com.atlassian.asap.nimbus.parser

Class NimbusJwtParser

java.lang.Object

com.atlassian.asap.nimbus.parser.NimbusJwtParser

All Implemented Interfaces:

JwtParser

public class NimbusJwtParser
extends Object
implements JwtParser

A parser of JWT implemented using the Nimbus library.

Constructor Summary

Constructors

Constructor and Description
NimbusJwtParser()
NimbusJwtParser(Provider provider)

Method Summary

Modifier and Type	Method and Description
Optional<String>	determineUnverifiedIssuer(String serializedJwt) Extracts the issuer, if at all possible, from the claims section of the given serialized JWT.
VerifiableJwt	parse(String serializedJwt) Parses the encoded JWT message from String, and returns a verifiable JWT object without verifying its signature or validating its claims.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

NimbusJwtParser

public NimbusJwtParser()

NimbusJwtParser

public NimbusJwtParser(Provider provider)

Method Detail

parse

public VerifiableJwt parse(String serializedJwt)
                    throws JwtParseException,
                           UnsupportedAlgorithmException

Description copied from interface: JwtParser

Parses the encoded JWT message from String, and returns a verifiable JWT object without verifying its signature or validating its claims. All the required headers and claims must be present.

Specified by:

parse in interface JwtParser

Parameters:

serializedJwt - a JSON Web Token

Returns:

a VerifiableJwt that has all the required claims and headers

Throws:

JwtParseException - if the JWT string was malformed (see subclasses)

UnsupportedAlgorithmException - if the signature algorithm is not recognised

determineUnverifiedIssuer

public Optional<String> determineUnverifiedIssuer(String serializedJwt)

Description copied from interface: JwtParser

Extracts the issuer, if at all possible, from the claims section of the given serialized JWT. This will NOT validate anything in the JWT, and is only intended to be used to assist in returning useful authentication failure messages to clients, not for real issuer validation.

Specified by:

determineUnverifiedIssuer in interface JwtParser

Parameters:

serializedJwt - a JSON Web Token

Returns:

the issuer claim from that JWT, or else empty if none could be parsed or found