Package net.shibboleth.oidc.jwt.claims

Interface ClaimsValidator

All Superinterfaces:
Component, IdentifiableComponent, IdentifiedComponent
All Known Implementing Classes:
AbstractClaimsValidator, AccessTokenHashValidator, ACRClaimsValidator, AudienceClaimsValidator, AuthenticationAudienceClaimsValidator, AuthenticationTimeClaimsValidator, ChainingJWTClaimsValidator, ExactMatchClaimsValidator, ExpiryClaimsValidator, FunctionClaimsValidator, IssuedAtClaimsValidator, JWTIdentifierClaimsValidator, JWTIdentifierRevocationValidator, NotBeforeClaimsValidator, ProhibitedClaimsValidator, RequiredClaimsValidator
@ThreadSafe @Immutable public interface ClaimsValidator extends IdentifiableComponent
High-level API for validating a JWT's claims set.

Instances of this interface must be stateless.

  • Method Summary

    Modifier and Type
    Method
    Description
    void
    validate(com.nimbusds.jwt.JWTClaimsSet claims, ProfileRequestContext context)
    Validate all, or part of, the given JWT claims set.

    Methods inherited from interface net.shibboleth.shared.component.IdentifiableComponent

    setId

    Methods inherited from interface net.shibboleth.shared.component.IdentifiedComponent

    getId

  • Method Details

    • validate

      void validate(@Nonnull com.nimbusds.jwt.JWTClaimsSet claims, @Nonnull ProfileRequestContext context) throws JWTValidationException
      Validate all, or part of, the given JWT claims set. Can take supporting information from the given context tree.

      Throws an exception if validation fails.

      Parameters:
      claims - the claims to validate.
      context - the profile request context.
      Throws:
      JWTValidationException - when validation is unsuccessful due to a failed attempt