Class OidcIdTokenValidator
- java.lang.Object
-
- org.springframework.security.oauth2.client.oidc.authentication.OidcIdTokenValidator
-
- All Implemented Interfaces:
org.springframework.security.oauth2.core.OAuth2TokenValidator<org.springframework.security.oauth2.jwt.Jwt>
public final class OidcIdTokenValidator extends java.lang.Object implements org.springframework.security.oauth2.core.OAuth2TokenValidator<org.springframework.security.oauth2.jwt.Jwt>AnOAuth2TokenValidatorresponsible for validating the claims in anID Token.- Since:
- 5.1
- See Also:
OAuth2TokenValidator,Jwt, ID Token Validation
-
-
Constructor Summary
Constructors Constructor Description OidcIdTokenValidator(ClientRegistration clientRegistration)
-
Method Summary
All Methods Instance Methods Concrete Methods Modifier and Type Method Description voidsetClock(java.time.Clock clock)Sets theClockused inInstant.now(Clock)when validating theexpandiatclaims.voidsetClockSkew(java.time.Duration clockSkew)Sets the maximum acceptable clock skew.org.springframework.security.oauth2.core.OAuth2TokenValidatorResultvalidate(org.springframework.security.oauth2.jwt.Jwt idToken)
-
-
-
Constructor Detail
-
OidcIdTokenValidator
public OidcIdTokenValidator(ClientRegistration clientRegistration)
-
-
Method Detail
-
validate
public org.springframework.security.oauth2.core.OAuth2TokenValidatorResult validate(org.springframework.security.oauth2.jwt.Jwt idToken)
- Specified by:
validatein interfaceorg.springframework.security.oauth2.core.OAuth2TokenValidator<org.springframework.security.oauth2.jwt.Jwt>
-
setClockSkew
public void setClockSkew(java.time.Duration clockSkew)
Sets the maximum acceptable clock skew. The default is 60 seconds. The clock skew is used when validating theexpandiatclaims.- Parameters:
clockSkew- the maximum acceptable clock skew- Since:
- 5.2
-
setClock
public void setClock(java.time.Clock clock)
Sets theClockused inInstant.now(Clock)when validating theexpandiatclaims.- Parameters:
clock- the clock- Since:
- 5.3
-
-