net.krotscheck.kangaroo.authz.oauth2.authn.authn

Class O2ClientQueryParameterFilter

java.lang.Object

net.krotscheck.kangaroo.authz.oauth2.authn.authn.AbstractO2AuthenticationFilter

net.krotscheck.kangaroo.authz.oauth2.authn.authn.O2ClientQueryParameterFilter

All Implemented Interfaces:

javax.ws.rs.container.ContainerRequestFilter

@Priority(value=1000)
public final class O2ClientQueryParameterFilter
extends AbstractO2AuthenticationFilter

This filter's job is to set client context in the event that a client ID is passed via a query parameter in a GET request. This usually occurs in redirect-based flows, as triggered by the authorization endpoint

Author:

Michael Krotscheck

Constructor Summary

Constructors

Constructor and Description
O2ClientQueryParameterFilter(javax.inject.Provider<org.glassfish.jersey.server.ContainerRequest> requestProvider, javax.inject.Provider<org.hibernate.Session> sessionProvider) Create a new instance of this filter.

Method Summary

Modifier and Type	Method and Description
void	filter(javax.ws.rs.container.ContainerRequestContext context) Attempt to extract a client_id from the query string.

Methods inherited from class net.krotscheck.kangaroo.authz.oauth2.authn.authn.AbstractO2AuthenticationFilter

convertCredentials, setPrincipal

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

O2ClientQueryParameterFilter

public O2ClientQueryParameterFilter(javax.inject.Provider<org.glassfish.jersey.server.ContainerRequest> requestProvider,
                                    javax.inject.Provider<org.hibernate.Session> sessionProvider)

Create a new instance of this filter.

Parameters:

requestProvider - The request provider.

sessionProvider - The session provider.

Method Detail

filter

public void filter(javax.ws.rs.container.ContainerRequestContext context)

Attempt to extract a client_id from the query string. This method ONLY permits public clients, as client secrets may not be passed in URL's.

Parameters:

context - The request context.