Package net.ltgt.oidc.servlet

Interface OAuthTokensHandler

All Known Implementing Classes:
RevokingOAuthTokensHandler
public interface OAuthTokensHandler
Handles OAuth tokens acquired at authentication time (by the CallbackServlet) once they're no longer needed.

Tokens can be revoked immediately (default behavior if no specific OAuthTokensHandler has been configured, through a RevokingOAuthTokensHandler), or stored in the session for later use. In that case, it is your responsibility to revoke them, e.g. when the session is destroyed.

See Also:

  • Field Details

    • CONTEXT_ATTRIBUTE_NAME

      static final String CONTEXT_ATTRIBUTE_NAME

  • Method Details

    • tokensAcquired

      void tokensAcquired(AccessTokenResponse tokenResponse, HttpSession session)
      Called by the CallbackServlet before it forgets about the tokens.
      Parameters:
      tokenResponse - The token response, containing the OAuth tokens and possibly some custom parameters