io.confluent.security.authentication.oauthbearer

Class JwtIssuerJwks

java.lang.Object

io.confluent.security.authentication.oauthbearer.JwtIssuer

io.confluent.security.authentication.oauthbearer.JwtIssuerJwks

public final class JwtIssuerJwks
extends JwtIssuer

JwtIssuer which fetches JsonWebKeySet from a trusted HTTPS endpoint.

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	JwtIssuerJwks.Builder Constructs a new JwtIssuer instance with a HttpsJwksVerificationKeyResolver.

Method Summary

Modifier and Type	Method and Description
Set<String>	audience() The recipient(s) for this token.
static JwtIssuerJwks.Builder	builder()
String	jwksUri() HTTPS endpoint hosting this issuers JsonWebKeySet.
ConstrainedVerificationKeyResolver	keyResolver(Collection<Constraint> constraints) Returns Signature Verification Key identified by HeaderParameterNames.JWK_SET_URL
String	name() JsonWebSignature Issuer name.

Methods inherited from class io.confluent.security.authentication.oauthbearer.JwtIssuer

createConsumer

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

name

public String name()

JsonWebSignature Issuer name. This should be the URL of the Authorization Server though there may be some cases where its not. RFC7519

Specified by:

name in class JwtIssuer

Returns:

JsonWebSignature Issuing authority.

audience

public Set<String> audience()

The recipient(s) for this token. RFC-7519 Section 4.1.3

Specified by:

audience in class JwtIssuer

Returns:

audience claim value.

jwksUri

public String jwksUri()

HTTPS endpoint hosting this issuers JsonWebKeySet.

Returns:

JsonWebKeySet.

keyResolver

public ConstrainedVerificationKeyResolver keyResolver(Collection<Constraint> constraints)

Returns Signature Verification Key identified by HeaderParameterNames.JWK_SET_URL

Specified by:

keyResolver in class JwtIssuer

Parameters:

constraints - Collection of Constraint to be enforced.

Returns:

ConstrainedVerificationKeyResolver

builder

public static JwtIssuerJwks.Builder builder()