Class: Doorkeeper::OpenidConnect::IdToken

Inherits:
Object
  • Object
show all
Includes:
ActiveModel::Validations
Defined in:
lib/doorkeeper/openid_connect/id_token.rb

Direct Known Subclasses

IdTokenToken

Instance Attribute Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(access_token, nonce = nil, expires_in = Doorkeeper::OpenidConnect.configuration.expiration) ⇒ IdToken

Returns a new instance of IdToken.



10
11
12
13
14
15
16
 
# File 'lib/doorkeeper/openid_connect/id_token.rb', line 10

def initialize(access_token, nonce = nil, expires_in = Doorkeeper::OpenidConnect.configuration.expiration)
  @access_token = access_token
  @nonce = nonce
  @resource_owner = Doorkeeper::OpenidConnect.configuration.resource_owner_from_access_token.call(access_token)
  @issued_at = Time.zone.now
  @expires_in = expires_in
end

Instance Attribute Details

#nonce ⇒ Object (readonly)

Returns the value of attribute nonce.



8
9
10
 
# File 'lib/doorkeeper/openid_connect/id_token.rb', line 8

def nonce
  @nonce
end

Instance Method Details

#as_json(*_) ⇒ Object 



33
34
35
 
# File 'lib/doorkeeper/openid_connect/id_token.rb', line 33

def as_json(*_)
  claims.reject { |_, value| value.nil? || value == "" }
end

#as_jws_token ⇒ Object 



37
38
39
40
41
42
 
# File 'lib/doorkeeper/openid_connect/id_token.rb', line 37

def as_jws_token
  ::JWT.encode(as_json,
    Doorkeeper::OpenidConnect.signing_key.keypair,
    Doorkeeper::OpenidConnect.signing_algorithm.to_s,
    { typ: "JWT", kid: Doorkeeper::OpenidConnect.signing_key.kid }).to_s
end

#claims ⇒ Object 



18
19
20
21
22
23
24
25
26
27
28
29
30
31
 
# File 'lib/doorkeeper/openid_connect/id_token.rb', line 18

def claims
  # NOTE: framework-controlled claims are merged last so a custom claim
  # block cannot override security-critical registered claims such as
  # `sub`, `aud`, `exp`, `iss` or `iat` in the signed ID token.
  ClaimsBuilder.generate(@access_token, :id_token).merge(
    iss: issuer,
    sub: subject,
    aud: audience,
    exp: expiration,
    iat: issued_at,
    nonce: nonce,
    auth_time: auth_time
  )
end