Java ClientDetails.getAuthorizedGrantTypes方法代碼示例

import org.springframework.security.oauth2.provider.ClientDetails; //導入方法依賴的package包/類
@Override
public void addClientDetails(final ClientDetails clientDetails) throws ClientAlreadyExistsException {
	final MongoClientDetails mongoClientDetails = new MongoClientDetails(clientDetails.getClientId(),
			passwordEncoder.encode(clientDetails.getClientSecret()),
			clientDetails.getScope(),
			clientDetails.getResourceIds(),
			clientDetails.getAuthorizedGrantTypes(),
			clientDetails.getRegisteredRedirectUri(),
			newArrayList(clientDetails.getAuthorities()),
			clientDetails.getAccessTokenValiditySeconds(),
			clientDetails.getRefreshTokenValiditySeconds(),
			clientDetails.getAdditionalInformation(),
			null);

	mongoClientDetailsRepository.save(mongoClientDetails);
}
 

import org.springframework.security.oauth2.provider.ClientDetails; //導入方法依賴的package包/類
@Override
public void updateClientDetails(ClientDetails clientDetails) throws NoSuchClientException {
	final MongoClientDetails mongoClientDetails = new MongoClientDetails(clientDetails.getClientId(),
			clientDetails.getClientSecret(),
			clientDetails.getScope(),
			clientDetails.getResourceIds(),
			clientDetails.getAuthorizedGrantTypes(),
			clientDetails.getRegisteredRedirectUri(),
			newArrayList(clientDetails.getAuthorities()),
			clientDetails.getAccessTokenValiditySeconds(),
			clientDetails.getRefreshTokenValiditySeconds(),
			clientDetails.getAdditionalInformation(),
			getAutoApproveScopes(clientDetails));
	final boolean result = mongoClientDetailsRepository.update(mongoClientDetails);

	if (!result) {
		throw new NoSuchClientException("No such Client Id");
	}
}
 

import org.springframework.security.oauth2.provider.ClientDetails; //導入方法依賴的package包/類
public String resolveRedirect(String requestedRedirect, ClientDetails client) throws OAuth2Exception {

		Set<String> authorizedGrantTypes = client.getAuthorizedGrantTypes();
		if (authorizedGrantTypes.isEmpty()) {
			throw new InvalidGrantException("A client must have at least one authorized grant type.");
		}
		if (!containsRedirectGrantType(authorizedGrantTypes)) {
			throw new InvalidGrantException(
					"A redirect_uri can only be used by implicit or authorization_code grant types.");
		}

		Set<String> redirectUris = client.getRegisteredRedirectUri();

		if (redirectUris != null && !redirectUris.isEmpty()) {
			return obtainMatchingRedirect(redirectUris, requestedRedirect);
		}
		else if (StringUtils.hasText(requestedRedirect)) {
			return requestedRedirect;
		}
		else {
			throw new InvalidRequestException("A redirect_uri must be supplied.");
		}

	}
 

import org.springframework.security.oauth2.provider.ClientDetails; //導入方法依賴的package包/類
protected void validateGrantType(String grantType, ClientDetails clientDetails) {
	Collection<String> authorizedGrantTypes = clientDetails.getAuthorizedGrantTypes();
	if (authorizedGrantTypes != null && !authorizedGrantTypes.isEmpty()
			&& !authorizedGrantTypes.contains(grantType)) {
		throw new InvalidClientException("Unauthorized grant type: " + grantType);
	}
}
 

import org.springframework.security.oauth2.provider.ClientDetails; //導入方法依賴的package包/類
@Test
public void testClientDetailsFromNonPropertyFile() {

	// valid client details NOT from property file
	ClientDetails clientDetails = clientDetailsService.loadClientByClientId("my-client-id-non-property-file");
	assertNotNull(clientDetailsService);
	assertEquals("my-client-id-non-property-file", clientDetails.getClientId());
	assertEquals("my-client-secret-non-property-file", clientDetails.getClientSecret());

	Set<String> grantTypes = clientDetails.getAuthorizedGrantTypes();
	assertNotNull(grantTypes);
	assertEquals(2, grantTypes.size());
	assertTrue(grantTypes.contains("password"));
	assertTrue(grantTypes.contains("authorization_code"));

	Set<String> scopes = clientDetails.getScope();
	assertNotNull(scopes);
	assertEquals(2, scopes.size());
	assertTrue(scopes.contains("scope1"));
	assertTrue(scopes.contains("scope2"));

	Collection<GrantedAuthority> authorities = clientDetails.getAuthorities();
	assertNotNull(authorities);
	assertEquals(2, authorities.size());
	assertTrue(AuthorityUtils.authorityListToSet(authorities).contains("ROLE_USER"));
	assertTrue(AuthorityUtils.authorityListToSet(authorities).contains("ROLE_ANONYMOUS"));
}
 

import org.springframework.security.oauth2.provider.ClientDetails; //導入方法依賴的package包/類
@Test
public void testClientDetailsFromPropertyFile() {

	// valid client details from property file
	ClientDetails clientDetails = clientDetailsService.loadClientByClientId("my-client-id-property-file");
	assertNotNull(clientDetailsService);
	assertEquals("my-client-id-property-file", clientDetails.getClientId());
	assertEquals("my-client-secret-property-file", clientDetails.getClientSecret());

	Set<String> grantTypes = clientDetails.getAuthorizedGrantTypes();
	assertNotNull(grantTypes);
	assertEquals(2, grantTypes.size());
	assertTrue(grantTypes.contains("password"));
	assertTrue(grantTypes.contains("authorization_code"));

	Set<String> scopes = clientDetails.getScope();
	assertNotNull(scopes);
	assertEquals(2, scopes.size());
	assertTrue(scopes.contains("scope1"));
	assertTrue(scopes.contains("scope2"));

	Collection<GrantedAuthority> authorities = clientDetails.getAuthorities();
	assertNotNull(authorities);
	assertEquals(2, authorities.size());
	assertTrue(AuthorityUtils.authorityListToSet(authorities).contains("ROLE_USER"));
	assertTrue(AuthorityUtils.authorityListToSet(authorities).contains("ROLE_ANONYMOUS"));
}
 

import org.springframework.security.oauth2.provider.ClientDetails; //導入方法依賴的package包/類
@Test
public void testClientDetailsDefaultFlow() {
	ClientDetails clientDetails = clientDetailsService.loadClientByClientId("my-client-id-default-flow");
	assertNotNull(clientDetailsService);
	assertEquals("my-client-id-default-flow", clientDetails.getClientId());
	assertEquals(1, clientDetails.getRegisteredRedirectUri().size());
	assertEquals("http://mycompany.com", clientDetails.getRegisteredRedirectUri().iterator().next());

	Set<String> grantTypes = clientDetails.getAuthorizedGrantTypes();
	assertNotNull(grantTypes);
	assertEquals(2, grantTypes.size());
	assertTrue(grantTypes.contains("authorization_code"));
	assertTrue(grantTypes.contains("refresh_token"));
}