Package io.micronaut.security.token.jwt.generator

Class SignedRefreshTokenGenerator

java.lang.Object

io.micronaut.security.token.jwt.generator.SignedRefreshTokenGenerator

All Implemented Interfaces:

RefreshTokenGenerator, RefreshTokenValidator

@Singleton
@Requires(beans=RefreshTokenConfiguration.class)
public class SignedRefreshTokenGenerator
extends Object
implements RefreshTokenGenerator, RefreshTokenValidator

The default implementation of RefreshTokenGenerator and RefreshTokenValidator. Create and verify a JWS encoded object whose payload is a UUID with a hash-based message authentication code (HMAC).

Since:

2.0.0

Author:

Sergio del Amo

See Also:

• JSON Web Signature (JWS) with HMAC protection

Constructor Summary

Constructors

Constructor	Description
SignedRefreshTokenGenerator(RefreshTokenConfiguration config)

Method Summary

Modifier and Type	Method	Description
String	createKey(Authentication authentication)
Optional<String>	generate(Authentication authentication, String token)
Optional<String>	validate(String refreshToken)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

SignedRefreshTokenGenerator

public SignedRefreshTokenGenerator(RefreshTokenConfiguration config)

Parameters:

config - Signed Refresh Token generator

Method Details

createKey

@NonNull
public String createKey(@NonNull
 Authentication authentication)

Specified by:

createKey in interface RefreshTokenGenerator

Parameters:

authentication - The user details

Returns:

The internal value that will persisted.

generate

@NonNull
public Optional<String> generate(@NonNull
 Authentication authentication,
 @NonNull
 String token)

Specified by:

generate in interface RefreshTokenGenerator

Parameters:

authentication - The user details

token - The internal value

Returns:

The refresh token

validate

@NonNull
public Optional<String> validate(@NonNull
 String refreshToken)

Specified by:

validate in interface RefreshTokenValidator

Parameters:

refreshToken - The refresh token

Returns:

The validated token wrapped in an Optional or Optional#empty() if the supplied token is invalid.