Examples with ExpiredJwtException io.jsonwebtoken.ExpiredJwtException used on opensource projects

Example 6 with ExpiredJwtException

use of io.jsonwebtoken.ExpiredJwtException in project sonarqube by SonarSource.

the class JwtSerializer method decode.

Optional<Claims> decode(String token) {
    checkIsStarted();
    Claims claims = null;
    try {
        claims = Jwts.parserBuilder().setSigningKey(secretKey).build().parseClaimsJws(token).getBody();
        requireNonNull(claims.getId(), "Token id hasn't been found");
        requireNonNull(claims.getSubject(), "Token subject hasn't been found");
        requireNonNull(claims.getExpiration(), "Token expiration date hasn't been found");
        requireNonNull(claims.getIssuedAt(), "Token creation date hasn't been found");
        return Optional.of(claims);
    } catch (UnsupportedJwtException | ExpiredJwtException | SignatureException e) {
        return Optional.empty();
    } catch (Exception e) {
        throw AuthenticationException.newBuilder().setSource(Source.jwt()).setLogin(claims == null ? null : claims.getSubject()).setMessage(e.getMessage()).build();
    }
}

Example 7 with ExpiredJwtException

use of io.jsonwebtoken.ExpiredJwtException in project pravega by pravega.

the class JwtParser method parseClaims.

@VisibleForTesting
static Claims parseClaims(String token, byte[] signingKey) throws TokenExpiredException, InvalidTokenException {
    if (Strings.isNullOrEmpty(token)) {
        throw new InvalidTokenException("Token is null or empty");
    }
    try {
        Jws<Claims> claimsJws = Jwts.parser().setSigningKey(signingKey).parseClaimsJws(token);
        log.debug("Successfully parsed JWT token.");
        return claimsJws.getBody();
    } catch (ExpiredJwtException e) {
        throw new TokenExpiredException(e);
    } catch (JwtException e) {
        throw new InvalidTokenException(e);
    }
}

Example 8 with ExpiredJwtException

use of io.jsonwebtoken.ExpiredJwtException in project BaseProject by fly803.

the class JwtUtils method isJwtValid.

public boolean isJwtValid(String jwt) {
    try {
        // 解析JWT字符串中的数据，并进行最基础的验证
        Claims claims = Jwts.parser().setSigningKey(// SECRET_KEY是加密算法对应的密钥，jjwt可以自动判断机密算法
        generalKey()).parseClaimsJws(// jwt是JWT字符串
        jwt).getBody();
        // 获取自定义字段key
        String vaule = claims.get("key", String.class);
        // 判断自定义字段是否正确
        if ("vaule".equals(vaule)) {
            return true;
        } else {
            return false;
        }
    }// 在解析JWT字符串时，如果‘过期时间字段’已经早于当前时间，将会抛出ExpiredJwtException异常，说明本次请求已经失效
     catch (SignatureException | ExpiredJwtException e) {
        return false;
    }
}

Example 9 with ExpiredJwtException

use of io.jsonwebtoken.ExpiredJwtException in project thingsboard by thingsboard.

the class OAuth2AppTokenFactory method validateTokenAndGetCallbackUrlScheme.

public String validateTokenAndGetCallbackUrlScheme(String appPackage, String appToken, String appSecret) {
    Jws<Claims> jwsClaims;
    try {
        jwsClaims = Jwts.parser().setSigningKey(appSecret).parseClaimsJws(appToken);
    } catch (UnsupportedJwtException | MalformedJwtException | IllegalArgumentException | SignatureException ex) {
        throw new IllegalArgumentException("Invalid Application token: ", ex);
    } catch (ExpiredJwtException expiredEx) {
        throw new IllegalArgumentException("Application token expired", expiredEx);
    }
    Claims claims = jwsClaims.getBody();
    Date expiration = claims.getExpiration();
    if (expiration == null) {
        throw new IllegalArgumentException("Application token must have expiration date");
    }
    long timeDiff = expiration.getTime() - System.currentTimeMillis();
    if (timeDiff > MAX_EXPIRATION_TIME_DIFF_MS) {
        throw new IllegalArgumentException("Application token expiration time can't be longer than 5 minutes");
    }
    if (!claims.getIssuer().equals(appPackage)) {
        throw new IllegalArgumentException("Application token issuer doesn't match application package");
    }
    String callbackUrlScheme = claims.get(CALLBACK_URL_SCHEME, String.class);
    if (StringUtils.isEmpty(callbackUrlScheme)) {
        throw new IllegalArgumentException("Application token doesn't have callbackUrlScheme");
    }
    return callbackUrlScheme;
}

Example 10 with ExpiredJwtException

use of io.jsonwebtoken.ExpiredJwtException in project nifi by apache.

the class JwtService method parseTokenFromBase64EncodedString.

private Jws<Claims> parseTokenFromBase64EncodedString(final String base64EncodedToken) throws JwtException {
    try {
        return Jwts.parser().setSigningKeyResolver(new SigningKeyResolverAdapter() {

            @Override
            public byte[] resolveSigningKeyBytes(JwsHeader header, Claims claims) {
                final String identity = claims.getSubject();
                // Get the key based on the key id in the claims
                final Integer keyId = claims.get(KEY_ID_CLAIM, Integer.class);
                final Key key = keyService.getKey(keyId);
                // Ensure we were able to find a key that was previously issued by this key service for this user
                if (key == null || key.getKey() == null) {
                    throw new UnsupportedJwtException("Unable to determine signing key for " + identity + " [kid: " + keyId + "]");
                }
                return key.getKey().getBytes(StandardCharsets.UTF_8);
            }
        }).parseClaimsJws(base64EncodedToken);
    } catch (final MalformedJwtException | UnsupportedJwtException | SignatureException | ExpiredJwtException | IllegalArgumentException | AdministrationException e) {
        // TODO: Exercise all exceptions to ensure none leak key material to logs
        final String errorMessage = "Unable to validate the access token.";
        throw new JwtException(errorMessage, e);
    }
}