net.trajano.ms.authz.spi

Interface ClientValidator

All Known Implementing Classes:

JsonClientValidator

public interface ClientValidator

This is used to validate the client ID and secret.

Author:

Archimedes Trajano

Method Summary

Modifier and Type	Method and Description
URI	getJwksUri(String clientId) Gets the JWKS URI associated with the client ID.
URI	getRedirectUri(String clientId)
default URI	getRedirectUriFromAuthorization(String authorization) Obtains the client redirect URI from the Authorization header.
default boolean	isOriginAllowed(String clientId, String origin)
boolean	isOriginAllowed(String clientId, URI origin)
boolean	isOriginAllowed(URI origin) Checks if the origin is allowed by any client info.
default boolean	isOriginAllowedFromAuthorization(URI originUri, String authorization) Checks if the given origin URI is allowed for the given Authorization header
default boolean	isValid(String grantType, String authorization)
boolean	isValid(String grantType, String clientId, String clientSecret)

Method Detail

getJwksUri

URI getJwksUri(String clientId)

Gets the JWKS URI associated with the client ID.

Parameters:

clientId - client ID

Returns:

JWKS URI

getRedirectUri

URI getRedirectUri(String clientId)

getRedirectUriFromAuthorization

default URI getRedirectUriFromAuthorization(String authorization)

Obtains the client redirect URI from the Authorization header.

Parameters:

authorization - authorization header value

Returns:

redirect URI

isOriginAllowed

default boolean isOriginAllowed(String clientId,
                                String origin)

isOriginAllowed

boolean isOriginAllowed(String clientId,
                        URI origin)

isOriginAllowed

boolean isOriginAllowed(URI origin)

Checks if the origin is allowed by any client info.

Parameters:

origin - origin

Returns:

true if the origin is allowed.

isOriginAllowedFromAuthorization

default boolean isOriginAllowedFromAuthorization(URI originUri,
                                                 String authorization)

Checks if the given origin URI is allowed for the given Authorization header

Parameters:

originUri - origin URI

authorization - authorization header value

Returns:

true if it is allowed.

isValid

default boolean isValid(String grantType,
                        String authorization)

isValid

boolean isValid(String grantType,
                String clientId,
                String clientSecret)