auth-foundation/com.okta.authfoundation.client.kmp/AccessTokenValidator

AccessTokenValidator

fun interface AccessTokenValidator

Validates access tokens by comparing the at_hash claim in the ID token against the actual access token hash.

See OpenID Connect Core 1.0 - Access Token Validation.

Inheritors

DefaultAccessTokenValidator

Types

class Error(message: String) : IllegalStateException

An error describing a validation failure.

Functions

abstract suspend fun validate(accessToken: String, idToken: Jwt)

Validates the accessToken against the at_hash claim in the idToken.