Package org.forgerock.openig.filter.oauth2
This package contains the OAuth2 Token validation filter that acts as an OAuth 2 Resource Server.
- It ensure that there is an existing bearer access token in the request's headers.
- It resolves it against a given Authorization Server (that must provide a token-info
endpoint).
- Produced
AccessTokenInfoare cached for future re-use. - Produced
AccessTokenInfoare stored in theAttributesContextfor downstream handlers/filters.
- Produced
- It performs token validation: checking expiration time and required scopes compliance.
-
Class Summary Class Description CacheAccessTokenResolverTypeProvider Provide aTypeDefinitionProviderfor CacheAccessTokenResolver.CaffeineCacheAccessTokenResolver ACaffeineCacheAccessTokenResolveris a delegatingAccessTokenResolverthat uses a write-throughCaffeinecache to enable fastAccessTokenInforesolution.CaffeineCacheAccessTokenResolver.Builder Builder ofCaffeineCacheAccessTokenResolver.CaffeineCacheAccessTokenResolver.Heaplet Creates and initializes anCaffeineCacheAccessTokenResolverin the heap environment.OAuth2ClassAliasResolver Register all the aliases supported by the openig-oauth2 module.OAuth2FailureContext Contextimplementation to hold OAuth2 error details, should a failure occur during OAuth2 scenarios.OAuth2ResourceServerFilterHeaplet Validates aRequestthat contains an OAuth 2.0 access token.OAuth2ResourceServerFilterTypeProvider Provide aTypeDefinitionProviderfor OAuth2ResourceServer.OAuth2TokenExchangeContext Contextsupporting OAuth2 token exchange scenarios, this manages the resulting exchange token.OAuth2TokenExchangeFilter Filtersupporting OAuth2 token exchange scenarios.OAuth2TokenExchangeFilter.Heaplet Creates and initialises anOAuth2TokenExchangeFilterin a heap environment.OpenAmAccessTokenResolverHeaplet Deprecated. in 7.0.RequestFormResourceAccessTypeProvider Provide theRequestFormResourceAccess'sTypeDefinition.ResourceAccessConfigSupport Utility class providingResourceAccessconfiguration support.ResourceAccessTypeDefinitions Class aggregatingResourceAccessTypeDefinitions.ScriptableAccessTokenResolver A Scriptable access token resolver.ScriptableAccessTokenResolver.Heaplet Creates and initializes a scriptable access token resolver in a heap environment.ScriptableResourceAccess A scriptable resource access.ScriptableResourceAccess.Heaplet Creates and initializes a scriptable object in a heap environment.StatelessAccessTokenResolver AStatelessAccessTokenResolverthat locally resolves and validates stateless access_tokens issued by AM.StatelessAccessTokenResolver.Heaplet Creates and initializes a stateless access token resolver in the heap environment.TokenIntrospectionAccessTokenResolverHeaplet Creates and initializes anTokenIntrospectionAccessTokenResolverin a heap environment.TokenIntrospectionAccessTokenResolverTypeDefinitionProvider ProvideTokenIntrospectionAccessTokenResolverHeaplet'sTypeDefinition.