Package org.forgerock.http.oauth2.resolver

Class TokenIntrospectionAccessTokenResolver

java.lang.Object

org.forgerock.http.oauth2.resolver.TokenIntrospectionAccessTokenResolver

All Implemented Interfaces:

AccessTokenResolver

public final class TokenIntrospectionAccessTokenResolver
extends Object
implements AccessTokenResolver

An AccessTokenResolver which is RFC 7662 compliant. It will resolve the access token by calling the token introspection endpoint.

See Also:

RFC-7662

Constructor Summary

Constructors

Constructor	Description
TokenIntrospectionAccessTokenResolver(Handler client, URI introspectionEndpointUri)	Creates a new TokenIntrospectionAccessTokenResolver.

Method Summary

Modifier and Type	Method	Description
Promise<AccessTokenInfo,AccessTokenException>	resolve(Context context, Supplier<Request,IOException> request, String token)	Resolves a given access token against an authorization server.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.forgerock.http.oauth2.AccessTokenResolver

resolve

Constructor Detail

TokenIntrospectionAccessTokenResolver

public TokenIntrospectionAccessTokenResolver(Handler client,
                                             URI introspectionEndpointUri)

Creates a new TokenIntrospectionAccessTokenResolver.

Parameters:

client - the handler to use to resolve the access token.

introspectionEndpointUri - the URI to use to resolve the access token.

Method Detail

resolve

public Promise<AccessTokenInfo,AccessTokenException> resolve(Context context,
                                                                   Supplier<Request,IOException> request,
                                                                   String token)

Description copied from interface: AccessTokenResolver

Resolves a given access token against an authorization server.

Specified by:

resolve in interface AccessTokenResolver

Parameters:

context - Context chain used to keep a relationship between requests (tracking)

request - a supplier for the HTTP request the access token was presented on. The request should be defensively copied by the caller in case the resolver needs to consume the entity.

token - token identifier to be resolved

Returns:

a promise completed either with a valid AccessTokenInfo (well-formed, known by the server), or by an exception