net.krotscheck.kangaroo.authz.admin.v1.auth.filter

Class OAuth2AuthenticationFilter

java.lang.Object

net.krotscheck.kangaroo.authz.admin.v1.auth.filter.OAuth2AuthenticationFilter

All Implemented Interfaces:

javax.ws.rs.container.ContainerRequestFilter

@Priority(value=1000)
public final class OAuth2AuthenticationFilter
extends Object
implements javax.ws.rs.container.ContainerRequestFilter

A request filter that validates a bearer token before permitting the request to continue. It will replace the user principal with one that is aware of the token's granted scopes.

Author:

Michael Krotscheck

Constructor Summary

Constructors

Constructor and Description
OAuth2AuthenticationFilter(javax.inject.Provider<org.hibernate.Session> sessionProvider, javax.inject.Provider<org.apache.commons.configuration.Configuration> configProvider, String[] scopesAllowed) Create a new filter, only permitting the provided scopes.

Method Summary

Modifier and Type	Method and Description
void	filter(javax.ws.rs.container.ContainerRequestContext request) This filter attempts to resolve an OAuth authorization token from the request, and validate it.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

OAuth2AuthenticationFilter

public OAuth2AuthenticationFilter(javax.inject.Provider<org.hibernate.Session> sessionProvider,
                                  javax.inject.Provider<org.apache.commons.configuration.Configuration> configProvider,
                                  String[] scopesAllowed)

Create a new filter, only permitting the provided scopes.

Parameters:

configProvider - System configuration provider.

sessionProvider - Hibernate Session provider.

scopesAllowed - The permitted scopes.

Method Detail

filter

public void filter(javax.ws.rs.container.ContainerRequestContext request)
            throws IOException

This filter attempts to resolve an OAuth authorization token from the request, and validate it. If successful, it will replace the security context, otherwise it will leave it blank.

Specified by:

filter in interface javax.ws.rs.container.ContainerRequestFilter

Parameters:

request - The container request context.

Throws:

IOException - if an I/O exception occurs.