Class OidcLogoutTokenValidator

  • All Implemented Interfaces:
    org.springframework.security.oauth2.core.OAuth2TokenValidator<org.springframework.security.oauth2.jwt.Jwt>

    public final class OidcLogoutTokenValidator
    extends Object
    implements org.springframework.security.oauth2.core.OAuth2TokenValidator<org.springframework.security.oauth2.jwt.Jwt>
    An OAuth2TokenValidator responsible for validating the claims in a Logout Token.
    Since:
    1.0
    Author:
    Vaadin Ltd
    • Constructor Detail

      • OidcLogoutTokenValidator

        public OidcLogoutTokenValidator​(org.springframework.security.oauth2.client.registration.ClientRegistration clientRegistration)
    • Method Detail

      • validate

        public org.springframework.security.oauth2.core.OAuth2TokenValidatorResult validate​(org.springframework.security.oauth2.jwt.Jwt token)
        Specified by:
        validate in interface org.springframework.security.oauth2.core.OAuth2TokenValidator<org.springframework.security.oauth2.jwt.Jwt>
      • setClockSkew

        public void setClockSkew​(Duration clockSkew)
        Sets the maximum acceptable clock skew. The default is 60 seconds. The clock skew is used when validating the exp and iat claims.
        Parameters:
        clockSkew - the maximum acceptable clock skew
      • setClock

        public void setClock​(Clock clock)
        Sets the Clock used in Instant.now(Clock) when validating the exp and iat claims.
        Parameters:
        clock - the clock