Updated to use AuthorizationRequestFactory rather than ClientCredentialsChecker.
parent
51fe98b383
commit
2070d2e413
|
@ -36,7 +36,7 @@ import org.springframework.security.oauth2.common.exceptions.InvalidGrantExcepti
|
||||||
import org.springframework.security.oauth2.common.exceptions.OAuth2Exception;
|
import org.springframework.security.oauth2.common.exceptions.OAuth2Exception;
|
||||||
import org.springframework.security.oauth2.common.exceptions.RedirectMismatchException;
|
import org.springframework.security.oauth2.common.exceptions.RedirectMismatchException;
|
||||||
import org.springframework.security.oauth2.provider.AuthorizationRequest;
|
import org.springframework.security.oauth2.provider.AuthorizationRequest;
|
||||||
import org.springframework.security.oauth2.provider.ClientCredentialsChecker;
|
import org.springframework.security.oauth2.provider.AuthorizationRequestFactory;
|
||||||
import org.springframework.security.oauth2.provider.ClientDetailsService;
|
import org.springframework.security.oauth2.provider.ClientDetailsService;
|
||||||
import org.springframework.security.oauth2.provider.OAuth2Authentication;
|
import org.springframework.security.oauth2.provider.OAuth2Authentication;
|
||||||
import org.springframework.security.oauth2.provider.TokenGranter;
|
import org.springframework.security.oauth2.provider.TokenGranter;
|
||||||
|
@ -65,7 +65,7 @@ public class ConnectAuthCodeTokenGranter implements TokenGranter {
|
||||||
private AuthorizationCodeServices authorizationCodeServices;
|
private AuthorizationCodeServices authorizationCodeServices;
|
||||||
|
|
||||||
@Autowired
|
@Autowired
|
||||||
private ClientCredentialsChecker clientCredentialsChecker;
|
private AuthorizationRequestFactory authorizationRequestFactory;
|
||||||
|
|
||||||
@Autowired
|
@Autowired
|
||||||
private ConfigurationPropertiesBean configBean;
|
private ConfigurationPropertiesBean configBean;
|
||||||
|
@ -96,14 +96,13 @@ public class ConnectAuthCodeTokenGranter implements TokenGranter {
|
||||||
public ConnectAuthCodeTokenGranter(
|
public ConnectAuthCodeTokenGranter(
|
||||||
DefaultOAuth2ProviderTokenService tokenServices,
|
DefaultOAuth2ProviderTokenService tokenServices,
|
||||||
AuthorizationCodeServices authorizationCodeServices,
|
AuthorizationCodeServices authorizationCodeServices,
|
||||||
ClientDetailsService clientDetailsService) {
|
ClientDetailsService clientDetailsService, AuthorizationRequestFactory authorizationRequestFactory) {
|
||||||
|
|
||||||
setTokenServices(tokenServices);
|
setTokenServices(tokenServices);
|
||||||
setAuthorizationCodeServices(authorizationCodeServices);
|
setAuthorizationCodeServices(authorizationCodeServices);
|
||||||
setClientCredentialsChecker(new ClientCredentialsChecker(clientDetailsService));
|
setAuthorizationRequestFactory(authorizationRequestFactory);
|
||||||
|
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* Grant an OpenID Connect Access Token
|
* Grant an OpenID Connect Access Token
|
||||||
|
@ -149,8 +148,8 @@ public class ConnectAuthCodeTokenGranter implements TokenGranter {
|
||||||
// in the new request, but that happens elsewhere.
|
// in the new request, but that happens elsewhere.
|
||||||
|
|
||||||
//Validate credentials
|
//Validate credentials
|
||||||
AuthorizationRequest authorizationRequest = clientCredentialsChecker.validateCredentials(grantType, clientId,
|
AuthorizationRequest authorizationRequest = authorizationRequestFactory.createAuthorizationRequest(parameters, clientId,
|
||||||
unconfirmedAuthorizationRequest.getScope());
|
grantType, unconfirmedAuthorizationRequest.getScope());
|
||||||
if (authorizationRequest == null) {
|
if (authorizationRequest == null) {
|
||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
@ -185,7 +184,7 @@ public class ConnectAuthCodeTokenGranter implements TokenGranter {
|
||||||
idToken.getClaims().setIssuer(configBean.getIssuer());
|
idToken.getClaims().setIssuer(configBean.getIssuer());
|
||||||
|
|
||||||
|
|
||||||
String nonce = unconfirmedAuthorizationRequest.getParameters().get("nonce");
|
String nonce = unconfirmedAuthorizationRequest.getAuthorizationParameters().get("nonce");
|
||||||
if (!Strings.isNullOrEmpty(nonce)) {
|
if (!Strings.isNullOrEmpty(nonce)) {
|
||||||
idToken.getClaims().setNonce(nonce);
|
idToken.getClaims().setNonce(nonce);
|
||||||
}
|
}
|
||||||
|
@ -218,18 +217,12 @@ public class ConnectAuthCodeTokenGranter implements TokenGranter {
|
||||||
this.authorizationCodeServices = authorizationCodeServices;
|
this.authorizationCodeServices = authorizationCodeServices;
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
public AuthorizationRequestFactory getAuthorizationRequestFactory() {
|
||||||
* @return the clientCredentialsChecker
|
return this.authorizationRequestFactory;
|
||||||
*/
|
|
||||||
public ClientCredentialsChecker getClientCredentialsChecker() {
|
|
||||||
return clientCredentialsChecker;
|
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
public void setAuthorizationRequestFactory(AuthorizationRequestFactory authorizationRequestFactory) {
|
||||||
* @param clientCredentialsChecker the clientCredentialsChecker to set
|
this.authorizationRequestFactory = authorizationRequestFactory;
|
||||||
*/
|
|
||||||
public void setClientCredentialsChecker(ClientCredentialsChecker clientCredentialsChecker) {
|
|
||||||
this.clientCredentialsChecker = clientCredentialsChecker;
|
|
||||||
}
|
}
|
||||||
|
|
||||||
public OAuth2TokenEntityService getTokenServices() {
|
public OAuth2TokenEntityService getTokenServices() {
|
||||||
|
|
Loading…
Reference in New Issue