io.micronaut.security.oauth2.openid.idtoken.validation

Class AudienceJwtClaimsValidator

java.lang.Object

io.micronaut.security.oauth2.openid.idtoken.validation.AudienceJwtClaimsValidator

All Implemented Interfaces:

IdTokenClaimsValidator, io.micronaut.security.token.jwt.validator.JwtClaimsValidator

@Requires(property="micronaut.security.token.jwt.claims-validators.audience",notEquals="false") @Requires(beans=OauthConfiguration.class)
 @Singleton
public class AudienceJwtClaimsValidator
extends java.lang.Object
implements IdTokenClaimsValidator

ID Token Audience validator. The Client MUST validate that the aud (audience) Claim contains its client_id value registered at the Issuer identified by the iss (issuer) Claim as an audience. The aud (audience) Claim MAY contain an array with more than one element. The ID Token MUST be rejected if the ID Token does not list the Client as a valid audience, or if it contains additional audiences not trusted by the Client.

Since:

1.0.0

Author:

Sergio del Amo

See Also:

ID Token Validation OpenID Connect Core Spec

Field Summary

Fields inherited from interface io.micronaut.security.token.jwt.validator.JwtClaimsValidator

PREFIX

Constructor Summary

Constructors

Constructor and Description
AudienceJwtClaimsValidator(OauthConfiguration oauthConfiguration)

Method Summary

Modifier and Type	Method and Description
boolean	validate(io.micronaut.security.token.jwt.generator.claims.JwtClaims claims)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AudienceJwtClaimsValidator

public AudienceJwtClaimsValidator(@Nonnull
                                  OauthConfiguration oauthConfiguration)

Parameters:

oauthConfiguration - Oauth Configuration.

Method Detail

validate

public boolean validate(io.micronaut.security.token.jwt.generator.claims.JwtClaims claims)

Specified by:

validate in interface io.micronaut.security.token.jwt.validator.JwtClaimsValidator