com.nimbusds.openid.connect.sdk.token.verifiers

Class IDTokenClaimsVerifier

java.lang.Object

com.nimbusds.openid.connect.sdk.token.verifiers.IDTokenClaimsVerifier

All Implemented Interfaces:

com.nimbusds.jwt.proc.JWTClaimsVerifier

@ThreadSafe
public class IDTokenClaimsVerifier
extends Object
implements com.nimbusds.jwt.proc.JWTClaimsVerifier

ID token claims verifier.

Related specifications:

• OpenID Connect Core 1.0, section 3.1.3.7 for code flow.
• OpenID Connect Core 1.0, section 3.2.2.11 for implicit flow.
• OpenID Connect Core 1.0, sections 3.3.2.12 and 3.3.3.7 for hybrid flow.

Constructor Summary

Constructors

Constructor and Description
IDTokenClaimsVerifier(Issuer issuer, ClientID clientID, Nonce nonce) Creates a new ID token claims verifier.

Method Summary

Methods

Modifier and Type	Method and Description
ClientID	getClientID() Returns the client ID for verifying the ID token audience.
Issuer	getExpectedIssuer() Returns the expected ID token issuer.
Nonce	getExpectedNonce() Returns the expected nonce.
void	verify(com.nimbusds.jwt.JWTClaimsSet claimsSet)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

IDTokenClaimsVerifier

public IDTokenClaimsVerifier(Issuer issuer,
                     ClientID clientID,
                     Nonce nonce)

Creates a new ID token claims verifier.

Parameters:

issuer - The expected ID token issuer. Must not be null.

clientID - The client ID. Must not be null.

nonce - The nonce, required in the implicit flow or for ID tokens returned by the authorisation endpoint in the hybrid flow. null if not required or specified.

Method Detail

getExpectedIssuer

public Issuer getExpectedIssuer()

Returns the expected ID token issuer.

Returns:

The ID token issuer.

getClientID

public ClientID getClientID()

Returns the client ID for verifying the ID token audience.

Returns:

The client ID.

getExpectedNonce

public Nonce getExpectedNonce()

Returns the expected nonce.

Returns:

The nonce, null if not required or specified.

verify

public void verify(com.nimbusds.jwt.JWTClaimsSet claimsSet)
            throws com.nimbusds.jwt.proc.BadJWTException

Specified by:

verify in interface com.nimbusds.jwt.proc.JWTClaimsVerifier

Throws:

com.nimbusds.jwt.proc.BadJWTException