org.adroitlogic.x.management.rest.auth

Class JWTTokenManager

java.lang.Object

org.adroitlogic.x.management.rest.auth.JWTTokenManager

public class JWTTokenManager
extends Object

This class will be used to generate and validate tokens.

Since:

17.01

Author:

Amila Paranawithana

Field Summary

Fields

Modifier and Type	Field and Description
static String	JWT_CLAIM_PERMISSIONS
static String	JWT_CLAIM_RANDOM_STRING
static String	JWT_TOKEN_SESSION_RANDOM_STRING

Constructor Summary

Constructors

Constructor and Description
JWTTokenManager()

Method Summary

Modifier and Type	Method and Description
String	generateToken(String subject) Generates a JWT token to the user with adding his permissions, token expiration time
String	getIssuer()
long	getLifeTime()
com.nimbusds.jwt.SignedJWT	parse(String authHeader) Parse a string to generate a SignedJWT
void	setIssuer(String issuer)
void	setLifeTime(long lifeTime)
boolean	verify(com.nimbusds.jwt.SignedJWT signedJWT) This will verify the token sent with the request.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

JWT_CLAIM_PERMISSIONS

public static final String JWT_CLAIM_PERMISSIONS

See Also:

Constant Field Values

JWT_CLAIM_RANDOM_STRING

public static final String JWT_CLAIM_RANDOM_STRING

See Also:

Constant Field Values

JWT_TOKEN_SESSION_RANDOM_STRING

public static final String JWT_TOKEN_SESSION_RANDOM_STRING

Constructor Detail

JWTTokenManager

public JWTTokenManager()

Method Detail

generateToken

public String generateToken(String subject)
                     throws ManagementServiceException

Generates a JWT token to the user with adding his permissions, token expiration time

Parameters:

subject - Subject to whom the token should be issued.

Returns:

generated JWT Token

Throws:

ManagementServiceException - in case of a failure to generate the token

verify

public boolean verify(com.nimbusds.jwt.SignedJWT signedJWT)
               throws ParseException,
                      com.nimbusds.jose.JOSEException

This will verify the token sent with the request.

Parameters:

signedJWT - the signed JWT token to be verified

Returns:

true if verification is successful, false otherwise

Throws:

ParseException - in case of a failure to parse the token

com.nimbusds.jose.JOSEException - in case of a failure in verification of the token

parse

public com.nimbusds.jwt.SignedJWT parse(String authHeader)
                                 throws ParseException

Parse a string to generate a SignedJWT

Parameters:

authHeader - decrypted authentication header

Returns:

signed JWT token

Throws:

ParseException - if fails to parse the token

getIssuer

public String getIssuer()

setIssuer

public void setIssuer(String issuer)

getLifeTime

public long getLifeTime()

setLifeTime

public void setLifeTime(long lifeTime)