Package org.keycloak.sdjwt

Class ClaimVerifier

java.lang.Object

org.keycloak.sdjwt.ClaimVerifier

Direct Known Subclasses:

IssuerSignedJwtVerificationOpts

public class ClaimVerifier
extends Object

Module for validating JWT based claims.
Time-checks include a small tolerance to account for clock skew.

Author:

Ingrid Kamga

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	ClaimVerifier.AudienceCheck
static class	ClaimVerifier.Builder
static class	ClaimVerifier.ClaimCheck
static class	ClaimVerifier.ExpCheck
static class	ClaimVerifier.IatLifetimeCheck
static class	ClaimVerifier.NbfCheck
static class	ClaimVerifier.NegatedClaimCheck
static interface	ClaimVerifier.Predicate<T>	Functional interface of checks that verify some part of a JWT.
static class	ClaimVerifier.TimeCheck

Constructor Summary

Constructors

Constructor	Description
ClaimVerifier(List<ClaimVerifier.Predicate<com.fasterxml.jackson.databind.node.ObjectNode>> headerVerifiers, List<ClaimVerifier.Predicate<com.fasterxml.jackson.databind.node.ObjectNode>> contentVerifiers)

Method Summary

Modifier and Type	Method	Description
static ClaimVerifier.Builder	builder()
List<ClaimVerifier.Predicate<com.fasterxml.jackson.databind.node.ObjectNode>>	getContentVerifiers()
void	verifyBodyClaims(com.fasterxml.jackson.databind.node.ObjectNode body)
void	verifyClaims(com.fasterxml.jackson.databind.node.ObjectNode header, com.fasterxml.jackson.databind.node.ObjectNode body)
void	verifyHeaderClaims(com.fasterxml.jackson.databind.node.ObjectNode header)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

ClaimVerifier

public ClaimVerifier(List<ClaimVerifier.Predicate<com.fasterxml.jackson.databind.node.ObjectNode>> headerVerifiers,
 List<ClaimVerifier.Predicate<com.fasterxml.jackson.databind.node.ObjectNode>> contentVerifiers)

Method Details

verifyClaims

public void verifyClaims(com.fasterxml.jackson.databind.node.ObjectNode header,
 com.fasterxml.jackson.databind.node.ObjectNode body)
                  throws VerificationException

Throws:

VerificationException

verifyHeaderClaims

public void verifyHeaderClaims(com.fasterxml.jackson.databind.node.ObjectNode header)
                        throws VerificationException

Throws:

VerificationException

verifyBodyClaims

public void verifyBodyClaims(com.fasterxml.jackson.databind.node.ObjectNode body)
                      throws VerificationException

Throws:

VerificationException

getContentVerifiers

public List<ClaimVerifier.Predicate<com.fasterxml.jackson.databind.node.ObjectNode>> getContentVerifiers()

builder

public static ClaimVerifier.Builder builder()