-
Notifications
You must be signed in to change notification settings - Fork 1
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #9 from OSGP/feature/FDP-1737-signing-library-in-g…
…xf-java-utilities FDP-1737: enable signing and verifying in ProducerRecord signature header
- Loading branch information
Showing
9 changed files
with
410 additions
and
30 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
68 changes: 68 additions & 0 deletions
68
...c/main/java/com/alliander/osgp/kafka/message/signing/MessageSigningAutoConfiguration.java
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,68 @@ | ||
package com.alliander.osgp.kafka.message.signing; | ||
|
||
import java.io.IOException; | ||
import java.io.UncheckedIOException; | ||
import java.nio.charset.StandardCharsets; | ||
import org.springframework.beans.factory.annotation.Value; | ||
import org.springframework.context.annotation.Bean; | ||
import org.springframework.context.annotation.Configuration; | ||
import org.springframework.core.io.Resource; | ||
|
||
@Configuration | ||
public class MessageSigningAutoConfiguration { | ||
|
||
@Value("${message-signing.enabled}") | ||
private boolean signingEnabled; | ||
|
||
@Value("${message-signing.strip-headers}") | ||
private boolean stripHeaders; | ||
|
||
@Value("${message-signing.signature.algorithm:SHA256withRSA}") | ||
private String signatureAlgorithm; | ||
|
||
@Value("${message-signing.signature.provider:SunRsaSign}") | ||
private String signatureProvider; | ||
|
||
@Value("${message-signing.signature.key.algorithm:RSA}") | ||
private String signatureKeyAlgorithm; | ||
|
||
@Value("${message-signing.signature.key.size:2048}") | ||
private int signatureKeySize; | ||
|
||
@Value("${message-signing.signature.key.private:#{null}}") | ||
private Resource signingKeyResource; | ||
|
||
@Value("${message-signing.signature.key.public:#{null}}") | ||
private Resource verificationKeyResource; | ||
|
||
@Bean | ||
public MessageSigner messageSigner() { | ||
if(this.signingEnabled) { | ||
return MessageSigner.newBuilder() | ||
.signingEnabled(this.signingEnabled) | ||
.stripAvroHeader(this.stripHeaders) | ||
.signatureAlgorithm(this.signatureAlgorithm) | ||
.signatureProvider(this.signatureProvider) | ||
.signatureKeyAlgorithm(this.signatureKeyAlgorithm) | ||
.signatureKeySize(this.signatureKeySize) | ||
.signingKey(this.readKeyFromPemResource(this.signingKeyResource)) | ||
.verificationKey(this.readKeyFromPemResource(this.verificationKeyResource)) | ||
.build(); | ||
} else { | ||
return MessageSigner.newBuilder() | ||
.signingEnabled(false) | ||
.build(); | ||
} | ||
} | ||
|
||
private String readKeyFromPemResource(final Resource keyResource) { | ||
if (keyResource == null) { | ||
return null; | ||
} | ||
try { | ||
return keyResource.getContentAsString(StandardCharsets.ISO_8859_1); | ||
} catch (final IOException e) { | ||
throw new UncheckedIOException("Unable to read " + keyResource.getFilename() + " as ISO-LATIN-1 PEM text", e); | ||
} | ||
} | ||
} |
1 change: 1 addition & 0 deletions
1
...esources/META-INF/spring/org.springframework.boot.autoconfigure.AutoConfiguration.imports
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1 @@ | ||
com.alliander.osgp.kafka.message.signing.MessageSigningAutoConfiguration |
Oops, something went wrong.