com.duosecurity

Class DuoIdTokenValidator

java.lang.Object

com.duosecurity.DuoIdTokenValidator

All Implemented Interfaces:

TokenValidator

public final class DuoIdTokenValidator
extends Object
implements TokenValidator

A JWT ID Token Validator that enforces Duo's claim requirements. Issuer must match expected Audience must match expected Subject must match expected username Allow 1 minutes leeway on Issued at / Expiration MAC is valid [Optional] Nonce must match expected

Constructor Summary

Constructors

Constructor and Description
DuoIdTokenValidator(String clientSecret, String username, String audience, String apiHost)
DuoIdTokenValidator(String clientSecret, String username, String audience, String apiHost, String nonce) Constructor with nonce parameter.

Method Summary

Modifier and Type	Method and Description
com.auth0.jwt.interfaces.DecodedJWT	validateAndDecode(String jwt) Validate the provided jwt token against the expected values of the claims, as described above.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

DuoIdTokenValidator

public DuoIdTokenValidator(String clientSecret,
                           String username,
                           String audience,
                           String apiHost)

DuoIdTokenValidator

public DuoIdTokenValidator(String clientSecret,
                           String username,
                           String audience,
                           String apiHost,
                           String nonce)

Constructor with nonce parameter.

Parameters:

clientSecret - The client secret provided by Duo in the admin panel.

username - The name of the user trying to auth

audience - This value is the client id provided by Duo in the admin panel.

apiHost - The api host provided by Duo in the admin panel.

nonce - A string used to associate a client session with an ID token.

Method Detail

validateAndDecode

public com.auth0.jwt.interfaces.DecodedJWT validateAndDecode(String jwt)
                                                      throws DuoException

Validate the provided jwt token against the expected values of the claims, as described above.

Specified by:

validateAndDecode in interface TokenValidator

Returns:

the decoded JWT if all the claims check out, otherwise a DuoException is raised

Throws:

DuoException