Class OidcAuthenticationScheme

java.lang.Object

org.tasktide.api.auth.OidcAuthenticationScheme

All Implemented Interfaces:

AuthenticationScheme

@ApplicationScoped
public class OidcAuthenticationScheme
extends Object
implements AuthenticationScheme

OIDC AuthenticationScheme. Nimbus performs OIDC cryptographic verification, and token properties. Letting endpoints to focus on evaluating roles

Constructor Summary

Constructors

Constructor	Description
OidcAuthenticationScheme(OidcConfig config, com.nimbusds.openid.connect.sdk.op.OIDCProviderMetadata metadata, URL jwksUrl)	Construct with properties

Method Summary

Modifier and Type	Method	Description
AuthPrincipal	authenticate(Object input)	Verify authenticity of bearer token
AuthenticationSchemeType	getSchemeType()	Get scheme type
AuthPrincipal	mapToAuthPrincipal(Object input)	Map JWT to AuthPrincipal
boolean	validate(Object input)	Validate JWT properties
boolean	verifiyIssuer(Object input)	Verifies that the issuer on JWT claims set matches configured issuer
boolean	verifyAudience(Object input)	Verify application is configured audience of JWT claim
boolean	verifyExpiration(Object input)	Verify that the claim has not expired

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

OidcAuthenticationScheme

public OidcAuthenticationScheme(OidcConfig config,
 com.nimbusds.openid.connect.sdk.op.OIDCProviderMetadata metadata,
 URL jwksUrl)

Construct with properties

Parameters:

config -

metadata -

jwksUrl -

Method Details

getSchemeType

public AuthenticationSchemeType getSchemeType()

Get scheme type

Specified by:

getSchemeType in interface AuthenticationScheme

Returns:

AuthenticationSchemeType

validate

public boolean validate(Object input)

Validate JWT properties

Specified by:

validate in interface AuthenticationScheme

Parameters:

input -

Returns:

boolean

verifyExpiration

public boolean verifyExpiration(Object input)

Verify that the claim has not expired

Specified by:

verifyExpiration in interface AuthenticationScheme

Parameters:

input -

Returns:

boolean

verifyAudience

public boolean verifyAudience(Object input)

Verify application is configured audience of JWT claim

Specified by:

verifyAudience in interface AuthenticationScheme

Parameters:

input -

Returns:

boolean

verifiyIssuer

public boolean verifiyIssuer(Object input)

Verifies that the issuer on JWT claims set matches configured issuer

Specified by:

verifiyIssuer in interface AuthenticationScheme

Parameters:

input -

Returns:

boolean

mapToAuthPrincipal

public AuthPrincipal mapToAuthPrincipal(Object input)

Map JWT to AuthPrincipal

Specified by:

mapToAuthPrincipal in interface AuthenticationScheme

Parameters:

input -

Returns:

AuthPrincipal

authenticate

public AuthPrincipal authenticate(Object input)
                           throws AuthenticationException

Verify authenticity of bearer token

Specified by:

authenticate in interface AuthenticationScheme

Parameters:

input -

Returns:

Throws:

AuthenticationException