Package org.forgerock.openidconnect

Class OpenIdResourceOwnerConsentVerifier

java.lang.Object

org.forgerock.openidconnect.OpenIdResourceOwnerConsentVerifier

All Implemented Interfaces:

ResourceOwnerConsentVerifier

@Singleton
public class OpenIdResourceOwnerConsentVerifier
extends Object
implements ResourceOwnerConsentVerifier

Verifier for determining whether a resource owner has saved its consent for the authorization grant, taking into account and OpenID Connect prompt parameter.

Since:

12.0.0

Constructor Summary

Constructors

Constructor	Description
OpenIdResourceOwnerConsentVerifier()

Method Summary

Modifier and Type	Method	Description
boolean	verify(boolean consentSaved, OAuth2Request request, ClientRegistration registration)	Determines whether if the resource owner has previously saved consent and whether it should be used.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

OpenIdResourceOwnerConsentVerifier

public OpenIdResourceOwnerConsentVerifier()

Method Detail

verify

public boolean verify(boolean consentSaved,
                      OAuth2Request request,
                      ClientRegistration registration)
               throws ResourceOwnerConsentRequiredException

Determines whether if the resource owner has previously saved consent and whether it should be used.
OpenID Connect prompt parameter can mandate that the resource owner is forced to give consent.

Specified by:

verify in interface ResourceOwnerConsentVerifier

Parameters:

consentSaved - true if the resource owner has previously saved consent.

request - The OAuth2 request.

registration - The client's registration information, used to determine where to error if necessary.

Returns:

true if the resource owner has saved consent and it can be used.

Throws:

ResourceOwnerConsentRequiredException - If the OpenID Connect prompt parameter enforces that the resource owner is not asked for consent, but the resource owners consent has not been previously stored.