| Modifier and Type | Method and Description | 
|---|---|
UserSubject | 
OAuthContext.getClientSubject()
Gets the  
UserSubject representing the client | 
UserSubject | 
AccessTokenValidation.getClientSubject()  | 
UserSubject | 
Client.getResourceOwnerSubject()
Get the  
UserSubject representing the resource owner
 who has registered this client | 
UserSubject | 
Client.getSubject()
Get the  
UserSubject representing this Client
 authentication | 
UserSubject | 
OAuthContext.getSubject()
Gets the  
UserSubject representing the resource owner | 
UserSubject | 
AccessTokenRegistration.getSubject()
Gets the {@link UserSubject) instance capturing
 the information about the end user 
 | 
UserSubject | 
ServerAccessToken.getSubject()
Returns a subject capturing the login name
 the end user used to login to the resource server
 when authorizing a given client request 
 | 
UserSubject | 
AccessTokenValidation.getTokenSubject()  | 
| Modifier and Type | Method and Description | 
|---|---|
void | 
AccessTokenValidation.setClientSubject(UserSubject clientSubject)  | 
void | 
Client.setResourceOwnerSubject(UserSubject resourceOwnerSubject)
Set the  
UserSubject representing the resource owner
 who has registered this client. | 
void | 
Client.setSubject(UserSubject subject)
Set the  
UserSubject representing this Client
 authentication. | 
void | 
AccessTokenRegistration.setSubject(UserSubject subject)
Sets the {@link UserSubject) instance capturing
 the information about the end user 
 | 
void | 
ServerAccessToken.setSubject(UserSubject subject)
Sets a subject capturing the login name
 the end user used to login to the resource server
 when authorizing a given client request 
 | 
void | 
AccessTokenValidation.setTokenSubject(UserSubject tokenSubject)  | 
| Constructor and Description | 
|---|
OAuthContext(UserSubject resourceOwnerSubject,
            UserSubject clientSubject,
            List<OAuthPermission> perms,
            String tokenGrantType)  | 
UserSubject(UserSubject sub)  | 
| Modifier and Type | Method and Description | 
|---|---|
protected ServerAccessToken | 
AbstractGrantHandler.doCreateAccessToken(Client client,
                   UserSubject subject,
                   List<String> requestedScopes)  | 
protected ServerAccessToken | 
AbstractGrantHandler.doCreateAccessToken(Client client,
                   UserSubject subject,
                   List<String> requestedScopes,
                   List<String> audiences)  | 
protected ServerAccessToken | 
AbstractGrantHandler.doCreateAccessToken(Client client,
                   UserSubject subject,
                   javax.ws.rs.core.MultivaluedMap<String,String> params)  | 
protected ServerAccessToken | 
AbstractGrantHandler.doCreateAccessToken(Client client,
                   UserSubject subject,
                   String requestedGrant,
                   List<String> requestedScopes)  | 
protected ServerAccessToken | 
AbstractGrantHandler.doCreateAccessToken(Client client,
                   UserSubject subject,
                   String requestedGrant,
                   List<String> requestedScopes,
                   List<String> audiences)  | 
protected List<String> | 
AbstractGrantHandler.getApprovedScopes(Client client,
                 UserSubject subject,
                 List<String> requestedScopes)  | 
protected ServerAccessToken | 
AbstractGrantHandler.getPreAuthorizedToken(Client client,
                     UserSubject subject,
                     String requestedGrant,
                     List<String> requestedScopes,
                     List<String> audiences)  | 
| Modifier and Type | Method and Description | 
|---|---|
UserSubject | 
ServerAuthorizationCodeGrant.getSubject()
Gets the user subject representing the end user 
 | 
UserSubject | 
AuthorizationCodeRegistration.getSubject()
Gets the user subject representing the end user 
 | 
| Modifier and Type | Method and Description | 
|---|---|
List<ServerAuthorizationCodeGrant> | 
AuthorizationCodeDataProvider.getCodeGrants(Client client,
             UserSubject subject)
