org.apache.syncope.core.spring.security

Interface JWTSSOProvider

All Superinterfaces:

org.apache.cxf.rs.security.jose.jws.JwsSignatureVerifier

All Known Implementing Classes:

CustomJWTSSOProvider, SyncopeJWTSSOProvider

public interface JWTSSOProvider
extends org.apache.cxf.rs.security.jose.jws.JwsSignatureVerifier

Enables a generic mechanism for JWT validation and subject resolution which allows to plug in implementations recognizing JWT produced by third parties.

Method Summary

Modifier and Type	Method and Description
String	getIssuer() Gives the identifier for the JWT issuer verified by this instance.
Pair<User,Set<SyncopeGrantedAuthority>>	resolve(org.apache.cxf.rs.security.jose.jwt.JwtClaims jwtClaims) Attempts to resolve the given JWT claims into internal User and authorities.

Methods inherited from interface org.apache.cxf.rs.security.jose.jws.JwsSignatureVerifier

createJwsVerificationSignature, getAlgorithm, verify

Method Detail

getIssuer

String getIssuer()

Gives the identifier for the JWT issuer verified by this instance.

Returns:

identifier for the JWT issuer verified by this instance

resolve

Pair<User,Set<SyncopeGrantedAuthority>> resolve(org.apache.cxf.rs.security.jose.jwt.JwtClaims jwtClaims)

Attempts to resolve the given JWT claims into internal User and authorities. IMPORTANT: this is not invoked for the admin super-user.

Parameters:

jwtClaims - JWT claims

Returns:

internal User, with authorities, matching the provided JWT claims, if found; otherwise null