Package com.broadleafcommerce.auth.user.session.token.enhancer

Class ClientRestrictionTokenEnhancer

java.lang.Object

com.broadleafcommerce.auth.user.session.token.enhancer.ClientRestrictionTokenEnhancer

All Implemented Interfaces:

org.springframework.security.oauth2.provider.token.TokenEnhancer

public class ClientRestrictionTokenEnhancer
extends Object
implements org.springframework.security.oauth2.provider.token.TokenEnhancer

Constructor Summary

Constructors

Constructor	Description
ClientRestrictionTokenEnhancer(AuthorizationServerService<AuthorizationServer> authorizationServerService, AuthorizedClientService<AuthorizedClient> authorizedClientService, PermissionRepository permissionRepository)

Method Summary

Modifier and Type	Method	Description
protected void	addTenantProperties(org.springframework.security.oauth2.common.DefaultOAuth2AccessToken enhancedToken, Optional<AuthorizationServer> maybeAuthServer)
org.springframework.security.oauth2.common.OAuth2AccessToken	enhance(org.springframework.security.oauth2.common.OAuth2AccessToken accessToken, org.springframework.security.oauth2.provider.OAuth2Authentication authentication)
protected AuthorizationServerService<AuthorizationServer>	getAuthorizationServerService()
protected AuthorizedClientService<AuthorizedClient>	getAuthorizedClientService()
protected PermissionRepository	getPermissionRepository()
protected Map<String,Map<String,Set<String>>>	getRestrictedAuthoritiesInScopes(Collection<org.springframework.security.core.GrantedAuthority> authorities, Set<String> scopes, Map<String,Set<String>> restrictionTargetsByType)	Gets the restricted authorities that are in scope.
protected Map<String,Set<String>>	getVendorRestrictionTargetsByType(Object vendorTargetsAttribute)
protected boolean	shouldEnhance(org.springframework.security.oauth2.provider.OAuth2Authentication authentication)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

ClientRestrictionTokenEnhancer

public ClientRestrictionTokenEnhancer(AuthorizationServerService<AuthorizationServer> authorizationServerService,
 AuthorizedClientService<AuthorizedClient> authorizedClientService,
 PermissionRepository permissionRepository)

Method Details

enhance

public org.springframework.security.oauth2.common.OAuth2AccessToken enhance(org.springframework.security.oauth2.common.OAuth2AccessToken accessToken,
 org.springframework.security.oauth2.provider.OAuth2Authentication authentication)

Specified by:

enhance in interface org.springframework.security.oauth2.provider.token.TokenEnhancer

shouldEnhance

protected boolean shouldEnhance(org.springframework.security.oauth2.provider.OAuth2Authentication authentication)

addTenantProperties

protected void addTenantProperties(org.springframework.security.oauth2.common.DefaultOAuth2AccessToken enhancedToken,
 Optional<AuthorizationServer> maybeAuthServer)

getVendorRestrictionTargetsByType

protected Map<String,Set<String>> getVendorRestrictionTargetsByType(Object vendorTargetsAttribute)

getRestrictedAuthoritiesInScopes

protected Map<String,Map<String,Set<String>>> getRestrictedAuthoritiesInScopes(Collection<org.springframework.security.core.GrantedAuthority> authorities,
 Set<String> scopes,
 Map<String,Set<String>> restrictionTargetsByType)

Gets the restricted authorities that are in scope. Since AuthorizedClient does not have any RestrictedPermission or RestrictedRole, the restricted_authorities claim is essentially all the authorities in scope mapped with its restrictions.

Parameters:

authorities - authorities to map the restrictions with

scopes - requested scopes

restrictionTargetsByType - restrictions to map the given authorities to

Returns:

a map of restricted authorities in the requested scopes

getAuthorizationServerService

protected AuthorizationServerService<AuthorizationServer> getAuthorizationServerService()

getAuthorizedClientService

protected AuthorizedClientService<AuthorizedClient> getAuthorizedClientService()

getPermissionRepository

protected PermissionRepository getPermissionRepository()