Package org.forgerock.openig.fapi.authorization.authorize.validation

Class FapiAuthorizeRequestValidationFilter

java.lang.Object

org.forgerock.openig.fapi.authorization.AbstractFapiAuthorizeRequestValidationFilter

org.forgerock.openig.fapi.authorization.authorize.validation.FapiAuthorizeRequestValidationFilter

All Implemented Interfaces:

Filter

public class FapiAuthorizeRequestValidationFilter
extends AbstractFapiAuthorizeRequestValidationFilter

Validates that a request made to the OAuth2.0 /authorize endpoint is FAPI compliant.

For more details on /authorize requests see: OAuth 2.0 spec

Constructor Summary

Constructors

Constructor	Description
FapiAuthorizeRequestValidationFilter()	Default constructor for FapiAuthorizeRequestValidationFilter.

Method Summary

Modifier and Type	Method	Description
protected void	checkEndpointSpecificClaims(JwtClaimsSet requestJwtClaimSet)	Check specific claim combinations to the request type.
protected AuthorizationRequest	createAuthorizationRequest(Request request)	Create a specific AuthorizationRequest for the endpoint.
Promise<Response,NeverThrowsException>	filter(Context context, Request request, Handler next)	Filters the request and/or response of an exchange.

Methods inherited from class org.forgerock.openig.fapi.authorization.AbstractFapiAuthorizeRequestValidationFilter

errorResponse

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

FapiAuthorizeRequestValidationFilter

public FapiAuthorizeRequestValidationFilter()

Default constructor for FapiAuthorizeRequestValidationFilter.

Method Details

filter

public Promise<Response,NeverThrowsException> filter(Context context,
 Request request,
 Handler next)

Description copied from interface: Filter

Filters the request and/or response of an exchange. To pass the request to the next filter or handler in the chain, the filter calls next.handle(context, request).

This method may elect not to pass the request to the next filter or handler, and instead handle the request itself. It can achieve this by merely avoiding a call to next.handle(context, request) and creating its own response object. The filter is also at liberty to replace a response with another of its own by intercepting the response returned by the next handler.

Specified by:

filter in interface Filter

Overrides:

filter in class AbstractFapiAuthorizeRequestValidationFilter

Parameters:

context - The request context.

request - The request.

next - The next filter or handler in the chain to handle the request.

Returns:

A Promise representing the response to be returned to the client.

createAuthorizationRequest

protected AuthorizationRequest createAuthorizationRequest(Request request)

Description copied from class: AbstractFapiAuthorizeRequestValidationFilter

Create a specific AuthorizationRequest for the endpoint.

Specified by:

createAuthorizationRequest in class AbstractFapiAuthorizeRequestValidationFilter

Parameters:

request - the request to use

Returns:

the AuthorizationRequest created

checkEndpointSpecificClaims

protected void checkEndpointSpecificClaims(JwtClaimsSet requestJwtClaimSet)

Description copied from class: AbstractFapiAuthorizeRequestValidationFilter

Check specific claim combinations to the request type.

Specified by:

checkEndpointSpecificClaims in class AbstractFapiAuthorizeRequestValidationFilter

Parameters:

requestJwtClaimSet - - the claims found in the JAR object of the request