Package com.google.crypto.tink.jwt.subtle

Class JwtEcdsaPublicKeyVerify

java.lang.Object

com.google.crypto.tink.jwt.subtle.JwtEcdsaPublicKeyVerify

All Implemented Interfaces:

JwtPublicKeyVerify

public final class JwtEcdsaPublicKeyVerify
extends java.lang.Object
implements JwtPublicKeyVerify

An implementation of JwtPublicKeyVerify for ECDSA.

Method Summary

Modifier and Type	Method	Description
static JwtPublicKeyVerify	create(JwtEcdsaPublicKey publicKey)
VerifiedJwt	verifyAndDecode(java.lang.String compact, JwtValidator validator)	Verifies and decodes a JWT in the JWS compact serialization format.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

create

public static JwtPublicKeyVerify create(JwtEcdsaPublicKey publicKey)
                                 throws java.security.GeneralSecurityException

Throws:

java.security.GeneralSecurityException

verifyAndDecode

public VerifiedJwt verifyAndDecode(java.lang.String compact,
                                   JwtValidator validator)
                            throws java.security.GeneralSecurityException

Description copied from interface: JwtPublicKeyVerify

Verifies and decodes a JWT in the JWS compact serialization format.

The JWT is validated against the rules in validator. That is, every claim in validator must also be present in the JWT. For example, if validator contains an iss claim, the JWT must contain an identical claim. The JWT can contain claims that are NOT in the validator. However, if the JWT contains a list of audiences, the validator must also contain an audience in the list.

If the JWT contains timestamp claims such as exp, iat or nbf, they will also be validated. validator allows to set a clock skew, to deal with small clock differences among different machines.

Specified by:

verifyAndDecode in interface JwtPublicKeyVerify

Throws:

java.security.GeneralSecurityException - when the signature of the token could not be verified, the token contains an invalid claim or header, the token has been expired or can't be used yet