Package com.google.crypto.tink.jwt
Interface JwtPublicKeyVerify
-
@Immutable public interface JwtPublicKeyVerifyInterface for verifying a signed JWT, as described in RFC 7519 and RFC 7515.Security guarantees: similar to
PublicKeyVerify.
-
-
Method Summary
All Methods Instance Methods Abstract Methods Modifier and Type Method Description VerifiedJwtverifyAndDecode(java.lang.String compact, JwtValidator validator)Verifies and decodes a JWT in the JWS compact serialization format.
-
-
-
Method Detail
-
verifyAndDecode
VerifiedJwt verifyAndDecode(java.lang.String compact, JwtValidator validator) throws java.security.GeneralSecurityException
Verifies and decodes a JWT in the JWS compact serialization format.The JWT is validated against the rules in
validator. That is, every claim invalidatormust also be present in the JWT. For example, ifvalidatorcontains anissclaim, the JWT must contain an identical claim. The JWT can contain claims that areNOTin thevalidator. However, if the JWT contains a list of audiences, the validator must also contain an audience in the list.If the JWT contains timestamp claims such as
exp,iatornbf, they will also be validated.validatorallows to set a clock skew, to deal with small clock differences among different machines.- Throws:
java.security.GeneralSecurityException- when the signature of the token could not be verified, the token contains an invalid claim or header, the token has been expired or can't be used yet
-
-