org.springframework.security.oauth2.provider.token

Class RemoteTokenServices

java.lang.Object

org.springframework.security.oauth2.provider.token.RemoteTokenServices

All Implemented Interfaces:

ResourceServerTokenServices

public class RemoteTokenServices
extends Object
implements ResourceServerTokenServices

Queries the /check_token endpoint to obtain the contents of an access token. If the endpoint returns a 400 response, this indicates that the token is invalid.

Author:

Dave Syer, Luke Taylor

Field Summary

Fields

Modifier and Type	Field and Description
protected org.apache.commons.logging.Log	logger

Constructor Summary

Constructors

Constructor and Description
RemoteTokenServices()

Method Summary

Methods

Modifier and Type	Method and Description
OAuth2Authentication	loadAuthentication(String accessToken) Load the credentials for the specified access token.
OAuth2AccessToken	readAccessToken(String accessToken) Retrieve the full access token details from just the value.
void	setAccessTokenConverter(AccessTokenConverter accessTokenConverter)
void	setCheckTokenEndpointUrl(String checkTokenEndpointUrl)
void	setClientId(String clientId)
void	setClientSecret(String clientSecret)
void	setRestTemplate(org.springframework.web.client.RestOperations restTemplate)
void	setTokenName(String tokenName)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

logger

protected final org.apache.commons.logging.Log logger

Constructor Detail

RemoteTokenServices

public RemoteTokenServices()

Method Detail

setRestTemplate

public void setRestTemplate(org.springframework.web.client.RestOperations restTemplate)

setCheckTokenEndpointUrl

public void setCheckTokenEndpointUrl(String checkTokenEndpointUrl)

setClientId

public void setClientId(String clientId)

setClientSecret

public void setClientSecret(String clientSecret)

setAccessTokenConverter

public void setAccessTokenConverter(AccessTokenConverter accessTokenConverter)

setTokenName

public void setTokenName(String tokenName)

loadAuthentication

public OAuth2Authentication loadAuthentication(String accessToken)
                                        throws org.springframework.security.core.AuthenticationException,
                                               InvalidTokenException

Description copied from interface: ResourceServerTokenServices

Load the credentials for the specified access token.

Specified by:

loadAuthentication in interface ResourceServerTokenServices

Parameters:

accessToken - The access token value.

Returns:

The authentication for the access token.

Throws:

org.springframework.security.core.AuthenticationException - If the access token is expired

InvalidTokenException - if the token isn't valid

readAccessToken

public OAuth2AccessToken readAccessToken(String accessToken)

Description copied from interface: ResourceServerTokenServices

Retrieve the full access token details from just the value.

Specified by:

readAccessToken in interface ResourceServerTokenServices

Parameters:

accessToken - the token value

Returns:

the full access token with client id etc.