Saukar da JWK na nesa a jose4j ta hanyar wakili na HTTP

Mai ɗaukar saitin maɓalli na nesa na jose4j yana da nasa abin dawo da HTTP. Saita wannan abu lokacin da manhaja za ta iya kiran API amma ba za ta iya sauke JSON Web Keys na mai bayarwa ba.

API na jose4j 0.9.6 yana bayar da Get.setHttpProxy da HttpsJwks.setSimpleHttpGet:

org.jose4j.http.Get downloader = new org.jose4j.http.Get();
downloader.setHttpProxy(new java.net.Proxy(
    java.net.Proxy.Type.HTTP,
    new java.net.InetSocketAddress("proxy.example", 8080)));
downloader.setConnectTimeout(5000);
downloader.setReadTimeout(15000);

org.jose4j.jwk.HttpsJwks jwks = new org.jose4j.jwk.HttpsJwks(
    "https://issuer.example/keys");
jwks.setSimpleHttpGet(downloader);

Yi amfani da wannan abin jwks da aka saita a tsarin warware maɓalli na manhaja. Ƙirƙirar shi kusa da mai warware da ke akwai ba ya canza ɗaya misalin mai warware ɗin.

Get yana amfani da URL da HttpsURLConnection. Ana ba da Proxy bayyananne ga URL.openConnection(Proxy); wannan yana iyakance hanyar ga wannan mai ɗauka maimakon buƙatar sabuwar manufar wakili ta dukan JVM. Tabbatar da wakili, idan an buƙata, wani al'amari ne na jigila. URL na mai bayarwa da aka amince kuma jama'a za su iya isa gare shi na iya amfani da adireshin HTTP daga jerin wakilan HTTP lokacin da aka yarda da masu shiga tsakani na jama'a kuma ba a saita asusun wakili ba.

HttpsJwks yana ajiye maɓalli a ajiya ga kowane misali, bisa kanun ajiya da saitinsa na tsawon ajiya na asali. Riƙe misalin don samun wannan amfani. Maɓallin da aka riga aka ajiye zai iya barin tabbatarwa ta ci gaba ba tare da amfani da hanyar sadarwa ba, yayin da dawowa ko sabuntawa na gaba har yanzu ya dogara da hanyar da aka saita.

Wannan yana saita dawowar maɓalli. Tabbatar da tokan har yanzu yana buƙatar manufar tabbatarwa ta yau da kullum ta manhaja kan sa hannu, mai bayarwa, masu sauraro da sauran bincike; samun saitin maɓallin JSON shi kaɗai ba ya yin waɗannan binciken.