Package org.keycloak.authentication.authenticators.client

Class JWTClientValidator

java.lang.Object

org.keycloak.authentication.authenticators.client.JWTClientValidator

public class JWTClientValidator
extends Object

Common validation for JWT client authentication with private_key_jwt or with client_secret

Author:

Marek Posolda

Constructor Summary

Constructors

Constructor	Description
JWTClientValidator(ClientAuthenticationFlowContext context, String clientAuthenticatorProviderId)

Method Summary

Modifier and Type	Method	Description
boolean	clientAssertionParametersValidation()
ClientModel	getClient()
String	getClientAssertion()
ClientAuthenticationFlowContext	getContext()
JWSInput	getJws()
jakarta.ws.rs.core.MultivaluedMap<String,String>	getParams()
RealmModel	getRealm()
JsonWebToken	getToken()
void	readJws()
boolean	validateClient()
boolean	validateSignatureAlgorithm()
void	validateToken()
void	validateTokenAudience(ClientAuthenticationFlowContext context, RealmModel realm, JsonWebToken token)
void	validateTokenReuse()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

JWTClientValidator

public JWTClientValidator(ClientAuthenticationFlowContext context,
 String clientAuthenticatorProviderId)

Method Details

clientAssertionParametersValidation

public boolean clientAssertionParametersValidation()

readJws

public void readJws()
             throws JWSInputException

Throws:

JWSInputException

validateClient

public boolean validateClient()

validateSignatureAlgorithm

public boolean validateSignatureAlgorithm()

validateToken

public void validateToken()

validateTokenReuse

public void validateTokenReuse()

validateTokenAudience

public void validateTokenAudience(ClientAuthenticationFlowContext context,
 RealmModel realm,
 JsonWebToken token)

getContext

public ClientAuthenticationFlowContext getContext()

getRealm

public RealmModel getRealm()

getParams

public jakarta.ws.rs.core.MultivaluedMap<String,String> getParams()

getClientAssertion

public String getClientAssertion()

getJws

public JWSInput getJws()

getToken

public JsonWebToken getToken()

getClient

public ClientModel getClient()