Interface Names


public interface Names
Constants for the names of the MP-config properties that MP-JWT implementations must support externalization of to ensure portable setup of MP-JWT implementations.
  • Field Details

    • VERIFIER_PUBLIC_KEY

      static final String VERIFIER_PUBLIC_KEY
      The embedded key material of the verification public key for the MP-JWT signer in PKCS8 PEM or JWK(S) format. If not found the VERIFIER_PUBLIC_KEY_LOCATION needs to be checked.
      See Also:
    • VERIFIER_PUBLIC_KEY_LOCATION

      static final String VERIFIER_PUBLIC_KEY_LOCATION
      The relative path or full URL of the verification public key. All relative paths will be resolved within the archive using ClassLoader.getResource. If the value is a URL it will be resolved using `new URL(“”).openStream()`
      See Also:
    • VERIFIER_PUBLIC_KEY_ALGORITHM

      static final String VERIFIER_PUBLIC_KEY_ALGORITHM
      Public Key Signature Algorithm property which can be set to either 'RS256' or 'ES256'.
      See Also:
    • DECRYPTOR_KEY_LOCATION

      static final String DECRYPTOR_KEY_LOCATION
      The relative path or full URL of the decryption key. All relative paths will be resolved within the archive using ClassLoader.getResource. If the value is a URL it will be resolved using `new URL(“”).openStream()`
      See Also:
    • ISSUER

      static final String ISSUER
      The expected iss claim value to validate against an MP-JWT.
      See Also:
    • TOKEN_HEADER

      static final String TOKEN_HEADER
      The HTTP header name expected to contain the JWT token.

      Supported values are Authorization (default) and Cookie.

      See Also:
    • AUDIENCES

      static final String AUDIENCES
      The expected "aud" claim value(s), separated by commas. If specified, MP-JWT claim must be present and match one of the values.
      See Also: