org.springframework.security.oauth2.server.resource.web

Class DefaultBearerTokenResolver

java.lang.Object

org.springframework.security.oauth2.server.resource.web.DefaultBearerTokenResolver

All Implemented Interfaces:

BearerTokenResolver

public final class DefaultBearerTokenResolver
extends java.lang.Object
implements BearerTokenResolver

The default BearerTokenResolver implementation based on RFC 6750.

Since:

5.1

See Also:

RFC 6750 Section 2: Authenticated Requests

Constructor Summary

Constructors

Constructor and Description
DefaultBearerTokenResolver()

Method Summary

Modifier and Type	Method and Description
java.lang.String	resolve(javax.servlet.http.HttpServletRequest request) Resolve any Bearer Token value from the request.
void	setAllowFormEncodedBodyParameter(boolean allowFormEncodedBodyParameter) Set if transport of access token using form-encoded body parameter is supported.
void	setAllowUriQueryParameter(boolean allowUriQueryParameter) Set if transport of access token using URI query parameter is supported.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

DefaultBearerTokenResolver

public DefaultBearerTokenResolver()

Method Detail

resolve

public java.lang.String resolve(javax.servlet.http.HttpServletRequest request)

Resolve any Bearer Token value from the request.

Specified by:

resolve in interface BearerTokenResolver

Parameters:

request - the request

Returns:

the Bearer Token value or null if none found

setAllowFormEncodedBodyParameter

public void setAllowFormEncodedBodyParameter(boolean allowFormEncodedBodyParameter)

Set if transport of access token using form-encoded body parameter is supported. Defaults to false.

Parameters:

allowFormEncodedBodyParameter - if the form-encoded body parameter is supported

setAllowUriQueryParameter

public void setAllowUriQueryParameter(boolean allowUriQueryParameter)

Set if transport of access token using URI query parameter is supported. Defaults to false. The spec recommends against using this mechanism for sending bearer tokens, and even goes as far as stating that it was only included for completeness.

Parameters:

allowUriQueryParameter - if the URI query parameter is supported