org.apache.cxf.rs.security.oauth2.jwt.grant
Class AbstractJwtHandler

java.lang.Object
  extended by org.apache.cxf.rs.security.oauth2.grants.AbstractGrantHandler
      extended by org.apache.cxf.rs.security.oauth2.jwt.grant.AbstractJwtHandler
All Implemented Interfaces:
org.apache.cxf.rs.security.oauth2.provider.AccessTokenGrantHandler
Direct Known Subclasses:
JwtBearerGrantHandler

public abstract class AbstractJwtHandler
extends org.apache.cxf.rs.security.oauth2.grants.AbstractGrantHandler

The "JWT Bearer" grant handler


Constructor Summary
protected AbstractJwtHandler(List<String> grants)
           
 
Method Summary
 void setJwsVefifier(JwsSignatureVerifier jwsVefifier)
           
 void setSupportedIssuers(Set<String> supportedIssuers)
           
protected  void validateAudience(org.apache.cxf.rs.security.oauth2.common.Client client, String audience)
           
protected  void validateClaims(org.apache.cxf.rs.security.oauth2.common.Client client, JwtClaims claims)
           
protected  void validateExpiryTime(Integer timestamp)
           
protected  void validateIssuedAtTime(Integer timestamp)
           
protected  void validateIssuer(String issuer)
           
protected  void validateNotBeforeTime(Integer timestamp)
           
protected  void validateSignature(JwtHeaders headers, String unsignedText, byte[] signature)
           
protected  void validateSubject(org.apache.cxf.rs.security.oauth2.common.Client client, String subject)
           
protected  void validateTokenId(String tokenId)
           
 
Methods inherited from class org.apache.cxf.rs.security.oauth2.grants.AbstractGrantHandler
checkIfGrantSupported, doCreateAccessToken, doCreateAccessToken, doCreateAccessToken, doCreateAccessToken, doCreateAccessToken, getDataProvider, getSupportedGrantTypes, isCanSupportPublicClients, setCanSupportPublicClients, setDataProvider, setPartialMatchScopeValidation
 
Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
 
Methods inherited from interface org.apache.cxf.rs.security.oauth2.provider.AccessTokenGrantHandler
createAccessToken
 

Constructor Detail

AbstractJwtHandler

protected AbstractJwtHandler(List<String> grants)
Method Detail

validateSignature

protected void validateSignature(JwtHeaders headers,
                                 String unsignedText,
                                 byte[] signature)

validateClaims

protected void validateClaims(org.apache.cxf.rs.security.oauth2.common.Client client,
                              JwtClaims claims)

validateIssuer

protected void validateIssuer(String issuer)

validateSubject

protected void validateSubject(org.apache.cxf.rs.security.oauth2.common.Client client,
                               String subject)

validateAudience

protected void validateAudience(org.apache.cxf.rs.security.oauth2.common.Client client,
                                String audience)

validateExpiryTime

protected void validateExpiryTime(Integer timestamp)

validateNotBeforeTime

protected void validateNotBeforeTime(Integer timestamp)

validateIssuedAtTime

protected void validateIssuedAtTime(Integer timestamp)

validateTokenId

protected void validateTokenId(String tokenId)

setSupportedIssuers

public void setSupportedIssuers(Set<String> supportedIssuers)

setJwsVefifier

public void setJwsVefifier(JwsSignatureVerifier jwsVefifier)


Apache CXF