Package org.oa4mp.server.loader.oauth2.servlet

Class MultiAuthServlet

java.lang.Object

javax.servlet.GenericServlet

javax.servlet.http.HttpServlet

edu.uiuc.ncsa.security.servlet.AbstractServlet

org.oa4mp.server.api.storage.servlet.EnvServlet

org.oa4mp.server.api.storage.servlet.OA4MPServlet

org.oa4mp.server.loader.oauth2.servlet.MultiAuthServlet

All Implemented Interfaces:

edu.uiuc.ncsa.security.core.Logable, Serializable, javax.servlet.Servlet, javax.servlet.ServletConfig, TransactionFilter

Direct Known Subclasses:

AbstractAccessTokenServlet2, RFC8628Servlet

public abstract class MultiAuthServlet
extends OA4MPServlet

This class has the machinery for processing the various types of Authorization for a servlet.

Created by Jeff Gaynor
on 7/24/21 at 5:58 AM

See Also:

Serialized Form

Field Summary

Fields

Modifier and Type	Field	Description
static List<UpkeepThread>	upkeepThreadList	This should be in the OA4MPServlet, but that would have to be moved and refactored.

Fields inherited from class org.oa4mp.server.api.storage.servlet.OA4MPServlet

caThread, kpt, lastAccessedThread, transactionCleanup

Fields inherited from class org.oa4mp.server.api.storage.servlet.EnvServlet

ERROR_NOTIFICATION_BODY_KEY, ERROR_NOTIFICATION_SUBJECT_KEY, notificationListeners, storeUpdatesDone

Fields inherited from class edu.uiuc.ncsa.security.servlet.AbstractServlet

environment, initialization, IP_HEADERS, PING_PARAMETER

Constructor Summary

Constructors

Constructor	Description
MultiAuthServlet()

Method Summary

Modifier and Type	Method	Description
AdminClient	getAdminClient(edu.uiuc.ncsa.security.core.Identifier identifier)
AdminClient	getAdminClient(javax.servlet.http.HttpServletRequest request)
Client	getClient(javax.servlet.http.HttpServletRequest request)	This gets the client from the request.
protected String	getClientSecret(javax.servlet.http.HttpServletRequest request)
void	verifyClient(OA2Client client, javax.servlet.http.HttpServletRequest request)
void	verifyClient(OA2Client client, javax.servlet.http.HttpServletRequest request, boolean isAT)
void	verifyClientSecret(OA2Client client, String rawSecret)

Methods inherited from class org.oa4mp.server.api.storage.servlet.OA4MPServlet

checkAdminClientStatus, checkClientApproval, createDebugger, destroy, getAGI, getATI, getClient, getClient, getFirstParameters, getFirstParameterValue, getGrantIDFromRequest, getServiceEnvironment, getTransaction, getTransactionByGrantID, getTransactionStore, isEmpty, loadProperties2, newTransaction, postprocess, preprocess, realStoreUpdates, say, shutdownCleanup, storeUpdates, verifyAndGet

Methods inherited from class org.oa4mp.server.api.storage.servlet.EnvServlet

addNotificationListener, loadEnvironment, processStoreCheck, removeNotificationListener

Methods inherited from class edu.uiuc.ncsa.security.servlet.AbstractServlet

checkContentType, CONST, debug, doGet, doIt, doPing, doPost, error, error, getConfigurationLoader, getEnvironment, getExceptionHandler, getInitialization, getMyLogger, getRequestIPAddress, handleException, info, init, isDebugOn, logOK, logOK, printAllParameters, printAllParameters, resetState, setConfigurationLoader, setDebugOn, setEnvironment, setExceptionHandler, setInitialization, warn

Methods inherited from class javax.servlet.http.HttpServlet

doDelete, doHead, doOptions, doPut, doTrace, getLastModified, service, service

Methods inherited from class javax.servlet.GenericServlet

getInitParameter, getInitParameterNames, getServletConfig, getServletContext, getServletInfo, getServletName, init, log, log

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

upkeepThreadList

public static List<UpkeepThread> upkeepThreadList

This should be in the OA4MPServlet, but that would have to be moved and refactored. It stays here for now.

Constructor Detail

MultiAuthServlet

public MultiAuthServlet()

Method Detail

getClient

public Client getClient(javax.servlet.http.HttpServletRequest request)

This gets the client from the request. Note that this does not check the client password. That is done with the verifyClient(OA2Client, HttpServletRequest)

Overrides:

getClient in class OA4MPServlet

Parameters:

request -

Returns:

verifyClientSecret

public void verifyClientSecret(OA2Client client,
                               String rawSecret)

verifyClient

public void verifyClient(OA2Client client,
                         javax.servlet.http.HttpServletRequest request)

verifyClient

public void verifyClient(OA2Client client,
                         javax.servlet.http.HttpServletRequest request,
                         boolean isAT)

getClientSecret

protected String getClientSecret(javax.servlet.http.HttpServletRequest request)

getAdminClient

public AdminClient getAdminClient(javax.servlet.http.HttpServletRequest request)

getAdminClient

public AdminClient getAdminClient(edu.uiuc.ncsa.security.core.Identifier identifier)