org.forgerock.oauth2.core

Class AuthorizationTokenIssuer

java.lang.Object

org.forgerock.oauth2.core.AuthorizationTokenIssuer

@Singleton
public class AuthorizationTokenIssuer
extends Object

Issues Authorization Tokens requested by OAuth2 authorize requests.

Since:

12.0.0

Constructor Summary

Constructors

Constructor and Description
AuthorizationTokenIssuer(OAuth2UrisFactory urisFactory)

Method Summary

Modifier and Type	Method and Description
AuthorizationToken	issueTokens(OAuth2Request request, ClientRegistration clientRegistration, ResourceOwner resourceOwner, Set<String> authorizationScope, OAuth2ProviderSettings providerSettings) Issues tokens for the OAuth2 authorize request.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AuthorizationTokenIssuer

@Inject
public AuthorizationTokenIssuer(OAuth2UrisFactory urisFactory)

Method Detail

issueTokens

public AuthorizationToken issueTokens(OAuth2Request request,
                                      ClientRegistration clientRegistration,
                                      ResourceOwner resourceOwner,
                                      Set<String> authorizationScope,
                                      OAuth2ProviderSettings providerSettings)
                               throws InvalidClientException,
                                      UnsupportedResponseTypeException,
                                      ServerException,
                                      InvalidScopeException,
                                      NotFoundException

Issues tokens for the OAuth2 authorize request.

Parameters:

request - The OAuth2 request.

clientRegistration - The client's registration.

resourceOwner - The resource owner.

authorizationScope - The authorization scope.

providerSettings - An instance of the OAuth2ProviderSettings.

Returns:

An AuthorizationToken.

Throws:

InvalidClientException - If either the request does not contain the client's id or the client fails to be authenticated.

UnsupportedResponseTypeException - If the requested response type is not supported by either the client or the OAuth2 provider.

ServerException - If any internal server error occurs.

InvalidScopeException - If the requested scope is invalid, unknown, or malformed.

NotFoundException - If the realm does not have an OAuth 2.0 provider service.