Package com.authlete.jaxrs

Class BaseJwksEndpoint

java.lang.Object

com.authlete.jaxrs.BaseEndpoint

com.authlete.jaxrs.BaseJwksEndpoint

public class BaseJwksEndpoint
extends BaseEndpoint

A base class for JWK Set endpoints.

An OpenID Provider (OP) is required to expose its JSON Web Key Set document (JWK Set) so that client applications can (1) verify signatures by the OP and (2) encrypt their requests to the OP. The URI of a JWK Set endpoint can be found as the value of jwks_uri in OpenID Provider Metadata if the OP supports OpenID Connect Discovery 1.0.

Since:

1.1

Author:

Takahiko Kawasaki

See Also:

RFC 7517, JSON Web Key (JWK), OpenID Connect Core 1.0, OpenID Connect Discovery 1.0

Constructor Summary

Constructors

Constructor	Description
BaseJwksEndpoint()

Method Summary

Modifier and Type	Method	Description
javax.ws.rs.core.Response	handle(com.authlete.common.api.AuthleteApi api)	Handle a request for a JWK Set document.

Methods inherited from class com.authlete.jaxrs.BaseEndpoint

extractClientCertificate, extractClientCertificateChain, onError, takeAttribute

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

BaseJwksEndpoint

public BaseJwksEndpoint()

Method Detail

handle

public javax.ws.rs.core.Response handle(com.authlete.common.api.AuthleteApi api)

Handle a request for a JWK Set document.

This method internally creates a JwksRequestHandler instance and calls its JwksRequestHandler.handle() method. Then, this method uses the value returned from the handle() method as a response from this method.

When JwksRequestHandler.handle() method raises a WebApplicationException, this method calls onError() method with the exception. The default implementation of onError() does nothing. You can override the method as necessary. After calling onError() method, this method calls getResponse() method of the exception and uses the returned value as a response from this method.

Parameters:

api - An implementation of AuthleteApi.

Returns:

A response that should be returned to the client application.