Package fish.payara.microprofile.jwtauth.eesecurity

Class JWTAuthenticationMechanism

java.lang.Object

fish.payara.microprofile.jwtauth.eesecurity.JWTAuthenticationMechanism

All Implemented Interfaces:

jakarta.security.enterprise.authentication.mechanism.http.HttpAuthenticationMechanism

public class JWTAuthenticationMechanism
extends Object
implements jakarta.security.enterprise.authentication.mechanism.http.HttpAuthenticationMechanism

This authentication mechanism reads a JWT token from an HTTP header and passes it to an IdentityStore for validation.

Author:

Arjan Tijms

Field Summary

Fields

Modifier and Type	Field	Description
static String	CONFIG_TOKEN_HEADER_AUTHORIZATION
static String	CONFIG_TOKEN_HEADER_COOKIE

Constructor Summary

Constructors

Constructor	Description
JWTAuthenticationMechanism()

Method Summary

Modifier and Type	Method	Description
jakarta.security.enterprise.AuthenticationStatus	validateRequest(jakarta.servlet.http.HttpServletRequest request, jakarta.servlet.http.HttpServletResponse response, jakarta.security.enterprise.authentication.mechanism.http.HttpMessageContext httpMessageContext)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface jakarta.security.enterprise.authentication.mechanism.http.HttpAuthenticationMechanism

cleanSubject, secureResponse

Field Detail

CONFIG_TOKEN_HEADER_AUTHORIZATION

public static final String CONFIG_TOKEN_HEADER_AUTHORIZATION

See Also:

Constant Field Values

CONFIG_TOKEN_HEADER_COOKIE

public static final String CONFIG_TOKEN_HEADER_COOKIE

See Also:

Constant Field Values

Constructor Detail

JWTAuthenticationMechanism

public JWTAuthenticationMechanism()

Method Detail

validateRequest

public jakarta.security.enterprise.AuthenticationStatus validateRequest(jakarta.servlet.http.HttpServletRequest request,
                                                                        jakarta.servlet.http.HttpServletResponse response,
                                                                        jakarta.security.enterprise.authentication.mechanism.http.HttpMessageContext httpMessageContext)
                                                                 throws jakarta.security.enterprise.AuthenticationException

Specified by:

validateRequest in interface jakarta.security.enterprise.authentication.mechanism.http.HttpAuthenticationMechanism

Throws:

jakarta.security.enterprise.AuthenticationException