Package org.springframework.security.oauth2.client.endpoint

Class NimbusJwtClientAuthenticationParametersConverter<T extends AbstractOAuth2AuthorizationGrantRequest>

java.lang.Object

org.springframework.security.oauth2.client.endpoint.NimbusJwtClientAuthenticationParametersConverter<T>

Type Parameters:

T - the type of AbstractOAuth2AuthorizationGrantRequest

All Implemented Interfaces:

org.springframework.core.convert.converter.Converter<T,org.springframework.util.MultiValueMap<String,String>>

public final class NimbusJwtClientAuthenticationParametersConverter<T extends AbstractOAuth2AuthorizationGrantRequest>
extends Object
implements org.springframework.core.convert.converter.Converter<T,org.springframework.util.MultiValueMap<String,String>>

A Converter that customizes the OAuth 2.0 Access Token Request parameters by adding a signed JSON Web Token (JWS) to be used for client authentication at the Authorization Server's Token Endpoint. The private/secret key used for signing the JWS is supplied by the com.nimbusds.jose.jwk.JWK resolver provided via the constructor.

NOTE: This implementation uses the Nimbus JOSE + JWT SDK.

Since:

5.5

See Also:

• Converter
• JWK
• AbstractOAuth2AuthorizationGrantRequestEntityConverter.addParametersConverter(Converter)
• AbstractOAuth2AuthorizationGrantRequestEntityConverter.addParametersConverter(Converter)
• 2.2 Using JWTs for Client Authentication
• 4.2 Using Assertions for Client Authentication
• Nimbus JOSE + JWT SDK

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static final class	NimbusJwtClientAuthenticationParametersConverter.JwtClientAuthenticationContext<T extends AbstractOAuth2AuthorizationGrantRequest>	A context that holds client authentication-specific state and is used by NimbusJwtClientAuthenticationParametersConverter when attempting to customize the JSON Web Token (JWS) client assertion.

Constructor Summary

Constructors

Constructor	Description
NimbusJwtClientAuthenticationParametersConverter(Function<ClientRegistration,com.nimbusds.jose.jwk.JWK> jwkResolver)	Constructs a NimbusJwtClientAuthenticationParametersConverter using the provided parameters.

Method Summary

Modifier and Type	Method	Description
org.springframework.util.MultiValueMap<String,String>	convert(T authorizationGrantRequest)
void	setJwtClientAssertionCustomizer(Consumer<NimbusJwtClientAuthenticationParametersConverter.JwtClientAuthenticationContext<T>> jwtClientAssertionCustomizer)	Sets the Consumer to be provided the NimbusJwtClientAuthenticationParametersConverter.JwtClientAuthenticationContext, which contains the JwsHeader.Builder and JwtClaimsSet.Builder for further customization.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.springframework.core.convert.converter.Converter

andThen

Constructor Details

NimbusJwtClientAuthenticationParametersConverter

public NimbusJwtClientAuthenticationParametersConverter(Function<ClientRegistration,com.nimbusds.jose.jwk.JWK> jwkResolver)

Constructs a NimbusJwtClientAuthenticationParametersConverter using the provided parameters.

Parameters:

jwkResolver - the resolver that provides the com.nimbusds.jose.jwk.JWK associated to the client

Method Details

convert

public org.springframework.util.MultiValueMap<String,String> convert(T authorizationGrantRequest)

Specified by:

convert in interface org.springframework.core.convert.converter.Converter<T extends AbstractOAuth2AuthorizationGrantRequest,org.springframework.util.MultiValueMap<String,String>>

setJwtClientAssertionCustomizer

public void setJwtClientAssertionCustomizer(Consumer<NimbusJwtClientAuthenticationParametersConverter.JwtClientAuthenticationContext<T>> jwtClientAssertionCustomizer)

Sets the Consumer to be provided the NimbusJwtClientAuthenticationParametersConverter.JwtClientAuthenticationContext, which contains the JwsHeader.Builder and JwtClaimsSet.Builder for further customization.

Parameters:

jwtClientAssertionCustomizer - the Consumer to be provided the NimbusJwtClientAuthenticationParametersConverter.JwtClientAuthenticationContext

Since:

5.7