com.amazon.speech.speechlet.authentication

Class SpeechletRequestSignatureVerifier

java.lang.Object

com.amazon.speech.speechlet.authentication.SpeechletRequestSignatureVerifier

public final class SpeechletRequestSignatureVerifier
extends Object

Provides a utility method to verify the signature of a speechlet request.

Method Summary

Modifier and Type	Method and Description
static void	checkRequestSignature(byte[] serializedSpeechletRequest, String baseEncoded64Signature, String signingCertificateChainUrl) Verifies the certificate authenticity using the configured TrustStore and the signature of the speechlet request.
static X509Certificate	retrieveAndVerifyCertificateChain(String signingCertificateChainUrl) Retrieves the certificate from the specified URL and confirms that the certificate is valid.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

checkRequestSignature

public static void checkRequestSignature(byte[] serializedSpeechletRequest,
                                         String baseEncoded64Signature,
                                         String signingCertificateChainUrl)

Verifies the certificate authenticity using the configured TrustStore and the signature of the speechlet request.

Parameters:

serializedSpeechletRequest - speechlet request serialized as a string of JSON

baseEncoded64Signature - the signature for provided in the request header

signingCertificateChainUrl - the certificate chain URL provided in the request header

retrieveAndVerifyCertificateChain

public static X509Certificate retrieveAndVerifyCertificateChain(String signingCertificateChainUrl)
                                                         throws CertificateException

Retrieves the certificate from the specified URL and confirms that the certificate is valid.

Parameters:

signingCertificateChainUrl - the URL to retrieve the certificate chain from

Returns:

the certificate at the specified URL, if the certificate is valid

Throws:

CertificateException - if the certificate cannot be retrieve or is invalid