Uses of Class
org.forgerock.macaroons.JsonCaveatVerifier
Packages that use JsonCaveatVerifier
Package
Description
Implementation of
Macaroons: Cookies with contextual caveats for decentralized
authorization in the cloud. See
Macaroon for more details.-
Uses of JsonCaveatVerifier in org.forgerock.macaroons
Methods in org.forgerock.macaroons that return JsonCaveatVerifierModifier and TypeMethodDescriptionstatic JsonCaveatVerifierJsonCaveatVerifier.forDefaultCaveats(Instant timeOfUse) Constructs a caveat verifier that will verify a set of standard caveats:"exp": time- checks that the current time is less than the given time.static JsonCaveatVerifierJsonCaveatVerifier.forDefaultCaveats(Instant timeOfUse, Duration allowedClockSkew) Constructs a caveat verifier that will verify a set of standard caveats:"exp": time- checks that the current time is less than the given time.JsonCaveatVerifier.satisfyAudience(String... audience) Satisfies any audience ("aud") caveat in the macaroon that contains at least one of the given audience values.JsonCaveatVerifier.satisfyAudience(Collection<String> audience) Satisfies any audience ("aud") caveat in the macaroon that contains at least one of the given audience values.JsonCaveatVerifier.satisfyClientCertificate(X509Certificate clientCertificate) Satisfies any caveat that requires the macaroon is only used on a channel that has been authenticated with a given X.509 client certificate.JsonCaveatVerifier.satisfyExpiryTime(Instant timeOfUse, Duration allowedClockSkew) Constructs a caveat verifier that will verify any expiry time caveats of the form:"exp": time- checks that the current time is less than the given time.JsonCaveatVerifier.satisfyJsonCaveat(String field, Predicate<JsonValue> verifier) Adds a verifier for a caveat specified as a JSON field.JsonCaveatVerifier.satisfyNotBeforeTime(Instant timeOfUse, Duration allowedClockSkew) Constructs a caveat verifier that will verify any not-before time caveats of the form:"nbf": time- checks that the current time is more than the given time.JsonCaveatVerifier.satisfyTimeOfUse(Instant timeOfUse) Constructs a caveat verifier that will verify a set of time of use caveats:"exp": time- checks that the current time is less than the given time.JsonCaveatVerifier.satisfyTimeOfUse(Instant timeOfUse, Duration allowedClockSkew) Constructs a caveat verifier that will verify a set of time of use caveats:"exp": time- checks that the current time is less than the given time.MacaroonVerifier.withJsonCaveatVerifier()Enables support for verifying JSON-formatted caveats and returns aJsonCaveatVerifierthat can be used to satisfy such caveats.