Class OAuth2AuthorizationValidator

java.lang.Object

com.codename1.backend.security.oauth2.server.authorization.OAuth2AuthorizationValidator

All Implemented Interfaces:

OAuth2TokenValidator<Jwt>

public final class OAuth2AuthorizationValidator
extends Object
implements OAuth2TokenValidator<Jwt>

Checks a signed access token against its live authorization grant, including client-credentials grants. Removing the grant makes subsequent checks fail. Install alongside timestamp and audience validators on a JWT decoder that verifies the issuer's signature. The resource server must share the issuer's authorization store; signature-only verification cannot observe revocation.

Constructor Summary

Constructors

Constructor	Description
OAuth2AuthorizationValidator(OAuth2AuthorizationService authorizations, String issuer)

Method Summary

Modifier and Type	Method	Description
void	setClock(Clock clock)	The clock used to check the grant's expiry.
OAuth2TokenValidatorResult	validate(Jwt jwt)	Whether token passes, and why not.

Methods inherited from class Object

clone, equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

OAuth2AuthorizationValidator

public OAuth2AuthorizationValidator(OAuth2AuthorizationService authorizations,
 String issuer)

Method Details

setClock

public void setClock(Clock clock)

The clock used to check the grant's expiry.

validate

public OAuth2TokenValidatorResult validate(Jwt jwt)

Description copied from interface: OAuth2TokenValidator

Whether token passes, and why not.

Specified by:

validate in interface OAuth2TokenValidator<Jwt>