net.sourceforge.plantuml.security.authentication.oauth

Class OAuth2ResourceOwnerAccessAuthorizeManager

java.lang.Object

net.sourceforge.plantuml.security.authentication.oauth.AbstractOAuth2AccessAuthorizeManager

net.sourceforge.plantuml.security.authentication.oauth.OAuth2ResourceOwnerAccessAuthorizeManager

All Implemented Interfaces:

SecurityAuthorizeManager

public class OAuth2ResourceOwnerAccessAuthorizeManager
extends AbstractOAuth2AccessAuthorizeManager

Authorize via principal a resource owner (from SecurityCredentials and creates a SecurityAuthentication object with a bearer token secret.

Because a pass through of username/password is an anti-pattern in OAuth2, this authorization method should be avoided. However, it may be necessary in some environments to gain access with the ROPC flow.

Constructor Summary

Constructors

Constructor and Description
OAuth2ResourceOwnerAccessAuthorizeManager()

Method Summary

Modifier and Type	Method and Description
SecurityAuthentication	create(SecurityCredentials credentials) Creates from the credentials the authentication object to access an endpoint.

Methods inherited from class net.sourceforge.plantuml.security.authentication.oauth.AbstractOAuth2AccessAuthorizeManager

buildAccessDataFromResponse, headers, requestAndCreateAuthFromResponse, urlEncode

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

OAuth2ResourceOwnerAccessAuthorizeManager

public OAuth2ResourceOwnerAccessAuthorizeManager()

Method Detail

create

public SecurityAuthentication create(SecurityCredentials credentials)

Description copied from interface: SecurityAuthorizeManager

Creates from the credentials the authentication object to access an endpoint. If the credentials defines a principal (e.g. in OAuth2), the create method should authorize the principal and get the final authentication data to access an endpoint.

Parameters:

credentials - the configured credentials

Returns:

the authentication object.