Package net.shibboleth.oidc.security.jwt.claims.impl

Class ProhibitedClaimsValidator

java.lang.Object

net.shibboleth.shared.component.AbstractInitializableComponent

net.shibboleth.shared.component.AbstractIdentifiedInitializableComponent

net.shibboleth.shared.component.AbstractIdentifiableInitializableComponent

net.shibboleth.oidc.jwt.claims.AbstractClaimsValidator

net.shibboleth.oidc.security.jwt.claims.impl.ProhibitedClaimsValidator

All Implemented Interfaces:

ClaimsValidator, Component, DestructableComponent, IdentifiableComponent, IdentifiedComponent, InitializableComponent

@ThreadSafeAfterInit
public class ProhibitedClaimsValidator
extends AbstractClaimsValidator

Verify the claims set does not contain any of the described set of claims.

Field Summary

Fields

Modifier and Type	Field	Description
private Set<String>	prohibitedClaims	The names of the JWT claims that must not be present, empty set if none.

Constructor Summary

Constructors

Constructor	Description
ProhibitedClaimsValidator()	Constructor.

Method Summary

Modifier and Type	Method	Description
void	doValidate(JWTClaimsSet claims, ProfileRequestContext context)	Perform validation of the given claims supported by the supplied context.
void	setProhibitedClaims(Collection<String> claims)	Set the prohibited claims.

Methods inherited from class net.shibboleth.oidc.jwt.claims.AbstractClaimsValidator

setActivationCondition, validate

Methods inherited from class net.shibboleth.shared.component.AbstractIdentifiableInitializableComponent

setId

Methods inherited from class net.shibboleth.shared.component.AbstractIdentifiedInitializableComponent

doInitialize, ensureId, getId, ifDestroyedThrowDestroyedComponentException, ifInitializedThrowUnmodifiabledComponentException, ifNotInitializedThrowUninitializedComponentException

Methods inherited from class net.shibboleth.shared.component.AbstractInitializableComponent

checkComponentActive, checkSetterPreconditions, destroy, doDestroy, initialize, isDestroyed, isInitialized

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface net.shibboleth.shared.component.IdentifiableComponent

setId

Methods inherited from interface net.shibboleth.shared.component.IdentifiedComponent

getId

Field Details

prohibitedClaims

@Nonnull
@NonnullElements
private Set<String> prohibitedClaims

The names of the JWT claims that must not be present, empty set if none.

Constructor Details

ProhibitedClaimsValidator

public ProhibitedClaimsValidator()

Constructor.

Method Details

setProhibitedClaims

public void setProhibitedClaims(@Nullable
 Collection<String> claims)

Set the prohibited claims.

Parameters:

claims - the prohibited claims.

doValidate

public void doValidate(@Nonnull
 JWTClaimsSet claims,
 @Nonnull
 ProfileRequestContext context)
                throws JWTValidationException

Perform validation of the given claims supported by the supplied context.

Specified by:

doValidate in class AbstractClaimsValidator

Parameters:

claims - the claims to validate.

context - the profile request context.

Throws:

JWTValidationException - when validation is unsuccessful due to a failed attempt