Package com.peterphi.usermanager.rest.impl

Class UserManagerOAuthServiceImpl

java.lang.Object

com.peterphi.usermanager.rest.impl.UserManagerOAuthServiceImpl

All Implemented Interfaces:

UserManagerOAuthService

public class UserManagerOAuthServiceImpl
extends Object
implements UserManagerOAuthService

Field Summary

Fields

Modifier and Type	Field	Description
boolean	autoGrantAccessKeysToAccessAllServices
boolean	autoGrantAccessToAllServices
org.joda.time.Period	tokenRefreshInterval

Fields inherited from interface com.peterphi.usermanager.rest.iface.oauth2server.UserManagerOAuthService

GRANT_TYPE_AUTHORIZATION_CODE, GRANT_TYPE_CLIENT_CREDENTIALS, GRANT_TYPE_PASSWORD, GRANT_TYPE_REFRESH_TOKEN, GRANT_TYPE_TOKEN_EXCHANGE

Constructor Summary

Constructors

Constructor	Description
UserManagerOAuthServiceImpl()

Method Summary

Modifier and Type	Method	Description
String	createDelegatedAccessToken(String clientId, String secret, long validityPeriod, String refreshToken, String authorizationHeader)
UserManagerUser	get(String token, String clientId)	User Manager extension: given user info, return user record
javax.ws.rs.core.Response	getAuth(String responseType, String clientId, String redirectUri, String state, String scope)
javax.ws.rs.core.Response	getOIDCUserInfo(String bearerTokenHeader)
javax.ws.rs.core.Response	getOIDCUserInfoPost(String bearerTokenHeader)
String	getToken(String grantType, String code, String redirectUri, String clientId, String secret, String refreshToken, String username, String password, String subjectToken, String authorizationHeader)	Exchange an access code, a refresh token or a username/password for a Token to be POSTed back N.B.
javax.ws.rs.core.Response	userMadeAuthDecision(String responseType, String clientId, String redirectUri, String state, String scope, String token, String decision)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

tokenRefreshInterval

@Inject(optional=true)
public org.joda.time.Period tokenRefreshInterval

autoGrantAccessToAllServices

@Inject(optional=true)
public boolean autoGrantAccessToAllServices

autoGrantAccessKeysToAccessAllServices

@Inject(optional=true)
public boolean autoGrantAccessKeysToAccessAllServices

Constructor Details

UserManagerOAuthServiceImpl

public UserManagerOAuthServiceImpl()

Method Details

getAuth

public javax.ws.rs.core.Response getAuth(String responseType,
 String clientId,
 String redirectUri,
 String state,
 String scope)

Specified by:

getAuth in interface UserManagerOAuthService

userMadeAuthDecision

public javax.ws.rs.core.Response userMadeAuthDecision(String responseType,
 String clientId,
 String redirectUri,
 String state,
 String scope,
 String token,
 String decision)

Specified by:

userMadeAuthDecision in interface UserManagerOAuthService

getToken

public String getToken(String grantType,
 String code,
 String redirectUri,
 String clientId,
 String secret,
 String refreshToken,
 String username,
 String password,
 String subjectToken,
 String authorizationHeader)

Description copied from interface: UserManagerOAuthService

Exchange an access code, a refresh token or a username/password for a Token to be POSTed back
N.B. currently this impl is not fully compliant with RFC6749 because it cannot accept clientId and secret using BASIC Auth.
One approach here might be to add logic into the BASIC auth processor to treat as anonymous any BASIC auth request whose username is in the client ID format

Specified by:

getToken in interface UserManagerOAuthService

Returns:

get

public UserManagerUser get(String token,
 String clientId)

Description copied from interface: UserManagerOAuthService

User Manager extension: given user info, return user record

Specified by:

get in interface UserManagerOAuthService

clientId - if specified, checks that the token is associated with this client (may be required in the future)

Returns:

getOIDCUserInfo

public javax.ws.rs.core.Response getOIDCUserInfo(String bearerTokenHeader)

Specified by:

getOIDCUserInfo in interface UserManagerOAuthService

getOIDCUserInfoPost

public javax.ws.rs.core.Response getOIDCUserInfoPost(String bearerTokenHeader)

Specified by:

getOIDCUserInfoPost in interface UserManagerOAuthService

createDelegatedAccessToken

public String createDelegatedAccessToken(String clientId,
 String secret,
 long validityPeriod,
 String refreshToken,
 String authorizationHeader)

Specified by:

createDelegatedAccessToken in interface UserManagerOAuthService