Class OAuthRequestFilter
- java.lang.Object
-
- org.apache.cxf.rs.security.oauth2.services.AbstractAccessTokenValidator
-
- org.apache.cxf.rs.security.oauth2.filters.OAuthRequestFilter
-
- All Implemented Interfaces:
javax.ws.rs.container.ContainerRequestFilter
- Direct Known Subclasses:
OAuthRequestInterceptor
@Provider @PreMatching @Priority(1000) public class OAuthRequestFilter extends AbstractAccessTokenValidator implements javax.ws.rs.container.ContainerRequestFilter
JAX-RS OAuth2 filter which can be used to protect the end-user endpoints
-
-
Field Summary
-
Fields inherited from class org.apache.cxf.rs.security.oauth2.services.AbstractAccessTokenValidator
realm, supportedSchemes
-
-
Constructor Summary
Constructors Constructor Description OAuthRequestFilter()
-
Method Summary
All Methods Instance Methods Concrete Methods Modifier and Type Method Description protected booleancheckHttpVerb(javax.servlet.http.HttpServletRequest req, List<String> verbs)protected booleancheckRequestURI(javax.servlet.http.HttpServletRequest request, List<String> uris, Message m)protected booleancheckScopeProperty(String scope)protected SecurityContextcreateSecurityContext(javax.servlet.http.HttpServletRequest request, AccessTokenValidation accessTokenV)voidfilter(javax.ws.rs.container.ContainerRequestContext context)StringgetAudience()protected String[]getAuthorizationParts(Message m)protected StringgetTokenFromFormData(Message message)booleanisCompleteAudienceMatch()protected booleanisCorsRequest(Message m)voidsetAllPermissionsMatch(boolean allPermissionsMatch)voidsetAudience(String audience)voidsetAudienceIsEndpointAddress(boolean audienceIsEndpointAddress)voidsetBlockPublicClients(boolean blockPublicClients)voidsetCheckFormData(boolean checkFormData)voidsetCompleteAudienceMatch(boolean completeAudienceMatch)voidsetIssuer(String issuer)voidsetRequiredScopes(List<String> requiredScopes)voidsetTokenSubjectAuthenticationMethod(AuthenticationMethod method)voidsetUseUserSubject(boolean useUserSubject)protected StringvalidateAudiences(List<String> audiences)protected voidvalidateRequest(Message m)-
Methods inherited from class org.apache.cxf.rs.security.oauth2.services.AbstractAccessTokenValidator
findTokenValidator, getAccessTokenValidation, getJwtTokenConsumer, getMessageContext, isPersistJwtEncoding, removeAccessToken, setDataProvider, setJwtTokenConsumer, setMaxValidationDataCacheSize, setMessageContext, setPersistJwtEncoding, setRealm, setTokenValidator, setTokenValidators
-
-
-
-
Method Detail
-
filter
public void filter(javax.ws.rs.container.ContainerRequestContext context)
- Specified by:
filterin interfacejavax.ws.rs.container.ContainerRequestFilter
-
validateRequest
protected void validateRequest(Message m)
-
checkHttpVerb
protected boolean checkHttpVerb(javax.servlet.http.HttpServletRequest req, List<String> verbs)
-
checkRequestURI
protected boolean checkRequestURI(javax.servlet.http.HttpServletRequest request, List<String> uris, Message m)
-
checkScopeProperty
protected boolean checkScopeProperty(String scope)
-
setUseUserSubject
public void setUseUserSubject(boolean useUserSubject)
-
createSecurityContext
protected SecurityContext createSecurityContext(javax.servlet.http.HttpServletRequest request, AccessTokenValidation accessTokenV)
-
isCorsRequest
protected boolean isCorsRequest(Message m)
-
setCheckFormData
public void setCheckFormData(boolean checkFormData)
-
setAllPermissionsMatch
public void setAllPermissionsMatch(boolean allPermissionsMatch)
-
setBlockPublicClients
public void setBlockPublicClients(boolean blockPublicClients)
-
setTokenSubjectAuthenticationMethod
public void setTokenSubjectAuthenticationMethod(AuthenticationMethod method)
-
getAudience
public String getAudience()
-
setAudience
public void setAudience(String audience)
-
isCompleteAudienceMatch
public boolean isCompleteAudienceMatch()
-
setCompleteAudienceMatch
public void setCompleteAudienceMatch(boolean completeAudienceMatch)
-
setAudienceIsEndpointAddress
public void setAudienceIsEndpointAddress(boolean audienceIsEndpointAddress)
-
setIssuer
public void setIssuer(String issuer)
-
-