Package org.oa4mp.server.loader.oauth2.servlet

Class TokenManagerServlet

java.lang.Object

javax.servlet.GenericServlet

javax.servlet.http.HttpServlet

edu.uiuc.ncsa.security.servlet.AbstractServlet

org.oa4mp.server.api.storage.servlet.EnvServlet

org.oa4mp.server.api.storage.servlet.OA4MPServlet

org.oa4mp.server.loader.oauth2.servlet.BearerTokenServlet

org.oa4mp.server.loader.oauth2.servlet.TokenManagerServlet

All Implemented Interfaces:

edu.uiuc.ncsa.security.core.Logable, Serializable, javax.servlet.Servlet, javax.servlet.ServletConfig, TransactionFilter, org.oa4mp.delegation.server.server.RFC7662Constants

Direct Known Subclasses:

RFC7009, RFC7662

public abstract class TokenManagerServlet
extends BearerTokenServlet
implements org.oa4mp.delegation.server.server.RFC7662Constants

Superclass for RFC7009 andRFC7662 plus perhaps any others.

Created by Jeff Gaynor
on 2/17/20 at 2:21 PM

See Also:

Serialized Form

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	TokenManagerServlet.State

Field Summary

Fields inherited from class org.oa4mp.server.api.storage.servlet.OA4MPServlet

caThread, kpt, lastAccessedThread, transactionCleanup

Fields inherited from class org.oa4mp.server.api.storage.servlet.EnvServlet

ERROR_NOTIFICATION_BODY_KEY, ERROR_NOTIFICATION_SUBJECT_KEY, notificationListeners, storeUpdatesDone

Fields inherited from class edu.uiuc.ncsa.security.servlet.AbstractServlet

environment, initialization, IP_HEADERS, PING_PARAMETER

Fields inherited from interface org.oa4mp.delegation.server.server.RFC7662Constants

ACTIVE, TOKEN, TOKEN_TYPE, TOKEN_TYPE_HINT, TYPE_ACCESS_TOKEN, TYPE_REFRESH_TOKEN, USERNAME

Constructor Summary

Constructors

Constructor	Description
TokenManagerServlet()

Method Summary

Modifier and Type	Method	Description
protected TokenManagerServlet.State	check7523(javax.servlet.http.HttpServletRequest req)
protected TokenManagerServlet.State	checkBasic(javax.servlet.http.HttpServletRequest req)	This will process a request with basic authorization, peel off the supplied token and resolve it.
protected TokenManagerServlet.State	checkBearer(javax.servlet.http.HttpServletRequest req)	Checks the case that the request uses a bearer token.
void	doGet(javax.servlet.http.HttpServletRequest httpServletRequest, javax.servlet.http.HttpServletResponse httpServletResponse)
protected int	getTokenType(String token)
protected OA2ServiceTransaction	getTransFromToken(String token)
protected boolean	isRFC7523Client(javax.servlet.http.HttpServletRequest req)
org.oa4mp.delegation.server.ServiceTransaction	verifyAndGet(org.oa4mp.delegation.server.request.IssuerResponse iResponse)
protected OA2Client	verifyClient(javax.servlet.http.HttpServletRequest req, String headerAuthz)	Used if the request has basic auth.
protected void	writeOK(javax.servlet.http.HttpServletResponse httpServletResponse, net.sf.json.JSONObject resp)

Methods inherited from class org.oa4mp.server.loader.oauth2.servlet.BearerTokenServlet

findTransaction

Methods inherited from class org.oa4mp.server.api.storage.servlet.OA4MPServlet

checkAdminClientStatus, checkClientApproval, createDebugger, destroy, getAGI, getATI, getClient, getClient, getClient, getFirstParameters, getFirstParameterValue, getGrantIDFromRequest, getServiceEnvironment, getTransaction, getTransactionByGrantID, getTransactionStore, isEmpty, loadProperties2, newTransaction, postprocess, preprocess, realStoreUpdates, say, shutdownCleanup, storeUpdates

Methods inherited from class org.oa4mp.server.api.storage.servlet.EnvServlet

addNotificationListener, loadEnvironment, processStoreCheck, removeNotificationListener

Methods inherited from class edu.uiuc.ncsa.security.servlet.AbstractServlet

checkContentType, CONST, debug, doIt, doPing, doPost, error, error, getConfigurationLoader, getEnvironment, getExceptionHandler, getInitialization, getMyLogger, getRequestIPAddress, handleException, info, init, isDebugOn, logOK, logOK, printAllParameters, printAllParameters, resetState, setConfigurationLoader, setDebugOn, setEnvironment, setExceptionHandler, setInitialization, warn

Methods inherited from class javax.servlet.http.HttpServlet

doDelete, doHead, doOptions, doPut, doTrace, getLastModified, service, service

Methods inherited from class javax.servlet.GenericServlet

getInitParameter, getInitParameterNames, getServletConfig, getServletContext, getServletInfo, getServletName, init, log, log

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

TokenManagerServlet

public TokenManagerServlet()

Method Detail

verifyClient

protected OA2Client verifyClient(javax.servlet.http.HttpServletRequest req,
                                 String headerAuthz)
                          throws UnsupportedEncodingException

Used if the request has basic auth.

Parameters:

req -

headerAuthz -

Returns:

Throws:

UnsupportedEncodingException

checkBasic

protected TokenManagerServlet.State checkBasic(javax.servlet.http.HttpServletRequest req)
                                        throws Throwable

This will process a request with basic authorization, peel off the supplied token and resolve it. It will then find the transaction or token exchange (TX) record for the given token.

Parameters:

req -

Returns:

Throws:

Throwable

isRFC7523Client

protected boolean isRFC7523Client(javax.servlet.http.HttpServletRequest req)

check7523

protected TokenManagerServlet.State check7523(javax.servlet.http.HttpServletRequest req)
                                       throws Throwable

Throws:

Throwable

checkBearer

protected TokenManagerServlet.State checkBearer(javax.servlet.http.HttpServletRequest req)
                                         throws Throwable

Checks the case that the request uses a bearer token. Same contract ascheckBasic(HttpServletRequest)

Parameters:

req -

Returns:

Throws:

Throwable

verifyAndGet

public org.oa4mp.delegation.server.ServiceTransaction verifyAndGet(org.oa4mp.delegation.server.request.IssuerResponse iResponse)
                                                            throws IOException

Specified by:

verifyAndGet in class OA4MPServlet

Throws:

IOException

doGet

public void doGet(javax.servlet.http.HttpServletRequest httpServletRequest,
                  javax.servlet.http.HttpServletResponse httpServletResponse)
           throws javax.servlet.ServletException,
                  IOException

Overrides:

doGet in class edu.uiuc.ncsa.security.servlet.AbstractServlet

Throws:

javax.servlet.ServletException

IOException

getTokenType

protected int getTokenType(String token)

writeOK

protected void writeOK(javax.servlet.http.HttpServletResponse httpServletResponse,
                       net.sf.json.JSONObject resp)
                throws IOException

Throws:

IOException

getTransFromToken

protected OA2ServiceTransaction getTransFromToken(String token)