Package org.keycloak.authentication.authenticators.client

Class AbstractJWTClientValidator

java.lang.Object

org.keycloak.authentication.authenticators.client.AbstractJWTClientValidator

Direct Known Subclasses:

FederatedJWTClientValidator, JWTClientValidator

public abstract class AbstractJWTClientValidator
extends Object

Common validation for JWT client authentication with private_key_jwt or with client_secret

Author:

Marek Posolda

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static interface	AbstractJWTClientValidator.SignatureValidator

Field Summary

Fields

Modifier and Type	Field	Description
protected ClientModel	client
protected final ClientAssertionState	clientAssertionState
protected final String	clientAuthenticatorProviderId
protected final ClientAuthenticationFlowContext	context
protected final int	currentTime
protected String	expectedClientAssertionType
protected final RealmModel	realm
protected final AbstractJWTClientValidator.SignatureValidator	signatureValidator

Constructor Summary

Constructors

Constructor	Description
AbstractJWTClientValidator(ClientAuthenticationFlowContext context, AbstractJWTClientValidator.SignatureValidator signatureValidator, String clientAuthenticatorProviderId)

Method Summary

Modifier and Type	Method	Description
boolean	failure(String errorDescription)
boolean	failure(String errorDescription, int statusCode)
boolean	failure(String error, String errorDescription, int statusCode)
protected abstract int	getAllowedClockSkew()
ClientModel	getClient()
String	getClientAssertion()
ClientAuthenticationFlowContext	getContext()
protected abstract List<String>	getExpectedAudiences()
protected abstract String	getExpectedSignatureAlgorithm()
protected abstract String	getExpectedTokenIssuer()
JWSInput	getJws()
protected abstract int	getMaximumExpirationTime()
ClientAssertionState	getState()
protected abstract boolean	isMultipleAudienceAllowed()
protected abstract boolean	isReusePermitted()
boolean	validate()
boolean	validateTokenActive()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

context

protected final ClientAuthenticationFlowContext context

realm

protected final RealmModel realm

currentTime

protected final int currentTime

signatureValidator

protected final AbstractJWTClientValidator.SignatureValidator signatureValidator

clientAuthenticatorProviderId

protected final String clientAuthenticatorProviderId

expectedClientAssertionType

protected String expectedClientAssertionType

clientAssertionState

protected final ClientAssertionState clientAssertionState

client

protected ClientModel client

Constructor Details

AbstractJWTClientValidator

public AbstractJWTClientValidator(ClientAuthenticationFlowContext context,
 AbstractJWTClientValidator.SignatureValidator signatureValidator,
 String clientAuthenticatorProviderId)
                           throws Exception

Throws:

Exception

Method Details

getContext

public ClientAuthenticationFlowContext getContext()

getState

public ClientAssertionState getState()

getClientAssertion

public String getClientAssertion()

getJws

public JWSInput getJws()

getClient

public ClientModel getClient()

validate

public boolean validate()

validateTokenActive

public boolean validateTokenActive()

failure

public boolean failure(String errorDescription)

failure

public boolean failure(String errorDescription,
 int statusCode)

failure

public boolean failure(String error,
 String errorDescription,
 int statusCode)

getExpectedTokenIssuer

protected abstract String getExpectedTokenIssuer()

getExpectedAudiences

protected abstract List<String> getExpectedAudiences()

isMultipleAudienceAllowed

protected abstract boolean isMultipleAudienceAllowed()

getAllowedClockSkew

protected abstract int getAllowedClockSkew()

getMaximumExpirationTime

protected abstract int getMaximumExpirationTime()

isReusePermitted

protected abstract boolean isReusePermitted()

getExpectedSignatureAlgorithm

protected abstract String getExpectedSignatureAlgorithm()