|
| ResourceOwnerPasswordCredentialsGrant () |
|
| ResourceOwnerPasswordCredentialsGrant (User user, Client client) |
|
void | init (User user, Client client) |
|
boolean | isCachedWithNoPersistence () |
|
boolean | isImplicitFlow () |
|
void | init (User user, AuthorizationGrantType authorizationGrantType, Client client, Date authenticationTime) |
|
IdToken | createIdToken (IAuthorizationGrant grant, String nonce, AuthorizationCode authorizationCode, AccessToken accessToken, Set< String > scopes, boolean includeIdTokenClaims, Function< JsonWebResponse, Void > preProcessing) throws Exception |
|
IdToken | createIdToken (String nonce, AuthorizationCode authorizationCode, AccessToken accessToken, AuthorizationGrant authorizationGrant, boolean includeIdTokenClaims, Function< JsonWebResponse, Void > preProcessing) throws SignatureException, StringEncrypter.EncryptionException, InvalidJwtException, InvalidJweException |
|
String | checkScopesPolicy (String scope) |
|
void | save () |
|
AccessToken | createAccessToken () |
|
RefreshToken | createRefreshToken () |
|
void | persist (TokenLdap p_token) |
|
void | persist (AuthorizationCode p_code) |
|
TokenLdap | asToken (IdToken p_token) |
|
TokenLdap | asToken (RefreshToken p_token) |
|
TokenLdap | asToken (AuthorizationCode p_authorizationCode) |
|
TokenLdap | asToken (AccessToken p_accessToken) |
|
String | getScopesAsString () |
|
TokenLdap | asTokenLdap (AbstractToken p_token) |
|
boolean | isValid () |
|
void | revokeAllTokens () |
|
void | checkExpiredTokens () |
|
String | getSub () |
|
void | setIsCachedWithNoPersistence (boolean isCachedWithNoPersistence) |
|
synchronized String | getGrantId () |
|
synchronized void | setGrantId (String p_grantId) |
|
AuthorizationCode | getAuthorizationCode () |
|
void | setAuthorizationCode (AuthorizationCode authorizationCode) |
|
String | getTokenBindingHash () |
|
void | setTokenBindingHash (String tokenBindingHash) |
|
String | getNonce () |
|
void | setNonce (String nonce) |
|
String | getCodeChallenge () |
|
void | setCodeChallenge (String codeChallenge) |
|
String | getCodeChallengeMethod () |
|
void | setCodeChallengeMethod (String codeChallengeMethod) |
|
String | getClaims () |
|
void | setClaims (String claims) |
|
Set< String > | getRefreshTokensCodes () |
|
Set< String > | getAccessTokensCodes () |
|
List< AccessToken > | getAccessTokens () |
|
void | setScopes (Collection< String > scopes) |
|
AccessToken | getLongLivedAccessToken () |
|
void | setLongLivedAccessToken (AccessToken longLivedAccessToken) |
|
IdToken | getIdToken () |
|
void | setIdToken (IdToken idToken) |
|
TokenLdap | getTokenLdap () |
|
void | setTokenLdap (TokenLdap p_tokenLdap) |
|
User | getUser () |
|
String | getAcrValues () |
|
void | setAcrValues (String acrValues) |
|
String | getSessionDn () |
|
void | setSessionDn (String sessionDn) |
|
String | getUserId () |
|
String | getUserDn () |
|
AuthorizationGrantType | getAuthorizationGrantType () |
|
Client | getClient () |
|
String | getClientId () |
|
String | getClientDn () |
|
Date | getAuthenticationTime () |
|
void | setAuthenticationTime (Date authenticationTime) |
|
Set< String > | getScopes () |
|
JwtAuthorizationRequest | getJwtAuthorizationRequest () |
|
void | setJwtAuthorizationRequest (JwtAuthorizationRequest p_jwtAuthorizationRequest) |
|
void | setAccessTokens (List< AccessToken > accessTokens) |
|
List< RefreshToken > | getRefreshTokens () |
|
void | setRefreshTokens (List< RefreshToken > refreshTokens) |
|
RefreshToken | getRefreshToken (String refreshTokenCode) |
|
AbstractToken | getAccessToken (String tokenCode) |
|
String | toString () |
|
The resource owner password credentials (i.e. username and password) can be used directly as an authorization grant to obtain an access token. The credentials should only be used when there is a high degree of trust between the resource owner and the client (e.g. its device operating system or a highly privileged application), and when other authorization grant types are not available (such as an authorization code).
Even though this grant type requires direct client access to the resource owner credentials, the resource owner credentials are used for a single request and are exchanged for an access token. This grant type can eliminate the need for the client to store the resource owner credentials for future use, by exchanging the credentials with a long-lived access token or refresh token.
- 著者
- Javier Rojas Blum Date: 09.29.2011
-
Yuriy Movchan