Interface AcmeExternalAccountBindingProvider

public interface AcmeExternalAccountBindingProvider

Secret-confining external-account-binding verification SPI.

Implementations verify and consume nested EAB authority internally and must never return HMAC key material, raw JWS bytes, or any other secret material in the AcmeExternalAccountBindingProvider.Binding result.

Thread safety

Implementations must be thread-safe; verify(AcmeExternalAccountBindingProvider.Request, ProviderConfig) may be called concurrently for independent account-creation requests.

Since:

1.0

Nested Class Summary

Nested Classes

Modifier and Type	Interface	Description
static final record	AcmeExternalAccountBindingProvider.Binding	Finite EAB policy output without secret material.
static final record	AcmeExternalAccountBindingProvider.Request	Exact bounded EAB verification request.

Method Summary

Modifier and Type	Method	Description
String	id()	Returns the stable, explicitly configured provider identity.
AcmeExternalAccountBindingProvider.Binding	verify(AcmeExternalAccountBindingProvider.Request request, ProviderConfig configuration)	Verifies and, when configured, consumes one exact nested EAB JWS.

Method Details

id

String id()

Returns the stable, explicitly configured provider identity.

Returns:

the provider identity used in configuration

verify

AcmeExternalAccountBindingProvider.Binding verify(AcmeExternalAccountBindingProvider.Request request,
 ProviderConfig configuration)

Verifies and, when configured, consumes one exact nested EAB JWS.

Parameters:

request - bounded EAB verification request

configuration - explicit provider configuration

Returns:

verified policy binding without HMAC key material