Package org.yamcs.security

Class JwksVerifier

java.lang.Object

org.yamcs.security.JwksVerifier

public class JwksVerifier
extends Object

Verifies the signature of JSON Web Tokens issued by an OpenID server, using the public keys that the server publishes as a JSON Web Key Set (JWKS).

Only asymmetric algorithms are supported. Tokens with alg none or an HMAC algorithm are rejected.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static interface	JwksVerifier.JwksLoader	Loads a JSON Web Key Set.
static class	JwksVerifier.JwtVerificationException

Constructor Summary

Constructors

Constructor	Description
JwksVerifier(JwksVerifier.JwksLoader loader)

Method Summary

Modifier and Type	Method	Description
com.google.gson.JsonObject	verify(String token)	Verifies the signature of the provided token, and returns its claims.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

JwksVerifier

public JwksVerifier(JwksVerifier.JwksLoader loader)

Method Details

verify

public com.google.gson.JsonObject verify(String token)
                                  throws JwksVerifier.JwtVerificationException

Verifies the signature of the provided token, and returns its claims.

Throws:

JwksVerifier.JwtVerificationException