Package org.forgerock.oauth.resolvers
Interface GenericOpenIdResolver<J extends Jwt>
-
- Type Parameters:
J
- theJwt
type supported by the implemented resolver
- All Known Subinterfaces:
EncryptedOpenIdResolver
,OpenIdResolver
- All Known Implementing Classes:
BaseOpenIdResolver
,JWKOpenIdResolverImpl
,PublicKeyOpenIdResolverImpl
,SharedSecretOpenIdResolverImpl
public interface GenericOpenIdResolver<J extends Jwt>
Validation of Open ID Connect JWTs via verification of their internals (issuer, audience, signature, etc.). Each Resolver performs validation against a suppliedJwt
, throwing anOpenIdConnectVerificationException
if there are any issues which do not conform to the verification spec as per: More details on how the verification should be completed can be found at http://openid.net/specs/openid-authentication-2_0.htmlvalidateIdentity(Jwt)
performs all individual checks.
-
-
Method Summary
All Methods Instance Methods Abstract Methods Modifier and Type Method Description Class<J>
getExpectedJwtType()
TheJwt
type this resolver supports.void
validateIdentity(J idClaim)
Validates the supplied Jwt against this OpenId Connect Idp.
-
-
-
Method Detail
-
validateIdentity
void validateIdentity(J idClaim) throws OpenIdConnectVerificationException
Validates the supplied Jwt against this OpenId Connect Idp.- Parameters:
idClaim
- The Jwt to test is authenticated- Throws:
OpenIdConnectVerificationException
- If the Jwt is unable to be verified
-
-