net.trajano.ms.authz

Class RevocationResource

java.lang.Object

net.trajano.ms.authz.RevocationResource

@Configuration
 @Component
 @Path(value="/revoke")
 @PermitAll
public class RevocationResource
extends Object

Revocation endpoint resource.

Author:

Archimedes Trajano

Field Summary

Fields

Modifier and Type	Field and Description
private ClientValidator	clientValidator
private int	jwtMaximumLifetimeInSeconds Maximum life of a JWT token.
private static org.slf4j.Logger	LOG
private String	realmName
private TokenCache	tokenCache

Constructor Summary

Constructors

Constructor and Description
RevocationResource()

Method Summary

Modifier and Type	Method and Description
com.google.gson.JsonObject	revoke(String token, String tokenTypeHint, String authorization) Performs client credential validation then invokes the revocation process from the token cache.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

LOG

private static final org.slf4j.Logger LOG

clientValidator

@Autowired
private ClientValidator clientValidator

jwtMaximumLifetimeInSeconds

@Value(value="${token.jwtMaximumLifetime:86400}")
private int jwtMaximumLifetimeInSeconds

Maximum life of a JWT token. Past that period, it is expected to no longer be used.

realmName

@Value(value="${realmName:client_credentials}")
private String realmName

tokenCache

@Autowired
private TokenCache tokenCache

Constructor Detail

RevocationResource

public RevocationResource()

Method Detail

revoke

@POST
 @Consumes(value="application/x-www-form-urlencoded")
 @Produces(value="application/json")
public com.google.gson.JsonObject revoke(@FormParam(value="token")
                                                                                                                                          String token,
                                                                                                                                          @FormParam(value="token_type_hint")
                                                                                                                                          String tokenTypeHint,
                                                                                                                                          @HeaderParam(value="Authorization")
                                                                                                                                          String authorization)

Performs client credential validation then invokes the revocation process from the token cache.