Package org.keycloak.protocol.oidc.grants

Interface JWTAuthorizationGrantValidator

All Superinterfaces:
org.keycloak.protocol.oidc.JWTAuthorizationGrantValidationContext
All Known Implementing Classes:
DefaultJWTAuthorizationGrantValidator, IDJWTAuthorizationGrantValidator
public interface JWTAuthorizationGrantValidator extends org.keycloak.protocol.oidc.JWTAuthorizationGrantValidationContext
Interface for the assertion validator of JWTAuthorizationGrant
Author:
Yutaka Obuchi

  • Method Summary

    Modifier and Type
    Method
    Description
    void
    validateClient()
     
    void
    validateIssuer()
     
    boolean
    validateSignatureAlgorithm(String expectedSignatureAlg)
     
    void
    validateSubject()
     
    boolean
    validateTokenActive(int allowedClockSkew, int maxExp, boolean reusePermitted)
     
    boolean
    validateTokenAudience(List<String> expectedAudiences, boolean multipleAudienceAllowed)
     

    Methods inherited from interface org.keycloak.protocol.oidc.JWTAuthorizationGrantValidationContext

    getAssertion, getIssuer, getJws, getJWT, getRestrictedScopes, getScopeParam, getSubject, setRestrictedScopes

  • Method Details

    • validateClient

      void validateClient()

    • validateIssuer

      void validateIssuer()

    • validateSubject

      void validateSubject()

    • validateTokenActive

      boolean validateTokenActive(int allowedClockSkew, int maxExp, boolean reusePermitted)

    • validateSignatureAlgorithm

      boolean validateSignatureAlgorithm(String expectedSignatureAlg)

    • validateTokenAudience

      boolean validateTokenAudience(List<String> expectedAudiences, boolean multipleAudienceAllowed)