Package com.aquima.web.boot.security.openid

Class RefreshableOpenIdConnectServiceAccount

java.lang.Object

com.aquima.web.boot.security.openid.RefreshableOpenIdConnectServiceAccount

All Implemented Interfaces:

OpenIdConnectAuthentication, OpenIdConnectServiceAuthentication, com.blueriq.component.api.security.BlueriqAuthentication, com.blueriq.component.api.security.BlueriqServiceAccount, Serializable, Principal, org.springframework.security.core.Authentication

public class RefreshableOpenIdConnectServiceAccount
extends Object
implements OpenIdConnectServiceAuthentication

A service account that is capable of obtaining a new access token when the existing token expires.

The getEncodedAccessToken() method of this class always returns a valid access token, obtaining a new access token if needed.

This class is not serializable. The service account is intended to be switched to temporarily, in order to execute some code as the service account instead of as the logged in user. After the code execution completes the current authentication must be switched back to the original user. Attempting to serialize the service account may indicate that switching back to the original user was not performed.

Since:

11.6

Author:

Petru Galanton

See Also:

• Serialized Form

Constructor Summary

Constructors

Constructor	Description
RefreshableOpenIdConnectServiceAccount(OpenIdConnectServiceAuthentication delegate, OpenIdConnectClient client, org.springframework.security.authentication.AuthenticationManager authManager)

Method Summary

Modifier and Type	Method	Description
Collection<? extends org.springframework.security.core.GrantedAuthority>	getAuthorities()
List<String>	getClaim(String name)
Set<String>	getClaimNames()
Object	getCredentials()
Object	getDetails()
String	getEncodedAccessToken()	The access token in encoded form.
String	getName()
Object	getPrincipal()
List<String>	getRoles()
List<String>	getTeams()
boolean	isAccessTokenExpired()
boolean	isAnonymous()
boolean	isAuthenticated()
boolean	isAutomatic()
void	setAuthenticated(boolean isAuthenticated)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface java.security.Principal

equals, hashCode, implies, toString

Constructor Details

RefreshableOpenIdConnectServiceAccount

public RefreshableOpenIdConnectServiceAccount(OpenIdConnectServiceAuthentication delegate,
 OpenIdConnectClient client,
 org.springframework.security.authentication.AuthenticationManager authManager)

Method Details

getTeams

public List<String> getTeams()

Specified by:

getTeams in interface com.blueriq.component.api.security.BlueriqAuthentication

getRoles

public List<String> getRoles()

Specified by:

getRoles in interface com.blueriq.component.api.security.BlueriqAuthentication

isAnonymous

public boolean isAnonymous()

Specified by:

isAnonymous in interface com.blueriq.component.api.security.BlueriqAuthentication

isAutomatic

public boolean isAutomatic()

Specified by:

isAutomatic in interface com.blueriq.component.api.security.BlueriqAuthentication

getClaimNames

public Set<String> getClaimNames()

Specified by:

getClaimNames in interface com.blueriq.component.api.security.BlueriqAuthentication

getClaim

public List<String> getClaim(String name)

Specified by:

getClaim in interface com.blueriq.component.api.security.BlueriqAuthentication

getAuthorities

public Collection<? extends org.springframework.security.core.GrantedAuthority> getAuthorities()

Specified by:

getAuthorities in interface org.springframework.security.core.Authentication

getCredentials

public Object getCredentials()

Specified by:

getCredentials in interface org.springframework.security.core.Authentication

getDetails

public Object getDetails()

Specified by:

getDetails in interface org.springframework.security.core.Authentication

getPrincipal

public Object getPrincipal()

Specified by:

getPrincipal in interface org.springframework.security.core.Authentication

isAuthenticated

public boolean isAuthenticated()

Specified by:

isAuthenticated in interface org.springframework.security.core.Authentication

setAuthenticated

public void setAuthenticated(boolean isAuthenticated)
                      throws IllegalArgumentException

Specified by:

setAuthenticated in interface org.springframework.security.core.Authentication

Throws:

IllegalArgumentException

getName

public String getName()

Specified by:

getName in interface Principal

getEncodedAccessToken

public String getEncodedAccessToken()

Description copied from interface: OpenIdConnectAuthentication

The access token in encoded form. This form is suitable for use in an Authorization: Bearer header.

Specified by:

getEncodedAccessToken in interface OpenIdConnectAuthentication

Returns:

the encoded access token

isAccessTokenExpired

public boolean isAccessTokenExpired()

Specified by:

isAccessTokenExpired in interface OpenIdConnectServiceAuthentication

Returns:

true if the access token is expired