com.authlete.jaxrs

Class BaseResourceEndpoint

java.lang.Object

com.authlete.jaxrs.BaseEndpoint

com.authlete.jaxrs.BaseResourceEndpoint

Direct Known Subclasses:

BaseUserInfoEndpoint

public class BaseResourceEndpoint
extends BaseEndpoint

A base class for protected resource endpoints.

Since:

1.2

Author:

Takahiko Kawasaki

Constructor Summary

Constructors

Constructor and Description
BaseResourceEndpoint()

Method Summary

Modifier and Type	Method and Description
String	extractAccessToken(String authorization, String accessTokenInRequestParameters) Extract an access token from either Authorization header or request parameters.
AccessTokenInfo	validateAccessToken(com.authlete.common.api.AuthleteApi api, String accessToken) Validate an access token.
AccessTokenInfo	validateAccessToken(com.authlete.common.api.AuthleteApi api, String accessToken, String[] requiredScopes) Validate an access token.
AccessTokenInfo	validateAccessToken(com.authlete.common.api.AuthleteApi api, String accessToken, String[] requiredScopes, String requiredSubject) Validate an access token.

Methods inherited from class com.authlete.jaxrs.BaseEndpoint

onError

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

BaseResourceEndpoint

public BaseResourceEndpoint()

Method Detail

extractAccessToken

public String extractAccessToken(String authorization,
                                 String accessTokenInRequestParameters)

Extract an access token from either Authorization header or request parameters.

The first argument expects a value of Authorization header that complies with RFC 6750 (Bearer Token Usage). If the argument contains an access token, this method returns the access token without checking the second argument.

The second argument expects a value of access_token request parameter. The value of this argument is returned when the first argument does not contain an access token.

Parameters:

authorization - A value of Authorization header whose scheme is Bearer. For example, "Bearer SlAV32hkKG".

accessTokenInRequestParameters - A value of access_token request parameter.

Returns:

An access token.

validateAccessToken

public AccessTokenInfo validateAccessToken(com.authlete.common.api.AuthleteApi api,
                                           String accessToken)
                                    throws javax.ws.rs.WebApplicationException

Validate an access token. This method is an alias of validate(api, accessToken, null, null).

Parameters:

api - Implementation of AuthleteApi interface.

accessToken - An access token to validate.

Returns:

Information about the access token.

Throws:

javax.ws.rs.WebApplicationException - The access token is invalid. To be concrete, the access token does not exist or it has expired.

validateAccessToken

public AccessTokenInfo validateAccessToken(com.authlete.common.api.AuthleteApi api,
                                           String accessToken,
                                           String[] requiredScopes)
                                    throws javax.ws.rs.WebApplicationException

Validate an access token. This method is an alias of validate(api, accessToken, requiredScopes, null).

Parameters:

api - Implementation of AuthleteApi interface.

accessToken - An access token to validate.

requiredScopes - Scopes that must be associated with the access token. null is okay.

Returns:

Information about the access token.

Throws:

javax.ws.rs.WebApplicationException - The access token is invalid. To be concrete, one or more of the following conditions meet.

1. The access token does not exist.
2. The access token has expired.
3. The access token does not cover the required scopes.

validateAccessToken

public AccessTokenInfo validateAccessToken(com.authlete.common.api.AuthleteApi api,
                                           String accessToken,
                                           String[] requiredScopes,
                                           String requiredSubject)
                                    throws javax.ws.rs.WebApplicationException

Validate an access token.

This method internally creates a AccessTokenValidator instance and calls its validate() method. Then, this method uses the value returned from the validate() method as a response from this method.

When AccessTokenValidator.validate() method raises a WebApplicationException, this method calls onError() method with the exception. The default implementation of onError() calls printStackTrace() of the exception and does nothing else. You can override the method as necessary. After calling onError() method, this method re-throws the exception. The response contained in the exception complies with the requirements described in RFC 6750 (The OAuth 2.0 Authorization Framework: Bearer Token Usage).

Parameters:

api - Implementation of AuthleteApi interface.

accessToken - An access token to validate.

requiredScopes - Scopes that must be associated with the access token. null is okay.

requiredSubject - Subject (= user's unique identifier) that must be associated with the access token. null is okay.

Returns:

Information about the access token.

Throws:

javax.ws.rs.WebApplicationException - The access token is invalid. To be concrete, one or more of the following conditions meet.

1. The access token does not exist.
2. The access token has expired.
3. The access token does not cover the required scopes.
4. The access token is not associated with the required subject.