Package org.springframework.security.oauth2.jwt
package org.springframework.security.oauth2.jwt
Core classes and interfaces providing support for JSON Web Token (JWT).
-
ClassDescriptionAn exception similar to
BadCredentialsExceptionthat indicates aJwtthat is invalid in some way.A context class that holds a DPoP ProofJwtand additional parameters associated to an Access Token request or a Protected Resource request.A builder forDPoPProofContext.Afactorythat provides aJwtDecoderfor the specifiedDPoPProofContextand is used for authenticating a DPoP ProofJwt.The Registered Header Parameter Names defined by the JSON Web Token (JWT), JSON Web Signature (JWS) and JSON Web Encryption (JWE) specifications that may be contained in the JOSE Header of a JWT.The JSON Web Signature (JWS) header is a JSON object representing the header parameters of a JSON Web Token, that describe the cryptographic operations used to digitally sign or create a MAC of the contents of the JWS Protected Header and JWS Payload.A builder forJwsHeader.An implementation of anAbstractOAuth2Tokenrepresenting a JSON Web Token (JWT).Helps configure aJwtValidates that the "aud" claim in aJwtmatches a configured value.AClaimAccessorfor the "claims" that may be contained in the JSON object JWT Claims Set of a JSON Web Token (JWT).The Registered Claim Names defined by the JSON Web Token (JWT) specification that may be contained in the JSON object JWT Claims Set.TheJWTClaims Set is a JSON object representing the claims conveyed by a JSON Web Token.A builder forJwtClaimsSet.Implementations of this interface are responsible for "decoding" a JSON Web Token (JWT) from its compact claims representation format to aJwt.A factory forJwtDecoder(s).An exception thrown when aJwtDecoderorReactiveJwtDecoder's lazy initialization fails.Allows creating aJwtDecoderfrom an OpenID Provider Configuration or Authorization Server Metadata Request based on provided issuer and method invoked.Implementations of this interface are responsible for encoding a JSON Web Token (JWT) to its compact claims representation format.A holder of parameters containing the JWS headers and JWT Claims Set.This exception is thrown when an error occurs while attempting to encode a JSON Web Token (JWT).Base exception for all JSON Web Token (JWT) related errors.Validates the "iss" claim in aJwt, that is matches a configured valueAn implementation ofOAuth2TokenValidatorfor verifying claims in a Jwt-based access tokenA validator for thetypheader.An exception that results from an unsuccessfulOAuth2TokenValidatorResultProvides factory methods for creatingOAuth2TokenValidator<Jwt>A class for building a validator that conforms to RFC 9068.Converts a JWT claim set, claim by claim.A low-level Nimbus implementation ofJwtDecoderwhich takes a raw Nimbus configuration.A builder for creatingNimbusJwtDecoderinstances based on a JWK Set uri.A builder for creatingNimbusJwtDecoderinstances based on aJWKSource.A builder for creatingNimbusJwtDecoderinstances based on a public key.A builder for creatingNimbusJwtDecoderinstances based on aSecretKey.An implementation of aJwtEncoderthat encodes a JSON Web Token (JWT) using the JSON Web Signature (JWS) Compact Serialization format.A builder for creatingNimbusJwtEncoderinstances configured with aKeyPair.A builder for creatingNimbusJwtEncoderinstances configured with aSecretKey.An implementation of aReactiveJwtDecoderthat "decodes" a JSON Web Token (JWT) and additionally verifies its digital signature if the JWT is a JSON Web Signature (JWS).A builder for creatingNimbusReactiveJwtDecoderinstances based on a JWK Set uri.A builder for creatingNimbusReactiveJwtDecoderinstances.A builder for creatingNimbusReactiveJwtDecoderinstances based on a public key.A builder for creatingNimbusReactiveJwtDecoderinstances based on aSecretKey.Implementations of this interface are responsible for "decoding" a JSON Web Token (JWT) from its compact claims representation format to aJwt.A factory forReactiveJwtDecoder(s).Allows creating aReactiveJwtDecoderfrom an OpenID Provider Configuration or Authorization Server Metadata Request based on provided issuer and method invoked.AJwtDecoderthat lazily initializes anotherJwtDecoderAReactiveJwtDecoderthat lazily initializes anotherReactiveJwtDecoder