specified claim (registered or custom) as {@link java.lang.String}. @param name The name of the claim. Must not be {@code null}. @return Th

Returns the identifier of this public key use. @return The identifier.

Normalises a base 64 encoded string by ensuring any URL-safe characters are replaced with their regular base64 representation and any truncated '=' pa

Splits a compact serialised JOSE object into its Base64URL-encoded parts. @param s The compact serialised JOSE object to split. Must not be

Returns a JSON object representation of this JWK. This method is intended to be called from extending classes. <p>Example: <pre> { "kty" : "RSA",

Sets the X.509 certificate chain ({@code x5c}) of the JWK. @param x5c The X.509 certificate chain as a unmodifiable list, {@code null} if

Counts the illegal / separator characters in the specified base 64 or base 64 URL-safe encoded string. @param b64String The base 64 or base 64 URL-sa

Returns the JOSE algorithms to match. @return The JOSE algorithms, {@code null} if not specified.

Gets the authentication tag. @return The authentication tag.

Gets the cipher text. @return The cipher text.

Gets the claims (registered and custom). <p>Note that the registered claims Expiration-Time ({@code exp}), Not-Before-Time ({@code nbf}) and Issued-A

Gets the JSON Web Key (JWK) ({@code jwk}) parameter. @return The JSON Web Key (JWK) parameter, {@code null} if not specified.

Returns the key IDs to match. @return The key IDs, {@code null} if not specified.

Returns the key types to match. @return The key types, {@code null} if not specified.

Parses an octet sequence JWK from the specified JSON object string representation. @param s The JSON object string to parse. Must not be {@code null}

Returns a portion of the specified byte array. @param byteArray The byte array. Must not be {@code null}. @param beginIndex The beginning index, inc

Sets the X.509 certificate SHA-1 thumbprint ({@code x5t}) of the JWK. @param x5t The X.509 certificate SHA-1 thumbprint, {@code null} if n

Sets the X.509 certificate URL ({@code x5u}) of the JWK. @param x5u The X.509 certificate URL, {@code null} if not specified. @return Thi

Sets the audience ({@code aud}) claim. @param aud The audience claim, {@code null} if not specified. @return This builder.

Sets the compression algorithm ({@code zip}) parameter. @param zip The compression algorithm parameter, {@code null} if not specified. @r

Sets the expiration time ({@code exp}) claim. @param exp The expiration time, {@code null} if not specified. @return This builder.

Returns the key operations to match. @return The key operations, {@code null} if not specified.

Returns the public key uses to match. @return The public key uses, {@code null} if not specified.

Returns {@code true} if keys with a set use are matched. @return {@code true} if keys with a set use are matched, else {@code false}.

Checks if the specified date is before the specified reference, given the maximum accepted positive clock skew. <p>Formula: <pre> return date - cloc

Sets the not-before ({@code nbf}) claim. @param nbf The not-before claim, {@code null} if not specified. @return This builder.

Parses the specified string representing a JSON Web Key (JWK) set. @param s The string to parse. Must not be {@code null}. @return The JWK set. @th

Computes a Hash-based Message Authentication Code (HMAC) for the specified secret and message. @param alg The Java Cryptography Architecture (JC