org.forgerock.openidconnect

Interface OpenIdConnectTokenStore

All Superinterfaces:

TokenStore

All Known Implementing Classes:

OAuth2GuiceModule.RealmAgnosticStatefulTokenStore, OpenAMTokenStore, StatefulTokenStore

public interface OpenIdConnectTokenStore
extends TokenStore

Interface for a OpenId Connect Token Store which the OpenId Connect Provider will implement.
The OpenId Connect Token Store will be where all OpenId Connect tokens will be stored and later retrieved.

Since:

12.0.0

Field Summary

Fields inherited from interface org.forgerock.oauth2.core.TokenStore

REALM_AGNOSTIC_TOKEN_STORE

Method Summary

Modifier and Type	Method and Description
OpenIdConnectToken	createOpenIDToken(ResourceOwner resourceOwner, String clientId, String authorizationParty, String nonce, String ops, OAuth2Request request) Creates an OpenId Connect token and stores it in the OpenId Connect Provider's store.

Methods inherited from interface org.forgerock.oauth2.core.TokenStore

createAccessToken, createAccessToken, createAuthorizationCode, createDeviceCode, createRefreshToken, createRefreshToken, createRefreshToken, createRefreshToken, createRefreshToken, delete, deleteAccessToken, deleteAuthorizationCode, deleteDeviceCode, deleteRefreshToken, queryForToken, read, readAccessToken, readAuthorizationCode, readDeviceCode, readDeviceCode, readRefreshToken, updateAccessToken, updateAuthorizationCode, updateDeviceCode

Method Detail

createOpenIDToken

OpenIdConnectToken createOpenIDToken(ResourceOwner resourceOwner,
                                     String clientId,
                                     String authorizationParty,
                                     String nonce,
                                     String ops,
                                     OAuth2Request request)
                              throws ServerException,
                                     InvalidClientException,
                                     NotFoundException

Creates an OpenId Connect token and stores it in the OpenId Connect Provider's store.

Parameters:

resourceOwner - The resource owner.

clientId - The client's id.

authorizationParty - The authorization party.

nonce - The nonce.

ops - The ops.

request - The OAuth2 request.

Returns:

An OpenIdConnectToken.

Throws:

ServerException - If any internal server error occurs.

InvalidClientException - If either the request does not contain the client's id or the client fails to be authenticated.

NotFoundException - If the realm does not have an OAuth 2.0 provider service.