Package org.springframework.security.oauth2.jwt

Class JwtIssuedAtValidator

java.lang.Object

org.springframework.security.oauth2.jwt.JwtIssuedAtValidator

All Implemented Interfaces:

org.springframework.security.oauth2.core.OAuth2TokenValidator<Jwt>

public final class JwtIssuedAtValidator
extends Object
implements org.springframework.security.oauth2.core.OAuth2TokenValidator<Jwt>

An OAuth2TokenValidator responsible for validating the "iat" claim in the Jwt.

Since:

6.5

See Also:

• OAuth2TokenValidator
• Jwt
• JSON Web Token (JWT)

Constructor Summary

Constructors

Constructor	Description
JwtIssuedAtValidator()	Constructs a JwtIssuedAtValidator with the defaults.
JwtIssuedAtValidator(boolean required)	Constructs a JwtIssuedAtValidator using the provided parameters.

Method Summary

Modifier and Type	Method	Description
void	setClock(Clock clock)	Sets the Clock used in Instant.now(Clock).
void	setClockSkew(Duration clockSkew)	Sets the clock skew.
org.springframework.security.oauth2.core.OAuth2TokenValidatorResult	validate(Jwt jwt)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

JwtIssuedAtValidator

public JwtIssuedAtValidator()

Constructs a JwtIssuedAtValidator with the defaults.

JwtIssuedAtValidator

public JwtIssuedAtValidator(boolean required)

Constructs a JwtIssuedAtValidator using the provided parameters.

Parameters:

required - true if the "iat" claim is REQUIRED in the Jwt, false otherwise

Method Details

validate

public org.springframework.security.oauth2.core.OAuth2TokenValidatorResult validate(Jwt jwt)

Specified by:

validate in interface org.springframework.security.oauth2.core.OAuth2TokenValidator<Jwt>

setClockSkew

public void setClockSkew(Duration clockSkew)

Sets the clock skew. The default is 60 seconds.

Parameters:

clockSkew - the clock skew

setClock

public void setClock(Clock clock)

Sets the Clock used in Instant.now(Clock).

Parameters:

clock - the clock