Package org.openidentityplatform.openig.filter

Class JwtBuilderFilter

java.lang.Object

org.openidentityplatform.openig.filter.JwtBuilderFilter

All Implemented Interfaces:

org.forgerock.http.Filter

public class JwtBuilderFilter
extends Object
implements org.forgerock.http.Filter

Filter that builds JWTs from configurable claims templates.

Supports signing with HMAC, RSA, and ECDSA algorithms, and optional encryption with RSA or AES key wrapping.

Configuration example:

 {
   "type": "JwtBuilderFilter",
   "config": {
      "template": {
          "sub": "${request.headers['X-User-ID'][0]}",
          "iss": "my-issuer"
      },
      "signature": {
          "algorithm": "RS256",
          "secretId": "jwt.signing.key"
      },
     "encryption": {
          "algorithm": "RSA-OAEP",
           "method": "A128GCM",
          "secretId": "jwt.encryption.key"
      }
   }
 }
 

See Also:

JwtBuilderContext

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	JwtBuilderFilter.Heaplet

Constructor Summary

Constructors

Constructor	Description
JwtBuilderFilter()

Method Summary

Modifier and Type	Method	Description
org.forgerock.util.promise.Promise<org.forgerock.http.protocol.Response,org.forgerock.util.promise.NeverThrowsException>	filter(org.forgerock.services.context.Context context, org.forgerock.http.protocol.Request request, org.forgerock.http.Handler next)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

JwtBuilderFilter

public JwtBuilderFilter()

Method Detail

filter

public org.forgerock.util.promise.Promise<org.forgerock.http.protocol.Response,org.forgerock.util.promise.NeverThrowsException> filter(org.forgerock.services.context.Context context,
                                                                                                                                             org.forgerock.http.protocol.Request request,
                                                                                                                                             org.forgerock.http.Handler next)

Specified by:

filter in interface org.forgerock.http.Filter