Package com.broadleafcommerce.auth.user.session

Class OAuth2SessionAuthenticationProvider

java.lang.Object

com.broadleafcommerce.auth.user.session.OAuth2SessionAuthenticationProvider

All Implemented Interfaces:

org.springframework.security.authentication.AuthenticationProvider

public class OAuth2SessionAuthenticationProvider
extends Object
implements org.springframework.security.authentication.AuthenticationProvider

An AuthenticationProvider that authenticates a user using a OAuth2SessionAuthenticationToken.

Author:

Nick Crum (ncrum)

See Also:

• OAuth2SessionAuthenticationFilter

Constructor Summary

Constructors

Constructor	Description
OAuth2SessionAuthenticationProvider(OAuth2UserDetailsService userDetailsService, StatelessUtil util)

Method Summary

Modifier and Type	Method	Description
org.springframework.security.core.Authentication	authenticate(org.springframework.security.core.Authentication authentication)
protected org.springframework.security.core.Authentication	createSuccessAuthentication(OAuth2UserDetails user, OAuth2SessionToken sessionToken)
protected Collection<org.springframework.security.core.GrantedAuthority>	getAuthorities(OAuth2UserDetails user, OAuth2SessionToken sessionToken)
protected OAuth2UserDetailsService	getUserDetailsService()
protected UserDetailsValidationProperties	getUserDetailsValidationProperties()
protected StatelessUtil	getUtil()
protected boolean	isSessionTokenFromThirdPartyLogin(OAuth2SessionToken sessionToken)
protected OAuth2UserDetails	loadUser(com.nimbusds.jwt.SignedJWT jwt, OAuth2SessionToken sessionToken, String clientId)	Loads the appropriate user for the request.
void	setUserDetailsValidationProperties(UserDetailsValidationProperties userDetailsValidationProperties)
boolean	supports(Class<?> authentication)
protected void	validateCredentialsNonExpired(OAuth2UserDetails userDetails, String clientId, OAuth2SessionToken sessionToken)	Validate that for the provided session token, the associated user's credentials are not considered expired.
protected void	validateJWT(com.nimbusds.jwt.SignedJWT jwt)
protected void	validateUserDetails(OAuth2UserDetails userDetails, String clientId, OAuth2SessionToken sessionToken)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

OAuth2SessionAuthenticationProvider

public OAuth2SessionAuthenticationProvider(OAuth2UserDetailsService userDetailsService,
 StatelessUtil util)

Method Details

supports

public boolean supports(Class<?> authentication)

Specified by:

supports in interface org.springframework.security.authentication.AuthenticationProvider

authenticate

public org.springframework.security.core.Authentication authenticate(org.springframework.security.core.Authentication authentication)

Specified by:

authenticate in interface org.springframework.security.authentication.AuthenticationProvider

loadUser

protected OAuth2UserDetails loadUser(com.nimbusds.jwt.SignedJWT jwt,
 OAuth2SessionToken sessionToken,
 String clientId)
                              throws ParseException

Loads the appropriate user for the request. Generally, this will rely on the "sub" claim in the JWT, but if the session is impersonated or anonymous CSR, those users will be loaded instead.

Parameters:

jwt - the verified JWT

sessionToken - the session token

clientId - the current client ID

Returns:

the user details

Throws:

ParseException - if there is an issue extracting claims from the JWT

Since:

Authentication Service 2.3.0, Release Train 2.3.0

createSuccessAuthentication

protected org.springframework.security.core.Authentication createSuccessAuthentication(OAuth2UserDetails user,
 OAuth2SessionToken sessionToken)

getAuthorities

protected Collection<org.springframework.security.core.GrantedAuthority> getAuthorities(OAuth2UserDetails user,
 OAuth2SessionToken sessionToken)

validateJWT

protected void validateJWT(com.nimbusds.jwt.SignedJWT jwt)
                    throws ParseException

Throws:

ParseException

validateUserDetails

protected void validateUserDetails(OAuth2UserDetails userDetails,
 String clientId,
 OAuth2SessionToken sessionToken)

validateCredentialsNonExpired

protected void validateCredentialsNonExpired(OAuth2UserDetails userDetails,
 String clientId,
 OAuth2SessionToken sessionToken)

Validate that for the provided session token, the associated user's credentials are not considered expired.

Parameters:

userDetails - the user details to validate

clientId - the client ID this session authentication is happening for

sessionToken - the session token received in the request

isSessionTokenFromThirdPartyLogin

protected boolean isSessionTokenFromThirdPartyLogin(OAuth2SessionToken sessionToken)

getUserDetailsService

protected OAuth2UserDetailsService getUserDetailsService()

getUtil

protected StatelessUtil getUtil()

getUserDetailsValidationProperties

protected UserDetailsValidationProperties getUserDetailsValidationProperties()

setUserDetailsValidationProperties

@Autowired
public void setUserDetailsValidationProperties(UserDetailsValidationProperties userDetailsValidationProperties)