Package com.broadleafcommerce.auth.user.session

Class SecurityServiceAccessTokenConverter

java.lang.Object

org.springframework.security.oauth2.provider.token.DefaultAccessTokenConverter

com.broadleafcommerce.auth.user.session.SecurityServiceAccessTokenConverter

All Implemented Interfaces:

org.springframework.security.oauth2.provider.token.AccessTokenConverter

public class SecurityServiceAccessTokenConverter
extends org.springframework.security.oauth2.provider.token.DefaultAccessTokenConverter

Converts the access token using the defaults within DefaultAccessTokenConverter and then extracts the narrowed set of permissions using SecurityService.extractPermissions(Set) in order to restrict the set of delegated authorities to the set of requested scopes.

Author:

Nick Crum (ncrum), Jeff Fischer, Phillip Verheyden (phillipuniverse)

Field Summary

Fields inherited from interface org.springframework.security.oauth2.provider.token.AccessTokenConverter

ATI, AUD, AUTHORITIES, CLIENT_ID, EXP, GRANT_TYPE, JTI, SCOPE

Constructor Summary

Constructors

Constructor	Description
SecurityServiceAccessTokenConverter(SecurityService securityService)

Method Summary

Modifier and Type	Method	Description
Map<String,?>	convertAccessToken(org.springframework.security.oauth2.common.OAuth2AccessToken token, org.springframework.security.oauth2.provider.OAuth2Authentication authentication)

Methods inherited from class org.springframework.security.oauth2.provider.token.DefaultAccessTokenConverter

extractAccessToken, extractAuthentication, setClientIdAttribute, setIncludeGrantType, setScopeAttribute, setUserTokenConverter

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SecurityServiceAccessTokenConverter

public SecurityServiceAccessTokenConverter(SecurityService securityService)

Method Detail

convertAccessToken

public Map<String,?> convertAccessToken(org.springframework.security.oauth2.common.OAuth2AccessToken token,
                                              org.springframework.security.oauth2.provider.OAuth2Authentication authentication)

Specified by:

convertAccessToken in interface org.springframework.security.oauth2.provider.token.AccessTokenConverter

Overrides:

convertAccessToken in class org.springframework.security.oauth2.provider.token.DefaultAccessTokenConverter