Class OAuth2ResourceOwnerAccessAuthorizeManager

  • All Implemented Interfaces:
    SecurityAuthorizeManager

    public class OAuth2ResourceOwnerAccessAuthorizeManager
    extends AbstractOAuth2AccessAuthorizeManager
    Authorize via principal a resource owner (from SecurityCredentials and creates a SecurityAuthentication object with a bearer token secret.

    Because a pass through of username/password is an anti-pattern in OAuth2, this authorization method should be avoided. However, it may be necessary in some environments to gain access with the ROPC flow.

    Author:
    Aljoscha Rittner
    • Constructor Detail

      • OAuth2ResourceOwnerAccessAuthorizeManager

        public OAuth2ResourceOwnerAccessAuthorizeManager()
    • Method Detail

      • create

        public SecurityAuthentication create​(SecurityCredentials credentials)
        Description copied from interface: SecurityAuthorizeManager
        Creates from the credentials the authentication object to access an endpoint. If the credentials defines a principal (e.g. in OAuth2), the create method should authorize the principal and get the final authentication data to access an endpoint.
        Parameters:
        credentials - the configured credentials
        Returns:
        the authentication object.