org.apache.cxf.rs.security.oauth2.services
Class AbstractOAuthService

java.lang.Object
  org.apache.cxf.rs.security.oauth2.services.AbstractOAuthService

Direct Known Subclasses:

AccessTokenService, RedirectionBasedGrantService

public abstract class AbstractOAuthService
extends Object

Abstract OAuth service

AbstractOAuthService

public AbstractOAuthService()

setMessageContext

@Context
public void setMessageContext(MessageContext context)

getMessageContext

public MessageContext getMessageContext()

setDataProvider

public void setDataProvider(OAuthDataProvider dataProvider)

getDataProvider

public OAuthDataProvider getDataProvider()

getQueryParameters

protected javax.ws.rs.core.MultivaluedMap<String,String> getQueryParameters()

getClient

protected Client getClient(javax.ws.rs.core.MultivaluedMap<String,String> params)

getClient

protected Client getClient(String clientId)

Get the Client reference

Parameters:

clientId - the provided client id

Returns:

Client the client reference

Throws:

javax.ws.rs.WebApplicationException - if no matching Client is found, the error is returned directly to the end user without following the redirect URI if any

checkTransportSecurity

protected void checkTransportSecurity()

HTTPS is the default transport for OAuth 2.0 services. By default this method will issue a warning for open endpoints

reportInvalidRequestError

protected void reportInvalidRequestError(String errorDescription)

setBlockUnsecureRequests

public void setBlockUnsecureRequests(boolean blockUnsecureRequests)

HTTPS is the default transport for OAuth 2.0 services, this property can be used to block all the requests issued over HTTP

Parameters:

blockUnsecureRequests - if set to true then HTTP requests will be blocked