import com.nimbusds.jose.jwk.source.JWKSource; //导入依赖的package包/类
/**
 * Prepare the tokens processors, one per allowed signing algorithm
 */
private void setupProcessors(int allowedClockSkew)
    throws InvalidConfigurationException, ExternalDependencyException {

    JWKSource keySource = this.getJwkSource();

    this.jwtProcessors = new HashMap<>();
    for (String s : this.signingAlgos) {
        // Create JWT processor
        DefaultJWTProcessor processor = new DefaultJWTProcessor();

        // Override the default instance (same class) in order to set our Clock skew value (the internal default is 60 seconds)
        DefaultJWTClaimsVerifier<SecurityContext> claimsVerifier = new DefaultJWTClaimsVerifier<>();
        claimsVerifier.setMaxClockSkew(allowedClockSkew);
        processor.setJWTClaimsSetVerifier(claimsVerifier);

        // Set the key selector
        processor.setJWSKeySelector(new JWSVerificationKeySelector(getAlgo(s), keySource));

        // Store the processor in the list, ready to be used
        this.jwtProcessors.put(s, processor);
    }
}
 

import com.nimbusds.jose.jwk.source.JWKSource; //导入依赖的package包/类
private ConfigurableJWTProcessor<SecurityContext> getAadJwtTokenValidator()
        throws MalformedURLException {
    final ConfigurableJWTProcessor<SecurityContext> jwtProcessor = new DefaultJWTProcessor<>();
    final JWKSource<SecurityContext> keySource = new RemoteJWKSet<>(
            new URL(KEY_DISCOVERY_URI));
    final JWSAlgorithm expectedJWSAlg = JWSAlgorithm.RS256;
    final JWSKeySelector<SecurityContext> keySelector = new JWSVerificationKeySelector<>(expectedJWSAlg, keySource);
    jwtProcessor.setJWSKeySelector(keySelector);

    jwtProcessor.setJWTClaimsSetVerifier(new DefaultJWTClaimsVerifier<SecurityContext>() {
        @Override
        public void verify(JWTClaimsSet claimsSet, SecurityContext ctx) throws BadJWTException {
            super.verify(claimsSet, ctx);
            final String issuer = claimsSet.getIssuer();
            if (issuer == null || !issuer.contains("https://sts.windows.net/")) {
                throw new BadJWTException("Invalid token issuer");
            }
        }
    });
    return jwtProcessor;
}
 

import com.nimbusds.jose.jwk.source.JWKSource; //导入依赖的package包/类
private JWKSource<SecurityContext> lookupJWKSource() throws IOException, ParseException {
    if(jwtConfiguration.getJwkResource() != null &&
            !"".equals(jwtConfiguration.getJwkResource())) {
        URL resource = DefaultValidatingJWTProcessor.class.getResource(jwtConfiguration.getJwkResource());
        try(InputStream stream = resource.openStream()) {
            String key = com.nimbusds.jose.util.IOUtils.readInputStreamToString(stream, Charset.defaultCharset());
            return new ImmutableJWKSet<>(JWKSet.parse(key));
        }
    }
    else if(jwtConfiguration.getJwkSourceUrl() != null &&
            !"".equals(jwtConfiguration.getJwkSourceUrl())) {
        return new RemoteJWKSet<>(new URL(jwtConfiguration.getJwkSourceUrl()));
    }
    else {
        JWKSet jwkSet = JWKSet.load(new File(jwtConfiguration.getJwkSourceFile()));

        return new ImmutableJWKSet<>(jwkSet);
    }
}
 

import com.nimbusds.jose.jwk.source.JWKSource; //导入依赖的package包/类
@Bean
public ConfigurableJWTProcessor configurableJWTProcessor() throws MalformedURLException {
    ResourceRetriever resourceRetriever = new DefaultResourceRetriever(jwtConfiguration.getConnectionTimeout(), jwtConfiguration.getReadTimeout());
    URL jwkSetURL = new URL(jwtConfiguration.getJwkUrl());
    JWKSource keySource = new RemoteJWKSet(jwkSetURL, resourceRetriever);
    ConfigurableJWTProcessor jwtProcessor = new DefaultJWTProcessor();
    JWSKeySelector keySelector = new JWSVerificationKeySelector(RS256, keySource);
    jwtProcessor.setJWSKeySelector(keySelector);
    return jwtProcessor;
}
 

import com.nimbusds.jose.jwk.source.JWKSource; //导入依赖的package包/类
@PostConstruct
public void init() {
    try {
        JWKSource<SecurityContext> keySource = lookupJWKSource();
        JWSAlgorithm expectedJWSAlg = jwtConfiguration.getAlgorithm();
        JWSKeySelector<SecurityContext> keySelector = new JWSVerificationKeySelector<>(expectedJWSAlg, keySource);
        delegate.setJWSKeySelector(keySelector);
    } catch (IOException | ParseException e) {
        throw new JWTException("Unable to read JWT Configuration",e);
    }
}