net.trajano.ms.auth.spi

Interface ClientValidator

All Known Implementing Classes:

JsonClientValidator

public interface ClientValidator

This is used to validate the client ID and secret.

Author:

Archimedes Trajano

Method Summary

Modifier and Type	Method and Description
default URI	getJwksUri(String clientId) Gets the JWKS URI associated with the client ID.
URI	getRedirectUri(String clientId)
default URI	getRedirectUriFromAuthorization(String authorization) Obtains the client redirect URI from the Authorization header.
default boolean	isOriginAllowed(String clientId, String origin)
boolean	isOriginAllowed(String clientId, URI origin)
default boolean	isOriginAllowedFromAuthorization(URI originUri, String authorization) Checks if the given origin URI is allowed for the given Authorization header
default boolean	isValid(String grantType, String authorization)
boolean	isValid(String grantType, String clientId, String clientSecret)

Method Detail

getJwksUri

default URI getJwksUri(String clientId)

Gets the JWKS URI associated with the client ID.

Parameters:

clientId - client ID

Returns:

JWKS URI

isValid

default boolean isValid(String grantType,
                        String authorization)

getRedirectUriFromAuthorization

default URI getRedirectUriFromAuthorization(String authorization)

Obtains the client redirect URI from the Authorization header.

Parameters:

authorization - authorization header value

Returns:

redirect URI

isOriginAllowed

default boolean isOriginAllowed(String clientId,
                                String origin)

isOriginAllowed

boolean isOriginAllowed(String clientId,
                        URI origin)

getRedirectUri

URI getRedirectUri(String clientId)

isValid

boolean isValid(String grantType,
                String clientId,
                String clientSecret)

isOriginAllowedFromAuthorization

default boolean isOriginAllowedFromAuthorization(URI originUri,
                                                 String authorization)

Checks if the given origin URI is allowed for the given Authorization header

Parameters:

originUri - origin URI

authorization - authorization header value

Returns:

true if it is allowed.