Package com.vaadin.sso.core

Class OidcLogoutTokenValidator

java.lang.Object

com.vaadin.sso.core.OidcLogoutTokenValidator

All Implemented Interfaces:

org.springframework.security.oauth2.core.OAuth2TokenValidator<org.springframework.security.oauth2.jwt.Jwt>

public final class OidcLogoutTokenValidator
extends Object
implements org.springframework.security.oauth2.core.OAuth2TokenValidator<org.springframework.security.oauth2.jwt.Jwt>

An OAuth2TokenValidator responsible for validating the claims in a Logout Token.

Since:

1.0

Author:

Vaadin Ltd

Constructor Summary

Constructors

Constructor	Description
OidcLogoutTokenValidator(org.springframework.security.oauth2.client.registration.ClientRegistration clientRegistration)

Method Summary

Modifier and Type	Method	Description
void	setClock(Clock clock)	Sets the Clock used in Instant.now(Clock) when validating the exp and iat claims.
void	setClockSkew(Duration clockSkew)	Sets the maximum acceptable clock skew.
org.springframework.security.oauth2.core.OAuth2TokenValidatorResult	validate(org.springframework.security.oauth2.jwt.Jwt token)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

OidcLogoutTokenValidator

public OidcLogoutTokenValidator(org.springframework.security.oauth2.client.registration.ClientRegistration clientRegistration)

Method Details

validate

public org.springframework.security.oauth2.core.OAuth2TokenValidatorResult validate(org.springframework.security.oauth2.jwt.Jwt token)

Specified by:

validate in interface org.springframework.security.oauth2.core.OAuth2TokenValidator<org.springframework.security.oauth2.jwt.Jwt>

setClockSkew

public void setClockSkew(Duration clockSkew)

Sets the maximum acceptable clock skew. The default is 60 seconds. The clock skew is used when validating the exp and iat claims.

Parameters:

clockSkew - the maximum acceptable clock skew

setClock

public void setClock(Clock clock)

Sets the Clock used in Instant.now(Clock) when validating the exp and iat claims.

Parameters:

clock - the clock