Package org.forgerock.openig.uma
Class UmaResourceServerFilter
- java.lang.Object
-
- org.forgerock.openig.uma.UmaResourceServerFilter
-
- All Implemented Interfaces:
Filter
public class UmaResourceServerFilter extends Object implements Filter
AnUmaResourceServerFilter
implements a PEP (Policy Enforcement Point) and is responsible to ensure the incoming requests (from requesting parties) all have a valid RPT (Request Party Token) with the required set of scopes.{ "type": "UmaFilter", "config": { "protectionApiHandler": "HttpsClient", "umaService": "UmaService" } }
-
-
Nested Class Summary
Nested Classes Modifier and Type Class Description static class
UmaResourceServerFilter.Heaplet
Creates and initializes an UMA resource server filter in a heap environment.
-
Constructor Summary
Constructors Constructor Description UmaResourceServerFilter(UmaSharingService umaService, Handler protectionApiHandler, String realm)
Constructs a new UmaResourceServerFilter.
-
Method Summary
All Methods Instance Methods Concrete Methods Modifier and Type Method Description Promise<Response,NeverThrowsException>
filter(Context context, Request request, Handler next)
Filters the request and/or response of an exchange.
-
-
-
Constructor Detail
-
UmaResourceServerFilter
public UmaResourceServerFilter(UmaSharingService umaService, Handler protectionApiHandler, String realm)
Constructs a new UmaResourceServerFilter.- Parameters:
umaService
- core service to useprotectionApiHandler
- protectionApiHandler to use when interacting with introspection and permission request endpointsrealm
- UMA realm name (can benull
)
-
-
Method Detail
-
filter
public Promise<Response,NeverThrowsException> filter(Context context, Request request, Handler next)
Description copied from interface:Filter
Filters the request and/or response of an exchange. To pass the request to the next filter or handler in the chain, the filter callsnext.handle(context, request)
.This method may elect not to pass the request to the next filter or handler, and instead handle the request itself. It can achieve this by merely avoiding a call to
next.handle(context, request)
and creating its own response object. The filter is also at liberty to replace a response with another of its own by intercepting the response returned by the next handler.
-
-