Package swiss.trustbroker.oidc

Class CustomTokenIntrospectionAuthenticationProvider

java.lang.Object

swiss.trustbroker.oidc.CustomTokenIntrospectionAuthenticationProvider

All Implemented Interfaces:

org.springframework.security.authentication.AuthenticationProvider

public class CustomTokenIntrospectionAuthenticationProvider
extends Object
implements org.springframework.security.authentication.AuthenticationProvider

Used to check tokens for validity and content on the OIDC provider org.springframework.security.oauth2.server.authorization.authentication.OAuth2TokenIntrospectionAuthenticationProvider NOTE We copied this class including their to-do remarks because this one does OIDC and in the XTB set-up the default one does SAML2 introspection. A bit risky code duplication but not a central functionality in XTB. Javadoc of original class: An AuthenticationProvider implementation for OAuth 2.0 Token Introspection.

Since:

0.1.1

See Also:

• OAuth2TokenIntrospectionAuthenticationToken
• RegisteredClientRepository
• OAuth2AuthorizationService
• Section 2.1 Introspection Request

Constructor Summary

Constructors

Constructor	Description
CustomTokenIntrospectionAuthenticationProvider(ClientConfigInMemoryRepository registeredClientRepository, org.springframework.security.oauth2.server.authorization.OAuth2AuthorizationService authorizationService, RelyingPartyDefinitions relyingPartyDefinitions, TrustBrokerProperties trustBrokerProperties)

Method Summary

Modifier and Type	Method	Description
org.springframework.security.core.Authentication	authenticate(org.springframework.security.core.Authentication authentication)
boolean	supports(Class<?> authentication)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

CustomTokenIntrospectionAuthenticationProvider

public CustomTokenIntrospectionAuthenticationProvider(ClientConfigInMemoryRepository registeredClientRepository,
 org.springframework.security.oauth2.server.authorization.OAuth2AuthorizationService authorizationService,
 RelyingPartyDefinitions relyingPartyDefinitions,
 TrustBrokerProperties trustBrokerProperties)

Method Details

authenticate

public org.springframework.security.core.Authentication authenticate(org.springframework.security.core.Authentication authentication)
                                                              throws org.springframework.security.core.AuthenticationException

Specified by:

authenticate in interface org.springframework.security.authentication.AuthenticationProvider

Throws:

org.springframework.security.core.AuthenticationException

supports

public boolean supports(Class<?> authentication)

Specified by:

supports in interface org.springframework.security.authentication.AuthenticationProvider