Return the list of code grants associated with a given client 
 | 
List<ServerAuthorizationCodeGrant> | 
JPACodeDataProvider.getCodeGrants(Client c,
             UserSubject subject)  | 
List<ServerAuthorizationCodeGrant> | 
JCacheCodeDataProvider.getCodeGrants(Client c,
             UserSubject sub)  | 
List<ServerAuthorizationCodeGrant> | 
DefaultEncryptingCodeDataProvider.getCodeGrants(Client c,
             UserSubject sub)  | 
protected javax.persistence.TypedQuery<ServerAuthorizationCodeGrant> | 
JPACodeDataProvider.getCodesQuery(Client c,
             UserSubject resourceOwnerSubject,
             javax.persistence.EntityManager em)  | 
static boolean | 
AbstractCodeDataProvider.isCodeMatched(ServerAuthorizationCodeGrant grant,
             Client c,
             UserSubject sub)  | 
javax.ws.rs.core.MultivaluedMap<String,String> | 
JwtRequestCodeFilter.process(javax.ws.rs.core.MultivaluedMap<String,String> params,
       UserSubject endUser,
       Client client)  | 
void | 
ServerAuthorizationCodeGrant.setSubject(UserSubject subject)
Sets the user subject representing the end user 
 | 
void | 
AuthorizationCodeRegistration.setSubject(UserSubject subject)
Sets the user subject representing the end user 
 | 
| Modifier and Type | Class and Description | 
|---|---|
class  | 
JwtUserSubject  | 
| Modifier and Type | Method and Description | 
|---|---|
UserSubject | 
ResourceOwnerLoginHandler.createSubject(Client client,
             String name,
             String password)
Create a  
UserSubject for the name and password parameters, or return null if the name and password
 are invalid. | 
UserSubject | 
JAASResourceOwnerLoginHandler.createSubject(Client client,
             String name,
             String password)  | 
| Modifier and Type | Class and Description | 
|---|---|
class  | 
SamlUserSubject  | 
| Modifier and Type | Method and Description | 
|---|---|
protected UserSubject | 
Saml2BearerGrantHandler.getGrantSubject(Message message,
               org.apache.wss4j.common.saml.SamlAssertionWrapper wrapper)  | 
| Modifier and Type | Method and Description | 
|---|---|
UserSubject | 
DefaultSubjectCreator.createUserSubject(MessageContext mc,
                 javax.ws.rs.core.MultivaluedMap<String,String> params)  | 
UserSubject | 
SubjectCreator.createUserSubject(MessageContext mc,
                 javax.ws.rs.core.MultivaluedMap<String,String> params)
Create a  
UserSubject | 
| Modifier and Type | Method and Description | 
|---|---|
protected ServerAccessToken | 
AbstractOAuthDataProvider.createNewAccessToken(Client client,
                    UserSubject userSub)  | 
String | 
SessionAuthenticityTokenProvider.createSessionToken(MessageContext mc,
                  javax.ws.rs.core.MultivaluedMap<String,String> params,
                  UserSubject subject,
                  OAuthRedirectionState secData)
Create a new session token and stores it 
 | 
String | 
JoseSessionTokenProvider.createSessionToken(MessageContext mc,
                  javax.ws.rs.core.MultivaluedMap<String,String> params,
                  UserSubject subject,
                  OAuthRedirectionState secData)  | 
List<ServerAccessToken> | 
DefaultEncryptingOAuthDataProvider.getAccessTokens(Client c,
               UserSubject sub)  | 
List<ServerAccessToken> | 
JPAOAuthDataProvider.getAccessTokens(Client c,
               UserSubject sub)  | 
List<ServerAccessToken> | 
JCacheOAuthDataProvider.getAccessTokens(Client c,
               UserSubject sub)  | 
List<ServerAccessToken> | 
OAuthDataProvider.getAccessTokens(Client client,
               UserSubject subject)
Return all access tokens associated with a given client 
 | 
List<Client> | 
DefaultEncryptingOAuthDataProvider.getClients(UserSubject resourceOwner)  | 
List<Client> | 
JPAOAuthDataProvider.getClients(UserSubject resourceOwner)  | 
List<Client> | 
JCacheOAuthDataProvider.getClients(UserSubject resourceOwner)  | 
List<Client> | 
ClientRegistrationProvider.getClients(UserSubject resourceOwner)
Get a list of clients registered by a resource owner. 
