auth-foundation/com.okta.authfoundation.client.kmp/DefaultIdTokenValidator

DefaultIdTokenValidator

class DefaultIdTokenValidator(val issuedAtGracePeriodInSeconds: Int = 600) : IdTokenValidator

Default IdTokenValidator implementing the OpenID Connect Core 1.0 ID Token Validation checks.

Validates: issuer, audience, HTTPS, algorithm (RS256), expiration, issued-at grace period, nonce, max_age, and subject.

Parameters

issuedAtGracePeriodInSeconds

the allowed difference in seconds between the token's iat claim and the current time. Defaults to 600 seconds (10 minutes).

Constructors

DefaultIdTokenValidator

constructor(issuedAtGracePeriodInSeconds: Int = 600)

Properties

issuedAtGracePeriodInSeconds

val issuedAtGracePeriodInSeconds: Int

Functions

open suspend override fun validate(issuerUrl: String, clientId: String, idToken: Jwt, clock: OidcClock, parameters: IdTokenValidator.Parameters = Parameters(nonce = null, maxAge = null))

Validates the given idToken.