Package com.almis.awe.rest.service

Class JWTTokenService

java.lang.Object

com.almis.awe.config.ServiceConfig

com.almis.awe.rest.service.JWTTokenService

All Implemented Interfaces:

org.springframework.beans.factory.Aware, org.springframework.context.ApplicationContextAware

public class JWTTokenService
extends ServiceConfig

Util class to manage authentication with JWT tokens.

See Also:

• https://jwt.io/

Constructor Summary

Constructors

Constructor	Description
JWTTokenService(String authorizationHeader, String prefix, String secret, String issuer, Duration expiration)	JWTTokenService constructor

Method Summary

Modifier and Type	Method	Description
String	extractToken(String authorizationHeader)	Extract token from http Authorization header
JwtTokenInfo	generateToken(org.springframework.security.core.Authentication authentication, jakarta.servlet.http.HttpServletResponse response)	Generate JWT Token and add it to http response as header
com.auth0.jwt.JWTVerifier	getJWTVerifier()	Get JWT verifier
com.auth0.jwt.interfaces.DecodedJWT	verifyToken(String token)	Verify token.

Methods inherited from class com.almis.awe.config.ServiceConfig

containsBean, getApplicationContext, getBean, getBean, getElements, getLocale, getLocale, getProperty, getProperty, getRequest, getSession, setApplicationContext

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

JWTTokenService

public JWTTokenService(String authorizationHeader,
 String prefix,
 String secret,
 String issuer,
 Duration expiration)

JWTTokenService constructor

Parameters:

authorizationHeader - HTTP Auth header name

prefix - JWT token prefix

secret - JWT token secret

issuer - JWT token issuer

expiration - JWT token expiration

Method Details

getJWTVerifier

public com.auth0.jwt.JWTVerifier getJWTVerifier()

Get JWT verifier

generateToken

public JwtTokenInfo generateToken(org.springframework.security.core.Authentication authentication,
 jakarta.servlet.http.HttpServletResponse response)

Generate JWT Token and add it to http response as header

Parameters:

authentication - Authentication object

response - HttpServletResponse

verifyToken

public com.auth0.jwt.interfaces.DecodedJWT verifyToken(String token)

Verify token. Check if it has JWT format and if not expired

Parameters:

token - JWT token

Returns:

Decode JWT token

extractToken

public String extractToken(String authorizationHeader)

Extract token from http Authorization header

Parameters:

authorizationHeader - Authorization header value

Returns:

JWT Token