Package org.apache.cxf.rs.security.oidc.idp

Class OidcImplicitService

java.lang.Object

org.apache.cxf.rs.security.oauth2.services.AbstractOAuthService

org.apache.cxf.rs.security.oauth2.services.RedirectionBasedGrantService

org.apache.cxf.rs.security.oauth2.services.AbstractImplicitGrantService

org.apache.cxf.rs.security.oauth2.services.ImplicitGrantService

org.apache.cxf.rs.security.oidc.idp.OidcImplicitService

Direct Known Subclasses:

OidcHybridService

public class OidcImplicitService
extends ImplicitGrantService

Field Summary

Fields inherited from class org.apache.cxf.rs.security.oauth2.services.AbstractOAuthService

LOG

Constructor Summary

Constructors

Modifier	Constructor	Description
	OidcImplicitService()
protected	OidcImplicitService(Set<String> supportedResponseTypes, String supportedGrantType)

Method Summary

Modifier and Type	Method	Description
protected boolean	canAccessTokenBeReturned(String responseType)
protected boolean	canAuthorizationBeSkipped(jakarta.ws.rs.core.MultivaluedMap<String,String> params, Client client, UserSubject userSubject, List<String> requestedScope, List<OAuthPermission> permissions)
protected AbstractFormImplicitResponse	prepareFormResponse(OAuthRedirectionState state, Client client, List<String> requestedScope, List<String> approvedScope, UserSubject userSubject, ServerAccessToken preAuthorizedToken)
protected StringBuilder	prepareRedirectResponse(OAuthRedirectionState state, Client client, List<String> requestedScope, List<String> approvedScope, UserSubject userSubject, ServerAccessToken preAuthorizedToken)
protected String	processIdToken(OAuthRedirectionState state, IdToken idToken)
protected OAuthRedirectionState	recreateRedirectionStateFromParams(jakarta.ws.rs.core.MultivaluedMap<String,String> params)
void	setIdTokenJoseHandler(OAuthJoseJwtProducer idTokenJoseHandler)
void	setIdTokenProvider(IdTokenProvider idTokenProvider)
void	setSkipAuthorizationWithOidcScope(boolean skipAuthorizationWithOidcScope)
protected jakarta.ws.rs.core.Response	startAuthorization(jakarta.ws.rs.core.MultivaluedMap<String,String> params, UserSubject userSubject, Client client, String redirectUri)

Methods inherited from class org.apache.cxf.rs.security.oauth2.services.ImplicitGrantService

createAuthorizationData

Methods inherited from class org.apache.cxf.rs.security.oauth2.services.AbstractImplicitGrantService

canRedirectUriBeEmpty, canSupportPublicClient, createErrorResponse, createGrant, createTokenRegistration, finalizeResponse, getClientAccessToken, getUriWithFragment, processClientAccessToken, processRefreshToken, setReportClientId, setResponseFilter, setResponseFilters

Methods inherited from class org.apache.cxf.rs.security.oauth2.services.RedirectionBasedGrantService

authorize, authorizeDecision, authorizeDecisionForm, authorizePost, completeAuthorization, createErrorResponse, createHtmlResponse, createUserSubject, getAndValidateSecurityContext, getApprovedScope, getClient, getSupportedGrantType, getSupportedResponseTypes, isFormResponse, isRevokePreauthorizedTokenOnApproval, noConsentForRequestedScopes, personalizeData, recreateRedirectionStateFromSession, setAuthorizationFilter, setHidePreauthorizedScopesInForm, setMatchRedirectUriWithApplicationUri, setMaxDefaultSessionInterval, setPartialMatchScopeValidation, setResourceOwnerNameProvider, setRevokePreauthorizedTokenOnApproval, setScopesRequiringNoConsent, setSessionAuthenticityTokenProvider, setSubjectCreator, setSupportSinglePageApplications, setUseAllClientScopes, setUseRegisteredRedirectUriIfPossible, startAuthorization, validateRedirectUri

Methods inherited from class org.apache.cxf.rs.security.oauth2.services.AbstractOAuthService

checkTransportSecurity, getDataProvider, getMessageContext, getQueryParameters, getValidClient, getValidClient, injectContextIntoOAuthProviders, isWriteOptionalParameters, reportInvalidRequestError, reportInvalidRequestError, reportInvalidRequestError, reportInvalidRequestError, setBlockUnsecureRequests, setDataProvider, setMessageContext, setWriteOptionalParameters

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

OidcImplicitService

public OidcImplicitService()

OidcImplicitService

protected OidcImplicitService(Set<String> supportedResponseTypes,
 String supportedGrantType)

Method Details

canAccessTokenBeReturned

protected boolean canAccessTokenBeReturned(String responseType)

Overrides:

canAccessTokenBeReturned in class RedirectionBasedGrantService

startAuthorization

protected jakarta.ws.rs.core.Response startAuthorization(jakarta.ws.rs.core.MultivaluedMap<String,String> params,
 UserSubject userSubject,
 Client client,
 String redirectUri)

Overrides:

startAuthorization in class RedirectionBasedGrantService

canAuthorizationBeSkipped

protected boolean canAuthorizationBeSkipped(jakarta.ws.rs.core.MultivaluedMap<String,String> params,
 Client client,
 UserSubject userSubject,
 List<String> requestedScope,
 List<OAuthPermission> permissions)

Overrides:

canAuthorizationBeSkipped in class RedirectionBasedGrantService

setSkipAuthorizationWithOidcScope

public void setSkipAuthorizationWithOidcScope(boolean skipAuthorizationWithOidcScope)

prepareRedirectResponse

protected StringBuilder prepareRedirectResponse(OAuthRedirectionState state,
 Client client,
 List<String> requestedScope,
 List<String> approvedScope,
 UserSubject userSubject,
 ServerAccessToken preAuthorizedToken)

Overrides:

prepareRedirectResponse in class AbstractImplicitGrantService

prepareFormResponse

protected AbstractFormImplicitResponse prepareFormResponse(OAuthRedirectionState state,
 Client client,
 List<String> requestedScope,
 List<String> approvedScope,
 UserSubject userSubject,
 ServerAccessToken preAuthorizedToken)

Overrides:

prepareFormResponse in class AbstractImplicitGrantService

recreateRedirectionStateFromParams

protected OAuthRedirectionState recreateRedirectionStateFromParams(jakarta.ws.rs.core.MultivaluedMap<String,String> params)

Overrides:

recreateRedirectionStateFromParams in class RedirectionBasedGrantService

processIdToken

protected String processIdToken(OAuthRedirectionState state,
 IdToken idToken)

setIdTokenJoseHandler

public void setIdTokenJoseHandler(OAuthJoseJwtProducer idTokenJoseHandler)

setIdTokenProvider

public void setIdTokenProvider(IdTokenProvider idTokenProvider)