chore: format

Author: diegomarquezp

oauth2_http/java/com/google/auth/oauth2/OAuth2Utils.java

@@ -285,19 +285,17 @@ public static PrivateKey privateKeyFromPkcs8(String privateKeyPkcs8) throws IOEx
   /**
    * Reads a private key from a PKCS#8 or SEC1 encoded string.
    *
-   * <p>If the key is labeled with "-----BEGIN PRIVATE KEY-----", it is parsed as PKCS#8
-   * as per RFC 7468 Section 10.
-   * If it fails and the algorithm is EC, it attempts to read with "-----BEGIN EC PRIVATE KEY-----"
-   * as per RFC 5915 Section 3, which indicates SEC1 format.
+   * <p>If the key is labeled with "-----BEGIN PRIVATE KEY-----", it is parsed as PKCS#8 as per RFC
+   * 7468 Section 10. If it fails and the algorithm is EC, it attempts to read with "-----BEGIN EC
+   * PRIVATE KEY-----" as per RFC 5915 Section 3, which indicates SEC1 format.
    *
    * @see <a href="https://datatracker.ietf.org/doc/html/rfc7468#section-10">RFC 7468 Section 10</a>
    * @see <a href="https://datatracker.ietf.org/doc/html/rfc5915#section-3">RFC 5915 Section 3</a>
-   *
    * @param privateKeyPkcs8 base64 encoded private key string
    * @param algorithm expected algorithm of the private key
    * @return the private key.
-   * @throws IOException if the private key data is invalid or if an unexpected exception occurs during
-   *     key creation.
+   * @throws IOException if the private key data is invalid or if an unexpected exception occurs
+   *     during key creation.
    */
   public static PrivateKey privateKeyFromPkcs8(String privateKeyPkcs8, Pkcs8Algorithm algorithm)
       throws IOException {
@@ -325,22 +323,22 @@ public static PrivateKey privateKeyFromPkcs8(String privateKeyPkcs8, Pkcs8Algori
     throw new IOException("Unexpected exception reading PKCS#8 data", unexpectedException);
   }
 
-
   /**
    * Parses an EC private key in SEC1 format using fixed prefix verification.
    *
-   * <p>This function assumes that standard SEC1 keys for P-256 generated by OpenSSL have a
-   * known, stable structure of bytes at the beginning. This "fingerprint" allows us to verify
-   * the format without complete ASN.1 parsing. 
-   * If the fingerprint matches, we can safely extract the private key value using fixed offsets.
+   * <p>This function assumes that standard SEC1 keys for P-256 generated by OpenSSL have a known,
+   * stable structure of bytes at the beginning. This "fingerprint" allows us to verify the format
+   * without complete ASN.1 parsing. If the fingerprint matches, we can safely extract the private
+   * key value using fixed offsets.
    *
    * @param bytes The raw bytes of the SEC1 key.
    * @return The PrivateKey object.
    * @throws GoogleAuthException If parsing fails or the key format is unsupported.
    */
   private static PrivateKey privateKeyFromSec1(byte[] bytes) throws IOException {
     if (!hasStandardSec1P256Prefix(bytes)) {
-      throw new GoogleAuthException(false, 0, "Unsupported SEC1 key format: standard prefix not found.", null);
+      throw new GoogleAuthException(
+          false, 0, "Unsupported SEC1 key format: standard prefix not found.", null);
     }
     BigInteger s = extractPrivateKeyValue(bytes);
     return createEcPrivateKey(s);
@@ -349,25 +347,29 @@ private static PrivateKey privateKeyFromSec1(byte[] bytes) throws IOException {
   /**
    * Verifies if the bytes start with the standard SEC1 P-256 prefix.
    *
-   * <p>The prefix is derived from the standard DER encoding of the ECPrivateKey structure
-   * defined in RFC 5915 Section 3. 
-   * For P-256 with named curve parameters and public key included, the prefix is stable:
-   * <code>[0x30, 0x77, 0x02, 0x01, 0x01, 0x04, 0x20]</code>
+   * <p>The prefix is derived from the standard DER encoding of the ECPrivateKey structure defined
+   * in RFC 5915 Section 3. For P-256 with named curve parameters and public key included, the
+   * prefix is stable: <code>[0x30, 0x77, 0x02, 0x01, 0x01, 0x04, 0x20]</code>
    *
    * @see <a href="https://datatracker.ietf.org/doc/html/rfc5915#section-3">RFC 5915 Section 3</a>
-   *
    * @param bytes The raw bytes of the key.
    * @return true if the prefix matches.
    */
   private static boolean hasStandardSec1P256Prefix(byte[] bytes) {
     if (bytes.length < 7) return false;
-    return bytes[0] == 0x30 && // Sequence
-           bytes[1] == 0x77 && // Length
-           bytes[2] == 0x02 && // Integer
-           bytes[3] == 0x01 && // Length
-           bytes[4] == 0x01 && // Version
-           bytes[5] == 0x04 && // Octet String
-           bytes[6] == 0x20;   // Length 32
+    return bytes[0] == 0x30
+        && // Sequence
+        bytes[1] == 0x77
+        && // Length
+        bytes[2] == 0x02
+        && // Integer
+        bytes[3] == 0x01
+        && // Length
+        bytes[4] == 0x01
+        && // Version
+        bytes[5] == 0x04
+        && // Octet String
+        bytes[6] == 0x20; // Length 32
   }
 
   /**
@@ -387,12 +389,10 @@ private static BigInteger extractPrivateKeyValue(byte[] bytes) {
   /**
    * Creates an EC PrivateKey from the private key value 's' using P-256 parameters.
    *
-   * <p>Algorithm steps:
-   * 1. Get an instance of AlgorithmParameters for "EC".
-   * 2. Initialize it with secp256r1 curve spec (requirement as per GDCH supported curve).
-   * 3. Extract ECParameterSpec from parameters.
-   * 4. Create ECPrivateKeySpec with the extracted private key value and parameters.
-   * 5. Generate PrivateKey using KeyFactory.
+   * <p>Algorithm steps: 1. Get an instance of AlgorithmParameters for "EC". 2. Initialize it with
+   * secp256r1 curve spec (requirement as per GDCH supported curve). 3. Extract ECParameterSpec from
+   * parameters. 4. Create ECPrivateKeySpec with the extracted private key value and parameters. 5.
+   * Generate PrivateKey using KeyFactory.
    *
    * @param s The private key value.
    * @return The PrivateKey object.
@@ -401,23 +401,22 @@ private static BigInteger extractPrivateKeyValue(byte[] bytes) {
   private static PrivateKey createEcPrivateKey(BigInteger s) throws IOException {
     try {
       AlgorithmParameters params = AlgorithmParameters.getInstance("EC");
-      
+
       params.init(new ECGenParameterSpec("secp256r1"));
-      
+
       ECParameterSpec ecParams = params.getParameterSpec(ECParameterSpec.class);
 
       ECPrivateKeySpec keySpec = new ECPrivateKeySpec(s, ecParams);
-      
+
       KeyFactory keyFactory = KeyFactory.getInstance("EC");
-      
+
       return keyFactory.generatePrivate(keySpec);
     } catch (GeneralSecurityException e) {
       throw new GoogleAuthException(false, 0, "Failed to create EC Private Key", e);
     }
   }
 
   /**
-
    * Generates a Basic Authentication header string for the provided username and password.
    *
    * <p>This method constructs a Basic Authentication string using the provided username and