Package org.forgerock.openig.filter.oauth2
This package contains the OAuth2 Token validation filter that acts as an OAuth 2 Resource Server.
- It ensure that there is an existing bearer access token in the request's headers.
- It resolves it against a given Authorization Server (that must provide a token-info
endpoint).
- Produced
AccessTokenInfoare cached for future re-use. - Produced
AccessTokenInfoare stored in theAttributesContextfor downstream handlers/filters.
- Produced
- It performs token validation: checking expiration time and required scopes compliance.
-
Class Summary Class Description OAuth2ClassAliasResolver Register all the aliases supported by the openig-oauth2 module.OAuth2ResourceServerFilterHeaplet Validates aRequestthat contains an OAuth 2.0 access token.ScriptableAccessTokenResolver A Scriptable access token resolver.ScriptableAccessTokenResolver.Heaplet Creates and initializes a scriptable access token resolver in a heap environment.