Package com.sap.cloud.security.token

Class SapIdToken

java.lang.Object

com.sap.cloud.security.token.AbstractToken

com.sap.cloud.security.token.SapIdToken

All Implemented Interfaces:

Token, Serializable

public class SapIdToken
extends AbstractToken

You can get further token claims from here: TokenClaims.

See Also:

• Serialized Form

Field Summary

Fields inherited from class com.sap.cloud.security.token.AbstractToken

tokenBody, tokenHeader

Fields inherited from interface com.sap.cloud.security.token.Token

DEFAULT_TOKEN_FACTORY, services

Constructor Summary

Constructors

Constructor	Description
SapIdToken(DecodedJwt decodedJwt)
SapIdToken(String idToken)

Method Summary

Modifier and Type	Method	Description
String	getCnfX509Thumbprint()
String	getIssuer()	Gets the token issuer domain that is required to check trust in the issuing identity service.
Principal	getPrincipal()
Service	getService()

Methods inherited from class com.sap.cloud.security.token.AbstractToken

createPrincipalByName, equals, getClaimAsJsonObject, getClaimAsString, getClaimAsStringList, getClaims, getExpiration, getHeaderParameterAsString, getHeaders, getNotBefore, getTokenValue, getZoneId, hasClaim, hashCode, hasHeaderParameter, isExpired, isXsuaaToken, toString

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, wait, wait, wait

Methods inherited from interface com.sap.cloud.security.token.Token

getAttributeFromClaimAsString, getAttributeFromClaimAsStringList, getAudiences, getClientId, getGrantType

Constructor Details

SapIdToken

public SapIdToken(@Nonnull
 DecodedJwt decodedJwt)

SapIdToken

public SapIdToken(@Nonnull
 String idToken)

Method Details

getPrincipal

public Principal getPrincipal()

getService

public Service getService()

getIssuer

public String getIssuer()

Gets the token issuer domain that is required to check trust in the issuing identity service. In multi-tenant or single-tenant with custom domain scenarios, claim TokenClaims.IAS_ISSUER must be used for trust checks instead of claim TokenClaims.ISSUER. It contains the internal domain of the identity service. External customer domains are not trusted.

Use Token.getClaimAsString(String) with TokenClaims.ISSUER instead to get the custom domain if one is used.

Returns:

value of claim TokenClaims.IAS_ISSUER if exists, otherwise value of Token.getIssuer()

getCnfX509Thumbprint

@Nullable
public String getCnfX509Thumbprint()