org.apache.shindig.social.core.oauth2

Class OAuth2AuthenticationHandler

java.lang.Object

org.apache.shindig.social.core.oauth2.OAuth2AuthenticationHandler

All Implemented Interfaces:

AuthenticationHandler

public class OAuth2AuthenticationHandler
extends Object
implements AuthenticationHandler

Authentication handler for OAuth 2.0. Authenticates requests for resources using one of the OAuth 2.0 flows.

Nested Class Summary

Nested classes/interfaces inherited from interface org.apache.shindig.auth.AuthenticationHandler

AuthenticationHandler.InvalidAuthenticationException

Field Summary

Fields inherited from interface org.apache.shindig.auth.AuthenticationHandler

STASHED_BODY

Constructor Summary

Constructors

Constructor and Description
OAuth2AuthenticationHandler(OAuth2Service store)

Method Summary

Methods

Modifier and Type	Method and Description
protected SecurityToken	createSecurityTokenForValidatedRequest(OAuth2NormalizedRequest request) Return a security token for the request.
String	getName()
SecurityToken	getSecurityTokenFromRequest(javax.servlet.http.HttpServletRequest request) Only denies authentication when an invalid bearer token is received.
String	getWWWAuthenticateHeader(String realm)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

OAuth2AuthenticationHandler

@Inject
public OAuth2AuthenticationHandler(OAuth2Service store)

Method Detail

getName

public String getName()

Specified by:

getName in interface AuthenticationHandler

getSecurityTokenFromRequest

public SecurityToken getSecurityTokenFromRequest(javax.servlet.http.HttpServletRequest request)
                                          throws AuthenticationHandler.InvalidAuthenticationException

Only denies authentication when an invalid bearer token is received. Unauthenticated requests can pass through to other AuthenticationHandlers.

Specified by:

getSecurityTokenFromRequest in interface AuthenticationHandler

Throws:

AuthenticationHandler.InvalidAuthenticationException

getWWWAuthenticateHeader

public String getWWWAuthenticateHeader(String realm)

Specified by:

getWWWAuthenticateHeader in interface AuthenticationHandler

createSecurityTokenForValidatedRequest

protected SecurityToken createSecurityTokenForValidatedRequest(OAuth2NormalizedRequest request)
                                                        throws AuthenticationHandler.InvalidAuthenticationException

Return a security token for the request. The request was validated against the OAuth2Service.

Parameters:

request -

Returns:

the security token for the request

Throws:

InvalidAuthenticationException - if the token can not be created

AuthenticationHandler.InvalidAuthenticationException