Package net.shibboleth.idp.plugin.oidc.op.token.support

Class RefreshTokenClaimsSet

java.lang.Object

net.shibboleth.idp.plugin.oidc.op.token.support.TokenClaimsSet

net.shibboleth.idp.plugin.oidc.op.token.support.RefreshTokenClaimsSet

public final class RefreshTokenClaimsSet
extends TokenClaimsSet

Class wrapping claims set for refresh token.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static final class	RefreshTokenClaimsSet.Builder	Builder to create instance of RefreshTokenClaimsSet.

Field Summary

Fields

Modifier and Type	Field	Description
static final String	KEY_CHAIN_EXPIRATION_TIME	Expiration time of the refresh token chain.
private static final String	VALUE_TYPE_RF	Value of refresh token claims set type.

Fields inherited from class net.shibboleth.idp.plugin.oidc.op.token.support.TokenClaimsSet

KEY_AC_ID, KEY_ACR, KEY_AUDIENCE, KEY_AUTH_TIME, KEY_CLAIMS, KEY_CLIENTID, KEY_CODE_CHALLENGE, KEY_CONFIRMATION, KEY_CONSENT_ENABLED, KEY_CONSENTED_CLAIMS, KEY_DELIVERY_CLAIMS, KEY_DELIVERY_CLAIMS_IDTOKEN, KEY_DELIVERY_CLAIMS_USERINFO, KEY_DPOP_PROOF_JWK_THUMBPRINT, KEY_EXPIRATION_TIME, KEY_ISSUED_AT, KEY_ISSUER, KEY_LEGACY_CLIENTID, KEY_NONCE, KEY_NOTBEFORE_TIME, KEY_REDIRECT_URI, KEY_ROOT_JTI, KEY_SCOPE, KEY_SEALED_FOR_OP, KEY_SESSION_ID, KEY_SUBJECT, KEY_TYPE, KEY_USER_PRINCIPAL

Constructor Summary

Constructors

Modifier	Constructor	Description
private	RefreshTokenClaimsSet(com.nimbusds.jwt.JWTClaimsSet refreshTokenClaimsSet)	Private constructor for the parser.

Method Summary

Modifier and Type	Method	Description
Instant	getChainExp()	Get expiration time of the token.
static RefreshTokenClaimsSet	parse(String refreshTokenClaimsSet)	Parses refresh token from string (JSON).
static RefreshTokenClaimsSet	parse(String wrappedAccessToken, DataSealer dataSealer)	Parses refresh token from sealed refresh token.

Methods inherited from class net.shibboleth.idp.plugin.oidc.op.token.support.TokenClaimsSet

assertedClaimsSet, getACR, getAudience, getAuthenticationTime, getClaimsRequest, getClaimsSet, getClientID, getCodeChallenge, getConsentedClaims, getDeliveryClaims, getDpopProofJwkThumbprint, getExp, getID, getIDTokenDeliveryClaims, getIssuedAt, getIssuer, getNonce, getNotBefore, getPrincipal, getRedirectURI, getRootTokenIdentifier, getScope, getSessionIdentifier, getSubject, getType, getUserinfoDeliveryClaims, isConsentEnabled, isTimeValid, serialize, serialize, setClaimsSet, verifyParsedClaims

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

KEY_CHAIN_EXPIRATION_TIME

@Nonnull
@NotEmpty
public static final String KEY_CHAIN_EXPIRATION_TIME

Expiration time of the refresh token chain.

See Also:

• Constant Field Values

VALUE_TYPE_RF

@Nonnull
@NotEmpty
private static final String VALUE_TYPE_RF

Value of refresh token claims set type.

See Also:

• Constant Field Values

Constructor Details

RefreshTokenClaimsSet

private RefreshTokenClaimsSet(@Nonnull
 com.nimbusds.jwt.JWTClaimsSet refreshTokenClaimsSet)

Private constructor for the parser.

Parameters:

refreshTokenClaimsSet - refresh token claims set

Method Details

getChainExp

@Nullable
public Instant getChainExp()

Get expiration time of the token.

Returns:

expiration time of the token

parse

@Nonnull
public static RefreshTokenClaimsSet parse(@Nonnull @NotEmpty
 String refreshTokenClaimsSet)
                                   throws ParseException

Parses refresh token from string (JSON).

Parameters:

refreshTokenClaimsSet - JSON String representation of the code

Returns:

AccessTokenClaimsSet instance if parsing is successful.

Throws:

ParseException - if parsing fails for example due to incompatible types.

parse

@Nonnull
public static RefreshTokenClaimsSet parse(@Nonnull @NotEmpty
 String wrappedAccessToken,
 @Nonnull
 DataSealer dataSealer)
                                   throws ParseException,
DataSealerException

Parses refresh token from sealed refresh token.

Parameters:

wrappedAccessToken - wrapped refresh token

dataSealer - sealer to unwrap the refresh token

Returns:

refresh token claims set.

Throws:

ParseException - is thrown if unwrapped refresh token is not understood

DataSealerException - is thrown if unwrapping fails