Class IdTokenClaimNames

java.lang.Object
org.springframework.security.oauth2.core.oidc.IdTokenClaimNames
public final class IdTokenClaimNames extends Object
The names of the "claims" defined by the OpenID Connect Core 1.0 specification that can be returned in the ID Token.
Since:
5.0
See Also:

  • Field Summary

    Fields
    Modifier and Type
    Field
    Description
    static final String
    ACR
    acr - the Authentication Context Class Reference.
    static final String
    AMR
    amr - the Authentication Methods References.
    static final String
    AT_HASH
    at_hash - the Access Token hash value.
    static final String
    AUD
    aud - the Audience(s) that the ID Token is intended for.
    static final String
    AUTH_TIME
    auth_time - the time when the End-User authentication occurred.
    static final String
    AZP
    azp - the Authorized party to which the ID Token was issued.
    static final String
    C_HASH
    c_hash - the Authorization Code hash value.
    static final String
    EXP
    exp - the Expiration time on or after which the ID Token MUST NOT be accepted.
    static final String
    IAT
    iat - the time at which the ID Token was issued.
    static final String
    ISS
    iss - the Issuer identifier.
    static final String
    NONCE
    nonce - a String value used to associate a Client session with an ID Token, and to mitigate replay attacks.
    static final String
    SUB
    sub - the Subject identifier.

  • Method Summary

    Methods inherited from class Object

    clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait