io.micronaut.security.token.jwt.validator

Class JwtTokenValidator

java.lang.Object

io.micronaut.security.token.jwt.validator.JwtTokenValidator

All Implemented Interfaces:

io.micronaut.core.order.Ordered, TokenValidator

@Singleton
public class JwtTokenValidator
extends java.lang.Object
implements TokenValidator

Since:

1.0

Author:

Sergio del Amo

See Also:

Validating JWT Access Tokens

Field Summary

Fields

Modifier and Type	Field and Description
protected JwtAuthenticationFactory	jwtAuthenticationFactory
protected JwtValidator	validator

Fields inherited from interface io.micronaut.core.order.Ordered

HIGHEST_PRECEDENCE, LOWEST_PRECEDENCE

Constructor Summary

Constructors

Constructor and Description
JwtTokenValidator(java.util.Collection<SignatureConfiguration> signatureConfigurations, java.util.Collection<EncryptionConfiguration> encryptionConfigurations, java.util.Collection<GenericJwtClaimsValidator> genericJwtClaimsValidators, JwtAuthenticationFactory jwtAuthenticationFactory) Constructor.
JwtTokenValidator(JwtValidator validator, JwtAuthenticationFactory jwtAuthenticationFactory)

Method Summary

Modifier and Type	Method and Description
org.reactivestreams.Publisher<Authentication>	validateToken(java.lang.String token, io.micronaut.http.HttpRequest<?> request) Validates the provided token and returns the authentication state.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface io.micronaut.core.order.Ordered

getOrder

Field Detail

jwtAuthenticationFactory

protected final JwtAuthenticationFactory jwtAuthenticationFactory

validator

protected final JwtValidator validator

Constructor Detail

JwtTokenValidator

@Inject
public JwtTokenValidator(java.util.Collection<SignatureConfiguration> signatureConfigurations,
                                 java.util.Collection<EncryptionConfiguration> encryptionConfigurations,
                                 java.util.Collection<GenericJwtClaimsValidator> genericJwtClaimsValidators,
                                 JwtAuthenticationFactory jwtAuthenticationFactory)

Constructor.

Parameters:

signatureConfigurations - List of Signature configurations which are used to attempt validation.

encryptionConfigurations - List of Encryption configurations which are used to attempt validation.

genericJwtClaimsValidators - Generic JWT Claims validators which should be used to validate any JWT.

jwtAuthenticationFactory - Utility to generate an Authentication given a JWT.

JwtTokenValidator

public JwtTokenValidator(JwtValidator validator,
                         JwtAuthenticationFactory jwtAuthenticationFactory)

Parameters:

validator - Validates the JWT

jwtAuthenticationFactory - The authentication factory

Method Detail

validateToken

public org.reactivestreams.Publisher<Authentication> validateToken(java.lang.String token,
                                                                   @Nullable
                                                                   io.micronaut.http.HttpRequest<?> request)

Description copied from interface: TokenValidator

Validates the provided token and returns the authentication state.

Specified by:

validateToken in interface TokenValidator

Parameters:

token - The token string.

request - The current request (or null)

Returns:

Publishes Authentication based on the JWT or empty if the validation fails.