org.surfnet.oaaas.resource
Class VerifyResource

java.lang.Object
  org.surfnet.oaaas.resource.VerifyResource

@Named
public class VerifyResource
extends Object

Resource for handling the call from resource servers to validate an access token. As this is not part of the oauth2 spec, we have taken the Google specification as basis.

Constructor Summary

VerifyResource()

Method Summary

void	setAccessTokenRepository(AccessTokenRepository accessTokenRepository)
void	setResourceServerRepository(ResourceServerRepository resourceServerRepository)
protected javax.ws.rs.core.Response	unauthorized()
javax.ws.rs.core.Response	verifyToken(String authorization, String accessToken)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

VerifyResource

public VerifyResource()

Method Detail

verifyToken

public javax.ws.rs.core.Response verifyToken(@HeaderParam(value="Authorization")
                                             String authorization,
                                             String accessToken)
                                      throws IOException

Throws:

IOException

unauthorized

protected javax.ws.rs.core.Response unauthorized()

setAccessTokenRepository

public void setAccessTokenRepository(AccessTokenRepository accessTokenRepository)

Parameters:

accessTokenRepository - the accessTokenRepository to set

setResourceServerRepository

public void setResourceServerRepository(ResourceServerRepository resourceServerRepository)

Parameters:

resourceServerRepository - the resourceServerRepository to set