com.mercateo.spring.security.jwt.token.config.JWTConfig Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of spring-security-jwt Show documentation

JWT authentication with spring security

There is a newer version: 2.1.1

package com.mercateo.spring.security.jwt.token.config;

import org.immutables.value.Value;

import com.auth0.jwt.JWTVerifier;
import com.mercateo.spring.security.jwt.token.keyset.JWTKeyset;
import com.mercateo.spring.security.jwt.token.verifier.JWTVerifierFactory;

import io.vavr.collection.Set;
import io.vavr.control.Option;

public interface JWTConfig {

    /**
     * @return The default window in seconds in which the Not Before, Issued At and
     *         Expires At Claims will still be valid.
     *
     *         Setting a specific leeway value on a given Claim will override this
     *         value for that Claim.
     */
    @Value.Default
    default int getTokenLeeway() {
        return 0;
    }

    /**
     * @return required Audience ("aud") claims
     */
    Set getTokenAudiences();

    /**
     * Namespaces where claims are searched for
     * 
     * @return list of namespaces
     */
    Set getNamespaces();

    /**
     * @return set of required claims
     */
    Set getRequiredClaims();

    /**
     * @return set of claims which should be processed if they exist
     */
    Set getOptionalClaims();

    /**
     * @return {@link JWTKeyset} to be used for token verification
     */
    Option jwtKeyset();

    /**
     * @return {@link JWTVerifier} for given {@link JWTKeyset} to be used for token
     *         verification
     */
    @Value.Derived
    default Option jwtVerifier() {
        return jwtKeyset().map(jwks -> new JWTVerifierFactory(jwks, this)).map(JWTVerifierFactory::create);
    }
}