 | 
protected javax.persistence.TypedQuery<Client> | 
JPAOAuthDataProvider.getClientsQuery(UserSubject resourceOwnerSubject,
               javax.persistence.EntityManager entityManager)  | 
protected List<ServerAccessToken> | 
JCacheOAuthDataProvider.getJwtAccessTokens(Client client,
                  UserSubject sub)  | 
String | 
DefaultResourceOwnerNameProvider.getName(UserSubject subject)  | 
String | 
ResourceOwnerNameProvider.getName(UserSubject subject)  | 
ServerAccessToken | 
AbstractOAuthDataProvider.getPreauthorizedToken(Client client,
                     List<String> requestedScopes,
                     UserSubject sub,
                     String grantType)  | 
ServerAccessToken | 
OAuthDataProvider.getPreauthorizedToken(Client client,
                     List<String> requestedScopes,
                     UserSubject subject,
                     String grantType)
Get preauthorized access token 
 | 
List<RefreshToken> | 
DefaultEncryptingOAuthDataProvider.getRefreshTokens(Client c,
                UserSubject sub)  | 
List<RefreshToken> | 
JPAOAuthDataProvider.getRefreshTokens(Client c,
                UserSubject sub)  | 
List<RefreshToken> | 
JCacheOAuthDataProvider.getRefreshTokens(Client c,
                UserSubject sub)  | 
List<RefreshToken> | 
OAuthDataProvider.getRefreshTokens(Client client,
                UserSubject subject)
Return all refresh tokens associated with a given client 
 | 
protected javax.persistence.TypedQuery<RefreshToken> | 
JPAOAuthDataProvider.getRefreshTokensQuery(Client c,
                     UserSubject resourceOwnerSubject,
                     javax.persistence.EntityManager entityManager)  | 
OAuthRedirectionState | 
SessionAuthenticityTokenProvider.getSessionState(MessageContext messageContext,
               String sessionToken,
               UserSubject subject)
Expand the session token 
 | 
OAuthRedirectionState | 
JoseSessionTokenProvider.getSessionState(MessageContext messageContext,
               String sessionToken,
               UserSubject subject)  | 
String | 
SessionAuthenticityTokenProvider.getSessionToken(MessageContext mc,
               javax.ws.rs.core.MultivaluedMap<String,String> params,
               UserSubject subject)
Retrieve the stored session token 
 | 
String | 
JoseSessionTokenProvider.getSessionToken(MessageContext mc,
               javax.ws.rs.core.MultivaluedMap<String,String> params,
               UserSubject subject)  | 
protected static <K,V extends ServerAccessToken> | 
JCacheOAuthDataProvider.getTokens(javax.cache.Cache<K,V> cache,
         Client client,
         UserSubject sub)  | 
protected javax.persistence.TypedQuery<BearerAccessToken> | 
JPAOAuthDataProvider.getTokensQuery(Client c,
              UserSubject resourceOwnerSubject,
              javax.persistence.EntityManager entityManager)  | 
protected static boolean | 
AbstractOAuthDataProvider.isClientMatched(Client c,
               UserSubject resourceOwner)  | 
protected static boolean | 
AbstractOAuthDataProvider.isTokenMatched(ServerAccessToken token,
              Client c,
              UserSubject sub)  | 
String | 
AuthorizationCodeResponseFilter.process(Client client,
       String code,
       UserSubject endUser)  | 
javax.ws.rs.core.MultivaluedMap<String,String> | 
AuthorizationRequestFilter.process(javax.ws.rs.core.MultivaluedMap<String,String> params,
       UserSubject endUser,
       Client client)  | 
String | 
SessionAuthenticityTokenProvider.removeSessionToken(MessageContext mc,
                  javax.ws.rs.core.MultivaluedMap<String,String> params,
                  UserSubject subject)
Remove the stored session token 
 | 
String | 
JoseSessionTokenProvider.removeSessionToken(MessageContext mc,
                  javax.ws.rs.core.MultivaluedMap<String,String> params,
                  UserSubject subject)  | 
| Modifier and Type | Method and Description | 
|---|---|
protected UserSubject | 
RedirectionBasedGrantService.createUserSubject(SecurityContext securityContext,
                 javax.ws.rs.core.MultivaluedMap<String,String> params)  | 
protected UserSubject | 
DirectAuthorizationService.createUserSubject(SecurityContext securityContext,
                 javax.ws.rs.core.MultivaluedMap<String,String> params)  | 
| Modifier and Type | Method and Description | 
|---|---|
protected boolean | 
RedirectionBasedGrantService.canAuthorizationBeSkipped(javax.ws.rs.core.MultivaluedMap<String,String> params,
