Returns a type-safe immutable {@code Set} containing the specified array elements. @param elements array elements to include in the set @param <T>

Computes and returns the canonical <a href="https://www.rfc-editor.org/rfc/rfc7638">JWK Thumbprint</a> of this JWK using the {@code SHA-256} hash algo

Returns the index in the character sequence to end reading at, taking into account its length. @return The end index in the character sequence (exclu

Returns {@code true} if the specified argument is an Object or primitive array, {@code false} otherwise. @param obj the object instance to check @ret

@since 0.10.0 to support assertValid(Key, boolean)

Multiply this curve's generator (aka 'base point') by scalar {@code s} on the curve. @param s the scalar value to multiply

Iterate over the specified {@link Closeable} instances, invoking {@link Closeable#close()} on each one, ignoring any potential {@link IOException}s.

Concatenate the specified set with the specified array elements, resulting in a new {@link LinkedHashSet} with the array elements appended to the end

Returns a registry of all standard Key Operations in the {@code JSON Web Key Operations Registry} defined by <a href="https://datatracker.ietf.org/doc

Determine if the given objects are equal, returning <code>true</code> if both are <code>null</code> or <code>false</code> if only one is <code>null</c

Return as hash code for the given object; typically the value of <code>{@link Object#hashCode()}</code>. If the object is an array, this method will d

Returns a new builder used to create {@link Parser}s that parse JSON into {@link Jwk} instances. For example: <blockquote><pre> Jwk&lt;?&gt; jwk = Jwk

Check whether the given Iterator contains the given element. @param iterator the Iterator to check @param element the element to look for @return <c

Returns a cryptographic digest of the request {@link Request#getPayload() payload}. @param request the request containing the data to be hashed, mac'

Returns a type-safe immutable empty {@code Set}. @param <T> set element type @return a type-safe immutable empty {@code Set}.

Returns a registry of all standard Elliptic Curves in the {@code JSON Web Key Elliptic Curve Registry} defined by <a href="https://datatracker.ietf.or

Returns the required length in bits <em>(not bytes)</em> of keys usable with the associated algorithm. @return the required length in bits <em>(not b

Sets the JWK's {@link #id(String) kid} value to be the Base64URL-encoding of its {@code SHA-256} {@link Jwk#thumbprint(HashAlgorithm) thumbprint}. Th

Returns a non-null set, either {@code s} if it is not null, or {@link #emptySet()} otherwise. @param s the set to check for null @param <T> type of

Handle any Throwable thrown; by default, throws the given exception. <p> This method provides a point to implement custom exception handling. The defa

Sets the {@link SecureRandom} to use during cryptographic signing or encryption operations, or {@code null} if a default {@link SecureRandom} should b

Returns JJWT's default SecureRandom number generator - a static singleton which may be cached if desired. The RNG is initialized using the JVM default

Assert a boolean expression, throwing <code>IllegalStateException</code> if the test result is <code>false</code>. Call isTrue if you wish to throw Il

Marshal the elements from the given enumeration into an array of the given type. Enumeration elements must be assignable to the type of the given arra

Sets the signature verification SecretKey used to verify all encountered JWS signatures. If the encountered JWT string is not a JWS (e.g. unsigned or

Returns a {@code CharBuffer} that wraps {@code seq}, or an empty buffer if {@code seq} is null. If {@code seq} is already a {@code CharBuffer}, it is

Returns the specified key's key length (in bits) if possible, or {@code -1} if unable to determine the length. @param key the key to inspect @return

Returns all standard JWA <a href="https://www.rfc-editor.org/rfc/rfc7518.html#section-5">Cryptographic Algorithms for Content Encryption</a> defined i

Returns a registry of various (<em>but not all</em>) <a href="https://www.iana.org/assignments/named-information/named-information.xhtml#hash-alg">IAN

Returns the JWE <a href="https://tools.ietf.org/html/rfc7516#section-4.1.2">{@code enc} (Encryption Algorithm)</a> header value or {@code null} if not

Returns the {@code SecureRandom} to use when performing cryptographic operations during the request, or {@code null} if a default {@link SecureRandom}

Asserts that a specified {@code value} is greater than the given {@code requirement}, throwing an {@link IllegalArgumentException} with the given mess

Appends a space character (<code>' '</code>) if the argument is not empty, otherwise does nothing. This method can be thought of as &quot;non-empty s

Signs the constructed JWT with the specified key using the key's <em>recommended signature algorithm</em> as defined below, producing a JWS. If the r

Asserts that the provided object is an instance of the provided class, throwing an {@link IllegalStateException} otherwise. <pre class="code">Assert.s

Returns a new clone of the underlying password character array for use during derivation algorithms. Like all {@code SecretKey} implementations, if y

Sets the {@code x5c} (X.509 Certificate Chain) of the associated JWT or JWK. A {@code null} value will remove the property from the JSON map. The init

<b>WARNING - UNSAFE OPERATION - RETURN VALUES CONTAIN RAW KEY MATERIAL, DO NOT LOG OR PRINT TO SYSTEM.OUT.</b> Converts the specified JWK into JSON, i

Returns quietly if the specified key is allowed to create signatures using this algorithm according to the <a href="https://tools.ietf.org/html/rfc751

Sets the decryption SecretKey used to decrypt all encountered JWEs. If the encountered JWT string is not a JWE (e.g. a JWS), this key is not used. <p

Removes the map entry with the specified key. <p>This method is the same as {@link Map#remove Map.remove}, but instead returns the mutator instance fo

Convert the specified data into another formatted data value. @param t the data to convert @return the resulting formatted data value @throws Encodin

Encrypts the constructed JWT with the specified symmetric {@code key} using the provided {@code enc}ryption algorithm, producing a JWE. Because it is

Return an ISO-8601-formatted string with millisecond precision representing the specified {@code date}. @param date the date for which to create an I

Returns the JWT <a href="https://www.rfc-editor.org/rfc/rfc7519.html#section-4.1.2"> <code>sub</code></a> (subject) value or {@code null} if not prese

Return the same value as <code>{@link Boolean#hashCode()}</code>. @param bool the boolean to get a hashcode @return the same value as {@link Boolean#

Returns {@code true} if the enum instance represents an HMAC signature algorithm, {@code false} otherwise. @return {@code true} if the enum instance

Handle any IOExceptions thrown. <p> This method provides a point to implement custom exception handling. The default behavior is to re-throw the excep

Parses the {@code jws} argument, expected to be a cryptographically-signed {@code Claims} JWS. This is a convenience method logically equivalent to th

Sets the private key's corresponding {@code PublicKey} so that its public key material will be available to algorithms that require it. @param public

Converts the specified Java object into a formatted data byte array. @param t the object to serialize @return the serialized byte array representing