Package io.micronaut.security.oauth2.endpoint.token.response.validation

Class IssuerClaimValidator

java.lang.Object

io.micronaut.security.oauth2.endpoint.token.response.validation.IssuerClaimValidator

All Implemented Interfaces:

OpenIdClaimsValidator

@Requires(property="micronaut.security.oauth2.openid.claims-validation.issuer",
          notEquals="false")
@Singleton
public class IssuerClaimValidator
extends Object
implements OpenIdClaimsValidator

The Issuer Identifier for the OpenID Provider (which is typically obtained during Discovery) MUST exactly match the value of the iss (issuer) Claim.

Since:

1.2.0

Author:

Sergio del Amo

See Also:

• Open ID Provider Metadata Spec
• ID Token Validation - OpenID Connect Core Spec.

Constructor Summary

Constructors

Constructor	Description
IssuerClaimValidator()

Method Summary

Modifier and Type	Method	Description
boolean	validate(OpenIdClaims claims, OauthClientConfiguration clientConfiguration, OpenIdProviderMetadata providerMetadata)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

IssuerClaimValidator

public IssuerClaimValidator()

Method Details

validate

public boolean validate(OpenIdClaims claims,
 OauthClientConfiguration clientConfiguration,
 OpenIdProviderMetadata providerMetadata)

Specified by:

validate in interface OpenIdClaimsValidator

Parameters:

claims - ID Token Claims

clientConfiguration - OAuth 2.0 Client Configuration

providerMetadata - OpenID Connect provider metadata

Returns:

Whether the JWT Claims pass validation or not.