import com.nimbusds.jwt.proc.DefaultJWTProcessor; //导入依赖的package包/类
/**
 * Prepare the tokens processors, one per allowed signing algorithm
 */
private void setupProcessors(int allowedClockSkew)
    throws InvalidConfigurationException, ExternalDependencyException {

    JWKSource keySource = this.getJwkSource();

    this.jwtProcessors = new HashMap<>();
    for (String s : this.signingAlgos) {
        // Create JWT processor
        DefaultJWTProcessor processor = new DefaultJWTProcessor();

        // Override the default instance (same class) in order to set our Clock skew value (the internal default is 60 seconds)
        DefaultJWTClaimsVerifier<SecurityContext> claimsVerifier = new DefaultJWTClaimsVerifier<>();
        claimsVerifier.setMaxClockSkew(allowedClockSkew);
        processor.setJWTClaimsSetVerifier(claimsVerifier);

        // Set the key selector
        processor.setJWSKeySelector(new JWSVerificationKeySelector(getAlgo(s), keySource));

        // Store the processor in the list, ready to be used
        this.jwtProcessors.put(s, processor);
    }
}
 

import com.nimbusds.jwt.proc.DefaultJWTProcessor; //导入依赖的package包/类
private ConfigurableJWTProcessor<SecurityContext> getAadJwtTokenValidator()
        throws MalformedURLException {
    final ConfigurableJWTProcessor<SecurityContext> jwtProcessor = new DefaultJWTProcessor<>();
    final JWKSource<SecurityContext> keySource = new RemoteJWKSet<>(
            new URL(KEY_DISCOVERY_URI));
    final JWSAlgorithm expectedJWSAlg = JWSAlgorithm.RS256;
    final JWSKeySelector<SecurityContext> keySelector = new JWSVerificationKeySelector<>(expectedJWSAlg, keySource);
    jwtProcessor.setJWSKeySelector(keySelector);

    jwtProcessor.setJWTClaimsSetVerifier(new DefaultJWTClaimsVerifier<SecurityContext>() {
        @Override
        public void verify(JWTClaimsSet claimsSet, SecurityContext ctx) throws BadJWTException {
            super.verify(claimsSet, ctx);
            final String issuer = claimsSet.getIssuer();
            if (issuer == null || !issuer.contains("https://sts.windows.net/")) {
                throw new BadJWTException("Invalid token issuer");
            }
        }
    });
    return jwtProcessor;
}
 

import com.nimbusds.jwt.proc.DefaultJWTProcessor; //导入依赖的package包/类
@Bean
public ConfigurableJWTProcessor configurableJWTProcessor() throws MalformedURLException {
    ResourceRetriever resourceRetriever = new DefaultResourceRetriever(jwtConfiguration.getConnectionTimeout(), jwtConfiguration.getReadTimeout());
    URL jwkSetURL = new URL(jwtConfiguration.getJwkUrl());
    JWKSource keySource = new RemoteJWKSet(jwkSetURL, resourceRetriever);
    ConfigurableJWTProcessor jwtProcessor = new DefaultJWTProcessor();
    JWSKeySelector keySelector = new JWSVerificationKeySelector(RS256, keySource);
    jwtProcessor.setJWSKeySelector(keySelector);
    return jwtProcessor;
}