com.atlassian.asap.service.core.impl

Class TokenValidatorImpl

java.lang.Object

com.atlassian.asap.service.core.impl.AbstractTokenValidator

com.atlassian.asap.service.core.impl.TokenValidatorImpl

All Implemented Interfaces:

TokenValidator

public class TokenValidatorImpl
extends AbstractTokenValidator

Nested Class Summary

Nested classes/interfaces inherited from interface com.atlassian.asap.service.api.TokenValidator

TokenValidator.Policy

Constructor Summary

Constructors

Constructor and Description
TokenValidatorImpl(AsapConfiguration config, KeyProvider<PublicKey> publicKeyProvider, JwtClaimsValidator jwtClaimsValidator)

Method Summary

Modifier and Type	Method and Description
protected JwtValidator	createJwtValidator(KeyProvider<PublicKey> publicKeyProvider, JwtParser jwtParser, JwtClaimsValidator jwtClaimsValidator, Set<String> allowedAudiences) Creates the validator that will enforce correctness of the token.
ValidationResult	validate(Optional<String> authHeader) Perform the validation.

Methods inherited from class com.atlassian.asap.service.core.impl.AbstractTokenValidator

acceptableAudienceValues, audience, authorizedIssuers, authorizedSubjects, impersonationAuthorizedIssuers, impersonationIssuer, issuer, policy, policy, subject, subjectImpersonation, subjectImpersonation, toString

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Methods inherited from interface com.atlassian.asap.service.api.TokenValidator

audience, impersonationIssuer, issuer, subject

Constructor Detail

TokenValidatorImpl

public TokenValidatorImpl(AsapConfiguration config,
                          KeyProvider<PublicKey> publicKeyProvider,
                          JwtClaimsValidator jwtClaimsValidator)

Method Detail

validate

public ValidationResult validate(Optional<String> authHeader)

Description copied from interface: TokenValidator

Perform the validation.

Parameters:

authHeader - the contents of the Authorization header from the HTTP request, if any.

Returns:

the outcome from validating the authHeader

createJwtValidator

protected JwtValidator createJwtValidator(KeyProvider<PublicKey> publicKeyProvider,
                                          JwtParser jwtParser,
                                          JwtClaimsValidator jwtClaimsValidator,
                                          Set<String> allowedAudiences)

Creates the validator that will enforce correctness of the token.

Parameters:

publicKeyProvider - the source for resolving public keys

jwtParser - a parser for deserializing the JWT

jwtClaimsValidator - the validator for enforcing authorization claims

allowedAudiences - the audience values that the token is allowed to specify for authenticating with us

Returns:

a validator for the JWT