org.apache.syncope.core.spring.security

Class SyncopeJWTSSOProvider

java.lang.Object

org.apache.syncope.core.spring.security.SyncopeJWTSSOProvider

All Implemented Interfaces:

org.apache.cxf.rs.security.jose.jws.JwsSignatureVerifier, JWTSSOProvider

public class SyncopeJWTSSOProvider
extends Object
implements JWTSSOProvider

Default implementation for internal JWT validation.

Constructor Summary

Constructors

Constructor and Description
SyncopeJWTSSOProvider()

Method Summary

Modifier and Type	Method and Description
org.apache.cxf.rs.security.jose.jws.JwsVerificationSignature	createJwsVerificationSignature(org.apache.cxf.rs.security.jose.jws.JwsHeaders headers)
org.apache.cxf.rs.security.jose.jwa.SignatureAlgorithm	getAlgorithm()
String	getIssuer() Gives the identifier for the JWT issuer verified by this instance.
Pair<User,Set<SyncopeGrantedAuthority>>	resolve(org.apache.cxf.rs.security.jose.jwt.JwtClaims jwtClaims) Attempts to resolve the given JWT claims into internal User and authorities.
boolean	verify(org.apache.cxf.rs.security.jose.jws.JwsHeaders headers, String unsignedText, byte[] signature)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SyncopeJWTSSOProvider

public SyncopeJWTSSOProvider()

Method Detail

getIssuer

public String getIssuer()

Description copied from interface: JWTSSOProvider

Gives the identifier for the JWT issuer verified by this instance.

Specified by:

getIssuer in interface JWTSSOProvider

Returns:

identifier for the JWT issuer verified by this instance

getAlgorithm

public org.apache.cxf.rs.security.jose.jwa.SignatureAlgorithm getAlgorithm()

Specified by:

getAlgorithm in interface org.apache.cxf.rs.security.jose.jws.JwsSignatureVerifier

verify

public boolean verify(org.apache.cxf.rs.security.jose.jws.JwsHeaders headers,
                      String unsignedText,
                      byte[] signature)

Specified by:

verify in interface org.apache.cxf.rs.security.jose.jws.JwsSignatureVerifier

createJwsVerificationSignature

public org.apache.cxf.rs.security.jose.jws.JwsVerificationSignature createJwsVerificationSignature(org.apache.cxf.rs.security.jose.jws.JwsHeaders headers)

Specified by:

createJwsVerificationSignature in interface org.apache.cxf.rs.security.jose.jws.JwsSignatureVerifier

resolve

@Transactional(readOnly=true)
public Pair<User,Set<SyncopeGrantedAuthority>> resolve(org.apache.cxf.rs.security.jose.jwt.JwtClaims jwtClaims)

Description copied from interface: JWTSSOProvider

Attempts to resolve the given JWT claims into internal User and authorities. IMPORTANT: this is not invoked for the admin super-user.

Specified by:

resolve in interface JWTSSOProvider

Parameters:

jwtClaims - JWT claims

Returns:

internal User, with authorities, matching the provided JWT claims, if found; otherwise null