8000 Make JWT client validators extensible by puneetdixit200 · Pull Request #49046 · keycloak/keycloak · GitHub
[go: up one dir, main page]
Skip to content

Make JWT client validators extensible #49046

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
rmartinc merged 3 commits into from
May 28, 2026
Merged

Make JWT client validators extensible #49046

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
4239e74
Make JWT client validators extensible
May 17, 2026
dd8bfa2
Simplify validator extensibility test
puneetdixit200 May 18, 2026
331443e
Remove validator extensibility test
puneetdixit200 May 25, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 5 additions & 5 deletions ...in/java/org/keycloak/authentication/authenticators/client/AbstractJWTClientValidator.java
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -72,7 +72,7 @@ public boolean validate() {
validateTokenActive(getAllowedClockSkew(), getMaximumExpirationTime(), isReusePermitted());
}

private boolean validateClientAssertionParameters() {
protected boolean validateClientAssertionParameters() {
String clientAssertionType = clientAssertionState.getClientAssertionType();
String clientAssertion = clientAssertionState.getClientAssertion();

Expand All @@ -92,7 +92,7 @@ private boolean validateClientAssertionParameters() {
return true;
}

private boolean validateClient() {
protected boolean validateClient() {
JsonWebToken token = clientAssertionState.getToken();

String clientId = token.getSubject( 9F73 );
Expand Down Expand Up @@ -133,7 +133,7 @@ private boolean validateClient() {
return true;
}

private boolean validateSignature() {
protected boolean validateSignature() {
return signatureValidator.verifySignature(this);
}

Expand All @@ -150,11 +150,11 @@ public boolean failure(String error, String errorDescription, int statusCode) {
return failure(AuthenticationFlowError.INVALID_CLIENT_CREDENTIALS, challengeResponse);
}

private boolean failure(AuthenticationFlowError error) {
protected boolean failure(AuthenticationFlowError error) {
return failure(error, null);
}

private boolean failure(AuthenticationFlowError error, Response response) {
protected boolean failure(AuthenticationFlowError error, Response response) {
context.failure(error, response);
return false;
}
Expand Down
Loading
0