Package net.shibboleth.oidc.security.jwt.claims.impl

Class ChainingJWTClaimsValidator

java.lang.Object

net.shibboleth.utilities.java.support.component.AbstractInitializableComponent

net.shibboleth.utilities.java.support.component.AbstractIdentifiedInitializableComponent

net.shibboleth.utilities.java.support.component.AbstractIdentifiableInitializableComponent

net.shibboleth.oidc.security.jwt.claims.impl.ChainingJWTClaimsValidator

All Implemented Interfaces:

ClaimsValidator, Component, DestructableComponent, IdentifiableComponent, IdentifiedComponent, InitializableComponent

@ThreadSafeAfterInit
public class ChainingJWTClaimsValidator
extends AbstractIdentifiableInitializableComponent
implements ClaimsValidator

A ClaimsValidator implementation that validates a JWT claims set from a chain of configured validators.

Normally, validation terminates when one of the validators throws a JWTValidationException. If no JWTValidationException is thrown, the claims set is 'valid'.

Optionally this can be toggled such that any of the validators succeeeding implies overall success.

Note, does not represent a chain of responsibility pattern despite the name.

Field Summary

Fields

Modifier and Type	Field	Description
private List<ClaimsValidator>	claimValidators	List of claim validators.
private org.slf4j.Logger	log	Class logger.
private boolean	requireAll	Require all of the validators to be successful.

Constructor Summary

Constructors

Constructor	Description
ChainingJWTClaimsValidator()	Constructor.

Method Summary

Modifier and Type	Method	Description
protected void	doInitialize()
void	setClaimValidators(List<ClaimsValidator> validators)	Set the list of validators to use.
void	setRequireAll(boolean flag)	Set whether to require all validators to be successful.
void	validate(com.nimbusds.jwt.JWTClaimsSet claims, ProfileRequestContext context)

Methods inherited from class net.shibboleth.utilities.java.support.component.AbstractIdentifiableInitializableComponent

setId

Methods inherited from class net.shibboleth.utilities.java.support.component.AbstractIdentifiedInitializableComponent

getId

Methods inherited from class net.shibboleth.utilities.java.support.component.AbstractInitializableComponent

destroy, doDestroy, initialize, isDestroyed, isInitialized

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface net.shibboleth.utilities.java.support.component.IdentifiableComponent

setId

Methods inherited from interface net.shibboleth.utilities.java.support.component.IdentifiedComponent

getId

Field Detail

log

@Nonnull
private final org.slf4j.Logger log

Class logger.

claimValidators

@NonnullAfterInit
@NonnullElements
private List<ClaimsValidator> claimValidators

List of claim validators. Ordering is not important.

requireAll

private boolean requireAll

Require all of the validators to be successful.

Constructor Detail

ChainingJWTClaimsValidator

public ChainingJWTClaimsValidator()

Constructor.

Method Detail

doInitialize

protected void doInitialize()
                     throws ComponentInitializationException

Overrides:

doInitialize in class AbstractIdentifiedInitializableComponent

Throws:

ComponentInitializationException

setRequireAll

public void setRequireAll(boolean flag)

Set whether to require all validators to be successful.

Defaults to true.

Parameters:

flag - flag to set

setClaimValidators

public void setClaimValidators(@Nullable @NonnullElements
                               List<ClaimsValidator> validators)

Set the list of validators to use.

Parameters:

validators - validators to use

validate

public void validate(@Nullable
                     com.nimbusds.jwt.JWTClaimsSet claims,
                     @Nonnull
                     ProfileRequestContext context)
              throws JWTValidationException

Specified by:

validate in interface ClaimsValidator

Throws:

JWTValidationException