Package de.digitalcollections.commons.springsecurity.jwt

Class TokenAuthenticationService

java.lang.Object

de.digitalcollections.commons.springsecurity.jwt.TokenAuthenticationService

public class TokenAuthenticationService
extends java.lang.Object

Constructor Summary

Constructors

Constructor	Description
TokenAuthenticationService(java.lang.String secret)	Configure the service with a string secret.
TokenAuthenticationService(java.lang.String secret, long expirationTime)
TokenAuthenticationService(java.security.PrivateKey privateKey, java.security.PublicKey publicKey)	Configure the service with a public/private key pair.
TokenAuthenticationService(java.security.PublicKey publicKey)	Configure the service with a public key.

Method Summary

Modifier and Type	Method	Description
void	addAuthentication(javax.servlet.http.HttpServletResponse response, java.lang.String username)
boolean	canIssueTokens()
org.springframework.security.core.Authentication	getAuthentication(javax.servlet.http.HttpServletRequest request)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

TokenAuthenticationService

public TokenAuthenticationService(java.lang.String secret)

Configure the service with a string secret.

Parameters:

secret - a secret

TokenAuthenticationService

public TokenAuthenticationService(java.security.PrivateKey privateKey,
                                  java.security.PublicKey publicKey)

Configure the service with a public/private key pair. The pair must have been generated with the RSA cipher, e.g. with `keytool`: $ keytool -keyalg RSA -keystore my-keystore.jks -genkeypair

Parameters:

privateKey - the private key

publicKey - the public key

TokenAuthenticationService

public TokenAuthenticationService(java.security.PublicKey publicKey)

Configure the service with a public key. This has the effect that the service can no longer issue tokens, but only verify them. Can be useful in scenarios where a single entity is issuing tokens and services that wish to authenticate users do not have access to the secret key.

Parameters:

publicKey - the public key

TokenAuthenticationService

public TokenAuthenticationService(java.lang.String secret,
                                  long expirationTime)

Method Detail

canIssueTokens

public boolean canIssueTokens()

addAuthentication

public void addAuthentication(javax.servlet.http.HttpServletResponse response,
                              java.lang.String username)

getAuthentication

public org.springframework.security.core.Authentication getAuthentication(javax.servlet.http.HttpServletRequest request)