Cwikius-Spring
/
spring-security
mirror of https://github.com/spring-projects/spring-security.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update reference manual to use NimbusJwtDecoder 

Fixes gh-6188
This commit is contained in:
Joe Grandja 2018-11-30 06:53:35 -05:00
parent b8f038e86a
commit f808740c57
1 changed files with 9 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
docs/manual/src/docs/asciidoc/_includes/servlet/preface/java-configuration.adoc
View File

@ -606,7 +606,7 @@ Or, exposing a `JwtDecoder` `@Bean` has the same effect as `decoder()`:
```java ```java
@Bean @Bean
public JwtDecoder jwtDecoder() { public JwtDecoder jwtDecoder() {
return new NimbusJwtDecoderJwkSupport(jwkSetUri); return new NimbusJwtDecoder(JwtProcessors.withJwkSetUri(jwkSetUri).build());
} }
``` ```
@ -719,7 +719,7 @@ Resource Server uses `JwtTimestampValidator` to verify a token's validity window
```java ```java
@Bean @Bean
JwtDecoder jwtDecoder() { JwtDecoder jwtDecoder() {
NimbusJwtDecoderJwkSupport jwtDecoder = (NimbusJwtDecoderJwkSupport) NimbusJwtDecoder jwtDecoder = (NimbusJwtDecoder)
JwtDecoders.withOidcIssuerLocation(issuerUri); JwtDecoders.withOidcIssuerLocation(issuerUri);
OAuth2TokenValidator<Jwt> withClockSkew = new DelegatingOAuth2TokenValidator<>( OAuth2TokenValidator<Jwt> withClockSkew = new DelegatingOAuth2TokenValidator<>(
@ -759,7 +759,7 @@ Then, to add into a resource server, it's a matter of specifying the `JwtDecoder
```java ```java
@Bean @Bean
JwtDecoder jwtDecoder() { JwtDecoder jwtDecoder() {
NimbusJwtDecoderJwkSupport jwtDecoder = (NimbusJwtDecoderJwkSupport) NimbusJwtDecoder jwtDecoder = (NimbusJwtDecoder)
JwtDecoders.withOidcIssuerLocation(issuerUri); JwtDecoders.withOidcIssuerLocation(issuerUri);
OAuth2TokenValidator<Jwt> audienceValidator = new AudienceValidator(); OAuth2TokenValidator<Jwt> audienceValidator = new AudienceValidator();
@ -807,11 +807,11 @@ An individual claim's conversion strategy can be configured using `MappedJwtClai
```java ```java
@Bean @Bean
JwtDecoder jwtDecoder() { JwtDecoder jwtDecoder() {
NimbusJwtDecoderJwkSupport jwtDecoder = new NimbusJwtDecoderJwkSupport(jwkSetUri); NimbusJwtDecoder jwtDecoder = new NimbusJwtDecoder(JwtProcessors.withJwkSetUri(jwkSetUri).build());
MappedJwtClaimSetConverter converter = MappedJwtClaimSetConverter MappedJwtClaimSetConverter converter = MappedJwtClaimSetConverter
.withDefaults(Collections.singletonMap("sub", this::lookupUserIdBySub)); .withDefaults(Collections.singletonMap("sub", this::lookupUserIdBySub));
jwtDecoder.setJwtClaimSetConverter(converter); jwtDecoder.setClaimSetConverter(converter);
return jwtDecoder; return jwtDecoder;
} }
@ -862,8 +862,8 @@ And then, the instance can be supplied like normal:
```java ```java
@Bean @Bean
JwtDecoder jwtDecoder() { JwtDecoder jwtDecoder() {
NimbusJwtDecoderJwkSupport jwtDecoder = new NimbusJwtDecoderJwkSupport(jwkSetUri); NimbusJwtDecoder jwtDecoder = new NimbusJwtDecoder(JwtProcessors.withJwkSetUri(jwkSetUri).build());
jwtDecoder.setJwtClaimSetConverter(new UsernameSubClaimAdapter()); jwtDecoder.setClaimSetConverter(new UsernameSubClaimAdapter());
return jwtDecoder; return jwtDecoder;
} }
``` ```
@ -876,7 +876,7 @@ By default, Resource Server uses connection and socket timeouts of 30 seconds ea
This may be too short in some scenarios. This may be too short in some scenarios.
Further, it doesn't take into account more sophisticated patterns like back-off and discovery. Further, it doesn't take into account more sophisticated patterns like back-off and discovery.
To adjust the way in which Resource Server connects to the authorization server, `NimbusJwtDecoderJwkSupport` accepts an instance of `RestOperations`: To adjust the way in which Resource Server connects to the authorization server, `NimbusJwtDecoder` accepts an instance of `RestOperations`:
```java ```java
@Bean @Bean
@ -886,8 +886,7 @@ public JwtDecoder jwtDecoder(RestTemplateBuilder builder) {
.setReadTimeout(60000) .setReadTimeout(60000)
.build(); .build();
NimbusJwtDecoderJwkSupport jwtDecoder = new NimbusJwtDecoderJwkSupport(jwkSetUri); NimbusJwtDecoder jwtDecoder = new NimbusJwtDecoder(JwtProcessors.withJwkSetUri(jwkSetUri).restOperations(rest).build());
jwtDecoder.setRestOperations(rest);
return jwtDecoder; return jwtDecoder;
} }
``` ```