com.azure.spring.cloud.autoconfigure.aad.filter

Class UserPrincipalManager

java.lang.Object

com.azure.spring.cloud.autoconfigure.aad.filter.UserPrincipalManager

public class UserPrincipalManager
extends Object

A user principal manager to load user info from JWT.

Constructor Summary

Constructors

Constructor and Description
UserPrincipalManager(AADAuthorizationServerEndpoints endpoints, AADAuthenticationProperties aadAuthenticationProperties, com.nimbusds.jose.util.ResourceRetriever resourceRetriever, boolean explicitAudienceCheck) Create a new UserPrincipalManager based of the AADAuthorizationServerEndpoints.jwkSetEndpoint()
UserPrincipalManager(AADAuthorizationServerEndpoints endpoints, AADAuthenticationProperties aadAuthenticationProperties, com.nimbusds.jose.util.ResourceRetriever resourceRetriever, boolean explicitAudienceCheck, com.nimbusds.jose.jwk.source.JWKSetCache jwkSetCache) Create a new UserPrincipalManager based of the AADAuthorizationServerEndpoints.jwkSetEndpoint() ()}
UserPrincipalManager(com.nimbusds.jose.jwk.source.JWKSource<com.nimbusds.jose.proc.SecurityContext> keySource) ø Creates a new UserPrincipalManager with a predefined JWKSource.

Method Summary

Modifier and Type	Method and Description
UserPrincipal	buildUserPrincipal(String aadIssuedBearerToken) Parse the id token to UserPrincipal.
boolean	isTokenIssuedByAAD(String token)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

UserPrincipalManager

public UserPrincipalManager(com.nimbusds.jose.jwk.source.JWKSource<com.nimbusds.jose.proc.SecurityContext> keySource)

ø Creates a new UserPrincipalManager with a predefined JWKSource.

This is helpful in cases the JWK is not a remote JWKSet or for unit testing.

Parameters:

keySource - - JWKSource containing at least one key

UserPrincipalManager

public UserPrincipalManager(AADAuthorizationServerEndpoints endpoints,
                            AADAuthenticationProperties aadAuthenticationProperties,
                            com.nimbusds.jose.util.ResourceRetriever resourceRetriever,
                            boolean explicitAudienceCheck)

Create a new UserPrincipalManager based of the AADAuthorizationServerEndpoints.jwkSetEndpoint()

Parameters:

endpoints - - used to retrieve the JWKS URL

aadAuthenticationProperties - - used to retrieve the environment.

resourceRetriever - - configures the RemoteJWKSet call.

explicitAudienceCheck - Whether explicitly check the audience.

Throws:

IllegalArgumentException - If AAD key discovery URI is malformed.

UserPrincipalManager

public UserPrincipalManager(AADAuthorizationServerEndpoints endpoints,
                            AADAuthenticationProperties aadAuthenticationProperties,
                            com.nimbusds.jose.util.ResourceRetriever resourceRetriever,
                            boolean explicitAudienceCheck,
                            com.nimbusds.jose.jwk.source.JWKSetCache jwkSetCache)

Create a new UserPrincipalManager based of the AADAuthorizationServerEndpoints.jwkSetEndpoint() ()}

Parameters:

endpoints - - used to retrieve the JWKS URL

aadAuthenticationProperties - - used to retrieve the environment.

resourceRetriever - - configures the RemoteJWKSet call.

jwkSetCache - - used to cache the JWK set for a finite time, default set to 5 minutes which matches constructor above if no jwkSetCache is passed in

explicitAudienceCheck - Whether explicitly check the audience.

Throws:

IllegalArgumentException - If AAD key discovery URI is malformed.

Method Detail

buildUserPrincipal

public UserPrincipal buildUserPrincipal(String aadIssuedBearerToken)
                                 throws ParseException,
                                        com.nimbusds.jose.JOSEException,
                                        com.nimbusds.jose.proc.BadJOSEException

Parse the id token to UserPrincipal.

Parameters:

aadIssuedBearerToken - The token issued by AAD.

Returns:

The parsed UserPrincipal.

Throws:

ParseException - If the token couldn't be parsed to a valid JWS object.

com.nimbusds.jose.JOSEException - If an internal processing exception is encountered.

com.nimbusds.jose.proc.BadJOSEException - If the JWT is rejected.

isTokenIssuedByAAD

public boolean isTokenIssuedByAAD(String token)