io.micronaut.security.token.validator

Interface TokenValidator

All Superinterfaces:

io.micronaut.core.order.Ordered

All Known Implementing Classes:

JwtTokenValidator

public interface TokenValidator
extends io.micronaut.core.order.Ordered

Responsible for token validation and claims retrieval.

Since:

1.0

Author:

Sergio del Amo

Field Summary

Fields inherited from interface io.micronaut.core.order.Ordered

HIGHEST_PRECEDENCE, LOWEST_PRECEDENCE

Method Summary

Modifier and Type	Method and Description
org.reactivestreams.Publisher<Authentication>	validateToken(java.lang.String token) Deprecated. Use validateToken(String, HttpRequest) instead.
default org.reactivestreams.Publisher<Authentication>	validateToken(java.lang.String token, io.micronaut.http.HttpRequest<?> request) Validates the provided token and returns the authentication state.

Methods inherited from interface io.micronaut.core.order.Ordered

getOrder

Method Detail

validateToken

@Deprecated
org.reactivestreams.Publisher<Authentication> validateToken(java.lang.String token)

Deprecated. Use validateToken(String, HttpRequest) instead.

Validates the provided token and returns the authentication state.

Parameters:

token - The token string

Returns:

An authentication publisher. If the publisher emits an error, no further validators will be attempted and the validation will fail. If the publisher is empty, further validators will be attempted. If the publisher emits an authentication, that authentication will be used.

validateToken

default org.reactivestreams.Publisher<Authentication> validateToken(java.lang.String token,
                                                                    @Nullable
                                                                    io.micronaut.http.HttpRequest<?> request)

Validates the provided token and returns the authentication state.

Parameters:

token - The token string

request - The current request (or null)

Returns:

An authentication publisher. If the publisher emits an error, no further validators will be attempted and the validation will fail. If the publisher is empty, further validators will be attempted. If the publisher emits an authentication, that authentication will be used.