Uses of Interface
net.shibboleth.oidc.jwt.claims.ClaimsValidator
Packages that use ClaimsValidator
Package
Description
Validation functions for JWT claims.
Navigation functions related to OIDC profile configurations.
OAuth2 profile configurations.
OAuth2 profile configuration implementations.
Validation functions for JWT claims.
-
Uses of ClaimsValidator in net.shibboleth.oidc.jwt.claims
Classes in net.shibboleth.oidc.jwt.claims that implement ClaimsValidator -
Uses of ClaimsValidator in net.shibboleth.oidc.profile.oauth2.config
Methods in net.shibboleth.oidc.profile.oauth2.config that return ClaimsValidatorModifier and TypeMethodDescriptionOAuth2ClientAuthenticableProfileConfiguration.getClaimsValidator(ProfileRequestContext profileRequestContext) Get theClaimsValidatorto apply to JWT-based client authentication.OAuth2TokenValidatingProfileConfiguration.getIssuedClaimsValidator(ProfileRequestContext profileRequestContext) Get theClaimsValidatorto apply to issued JWT-based tokens being validated by this profile. -
Uses of ClaimsValidator in net.shibboleth.oidc.profile.oauth2.config.impl
Fields in net.shibboleth.oidc.profile.oauth2.config.impl with type parameters of type ClaimsValidatorModifier and TypeFieldDescriptionprivate Function<ProfileRequestContext,ClaimsValidator> AbstractOAuth2ClientAuthenticableProfileConfiguration.claimsValidatorLookupStrategyValidation of JWT claims for subset of client auth methods.private Function<ProfileRequestContext,ClaimsValidator> AbstractOAuth2TokenValidatingConfiguration.issuedClaimsValidatorLookupStrategyValidation of JWT claims for issued tokens.Methods in net.shibboleth.oidc.profile.oauth2.config.impl that return ClaimsValidatorModifier and TypeMethodDescriptionAbstractOAuth2ClientAuthenticableProfileConfiguration.getClaimsValidator(ProfileRequestContext profileRequestContext) Get theClaimsValidatorto apply to JWT-based client authentication.AbstractOAuth2TokenValidatingConfiguration.getIssuedClaimsValidator(ProfileRequestContext profileRequestContext) Get theClaimsValidatorto apply to issued JWT-based tokens being validated by this profile.Methods in net.shibboleth.oidc.profile.oauth2.config.impl with parameters of type ClaimsValidatorModifier and TypeMethodDescriptionvoidAbstractOAuth2ClientAuthenticableProfileConfiguration.setClaimsValidator(ClaimsValidator validator) Set theClaimsValidatorto apply to JWT-based client authentication.voidAbstractOAuth2TokenValidatingConfiguration.setIssuedClaimsValidator(ClaimsValidator validator) Set theClaimsValidatorto apply to issued JWT-based tokens being validated by this profile.Method parameters in net.shibboleth.oidc.profile.oauth2.config.impl with type arguments of type ClaimsValidatorModifier and TypeMethodDescriptionvoidAbstractOAuth2ClientAuthenticableProfileConfiguration.setClaimsValidatorLookupStrategy(Function<ProfileRequestContext, ClaimsValidator> strategy) Set a lookup strategy for theClaimsValidatorto apply to JWT-based client authentication.voidAbstractOAuth2TokenValidatingConfiguration.setIssuedClaimsValidatorLookupStrategy(Function<ProfileRequestContext, ClaimsValidator> strategy) Set a lookup strategy for theClaimsValidatorto apply to issued JWT-based tokens being validated by this profile. -
Uses of ClaimsValidator in net.shibboleth.oidc.security.jwt.claims.impl
Classes in net.shibboleth.oidc.security.jwt.claims.impl that implement ClaimsValidatorModifier and TypeClassDescriptionclassA validator that checks the access_token value matches its encoded at_hash representation in the id_token.classCheck the ACR values requested were received.classVerifies the Audience (aud) claim contains the appropriate value.classVerifies the Audience (aud) claim contains the appropriate value in JWT authentication.classVerifies the auth_time (when the End-User authentication took place): If the authnLifetimeLookup returns 0 seconds (e.g.classAClaimsValidatorimplementation that validates a JWT claims set from a chain of configured validators.classValidator that checks a JWT claim exactly matches (by Object equality) a value returned by a lookup strategy.classIff an expiration time (exp) claim is present, verifies that it is ahead of the current time, else the JWT claims set is rejected.classAClaimsValidatorthat relies on an injectedBiFunction.classIf the 'iat' claim is present in the JWT, verifies it is not to far away from the current time.classVerifies the identifier (jit) from the JWT against replay via configurableReplayCache.classVerifies the identifier (jit) from the JWT against revocation via configurableRevocationCache.classIff a not-before-time (nbf) claim is present, makes sure it is before the current time.classVerify the claims set does not contain any of the described set of claims.classVerify the claims set contains the given set of required claims.Fields in net.shibboleth.oidc.security.jwt.claims.impl with type parameters of type ClaimsValidatorModifier and TypeFieldDescriptionprivate List<ClaimsValidator>ChainingJWTClaimsValidator.claimValidatorsList of claim validators.Method parameters in net.shibboleth.oidc.security.jwt.claims.impl with type arguments of type ClaimsValidatorModifier and TypeMethodDescriptionvoidChainingJWTClaimsValidator.setClaimValidators(List<ClaimsValidator> validators) Set the list of validators to use.