Package net.shibboleth.oidc.security.jwt.claims.impl

Class NotBeforeClaimsValidator

java.lang.Object

net.shibboleth.shared.component.AbstractInitializableComponent

net.shibboleth.shared.component.AbstractIdentifiedInitializableComponent

net.shibboleth.shared.component.AbstractIdentifiableInitializableComponent

net.shibboleth.oidc.jwt.claims.AbstractClaimsValidator

net.shibboleth.oidc.security.jwt.claims.impl.NotBeforeClaimsValidator

All Implemented Interfaces:

ClaimsValidator, Component, DestructableComponent, IdentifiableComponent, IdentifiedComponent, InitializableComponent

@ThreadSafeAfterInit
public class NotBeforeClaimsValidator
extends AbstractClaimsValidator

Iff a not-before-time (nbf) claim is present, makes sure it is before the current time. RFC7519 section 4.1.5.

Field Summary

Fields

Modifier and Type	Field	Description
private Duration	clockSkew	Positive clock skew adjustment to consider when checking JWT not before and expiration (Default value: 60 seconds).

Constructor Summary

Constructors

Constructor	Description
NotBeforeClaimsValidator()	Constructor.

Method Summary

Modifier and Type	Method	Description
void	doValidate(com.nimbusds.jwt.JWTClaimsSet claims, ProfileRequestContext context)	Perform validation of the given claims supported by the supplied context.
void	setClockSkew(Duration skew)	Set the clock skew.

Methods inherited from class net.shibboleth.oidc.jwt.claims.AbstractClaimsValidator

setActivationCondition, validate

Methods inherited from class net.shibboleth.shared.component.AbstractIdentifiableInitializableComponent

setId

Methods inherited from class net.shibboleth.shared.component.AbstractIdentifiedInitializableComponent

doInitialize, ensureId, getId, ifDestroyedThrowDestroyedComponentException, ifInitializedThrowUnmodifiabledComponentException, ifNotInitializedThrowUninitializedComponentException

Methods inherited from class net.shibboleth.shared.component.AbstractInitializableComponent

checkComponentActive, checkSetterPreconditions, destroy, doDestroy, initialize, isDestroyed, isInitialized

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface net.shibboleth.shared.component.IdentifiableComponent

setId

Methods inherited from interface net.shibboleth.shared.component.IdentifiedComponent

getId

Field Details

clockSkew

@Nonnull
private Duration clockSkew

Positive clock skew adjustment to consider when checking JWT not before and expiration (Default value: 60 seconds).

Constructor Details

NotBeforeClaimsValidator

public NotBeforeClaimsValidator()

Constructor.

Method Details

setClockSkew

public void setClockSkew(@Nonnull
 Duration skew)

Set the clock skew.

Parameters:

skew - clock skew to set

doValidate

public void doValidate(@Nonnull
 com.nimbusds.jwt.JWTClaimsSet claims,
 @Nonnull
 ProfileRequestContext context)
                throws JWTValidationException

Perform validation of the given claims supported by the supplied context.

Specified by:

doValidate in class AbstractClaimsValidator

Parameters:

claims - the claims to validate.

context - the profile request context.

Throws:

JWTValidationException - when validation is unsuccessful due to a failed attempt