org.springframework.security.oauth2.client

Class ClientCredentialsReactiveOAuth2AuthorizedClientProvider

java.lang.Object

org.springframework.security.oauth2.client.ClientCredentialsReactiveOAuth2AuthorizedClientProvider

All Implemented Interfaces:

ReactiveOAuth2AuthorizedClientProvider

public final class ClientCredentialsReactiveOAuth2AuthorizedClientProvider
extends java.lang.Object
implements ReactiveOAuth2AuthorizedClientProvider

An implementation of a ReactiveOAuth2AuthorizedClientProvider for the client_credentials grant.

Since:

5.2

See Also:

ReactiveOAuth2AuthorizedClientProvider, WebClientReactiveClientCredentialsTokenResponseClient

Constructor Summary

Constructors

Constructor and Description
ClientCredentialsReactiveOAuth2AuthorizedClientProvider()

Method Summary

Modifier and Type	Method and Description
reactor.core.publisher.Mono<OAuth2AuthorizedClient>	authorize(OAuth2AuthorizationContext context) Attempt to authorize (or re-authorize) the client in the provided context.
void	setAccessTokenResponseClient(ReactiveOAuth2AccessTokenResponseClient<OAuth2ClientCredentialsGrantRequest> accessTokenResponseClient) Sets the client used when requesting an access token credential at the Token Endpoint for the client_credentials grant.
void	setClock(java.time.Clock clock) Sets the Clock used in Instant.now(Clock) when checking the access token expiry.
void	setClockSkew(java.time.Duration clockSkew) Sets the maximum acceptable clock skew, which is used when checking the access token expiry.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ClientCredentialsReactiveOAuth2AuthorizedClientProvider

public ClientCredentialsReactiveOAuth2AuthorizedClientProvider()

Method Detail

authorize

public reactor.core.publisher.Mono<OAuth2AuthorizedClient> authorize(OAuth2AuthorizationContext context)

Attempt to authorize (or re-authorize) the client in the provided context. Returns an empty Mono if authorization (or re-authorization) is not supported, e.g. the client's authorization grant type is not client_credentials OR the access token is not expired.

Specified by:

authorize in interface ReactiveOAuth2AuthorizedClientProvider

Parameters:

context - the context that holds authorization-specific state for the client

Returns:

the OAuth2AuthorizedClient or an empty Mono if authorization (or re-authorization) is not supported

setAccessTokenResponseClient

public void setAccessTokenResponseClient(ReactiveOAuth2AccessTokenResponseClient<OAuth2ClientCredentialsGrantRequest> accessTokenResponseClient)

Sets the client used when requesting an access token credential at the Token Endpoint for the client_credentials grant.

Parameters:

accessTokenResponseClient - the client used when requesting an access token credential at the Token Endpoint for the client_credentials grant

setClockSkew

public void setClockSkew(java.time.Duration clockSkew)

Sets the maximum acceptable clock skew, which is used when checking the access token expiry. The default is 60 seconds.

An access token is considered expired if OAuth2AccessToken#getExpiresAt() - clockSkew is before the current time clock#instant().

Parameters:

clockSkew - the maximum acceptable clock skew

setClock

public void setClock(java.time.Clock clock)

Sets the Clock used in Instant.now(Clock) when checking the access token expiry.

Parameters:

clock - the clock