Package net.shibboleth.oidc.security.jwt.claims.impl

Validation functions for JWT claims.

Class Summary

Class	Description
AccessTokenHashValidator	A validator that checks the access_token value matches its encoded at_hash representation in the id_token.
ACRClaimsValidator	Check the ACR values requested were received.
AudienceClaimsValidator	Verifies the Audience (aud) claim contains the appropriate value.
AuthenticationAudienceClaimsValidator	Verifies the Audience (aud) claim contains the appropriate value in JWT authentication.
AuthenticationTimeClaimsValidator	Verifies the auth_time (when the End-User authentication took place): If the authnLifetimeLookup returns 0 seconds (e.g.
AuthTimeRequestedActivationCondition	Has the auth_time claim been requested?
ChainingJWTClaimsValidator	A ClaimsValidator implementation that validates a JWT claims set from a chain of configured validators.
ClaimExistsActivationCondition	Activation condition to check a claim exists in the claims set.
ExactMatchClaimsValidator	Validator that checks a JWT claim exactly matches (by Object equality) a value returned by a lookup strategy.
ExpiryClaimsValidator	Iff an expiration time (exp) claim is present, verifies that it is ahead of the current time, else the JWT claims set is rejected.
ForcedAuthenticationActivationCondition	Has forced authentication been requested?
FunctionClaimsValidator	A ClaimsValidator that relies on an injected BiFunction.
IssuedAtClaimsValidator	If the 'iat' claim is present in the JWT, verifies it is not to far away from the current time.
JWTIdentifierClaimsValidator	Verifies the identifier (jit) from the JWT against replay via configurable ReplayCache.
JWTIdentifierRevocationValidator	Verifies the identifier (jit) from the JWT against revocation via configurable RevocationCache.
NonceValidationActivationCondition	Determines if nonce validation should occur.
NotBeforeClaimsValidator	Iff a not-before-time (nbf) claim is present, makes sure it is before the current time.
NumberOfClaimValuesActivationCondition	Activation condition to check the number of values a claim has against a given predicate.
ProhibitedClaimsValidator	Verify the claims set does not contain any of the described set of claims.
RequestedEssentialACRClaimsLookupStrategy	Strategy that looks up any requested ACR claims from the requested claims object that have to be contained in the token's claims set.
RequiredClaimsValidator	Verify the claims set contains the given set of required claims.

Enum Summary

Enum	Description
IDTokenClaims	Enum of those OIDC ID token claims that are not part of the standard JWT claims set.
JWTClaims	Enum that represents the standard set of registered JWT claims.