                         Client client,
                         UserSubject userSubject,
                         List<String> requestedScope,
                         List<OAuthPermission> permissions)  | 
protected OAuthAuthorizationData | 
RedirectionBasedGrantService.createAuthorizationData(Client client,
                       javax.ws.rs.core.MultivaluedMap<String,String> params,
                       String redirectUri,
                       UserSubject subject,
                       List<OAuthPermission> requestedPerms,
                       List<OAuthPermission> alreadyAuthorizedPerms,
                       boolean authorizationCanBeSkipped)
Create the authorization challenge data 
 | 
protected OAuthAuthorizationData | 
ImplicitGrantService.createAuthorizationData(Client client,
                       javax.ws.rs.core.MultivaluedMap<String,String> params,
                       String redirectUri,
                       UserSubject subject,
                       List<OAuthPermission> requestedPerms,
                       List<OAuthPermission> alreadyAuthorizedPerms,
                       boolean authorizationCanBeSkipped)  | 
protected AuthorizationCodeRegistration | 
AuthorizationCodeGrantService.createCodeRegistration(OAuthRedirectionState state,
                      Client client,
                      List<String> requestedScope,
                      List<String> approvedScope,
                      UserSubject userSubject,
                      ServerAccessToken preauthorizedToken)  | 
protected javax.ws.rs.core.Response | 
AbstractImplicitGrantService.createGrant(OAuthRedirectionState state,
           Client client,
           List<String> requestedScope,
           List<String> approvedScope,
           UserSubject userSubject,
           ServerAccessToken preAuthorizedToken)  | 
protected javax.ws.rs.core.Response | 
AuthorizationCodeGrantService.createGrant(OAuthRedirectionState state,
           Client client,
           List<String> requestedScope,
           List<String> approvedScope,
           UserSubject userSubject,
           ServerAccessToken preauthorizedToken)  | 
protected abstract javax.ws.rs.core.Response | 
RedirectionBasedGrantService.createGrant(OAuthRedirectionState state,
           Client client,
           List<String> requestedScope,
           List<String> approvedScope,
           UserSubject userSubject,
           ServerAccessToken preAuthorizedToken)  | 
protected AccessTokenRegistration | 
AbstractImplicitGrantService.createTokenRegistration(OAuthRedirectionState state,
                       Client client,
                       List<String> requestedScope,
                       List<String> approvedScope,
                       UserSubject userSubject)  | 
protected ClientAccessToken | 
AbstractImplicitGrantService.getClientAccessToken(OAuthRedirectionState state,
                    Client client,
                    List<String> requestedScope,
                    List<String> approvedScope,
                    UserSubject userSubject,
                    ServerAccessToken preAuthorizedToken)  | 
ServerAuthorizationCodeGrant | 
AuthorizationCodeGrantService.getGrantRepresentation(OAuthRedirectionState state,
                      Client client,
                      List<String> requestedScope,
                      List<String> approvedScope,
                      UserSubject userSubject,
                      ServerAccessToken preauthorizedToken)  | 
protected boolean | 
RedirectionBasedGrantService.noConsentForRequestedScopes(javax.ws.rs.core.MultivaluedMap<String,String> params,
                           Client client,
                           UserSubject userSubject,
                           List<String> requestedScope,
                           List<OAuthPermission> permissions)  | 
protected void | 
RedirectionBasedGrantService.personalizeData(OAuthAuthorizationData data,
               UserSubject userSubject)  | 
protected AbstractFormImplicitResponse | 
AbstractImplicitGrantService.prepareFormResponse(OAuthRedirectionState state,
                   Client client,
                   List<String> requestedScope,
                   List<String> approvedScope,
                   UserSubject userSubject,
                   ServerAccessToken preAuthorizedToken)  | 
protected StringBuilder | 
AbstractImplicitGrantService.prepareRedirectResponse(OAuthRedirectionState state,
                       Client client,
