com.nimbusds.openid.connect.provider.spi.crypto

Interface JWTSigner

@ThreadSafe
public interface JWTSigner

Interface exposed by the Connect2id server for signing JSON Web Tokens (JWT) created by SPI implementations, for example Security Event Tokens (SET).

Method Summary

Modifier and Type	Method and Description
com.nimbusds.jwt.SignedJWT	sign(@Nullable com.nimbusds.jose.JOSEObjectType typ, com.nimbusds.jwt.JWTClaimsSet jwtClaimsSet) Signs the specified JWT claims.
default com.nimbusds.jwt.SignedJWT	sign(com.nimbusds.jwt.JWTClaimsSet jwtClaimsSet) Signs the specified JWT claims.

Method Detail

sign

default com.nimbusds.jwt.SignedJWT sign(com.nimbusds.jwt.JWTClaimsSet jwtClaimsSet)

Signs the specified JWT claims. The issuer (iss) claim will be set to the OpenID Provider / Authorisation Server issuer URL. The JWT will be signed with the private key (RSA or EC) used for signing self-contained access tokens. Recipients can validate the JWT signature using the published JWK set.

Parameters:

jwtClaimsSet - The JWT claims. Must not be null.

Returns:

The signed JWT.

sign

com.nimbusds.jwt.SignedJWT sign(@Nullable com.nimbusds.jose.JOSEObjectType typ,
                                com.nimbusds.jwt.JWTClaimsSet jwtClaimsSet)

Signs the specified JWT claims. The issuer (iss) claim will be set to the OpenID Provider / Authorisation Server issuer URL. The JWT will be signed with the private key (RSA or EC) used for signing self-contained access tokens. Recipients can validate the JWT signature using the published JWK set.

Parameters:

typ - The JOSE object type ("typ") header parameter, null if none.

jwtClaimsSet - The JWT claims. Must not be null.

Returns:

The signed JWT.