Package org.forgerock.openig.filter.jwt

Class ScriptableJwtValidatorCustomizer

java.lang.Object

org.forgerock.openig.script.AbstractScriptableHeapObject<JwtValidator.Builder>

org.forgerock.openig.filter.jwt.ScriptableJwtValidatorCustomizer

All Implemented Interfaces:

Closeable, AutoCloseable, JwtValidatorCustomizer

public class ScriptableJwtValidatorCustomizer
extends AbstractScriptableHeapObject<JwtValidator.Builder>
implements JwtValidatorCustomizer

A Scriptable JWT Validator customizer. This customizer allows the user to write its own JWT validator using the JwtValidator.Builder instance provided. Example of the customizer configuration :

 
 "type": "ScriptableJwtValidatorCustomizer",
 "config": {
     "type": "application/x-groovy",
     "source": [
         "builder.claim('aud', listOf(JsonValue::asString), contains('My App'))",
         "       .claim('iat', instant(), isInThePast())",
         "       .claim('exp', instant(), isInTheFuture());",
         "builder.claim('iss', JsonValue::asString, isEqualTo('ForgeRock AM'));"
     ]
 }
 
 

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	ScriptableJwtValidatorCustomizer.Heaplet	Creates and initializes a scriptable Jwt Validator customizer in a heap environment.

Nested classes/interfaces inherited from class org.forgerock.openig.script.AbstractScriptableHeapObject

AbstractScriptableHeapObject.AbstractScriptableHeaplet<V>

Method Summary

Modifier and Type	Method	Description
void	enrich(JwtValidator.Builder builder)	This method enriches a JwtValidator.Builder by adding claim checks.

Methods inherited from class org.forgerock.openig.script.AbstractScriptableHeapObject

close, runScript, runScriptAsync, setArgs, setClientHandler

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Details

enrich

public void enrich(JwtValidator.Builder builder)

Description copied from interface: JwtValidatorCustomizer

This method enriches a JwtValidator.Builder by adding claim checks.

Specified by:

enrich in interface JwtValidatorCustomizer

Parameters:

builder - the builder to enrich