io.quarkus.smallrye.jwt.runtime.auth

Class JWTAuthMechanism

java.lang.Object

io.quarkus.smallrye.jwt.runtime.auth.JWTAuthMechanism

All Implemented Interfaces:

io.undertow.security.api.AuthenticationMechanism

public class JWTAuthMechanism
extends Object
implements io.undertow.security.api.AuthenticationMechanism

An AuthenticationMechanism that validates a caller based on a MicroProfile JWT bearer token

Nested Class Summary

Nested classes/interfaces inherited from interface io.undertow.security.api.AuthenticationMechanism

io.undertow.security.api.AuthenticationMechanism.AuthenticationMechanismOutcome, io.undertow.security.api.AuthenticationMechanism.ChallengeResult

Constructor Summary

Constructors

Constructor and Description
JWTAuthMechanism(io.undertow.security.idm.IdentityManager identityManager)
JWTAuthMechanism(io.smallrye.jwt.auth.principal.JWTAuthContextInfo authContextInfo, io.undertow.security.idm.IdentityManager identityManager)

Method Summary

Modifier and Type	Method and Description
io.undertow.security.api.AuthenticationMechanism.AuthenticationMechanismOutcome	authenticate(io.undertow.server.HttpServerExchange exchange, io.undertow.security.api.SecurityContext securityContext) Extract the Authorization header and validate the bearer token if it exists.
io.undertow.security.api.AuthenticationMechanism.ChallengeResult	sendChallenge(io.undertow.server.HttpServerExchange exchange, io.undertow.security.api.SecurityContext securityContext)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

JWTAuthMechanism

public JWTAuthMechanism(io.smallrye.jwt.auth.principal.JWTAuthContextInfo authContextInfo,
                        io.undertow.security.idm.IdentityManager identityManager)

JWTAuthMechanism

public JWTAuthMechanism(io.undertow.security.idm.IdentityManager identityManager)

Method Detail

authenticate

public io.undertow.security.api.AuthenticationMechanism.AuthenticationMechanismOutcome authenticate(io.undertow.server.HttpServerExchange exchange,
                                                                                                    io.undertow.security.api.SecurityContext securityContext)

Extract the Authorization header and validate the bearer token if it exists. If it does, and is validated, this builds the org.jboss.security.SecurityContext authenticated Subject that drives the container APIs as well as the authorization layers.

Specified by:

authenticate in interface io.undertow.security.api.AuthenticationMechanism

Parameters:

exchange - - the http request exchange object

securityContext - - the current security context that

Returns:

one of AUTHENTICATED, NOT_AUTHENTICATED or NOT_ATTEMPTED depending on the header and authentication outcome.

sendChallenge

public io.undertow.security.api.AuthenticationMechanism.ChallengeResult sendChallenge(io.undertow.server.HttpServerExchange exchange,
                                                                                      io.undertow.security.api.SecurityContext securityContext)

Specified by:

sendChallenge in interface io.undertow.security.api.AuthenticationMechanism