Package org.keycloak.authentication.authenticators.client

Class JWTClientSecretValidator

java.lang.Object

org.keycloak.authentication.authenticators.client.AbstractBaseJWTValidator

org.keycloak.authentication.authenticators.client.AbstractJWTClientValidator

org.keycloak.authentication.authenticators.client.JWTClientValidator

org.keycloak.authentication.authenticators.client.JWTClientSecretValidator

public class JWTClientSecretValidator
extends JWTClientValidator

Nested Class Summary

Nested classes/interfaces inherited from class org.keycloak.authentication.authenticators.client.AbstractJWTClientValidator

AbstractJWTClientValidator.SignatureValidator

Field Summary

Fields inherited from class org.keycloak.authentication.authenticators.client.AbstractJWTClientValidator

clientAuthenticatorProviderId, context, expectedClientAssertionType, realm, signatureValidator

Fields inherited from class org.keycloak.authentication.authenticators.client.AbstractBaseJWTValidator

clientAssertionState, currentTime, session

Constructor Summary

Constructors

Constructor	Description
JWTClientSecretValidator(ClientAuthenticationFlowContext context, AbstractJWTClientValidator.SignatureValidator signatureValidator, String clientAuthenticatorProviderId)

Method Summary

Modifier and Type	Method	Description
protected boolean	isSymmetricAlgorithmAllowed()	By default, symmetric algorithms are not allowed

Methods inherited from class org.keycloak.authentication.authenticators.client.JWTClientValidator

getAllowedClockSkew, getExpectedAudiences, getExpectedSignatureAlgorithm, getExpectedTokenIssuer, getMaximumExpirationTime, isMultipleAudienceAllowed, isReusePermitted

Methods inherited from class org.keycloak.authentication.authenticators.client.AbstractJWTClientValidator

failure, failure, failure, failureCallback, getClient, getContext, validate

Methods inherited from class org.keycloak.authentication.authenticators.client.AbstractBaseJWTValidator

getClientAssertion, getJws, getState, validateSignatureAlgorithm, validateTokenActive, validateTokenAudience, validateTokenReuse

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

JWTClientSecretValidator

public JWTClientSecretValidator(ClientAuthenticationFlowContext context,
 AbstractJWTClientValidator.SignatureValidator signatureValidator,
 String clientAuthenticatorProviderId)
                         throws Exception

Throws:

Exception

Method Details

isSymmetricAlgorithmAllowed

protected boolean isSymmetricAlgorithmAllowed()

Description copied from class: AbstractBaseJWTValidator

By default, symmetric algorithms are not allowed

Overrides:

isSymmetricAlgorithmAllowed in class AbstractBaseJWTValidator

Returns:

false by default