Class AccessTokenValidator
- java.lang.Object
-
- com.nimbusds.openid.connect.sdk.validators.AccessTokenValidator
-
@ThreadSafe public class AccessTokenValidator extends Object
Access token validator, using theat_hash
ID token claim. Required in the implicit flow and the hybrid flow where the access token is returned at the authorisation endpoint.Related specifications:
- OpenID Connect Core 1.0, sections 3.1.3.8, 3.2.2.9 and 3.3.2.9.
-
-
Constructor Summary
Constructors Constructor Description AccessTokenValidator()
-
Method Summary
All Methods Static Methods Concrete Methods Modifier and Type Method Description static void
validate(AccessToken accessToken, com.nimbusds.jose.JWSAlgorithm jwsAlgorithm, AccessTokenHash accessTokenHash)
Validates the specified access token.
-
-
-
Constructor Detail
-
AccessTokenValidator
public AccessTokenValidator()
-
-
Method Detail
-
validate
public static void validate(AccessToken accessToken, com.nimbusds.jose.JWSAlgorithm jwsAlgorithm, AccessTokenHash accessTokenHash) throws InvalidHashException
Validates the specified access token.- Parameters:
accessToken
- The access token. Must not benull
.jwsAlgorithm
- The JWS algorithm of the ID token. Must not benull
.accessTokenHash
- The access token hash, as set in theat_hash
ID token claim. Must not benull
,- Throws:
InvalidHashException
- If the access token doesn't match the hash.
-
-