How to use

setJwtDecoderFactory

method

in

org.springframework.security.oauth2.client.oidc.authentication.OidcAuthorizationCodeAuthenticationProvider

private void setUpIdToken(Map<String, Object> claims, Instant issuedAt, Instant expiresAt) {
  Map<String, Object> headers = new HashMap<>();
  headers.put("alg", "RS256");
  Jwt idToken = new Jwt("id-token", issuedAt, expiresAt, headers, claims);
  JwtDecoder jwtDecoder = mock(JwtDecoder.class);
  when(jwtDecoder.decode(anyString())).thenReturn(idToken);
  this.authenticationProvider.setJwtDecoderFactory(registration -> jwtDecoder);
}

@Test
public void setJwtDecoderFactoryWhenNullThenThrowIllegalArgumentException() {
  this.exception.expect(IllegalArgumentException.class);
  this.authenticationProvider.setJwtDecoderFactory(null);
}

@Test
public void authenticateWhenIdTokenValidationErrorThenThrowOAuth2AuthenticationException() {
  this.exception.expect(OAuth2AuthenticationException.class);
  this.exception.expectMessage(containsString("[invalid_id_token] ID Token Validation Error"));
  JwtDecoder jwtDecoder = mock(JwtDecoder.class);
  when(jwtDecoder.decode(anyString())).thenThrow(new JwtException("ID Token Validation Error"));
  this.authenticationProvider.setJwtDecoderFactory(registration -> jwtDecoder);
  this.authenticationProvider.authenticate(
      new OAuth2LoginAuthenticationToken(this.clientRegistration, this.authorizationExchange));
}

JwtDecoderFactory<ClientRegistration> jwtDecoderFactory = this.getJwtDecoderFactoryBean();
if (jwtDecoderFactory != null) {
  oidcAuthorizationCodeAuthenticationProvider.setJwtDecoderFactory(jwtDecoderFactory);