Class UmaResourceServerFilter

  • All Implemented Interfaces:
    org.forgerock.http.Filter

    public class UmaResourceServerFilter
    extends Object
    implements org.forgerock.http.Filter
    An UmaResourceServerFilter implements a PEP (Policy Enforcement Point) and is responsible to ensure the incoming requests (from requesting parties) all have a valid RPT (Request Party Token) with the required set of scopes.
         {
             "type": "UmaFilter",
             "config": {
               "protectionApiHandler": "HttpsClient",
               "umaService": "UmaService"
             }
           }
         
     
    • Constructor Detail

      • UmaResourceServerFilter

        public UmaResourceServerFilter​(UmaSharingService umaService,
                                       org.forgerock.http.Handler protectionApiHandler,
                                       String realm)
        Constructs a new UmaResourceServerFilter.
        Parameters:
        umaService - core service to use
        protectionApiHandler - protectionApiHandler to use when interacting with introspection and permission request endpoints
        realm - UMA realm name (can be null)
    • Method Detail

      • filter

        public org.forgerock.util.promise.Promise<org.forgerock.http.protocol.Response,​org.forgerock.util.promise.NeverThrowsException> filter​(org.forgerock.services.context.Context context,
                                                                                                                                                     org.forgerock.http.protocol.Request request,
                                                                                                                                                     org.forgerock.http.Handler next)
        Specified by:
        filter in interface org.forgerock.http.Filter