String domain = domains.get(container);
String activeUrl = tokenParameters.get(SecurityTokenCodec.ACTIVE_URL_NAME);
String crypted = fields[1];
try {
BlobCrypterSecurityToken st = new BlobCrypterSecurityToken(container, domain, activeUrl,
crypter.unwrap(crypted));
return st.enforceNotExpired();
} catch (BlobCrypterException e) {
throw new SecurityTokenException(e);
}
}