Package org.apache.cxf.rs.security.oauth2.utils

Class OAuthUtils

java.lang.Object
org.apache.cxf.rs.security.oauth2.utils.OAuthUtils
public final class OAuthUtils extends Object
Various utility methods

  • Method Details

    • createCertificateThumbprint

      public static byte[] createCertificateThumbprint(X509Certificate cert) throws Exception
      Throws:
      Exception

    • setCertificateThumbprintConfirmation

      public static void setCertificateThumbprintConfirmation(org.apache.cxf.jaxrs.ext.MessageContext mc, X509Certificate cert)

    • compareCertificateThumbprints

      public static boolean compareCertificateThumbprints(X509Certificate cert, String encodedThumbprint)

    • compareTlsCertificates

      public static boolean compareTlsCertificates(org.apache.cxf.security.transport.TLSSessionInfo tlsInfo, List<String> base64EncodedCerts)

    • isMutualTls

      public static boolean isMutualTls(jakarta.ws.rs.core.SecurityContext sc, org.apache.cxf.security.transport.TLSSessionInfo tlsSessionInfo)

    • getSubjectDnFromTLSCertificates

      public static String getSubjectDnFromTLSCertificates(X509Certificate cert)

    • getIssuerDnFromTLSCertificates

      public static String getIssuerDnFromTLSCertificates(X509Certificate cert)

    • getRootTLSCertificate

      public static X509Certificate getRootTLSCertificate(org.apache.cxf.security.transport.TLSSessionInfo tlsInfo)

    • injectContextIntoOAuthProvider

      public static void injectContextIntoOAuthProvider(org.apache.cxf.jaxrs.ext.MessageContext context, Object provider)

    • setSessionToken

      public static String setSessionToken(org.apache.cxf.jaxrs.ext.MessageContext mc)

    • setSessionToken

      public static String setSessionToken(org.apache.cxf.jaxrs.ext.MessageContext mc, int maxInactiveInterval)

    • setSessionToken

      public static String setSessionToken(org.apache.cxf.jaxrs.ext.MessageContext mc, String sessionToken)

    • setSessionToken

      public static String setSessionToken(org.apache.cxf.jaxrs.ext.MessageContext mc, String sessionToken, int maxInactiveInterval)

    • setSessionToken

      public static String setSessionToken(org.apache.cxf.jaxrs.ext.MessageContext mc, String sessionToken, String attribute, int maxInactiveInterval)

    • getSessionToken

      public static String getSessionToken(org.apache.cxf.jaxrs.ext.MessageContext mc)

    • getSessionToken

      public static String getSessionToken(org.apache.cxf.jaxrs.ext.MessageContext mc, String attribute)

    • getSessionToken

      public static String getSessionToken(org.apache.cxf.jaxrs.ext.MessageContext mc, String attribute, boolean remove)

    • createSubject

      public static UserSubject createSubject(org.apache.cxf.jaxrs.ext.MessageContext mc, org.apache.cxf.security.SecurityContext sc)

    • createSubject

      public static UserSubject createSubject(org.apache.cxf.security.SecurityContext securityContext)

    • convertPermissionsToScope

      public static String convertPermissionsToScope(List<OAuthPermission> perms)

    • convertPermissionsToScopeList

      public static List<String> convertPermissionsToScopeList(List<OAuthPermission> perms)

    • isGrantSupportedForClient

      public static boolean isGrantSupportedForClient(Client client, boolean canSupportPublicClients, String grantType)

    • parseScope

      public static List<String> parseScope(String requestedScope)

    • generateRandomTokenKey

      public static String generateRandomTokenKey() throws OAuthServiceException
      Throws:
      OAuthServiceException

    • generateRandomTokenKey

      public static String generateRandomTokenKey(int byteSize)

    • getIssuedAt

      public static long getIssuedAt()

    • isExpired

      public static boolean isExpired(Long issuedAt, Long lifetime)

    • validateAudience

      public static boolean validateAudience(String providedAudience, List<String> allowedAudiences)

    • validateAudiences

      public static boolean validateAudiences(List<String> providedAudiences, List<String> allowedAudiences)

    • checkRequestURI

      public static boolean checkRequestURI(String servletPath, String uri)

    • getRequestedScopes

      public static List<String> getRequestedScopes(Client client, String scopeParameter, boolean useAllClientScopes, boolean partialMatchScopeValidation)

    • getRequestedScopes

      public static List<String> getRequestedScopes(Client client, String scopeParameter, boolean useAllClientScopes, boolean partialMatchScopeValidation, boolean defaultToRegisteredScopes)

    • validateScopes

      public static boolean validateScopes(List<String> requestScopes, List<String> registeredScopes, boolean partialMatchScopeValidation)

    • toClientAccessToken

      public static ClientAccessToken toClientAccessToken(ServerAccessToken serverToken, boolean supportOptionalParams)

    • getClientSecretSignatureProvider

      public static org.apache.cxf.rs.security.jose.jws.JwsSignatureProvider getClientSecretSignatureProvider(String clientSecret)

    • getClientSecretSignatureVerifier

      public static org.apache.cxf.rs.security.jose.jws.JwsSignatureVerifier getClientSecretSignatureVerifier(String clientSecret)

    • getClientSecretDecryptionProvider

      public static org.apache.cxf.rs.security.jose.jwe.JweDecryptionProvider getClientSecretDecryptionProvider(String clientSecret)

    • getClientSecretEncryptionProvider

      public static org.apache.cxf.rs.security.jose.jwe.JweEncryptionProvider getClientSecretEncryptionProvider(String clientSecret)

    • getClientSecretSignatureAlgorithm

      public static org.apache.cxf.rs.security.jose.jwa.SignatureAlgorithm getClientSecretSignatureAlgorithm(Properties sigProps)

    • convertListOfScopesToString

      public static String convertListOfScopesToString(List<String> registeredScopes)