Package com.broadleafcommerce.auth.user.session.token.enhancer

Class AccountIdTokenEnhancer

java.lang.Object

com.broadleafcommerce.auth.user.session.token.enhancer.AbstractUserTokenEnhancer

com.broadleafcommerce.auth.user.session.token.enhancer.AccountIdTokenEnhancer

All Implemented Interfaces:

org.springframework.security.oauth2.provider.token.TokenEnhancer

public class AccountIdTokenEnhancer
extends AbstractUserTokenEnhancer

Responsible for validating and adding the "acct_id" claim to the token. A user is defined as a member of an account if they have at least one role for that account.

Field Summary

Fields

Modifier and Type	Field	Description
static final String	ACCOUNT_ID_CLAIM
static final String	PARENT_ACCOUNTS_CLAIM
static final String	PERSONAL

Constructor Summary

Constructors

Constructor	Description
AccountIdTokenEnhancer(AccountAncestorService accountAncestorService)

Method Summary

Modifier and Type	Method	Description
org.springframework.security.oauth2.common.OAuth2AccessToken	enhance(org.springframework.security.oauth2.common.OAuth2AccessToken accessToken, org.springframework.security.oauth2.provider.OAuth2Authentication authentication)
protected AccountAncestorService	getAccountAncestorService()

Methods inherited from class com.broadleafcommerce.auth.user.session.token.enhancer.AbstractUserTokenEnhancer

getRequestAccountId, getUser, getUserContext, getUserService, isAnonymousCsrImpersonation, setUserContext, setUserService, shouldEnhance

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

ACCOUNT_ID_CLAIM

public static final String ACCOUNT_ID_CLAIM

See Also:

• Constant Field Values

PARENT_ACCOUNTS_CLAIM

public static final String PARENT_ACCOUNTS_CLAIM

See Also:

• Constant Field Values

PERSONAL

public static final String PERSONAL

See Also:

• Constant Field Values

Constructor Details

AccountIdTokenEnhancer

public AccountIdTokenEnhancer(AccountAncestorService accountAncestorService)

Method Details

enhance

public org.springframework.security.oauth2.common.OAuth2AccessToken enhance(org.springframework.security.oauth2.common.OAuth2AccessToken accessToken,
 org.springframework.security.oauth2.provider.OAuth2Authentication authentication)

getAccountAncestorService

protected AccountAncestorService getAccountAncestorService()