io.confluent.security.authentication.oauthbearer

Class JwtIssuerJku

java.lang.Object

io.confluent.security.authentication.oauthbearer.JwtIssuer

io.confluent.security.authentication.oauthbearer.JwtIssuerJku

public final class JwtIssuerJku
extends JwtIssuer

Fetches Signature Verification key information at the URL found in the tokens jku claim. Use the parameter domainWhiteList to restrict which Issuers may provide public key information.

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	JwtIssuerJku.Builder

Method Summary

Modifier and Type	Method and Description
Set<String>	audience() The recipient(s) for this token.
static JwtIssuerJku.Builder	builder()
ConstrainedVerificationKeyResolver	keyResolver(Collection<Constraint> constraints, SecurityContext context) Returns Signature Verification Key identified by HeaderParameterNames.JWK_SET_URL
String	name() JsonWebSignature Issuer name.

Methods inherited from class io.confluent.security.authentication.oauthbearer.JwtIssuer

createConsumer

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

name

public String name()

JsonWebSignature Issuer name. This should be the URL of the Authorization Server though there may be some cases where its not. RFC7519

Specified by:

name in class JwtIssuer

Returns:

JsonWebSignature Issuing authority.

audience

public Set<String> audience()

The recipient(s) for this token. RFC-7519 Section 4.1.3

Specified by:

audience in class JwtIssuer

Returns:

audience claim value.

keyResolver

public ConstrainedVerificationKeyResolver keyResolver(Collection<Constraint> constraints,
                                                      SecurityContext context)

Returns Signature Verification Key identified by HeaderParameterNames.JWK_SET_URL

Specified by:

keyResolver in class JwtIssuer

Parameters:

constraints - Collection of Constraint to be enforced.

Returns:

ConstrainedVerificationKeyResolver

builder

public static JwtIssuerJku.Builder builder()