com.nimbusds.jwt.proc.DefaultJWTClaimsVerifier Maven / Gradle / Ivy

Go to download
package com.nimbusds.jwt.proc;


import java.util.Date;

import net.jcip.annotations.ThreadSafe;

import com.nimbusds.jwt.JWTClaimsSet;


/**
 * Default JWT claims verifier. This class is thread-safe.
 *
 * Performs the following checks:
 *
 * 

 *     If an expiration time (exp) claim is present, makes sure it is
 *         ahead of the current time, else the JWT claims set is rejected.
 *     
If a not-before-time (nbf) claim is present, makes sure it is
 *         before the current time, else the JWT claims set is rejected.
 * 
 *
 * This class may be extended to perform additional checks.
 *
 * @author Vladimir Dzhuvinov
 * @version 2015-10-20
 */
@ThreadSafe
public class DefaultJWTClaimsVerifier implements JWTClaimsVerifier {


	// Cache exceptions


	/**
	 * Expired JWT.
	 */
	private static final BadJWTException EXPIRED_JWT_EXCEPTION = new BadJWTException("Expired JWT");


	/**
	 * JWT before use time.
	 */
	private static final BadJWTException JWT_BEFORE_USE_EXCEPTION = new BadJWTException("JWT before use time");


	@Override
	public void verify(final JWTClaimsSet claimsSet)
		throws BadJWTException {

		final Date now = new Date();

		final Date exp = claimsSet.getExpirationTime();

		if (exp != null) {

			if (now.after(exp)) {
				throw EXPIRED_JWT_EXCEPTION;
			}
		}

		final Date nbf = claimsSet.getNotBeforeTime();

		if (nbf != null) {

			if (now.before(nbf)) {
				throw JWT_BEFORE_USE_EXCEPTION;
			}
		}
	}
}