org.springframework.security.oauth2.client.oidc.authentication

Class OidcIdTokenValidator

java.lang.Object

org.springframework.security.oauth2.client.oidc.authentication.OidcIdTokenValidator

All Implemented Interfaces:

org.springframework.security.oauth2.core.OAuth2TokenValidator<org.springframework.security.oauth2.jwt.Jwt>

public final class OidcIdTokenValidator
extends java.lang.Object
implements org.springframework.security.oauth2.core.OAuth2TokenValidator<org.springframework.security.oauth2.jwt.Jwt>

An OAuth2TokenValidator responsible for validating the claims in an ID Token.

Since:

5.1

See Also:

OAuth2TokenValidator, Jwt, ID Token Validation

Constructor Summary

Constructors

Constructor and Description
OidcIdTokenValidator(ClientRegistration clientRegistration)

Method Summary

Modifier and Type	Method and Description
void	setClockSkew(java.time.Duration clockSkew) Sets the maximum acceptable clock skew.
org.springframework.security.oauth2.core.OAuth2TokenValidatorResult	validate(org.springframework.security.oauth2.jwt.Jwt idToken)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

OidcIdTokenValidator

public OidcIdTokenValidator(ClientRegistration clientRegistration)

Method Detail

validate

public org.springframework.security.oauth2.core.OAuth2TokenValidatorResult validate(org.springframework.security.oauth2.jwt.Jwt idToken)

Specified by:

validate in interface org.springframework.security.oauth2.core.OAuth2TokenValidator<org.springframework.security.oauth2.jwt.Jwt>

setClockSkew

public void setClockSkew(java.time.Duration clockSkew)

Sets the maximum acceptable clock skew. The default is 60 seconds. The clock skew is used when validating the exp and iat claims.

Parameters:

clockSkew - the maximum acceptable clock skew

Since:

5.2