ExpiryClaimsValidator (Shibboleth IdP :: Plugins :: OIDC Common :: Parent 2.2.2-SNAPSHOT API)

java.lang.Object
- net.shibboleth.utilities.java.support.component.AbstractInitializableComponent
- - net.shibboleth.utilities.java.support.component.AbstractIdentifiedInitializableComponent
  - - net.shibboleth.utilities.java.support.component.AbstractIdentifiableInitializableComponent
    - - net.shibboleth.oidc.jwt.claims.AbstractClaimsValidator
      - net.shibboleth.oidc.security.jwt.claims.impl.ExpiryClaimsValidator

All Implemented Interfaces:

ClaimsValidator, Component, DestructableComponent, IdentifiableComponent, IdentifiedComponent, InitializableComponent
```
@ThreadSafeAfterInit
public class ExpiryClaimsValidator
extends AbstractClaimsValidator
```
Iff an expiration time (exp) claim is present, verifies that it is ahead of the current time, else the JWT claims set is rejected. A few minutes of clockSkew is allowed. See section 3.1.3.7 of OpenID Connect core 1.0.

Field Summary

Fields
Modifier and Type Field Description

private Duration clockSkew
Positive clock skew adjustment to consider when checking JWT expiration (Default value: 60 seconds).

Constructor Summary

Constructors
Constructor Description

ExpiryClaimsValidator()
Constructor.

Method Summary

All Methods Instance Methods Concrete Methods
Modifier and Type	Method	Description
`void`	`doValidate(com.nimbusds.jwt.JWTClaimsSet claims, ProfileRequestContext context)`	Perform validation of the given claims supported by the supplied context.
`void`	`setClockSkew(Duration skew)`	Set the clock skew.

Methods inherited from class net.shibboleth.oidc.jwt.claims.AbstractClaimsValidator
setActivationCondition, validate

Methods inherited from class net.shibboleth.utilities.java.support.component.AbstractIdentifiableInitializableComponent
setId

Methods inherited from class net.shibboleth.utilities.java.support.component.AbstractIdentifiedInitializableComponent
doInitialize, getId

Methods inherited from class net.shibboleth.utilities.java.support.component.AbstractInitializableComponent
destroy, doDestroy, initialize, isDestroyed, isInitialized

Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface net.shibboleth.utilities.java.support.component.IdentifiableComponent
setId

Methods inherited from interface net.shibboleth.utilities.java.support.component.IdentifiedComponent
getId

- Field Detail
  - clockSkew
```
@Nonnull
private Duration clockSkew
```
    Positive clock skew adjustment to consider when checking JWT expiration (Default value: 60 seconds).
- Constructor Detail
  - ExpiryClaimsValidator
```
public ExpiryClaimsValidator()
```
    Constructor.
- Method Detail
  - setClockSkew
```
public void setClockSkew(@Nonnull
                         Duration skew)
```
    Set the clock skew.
    
    Parameters:
    
    skew - clock skew to set
  - doValidate
```
public void doValidate(@Nonnull
                       com.nimbusds.jwt.JWTClaimsSet claims,
                       @Nonnull
                       ProfileRequestContext context)
                throws JWTValidationException
```
    Perform validation of the given claims supported by the supplied context.
    
    Specified by:
    
    doValidate in class AbstractClaimsValidator
    
    Parameters:
    
    claims - the claims to validate.
    
    context - the profile request context.
    
    Throws:
    
    JWTValidationException - when validation is unsuccessful due to a failed attempt