Package org.apache.cxf.rs.security.oauth2.grants.code

Class AuthorizationCodeGrantHandler

java.lang.Object

org.apache.cxf.rs.security.oauth2.grants.AbstractGrantHandler

org.apache.cxf.rs.security.oauth2.grants.code.AuthorizationCodeGrantHandler

All Implemented Interfaces:

AccessTokenGrantHandler

public class AuthorizationCodeGrantHandler
extends AbstractGrantHandler

Authorization Code Grant Handler

Field Summary

Fields inherited from class org.apache.cxf.rs.security.oauth2.grants.AbstractGrantHandler

LOG

Constructor Summary

Constructors

Constructor	Description
AuthorizationCodeGrantHandler()

Method Summary

Modifier and Type	Method	Description
ServerAccessToken	createAccessToken(Client client, javax.ws.rs.core.MultivaluedMap<String,String> params)
protected List<String>	getAudiences(Client client, javax.ws.rs.core.MultivaluedMap<String,String> params, String grantAudience)
void	setCodeVerifierTransformer(CodeVerifierTransformer codeVerifier)
void	setCodeVerifierTransformers(List<CodeVerifierTransformer> codeVerifierTransformers)
void	setDefaultCodeVerifierTransformer(CodeVerifierTransformer defaultCodeVerifierTransformer)	Set a default code verifier transformer used when no specific challenge method transformer is matched.
void	setExpectCodeVerifierForPublicClients(boolean expectCodeVerifierForPublicClients)	Require a code verifier for public clients only.
void	setRequireCodeVerifier(boolean requireCodeVerifier)	Require a code verifier (PKCE).

Methods inherited from class org.apache.cxf.rs.security.oauth2.grants.AbstractGrantHandler

doCreateAccessToken, doCreateAccessToken, doCreateAccessToken, doCreateAccessToken, doCreateAccessToken, getApprovedScopes, getAudiences, getDataProvider, getPreAuthorizedToken, getSingleGrantType, getSupportedGrantTypes, isCanSupportPublicClients, isPartialMatchScopeValidation, setCanSupportPublicClients, setDataProvider, setPartialMatchScopeValidation

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AuthorizationCodeGrantHandler

public AuthorizationCodeGrantHandler()

Method Detail

createAccessToken

public ServerAccessToken createAccessToken(Client client,
                                           javax.ws.rs.core.MultivaluedMap<String,String> params)
                                    throws OAuthServiceException

Throws:

OAuthServiceException

getAudiences

protected List<String> getAudiences(Client client,
                                    javax.ws.rs.core.MultivaluedMap<String,String> params,
                                    String grantAudience)

setCodeVerifierTransformer

public void setCodeVerifierTransformer(CodeVerifierTransformer codeVerifier)

setCodeVerifierTransformers

public void setCodeVerifierTransformers(List<CodeVerifierTransformer> codeVerifierTransformers)

setDefaultCodeVerifierTransformer

public void setDefaultCodeVerifierTransformer(CodeVerifierTransformer defaultCodeVerifierTransformer)

Set a default code verifier transformer used when no specific challenge method transformer is matched.

Parameters:

defaultCodeVerifierTransformer - default code verifier transformer

setExpectCodeVerifierForPublicClients

public void setExpectCodeVerifierForPublicClients(boolean expectCodeVerifierForPublicClients)

Require a code verifier for public clients only.

Parameters:

expectCodeVerifierForPublicClients - require a code verifier for public clients only.

setRequireCodeVerifier

public void setRequireCodeVerifier(boolean requireCodeVerifier)

Require a code verifier (PKCE). This will override any value set for expectCodeVerifierForPublicClients

Parameters:

requireCodeVerifier - require a code verifier