Claim

As explained in Spring Security in Action, Second Edition

A claim is a named assertion about a subject or other token property carried in a JSON Web Token.

How Spring Security in Action, Second Edition covers it

How deep it goes

Explains creation, JWT decoding, authentication conversion, and framework configuration, stopping short of detailed claim-setting business logic.

Examples

Uses a priority claim set to HIGH, decoded JWT JSON, a custom authentication class, and a /demo response.

What it assumes

Assumes an OAuth 2 resource server and JWT access-token flow, then teaches custom claim handling incrementally.

What you can do after

Apply it via Spring Security to carry token data into authentication and use that data in authorization rules.

How it connects

Connects JWTs, access tokens, OAuth 2 authorization servers, resource servers, authentication objects, security contexts, and authorization rules.

liveBookmanning.com

Read Spring Security in Action, Second Edition on liveBook Get the book at manning.com

Also explained in

• 

  liveBookmanning.com
  ASP.NET Core in Action, 3eA claim is a statement about an authenticated subject, represented as a type and value, that can support authorization decisions.
• 

  liveBookmanning.com
  Secure APIsA token claim is a named statement or attribute encoded in a security token, such as a user's role or permission.
• 

  liveBookmanning.com
  Building Web APIs with ASP.NET CoreA claim is a statement about an authenticated user or principal, represented as typed identity data and optionally carrying a value.
• 

  liveBookmanning.com
  Effective Platform EngineeringA claim is an assertion about an authenticated entity or its permissions conveyed as identity data or in a token.
• 

  liveBookmanning.com
  Authorization in ActionA claim is a statement about an entity, such as an identity attribute, conveyed by an identity or authorization system.
• 

  liveBookmanning.com
  .NET in Action, Second EditionA claim is a named assertion about a subject or token context represented as a property in a security token.

Compare how 7 books explain claim →

Related concepts

• JSON Web Tokenpart of · A JSON Web Token is a compact, URL-safe representation of claims encoded as a JSON object and protected by a digital signature, message authentication code, or encryption.
• API keypart of · An API key is a credential used to identify or authorize a client accessing an application programming interface.
• AddClaimAsyncused by · AddClaimAsync is an ASP.NET Core Identity operation that asynchronously adds a claim to a user account.
• policy engineused by · A policy engine is a software component that evaluates policies against requests, resources, actions, or other inputs and produces decisions or enforcement outcomes.

This explainer was generated by Manning's knowledge graph from the text of Spring Security in Action, Second Edition. The section links point to the parts of the book it draws on.