org.xdi.oxauth.uma.ws.rs.UmaPermissionRegistrationWS クラス

org.xdi.oxauth.uma.ws.rs.UmaPermissionRegistrationWS 連携図

公開メンバ関数
Response	registerPermission (@Context HttpServletRequest request, @HeaderParam("Authorization") String authorization, @ApiParam(value="The identifier for a resource to which this client is seeking access. The identifier MUST correspond to a resource set that was previously registered.", required=true) String requestAsString)

非公開メンバ関数
UmaPermissionList	parseRequest (String requestAsString)

非公開変数類
Logger	log
TokenService	tokenService
UmaPermissionService	permissionService
UmaRptService	rptService
ErrorResponseFactory	errorResponseFactory
UmaValidationService	umaValidationService
AppConfiguration	appConfiguration

詳解

The endpoint at which the host registers permissions that it anticipates a requester will shortly be asking for from the AM. This AM's endpoint is part of resource set registration API.

In response to receiving an access request accompanied by an RPT that is invalid or has insufficient authorization data, the host SHOULD register a permission with the AM that would be sufficient for the type of access sought. The AM returns a permission ticket for the host to give to the requester in its response.

著者

Yuriy Zabrovarnyy

関数詳解

parseRequest()

UmaPermissionList org.xdi.oxauth.uma.ws.rs.UmaPermissionRegistrationWS.parseRequest ( String  requestAsString )

inlineprivate

UMA2 spec (edit 4) defined to possible requests, single permission or list of permission. So here we parse manually

引数

requestAsString

request as string

戻り値

uma permission list

                                                                   {
        final ObjectMapper mapper = ServerUtil.createJsonMapper().configure(SerializationConfig.Feature.WRAP_ROOT_VALUE, false);
        try {
            org.xdi.oxauth.model.uma.UmaPermission permission = mapper.readValue(requestAsString, org.xdi.oxauth.model.uma.UmaPermission.class);
            return new UmaPermissionList().addPermission(permission);
        } catch (IOException e) {
            // ignore
        }

        try {
            UmaPermissionList permissions = mapper.readValue(requestAsString, org.xdi.oxauth.model.uma.UmaPermissionList.class);
            if (!permissions.isEmpty()) {
                return permissions;
            }
            log.error("Permission list is empty.");
        } catch (IOException e) {
            log.error("Failed to parse uma permission request" + requestAsString, e);
        }
        return errorResponseFactory.throwUmaWebApplicationException(Response.Status.BAD_REQUEST, UmaErrorResponseType.INVALID_PERMISSION_REQUEST);
    }

registerPermission()

Response org.xdi.oxauth.uma.ws.rs.UmaPermissionRegistrationWS.registerPermission ( @Context HttpServletRequest  request, @HeaderParam("Authorization") String  authorization, @ApiParam(value="The identifier for a resource to which this client is seeking access. The identifier MUST correspond to a resource set that was previously registered.", required=true) String  requestAsString  )

inline

                                                               {
        try {
            umaValidationService.assertHasProtectionScope(authorization);

            // UMA2 spec defined 2 possible requests, single permission or list of permission. So here we parse manually
            UmaPermissionList permissionList = parseRequest(requestAsString);
            umaValidationService.validatePermissions(permissionList);

            String ticket = permissionService.addPermission(permissionList, tokenService.getClientDn(authorization));

            return Response.status(Response.Status.CREATED).
                    entity(new PermissionTicket(ticket)).
                    build();
        } catch (Exception ex) {
            if (ex instanceof WebApplicationException) {
                throw (WebApplicationException) ex;
            }

            log.error("Exception happened", ex);
            throw new WebApplicationException(Response.status(Response.Status.INTERNAL_SERVER_ERROR)
                    .entity(errorResponseFactory.getUmaJsonErrorResponse(UmaErrorResponseType.SERVER_ERROR)).build());
        }
    }

メンバ詳解

appConfiguration

AppConfiguration org.xdi.oxauth.uma.ws.rs.UmaPermissionRegistrationWS.appConfiguration

private

errorResponseFactory

ErrorResponseFactory org.xdi.oxauth.uma.ws.rs.UmaPermissionRegistrationWS.errorResponseFactory

private

log

Logger org.xdi.oxauth.uma.ws.rs.UmaPermissionRegistrationWS.log

private

permissionService

UmaPermissionService org.xdi.oxauth.uma.ws.rs.UmaPermissionRegistrationWS.permissionService

private

rptService

UmaRptService org.xdi.oxauth.uma.ws.rs.UmaPermissionRegistrationWS.rptService

private

tokenService

TokenService org.xdi.oxauth.uma.ws.rs.UmaPermissionRegistrationWS.tokenService

private

umaValidationService

UmaValidationService org.xdi.oxauth.uma.ws.rs.UmaPermissionRegistrationWS.umaValidationService

private

---

このクラス詳解は次のファイルから抽出されました:

• D:/AppData/OpenId/gluu/src/oxAuth/Server/src/main/java/org/xdi/oxauth/uma/ws/rs/UmaPermissionRegistrationWS.java