com.atlassian.asap.core.server.jersey

Class AsapValidator

java.lang.Object

com.atlassian.asap.core.server.jersey.AsapValidator

public class AsapValidator
extends Object

Validates a valid Jwt token against a whitelist of acceptable subjects and/or issuers.

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	AsapValidator.AsapAnnotationWhitelistProviderWithConfigSupport
static class	AsapValidator.AsapWhitelistProvider
static class	AsapValidator.EnvironmentVariablesWhitelistProvider Provides the whitelist from environment variables.
static class	AsapValidator.Whitelist Provides whitelisted values.

Constructor Summary

Constructors

Constructor and Description
AsapValidator(Function<Asap,AsapValidator.Whitelist> whitelistProvider)

Method Summary

Modifier and Type	Method and Description
static AsapValidator	newAnnotationValidator()
static AsapValidator	newAnnotationWithConfigValidator(Set<String> authorizedSubjects, Set<String> authorizedIssuers) This validator gives preferential treatment to the subjects and issuers present in the Asap annotation.
static AsapValidator	newEnvironmentVariablesValidator()
void	validate(Asap asap, Jwt jwt) Validates a jwt token.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AsapValidator

public AsapValidator(Function<Asap,AsapValidator.Whitelist> whitelistProvider)

Method Detail

newAnnotationValidator

public static AsapValidator newAnnotationValidator()

newEnvironmentVariablesValidator

public static AsapValidator newEnvironmentVariablesValidator()

newAnnotationWithConfigValidator

public static AsapValidator newAnnotationWithConfigValidator(Set<String> authorizedSubjects,
                                                             Set<String> authorizedIssuers)

This validator gives preferential treatment to the subjects and issuers present in the Asap annotation. If either of them is not present in the asap annotation then it falls back to the supplied one.

Parameters:

authorizedSubjects - - Set of authorized subjects

authorizedIssuers - - Set of authorized Issuers

Returns:

AsapValidator with annotation support with fallback to configuration

validate

public void validate(Asap asap,
                     Jwt jwt)
              throws AuthorizationFailedException

Validates a jwt token.

Parameters:

asap - The annotation instance on a method, class, or package

jwt - The jwt token

Throws:

AuthorizationFailedException - If the authorized subjects or issuers fails