fr.paris.lutece.util.signrequest

Class JWTSecretKeyAuthenticator

java.lang.Object

fr.paris.lutece.util.signrequest.AbstractAuthenticator

fr.paris.lutece.util.signrequest.AbstractJWTAuthenticator

fr.paris.lutece.util.signrequest.JWTSecretKeyAuthenticator

All Implemented Interfaces:

RequestAuthenticator

public class JWTSecretKeyAuthenticator
extends AbstractJWTAuthenticator

Field Summary

Fields inherited from class fr.paris.lutece.util.signrequest.AbstractJWTAuthenticator

_mapClaimsToCheck, _strJWTHttpHeader, LOGGER

Fields inherited from class fr.paris.lutece.util.signrequest.AbstractAuthenticator

_lValidityTimePeriod

Constructor Summary

Constructors

Constructor and Description
JWTSecretKeyAuthenticator(Map<String,String> mapClaimsToCheck, String strJWTHttpHeader, long lValidityPeriod, String strEncryptionAlgorythmName, String strSecretKey) Constructor

Method Summary

Modifier and Type	Method and Description
void	authenticateRequest(org.apache.commons.httpclient.HttpMethodBase method, List<String> elements) Authenticate a request
boolean	isRequestAuthenticated(javax.servlet.http.HttpServletRequest request) Check the Authentication of a request

Methods inherited from class fr.paris.lutece.util.signrequest.AbstractJWTAuthenticator

getExpirationDate

Methods inherited from class fr.paris.lutece.util.signrequest.AbstractAuthenticator

buildSignature, getSignatureElements, getValidityTimePeriod, isValidTimestamp, setHashService, setSignatureElements, setValidityTimePeriod

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

JWTSecretKeyAuthenticator

public JWTSecretKeyAuthenticator(Map<String,String> mapClaimsToCheck,
                                 String strJWTHttpHeader,
                                 long lValidityPeriod,
                                 String strEncryptionAlgorythmName,
                                 String strSecretKey)

Constructor

Parameters:

mapClaimsToCheck - The map of claims key/values to check in the JWT

strJWTHttpHeader - The name of the header which contains the JWT

lValidityPeriod - The validity period

strEncryptionAlgorythmName - The name of the algorithm. Values are HS256, HS384, HS512

strSecretKey - The secret key

Method Detail

isRequestAuthenticated

public boolean isRequestAuthenticated(javax.servlet.http.HttpServletRequest request)

Check the Authentication of a request

Specified by:

isRequestAuthenticated in interface RequestAuthenticator

Overrides:

isRequestAuthenticated in class AbstractJWTAuthenticator

Parameters:

request - The HTTP request

Returns:

true if authenticated, otherwise false

authenticateRequest

public void authenticateRequest(org.apache.commons.httpclient.HttpMethodBase method,
                                List<String> elements)

Authenticate a request

Parameters:

method - The HTTP method to authenticate

elements - List of elements to include in the signature