001/*******************************************************************************
002 * Copyright 2014 The MITRE Corporation
003 *   and the MIT Kerberos and Internet Trust Consortium
004 * 
005 * Licensed under the Apache License, Version 2.0 (the "License");
006 * you may not use this file except in compliance with the License.
007 * You may obtain a copy of the License at
008 * 
009 *   http://www.apache.org/licenses/LICENSE-2.0
010 * 
011 * Unless required by applicable law or agreed to in writing, software
012 * distributed under the License is distributed on an "AS IS" BASIS,
013 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
014 * See the License for the specific language governing permissions and
015 * limitations under the License.
016 ******************************************************************************/
017package org.mitre.oauth2.service;
018
019import java.util.Set;
020
021import org.springframework.security.oauth2.provider.ClientDetails;
022
023/**
024 * Strategy interface used for authorizing token introspection.
025 */
026public interface IntrospectionAuthorizer {
027
028        /**
029         * @param authClient the authenticated client wanting to perform token introspection
030         * @param tokenClient the client the token was issued to
031         * @param tokenScope the scope associated with the token
032         * @return {@code true} in case introspection is permitted; {@code false} otherwise
033         */
034        boolean isIntrospectionPermitted(ClientDetails authClient, ClientDetails tokenClient, Set<String> tokenScope);
035
036}