Package org.forgerock.openig.filter.oauth2.cnf

Class Sha256AttributeCertificateThumbprintVerifier

java.lang.Object

org.forgerock.openig.filter.oauth2.cnf.Sha256AttributeCertificateThumbprintVerifier

All Implemented Interfaces:

ConfirmationKeyVerifier

public class Sha256AttributeCertificateThumbprintVerifier
extends Object
implements ConfirmationKeyVerifier

Verifies a certificate thumbprint against a previously calculated thumbprint, stored in a specially named attribute stored in the context's attributes.

Field Summary

Fields inherited from interface org.forgerock.openig.filter.oauth2.cnf.ConfirmationKeyVerifier

UNKNOWN

Constructor Summary

Constructors

Constructor	Description
Sha256AttributeCertificateThumbprintVerifier()

Method Summary

Modifier and Type	Method	Description
Promise<Result,NeverThrowsException>	verify(Context context, AccessTokenInfo tokenInfo, JsonValue cnfKey)	Verifies the given confirmation key value.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

Sha256AttributeCertificateThumbprintVerifier

public Sha256AttributeCertificateThumbprintVerifier()

Method Details

verify

public Promise<Result,NeverThrowsException> verify(Context context,
 AccessTokenInfo tokenInfo,
 JsonValue cnfKey)

Description copied from interface: ConfirmationKeyVerifier

Verifies the given confirmation key value.

Specified by:

verify in interface ConfirmationKeyVerifier

Parameters:

context - execution context

tokenInfo - resolved (but not authorized) access_token info

cnfKey - cnf child node such as x5t#S256.

Returns:

a promise of a validation result