io.micronaut.security.oauth2.client

Class IdTokenClaimsValidator

java.lang.Object

io.micronaut.security.oauth2.client.IdTokenClaimsValidator

All Implemented Interfaces:

GenericJwtClaimsValidator, JwtClaimsValidator

@Requires(property="micronaut.security.authentication",value="idtoken") @Requires(property="micronaut.security.token.jwt.claims-validators.openid-idtoken",notEquals="false")
 @Singleton
public class IdTokenClaimsValidator
extends java.lang.Object
implements GenericJwtClaimsValidator

For authentication mode performs the following verification as described in the OpenID Connect Spec. - The Issuer Identifier for the OpenID Provider (which is typically obtained during Discovery) MUST exactly match the value of the iss (issuer) Claim. - The Client MUST validate that the aud (audience) Claim contains its client_id value registered at the Issuer identified by the iss (issuer) Claim as an audience. The aud (audience) Claim MAY contain an array with more than one element. - If the ID Token contains multiple audiences, the Client SHOULD verify that an azp Claim is present. - If an azp (authorized party) Claim is present, the Client SHOULD verify that its client_id is the Claim Value. * @see ID Token Validation

Since:

2.2.0

Author:

Sergio del Amo

Field Summary

Fields inherited from interface io.micronaut.security.token.jwt.validator.JwtClaimsValidator

PREFIX

Constructor Summary

Constructors

Constructor and Description
IdTokenClaimsValidator(java.util.Collection<OauthClientConfiguration> oauthClientConfigurations)

Method Summary

Modifier and Type	Method and Description
boolean	validate(JwtClaims claims)
boolean	validate(JwtClaims claims, io.micronaut.http.HttpRequest<?> request)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

IdTokenClaimsValidator

public IdTokenClaimsValidator(java.util.Collection<OauthClientConfiguration> oauthClientConfigurations)

Parameters:

oauthClientConfigurations - OpenId client configurations

Method Detail

validate

public boolean validate(JwtClaims claims)

Specified by:

validate in interface JwtClaimsValidator

Parameters:

claims - JWT Claims

Returns:

whether the JWT claims pass validation.

validate

public boolean validate(@NonNull
                        JwtClaims claims,
                        @Nullable
                        io.micronaut.http.HttpRequest<?> request)

Specified by:

validate in interface JwtClaimsValidator