public class SpireJwtTokenLoginValidator extends Object implements org.apache.kafka.common.security.oauthbearer.internals.secured.AccessTokenValidator
AccessTokenValidator
that does basic validation of the JWT retrieved from the Spire Agent.
It validates following: 1. `exp` claim is valid (i.e. a non-negative number that is not already expired) 2. `iat` claim is valid (i.e. a non-negative number that is less than current time) 3. `sub` claim is valid (i.e. a non-null, non-empty string starting with 'spiffe')
Modifier and Type | Field and Description |
---|---|
static String |
EXPIRATION_CLAIM_NAME |
static String |
ISSUED_AT_CLAIM_NAME |
static String |
SUBJECT_CLAIM_NAME |
Constructor and Description |
---|
SpireJwtTokenLoginValidator() |
Modifier and Type | Method and Description |
---|---|
org.apache.kafka.common.security.oauthbearer.OAuthBearerToken |
validate(String accessToken) |
public static final String EXPIRATION_CLAIM_NAME
public static final String ISSUED_AT_CLAIM_NAME
public static final String SUBJECT_CLAIM_NAME
public org.apache.kafka.common.security.oauthbearer.OAuthBearerToken validate(String accessToken) throws org.apache.kafka.common.security.oauthbearer.internals.secured.ValidateException
validate
in interface org.apache.kafka.common.security.oauthbearer.internals.secured.AccessTokenValidator
org.apache.kafka.common.security.oauthbearer.internals.secured.ValidateException