Package swiss.trustbroker.oidc

Class OidcClaimValidatorService

java.lang.Object

swiss.trustbroker.oidc.OidcClaimValidatorService

@Service
public class OidcClaimValidatorService
extends Object

Service for validating claims from an OIDC CP.

See Also:

• AssertionValidator
• OIDC token response validation

Constructor Summary

Constructors

Constructor	Description
OidcClaimValidatorService(TrustBrokerProperties trustBrokerProperties, Clock clock)

Method Summary

Modifier and Type	Method	Description
static List<String>	validateAcrs(com.nimbusds.jwt.JWTClaimsSet claims, ClaimsParty claimsParty, RelyingParty relyingParty, OidcClient rpOidcClient, TrustBrokerProperties trustBrokerProperties)
void	validateClaims(com.nimbusds.jwt.JWTClaimsSet claims, ClaimsParty claimsParty, OidcClient client, String metadataIssuerId, String requestedNonce)
static void	validateSubAudAzp(com.nimbusds.jwt.JWTClaimsSet claims, String counterPartyId, OidcClient client, String tokenType, boolean enforceAud)
boolean	validNotOnOrAfter(Date check, long now)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

OidcClaimValidatorService

public OidcClaimValidatorService(TrustBrokerProperties trustBrokerProperties,
 Clock clock)

Method Details

validateClaims

public void validateClaims(com.nimbusds.jwt.JWTClaimsSet claims,
 ClaimsParty claimsParty,
 OidcClient client,
 String metadataIssuerId,
 String requestedNonce)

validateSubAudAzp

public static void validateSubAudAzp(com.nimbusds.jwt.JWTClaimsSet claims,
 String counterPartyId,
 OidcClient client,
 String tokenType,
 boolean enforceAud)

validateAcrs

public static List<String> validateAcrs(com.nimbusds.jwt.JWTClaimsSet claims,
 ClaimsParty claimsParty,
 RelyingParty relyingParty,
 OidcClient rpOidcClient,
 TrustBrokerProperties trustBrokerProperties)

validNotOnOrAfter

public boolean validNotOnOrAfter(Date check,
 long now)