Package org.forgerock.openig.fapi.dcr.request.validator

Class TokenEndpointAuthMethodsValidator

java.lang.Object

org.forgerock.openig.fapi.dcr.request.validator.TokenEndpointAuthMethodsValidator

All Implemented Interfaces:

RegistrationRequestValidator

public class TokenEndpointAuthMethodsValidator
extends Object
implements RegistrationRequestValidator

Validate the RegistrationRequest token endpoint authentication method.

The Financial-grade API Security Profile 1.0 - Part 2: Advanced spec states in section 5.2.2-14:

shall authenticate the confidential client using one of the following methods (this overrides FAPI Security Profile 1.0 - Part 1: Baseline clause 5.2.2-4):

1. tls_client_auth or self_signed_tls_client_auth as specified in section 2 of MTLS, or
2. private_key_jwt as specified in section 9 of OIDC;

Constructor Summary

Constructors

Constructor	Description
TokenEndpointAuthMethodsValidator(Set<String> supportedTokenEndpointAuthMethods)	Constructor.

Method Summary

Modifier and Type	Method	Description
void	validate(RegistrationRequest registrationRequest)	Method which applies validation rules to an object.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

TokenEndpointAuthMethodsValidator

public TokenEndpointAuthMethodsValidator(Set<String> supportedTokenEndpointAuthMethods)

Constructor.

Parameters:

supportedTokenEndpointAuthMethods - The supported token endpoint auth methods to validate the registration object against

Method Details

validate

public void validate(RegistrationRequest registrationRequest)
              throws RegistrationRequestException

Description copied from interface: RegistrationRequestValidator

Method which applies validation rules to an object.

On validation failure a RegistrationRequestException is thrown.

Specified by:

validate in interface RegistrationRequestValidator

Parameters:

registrationRequest - the RegistrationRequest to validate

Throws:

RegistrationRequestException - on validation failure