Package org.apache.syncope.core.spring.security

Class SyncopeJWTSSOProvider

java.lang.Object

org.apache.syncope.core.spring.security.SyncopeJWTSSOProvider

All Implemented Interfaces:

com.nimbusds.jose.jca.JCAAware<com.nimbusds.jose.jca.JCAContext>, com.nimbusds.jose.JOSEProvider, com.nimbusds.jose.JWSProvider, com.nimbusds.jose.JWSVerifier, JWTSSOProvider

public class SyncopeJWTSSOProvider
extends Object
implements JWTSSOProvider

Default implementation for internal JWT validation.

Field Summary

Fields

Modifier and Type	Field	Description
protected AccessTokenDAO	accessTokenDAO
protected AccessTokenJWSVerifier	delegate
protected static Encryptor	ENCRYPTOR
protected static Logger	LOG
protected SecurityProperties	securityProperties
protected UserDAO	userDAO

Constructor Summary

Constructors

Constructor	Description
SyncopeJWTSSOProvider(SecurityProperties securityProperties, AccessTokenJWSVerifier delegate, UserDAO userDAO, AccessTokenDAO accessTokenDAO)

Method Summary

Modifier and Type	Method	Description
String	getIssuer()	Gives the identifier for the JWT issuer verified by this instance.
com.nimbusds.jose.jca.JCAContext	getJCAContext()
Pair<User,Set<SyncopeGrantedAuthority>>	resolve(com.nimbusds.jwt.JWTClaimsSet jwtClaims)	Attempts to resolve the given JWT claims into internal User and authorities.
Set<com.nimbusds.jose.JWSAlgorithm>	supportedJWSAlgorithms()
boolean	verify(com.nimbusds.jose.JWSHeader header, byte[] signingInput, com.nimbusds.jose.util.Base64URL signature)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

LOG

protected static final Logger LOG

ENCRYPTOR

protected static final Encryptor ENCRYPTOR

securityProperties

protected final SecurityProperties securityProperties

delegate

protected final AccessTokenJWSVerifier delegate

userDAO

protected final UserDAO userDAO

accessTokenDAO

protected final AccessTokenDAO accessTokenDAO

Constructor Detail

SyncopeJWTSSOProvider

public SyncopeJWTSSOProvider(SecurityProperties securityProperties,
                             AccessTokenJWSVerifier delegate,
                             UserDAO userDAO,
                             AccessTokenDAO accessTokenDAO)

Method Detail

getIssuer

public String getIssuer()

Description copied from interface: JWTSSOProvider

Gives the identifier for the JWT issuer verified by this instance.

Specified by:

getIssuer in interface JWTSSOProvider

Returns:

identifier for the JWT issuer verified by this instance

supportedJWSAlgorithms

public Set<com.nimbusds.jose.JWSAlgorithm> supportedJWSAlgorithms()

Specified by:

supportedJWSAlgorithms in interface com.nimbusds.jose.JWSProvider

getJCAContext

public com.nimbusds.jose.jca.JCAContext getJCAContext()

Specified by:

getJCAContext in interface com.nimbusds.jose.jca.JCAAware<com.nimbusds.jose.jca.JCAContext>

verify

public boolean verify(com.nimbusds.jose.JWSHeader header,
                      byte[] signingInput,
                      com.nimbusds.jose.util.Base64URL signature)
               throws com.nimbusds.jose.JOSEException

Specified by:

verify in interface com.nimbusds.jose.JWSVerifier

Throws:

com.nimbusds.jose.JOSEException

resolve

@Transactional(readOnly=true)
public Pair<User,Set<SyncopeGrantedAuthority>> resolve(com.nimbusds.jwt.JWTClaimsSet jwtClaims)

Description copied from interface: JWTSSOProvider

Attempts to resolve the given JWT claims into internal User and authorities. IMPORTANT: this is not invoked for the admin super-user.

Specified by:

resolve in interface JWTSSOProvider

Parameters:

jwtClaims - JWT claims

Returns:

internal User, with authorities, matching the provided JWT claims, if found; otherwise null