                       List<String> requestedScope,
                       List<String> approvedScope,
                       UserSubject userSubject,
                       ServerAccessToken preAuthorizedToken)  | 
protected String | 
AuthorizationCodeGrantService.processCodeGrant(Client client,
                String code,
                UserSubject endUser)  | 
protected OAuthRedirectionState | 
RedirectionBasedGrantService.recreateRedirectionStateFromSession(UserSubject subject,
                                   String sessionToken)  | 
protected javax.ws.rs.core.Response | 
RedirectionBasedGrantService.startAuthorization(javax.ws.rs.core.MultivaluedMap<String,String> params,
                  UserSubject userSubject,
                  Client client,
                  String redirectUri)  | 
| Modifier and Type | Method and Description | 
|---|---|
static UserSubject | 
OAuthUtils.createSubject(MessageContext mc,
             SecurityContext sc)  | 
static UserSubject | 
OAuthUtils.createSubject(SecurityContext securityContext)  | 
| Modifier and Type | Class and Description | 
|---|---|
class  | 
OidcUserSubject  | 
| Modifier and Type | Method and Description | 
|---|---|
protected boolean | 
OidcAuthorizationCodeService.canAuthorizationBeSkipped(javax.ws.rs.core.MultivaluedMap<String,String> params,
                         Client client,
                         UserSubject userSubject,
                         List<String> requestedScope,
                         List<OAuthPermission> permissions)  | 
protected boolean | 
OidcImplicitService.canAuthorizationBeSkipped(javax.ws.rs.core.MultivaluedMap<String,String> params,
                         Client client,
                         UserSubject userSubject,
                         List<String> requestedScope,
                         List<OAuthPermission> permissions)  | 
IdToken | 
IdTokenProvider.getIdToken(String clientId,
          UserSubject authenticatedUser,
          List<String> scopes)  | 
UserInfo | 
UserInfoProvider.getUserInfo(String clientId,
           UserSubject authenticatedUser,
           List<String> scopes)  | 
protected AbstractFormImplicitResponse | 
OidcHybridService.prepareFormResponse(OAuthRedirectionState state,
                   Client client,
                   List<String> requestedScope,
                   List<String> approvedScope,
                   UserSubject userSubject,
                   ServerAccessToken preAuthorizedToken)  | 
protected AbstractFormImplicitResponse | 
OidcImplicitService.prepareFormResponse(OAuthRedirectionState state,
                   Client client,
                   List<String> requestedScope,
                   List<String> approvedScope,
                   UserSubject userSubject,
                   ServerAccessToken preAuthorizedToken)  | 
protected ServerAuthorizationCodeGrant | 
OidcHybridService.prepareHybrideCode(OAuthRedirectionState state,
                  Client client,
                  List<String> requestedScope,
                  List<String> approvedScope,
                  UserSubject userSubject,
                  ServerAccessToken preAuthorizedToken)  | 
protected StringBuilder | 
OidcHybridService.prepareRedirectResponse(OAuthRedirectionState state,
                       Client client,
                       List<String> requestedScope,
                       List<String> approvedScope,
                       UserSubject userSubject,
                       ServerAccessToken preAuthorizedToken)  | 
protected StringBuilder | 
OidcImplicitService.prepareRedirectResponse(OAuthRedirectionState state,
                       Client client,
                       List<String> requestedScope,
                       List<String> approvedScope,
                       UserSubject userSubject,
                       ServerAccessToken preAuthorizedToken)  | 
protected javax.ws.rs.core.Response | 
OidcAuthorizationCodeService.startAuthorization(javax.ws.rs.core.MultivaluedMap<String,String> params,
                  UserSubject userSubject,
                  Client client,
                  String redirectUri)  | 
protected javax.ws.rs.core.Response | 
OidcImplicitService.startAuthorization(javax.ws.rs.core.MultivaluedMap<String,String> params,
                  UserSubject userSubject,
                  Client client,
                  String redirectUri)  | 
| Constructor and Description | 
|---|
OidcUserSubject(UserSubject sub)  | 
Apache CXF