Package com.broadleafcommerce.auth.authorization.security

Class AdvancedOAuth2RefreshTokenGenerator

java.lang.Object

com.broadleafcommerce.auth.authorization.security.AdvancedOAuth2RefreshTokenGenerator

All Implemented Interfaces:

org.springframework.security.oauth2.server.authorization.token.OAuth2TokenGenerator<org.springframework.security.oauth2.core.OAuth2RefreshToken>

public class AdvancedOAuth2RefreshTokenGenerator
extends Object
implements org.springframework.security.oauth2.server.authorization.token.OAuth2TokenGenerator<org.springframework.security.oauth2.core.OAuth2RefreshToken>

Token generator for refresh tokens. Creates a composite key that contains both the newly generated secure random string, but also the OID. The OID is an original ID generated for the first refresh token and is included with every token rotation thereafter. The OID serves to relate all rotated refresh tokens issued.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	AdvancedOAuth2RefreshTokenGenerator.RefreshTokenValue

Field Summary

Fields

Modifier and Type	Field	Description
static final String	AUTH_CODE_GRANT_KEY_NAME
static final String	OID_KEY_NAME

Constructor Summary

Constructors

Constructor	Description
AdvancedOAuth2RefreshTokenGenerator()

Method Summary

Modifier and Type	Method	Description
static String	extractOid(String refreshTokenValue)
org.springframework.security.oauth2.core.OAuth2RefreshToken	generate(org.springframework.security.oauth2.server.authorization.token.OAuth2TokenContext context)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

AUTH_CODE_GRANT_KEY_NAME

public static final String AUTH_CODE_GRANT_KEY_NAME

See Also:

• Constant Field Values

OID_KEY_NAME

public static final String OID_KEY_NAME

See Also:

• Constant Field Values

Constructor Details

AdvancedOAuth2RefreshTokenGenerator

public AdvancedOAuth2RefreshTokenGenerator()

Method Details

generate

public org.springframework.security.oauth2.core.OAuth2RefreshToken generate(org.springframework.security.oauth2.server.authorization.token.OAuth2TokenContext context)

Specified by:

generate in interface org.springframework.security.oauth2.server.authorization.token.OAuth2TokenGenerator<org.springframework.security.oauth2.core.OAuth2RefreshToken>

extractOid

public static String extractOid(String refreshTokenValue)