Java ClientDetails.getScope方法代碼示例

import org.springframework.security.oauth2.provider.ClientDetails; //導入方法依賴的package包/類
@Override
public void addClientDetails(final ClientDetails clientDetails) throws ClientAlreadyExistsException {
	final MongoClientDetails mongoClientDetails = new MongoClientDetails(clientDetails.getClientId(),
			passwordEncoder.encode(clientDetails.getClientSecret()),
			clientDetails.getScope(),
			clientDetails.getResourceIds(),
			clientDetails.getAuthorizedGrantTypes(),
			clientDetails.getRegisteredRedirectUri(),
			newArrayList(clientDetails.getAuthorities()),
			clientDetails.getAccessTokenValiditySeconds(),
			clientDetails.getRefreshTokenValiditySeconds(),
			clientDetails.getAdditionalInformation(),
			null);

	mongoClientDetailsRepository.save(mongoClientDetails);
}
 

import org.springframework.security.oauth2.provider.ClientDetails; //導入方法依賴的package包/類
@Override
public void updateClientDetails(ClientDetails clientDetails) throws NoSuchClientException {
	final MongoClientDetails mongoClientDetails = new MongoClientDetails(clientDetails.getClientId(),
			clientDetails.getClientSecret(),
			clientDetails.getScope(),
			clientDetails.getResourceIds(),
			clientDetails.getAuthorizedGrantTypes(),
			clientDetails.getRegisteredRedirectUri(),
			newArrayList(clientDetails.getAuthorities()),
			clientDetails.getAccessTokenValiditySeconds(),
			clientDetails.getRefreshTokenValiditySeconds(),
			clientDetails.getAdditionalInformation(),
			getAutoApproveScopes(clientDetails));
	final boolean result = mongoClientDetailsRepository.update(mongoClientDetails);

	if (!result) {
		throw new NoSuchClientException("No such Client Id");
	}
}
 

import org.springframework.security.oauth2.provider.ClientDetails; //導入方法依賴的package包/類
public OAuth2Authentication oAuth2Authentication(final String clientId, final String username) {
	// Look up authorities, resourceIds and scopes based on clientId
	ClientDetails client = clientDetailsService.loadClientByClientId(clientId);
	Collection<GrantedAuthority> authorities = client.getAuthorities();
	Set<String> resourceIds = client.getResourceIds();
	Set<String> scopes = client.getScope();

	// Default values for other parameters
	Map<String, String> requestParameters = Collections.emptyMap();
	boolean approved = true;
	String redirectUrl = null;
	Set<String> responseTypes = Collections.emptySet();
	Map<String, Serializable> extensionProperties = Collections.emptyMap();

	// Create request
	OAuth2Request oAuth2Request = new OAuth2Request(requestParameters, clientId, authorities, approved, scopes, resourceIds, redirectUrl, responseTypes, extensionProperties);

	// Create OAuth2AccessToken
	UserDetails user = userDetailsService.loadUserByUsername(username);
	UsernamePasswordAuthenticationToken authenticationToken = new UsernamePasswordAuthenticationToken(user, null, authorities);
	OAuth2Authentication auth = new OAuth2Authentication(oAuth2Request, authenticationToken);
	return auth;
}
 

import org.springframework.security.oauth2.provider.ClientDetails; //導入方法依賴的package包/類
private void updateDBObject(DBObject dbo, ClientDetails clientDetails) {
    dbo.put(resourceIdsFieldName, clientDetails.getResourceIds());
    dbo.put(scopeFieldName, clientDetails.getScope());
    dbo.put(authorizedGrantTypesFieldName, clientDetails.getAuthorizedGrantTypes());
    dbo.put(registeredRedirectUrisFieldName, clientDetails.getRegisteredRedirectUri());
    dbo.put(authoritiesFieldName, AuthorityUtils.authorityListToSet(clientDetails.getAuthorities()));
    dbo.put(accessTokenValidityFieldName, clientDetails.getAccessTokenValiditySeconds());
    dbo.put(refreshTokenValidityFieldName, clientDetails.getRefreshTokenValiditySeconds());
    dbo.put(additionalInformationFieldName, clientDetails.getAdditionalInformation());
    Set<String> autoApprove = new HashSet<String>();
    for (String scope : clientDetails.getScope()) {
        if (clientDetails.isAutoApprove(scope)) {
            autoApprove.add(scope);
        }
    }
    dbo.put(autoApproveFieldName, autoApprove.size() == 1 ? autoApprove.iterator().next() : autoApprove);
}
 

import org.springframework.security.oauth2.provider.ClientDetails; //導入方法依賴的package包/類
@BodyParser.Of(BodyParser.Json.class)
public Promise<Result> authenticateClient() {
  JsonNode json = request().body().asJson();
  String clientId = json.findPath("clientId").textValue();
  String clientSecret = json.findPath("clientSecret").textValue();

  UsernamePasswordAuthenticationToken authRequest =
      new UsernamePasswordAuthenticationToken(clientId, clientSecret);
  clientAuthenticationManager.authenticate(authRequest);

  ClientDetails clientDetails = clientDetailsService.loadClientByClientId(clientId);
  TokenRequest tokenRequest = new TokenRequest(Collections.emptyMap(), clientId,
      clientDetails.getScope(), "password");
  OAuth2AccessToken token = tokenGranter.grant("client_credentials", tokenRequest);

  ObjectNode result = Json.newObject();
  result.setAll(ImmutableMap.of(
      "accessToken", result.textNode(token.getValue()),
      "clientId", result.textNode(clientId),
      "expiration", result.numberNode(token.getExpiration().getTime())));
  return Promise.pure(ok(result));
}
 

import org.springframework.security.oauth2.provider.ClientDetails; //導入方法依賴的package包/類
public int vote(Authentication authentication, Object object, Collection<ConfigAttribute> attributes) {

		int result = ACCESS_ABSTAIN;

		if (!(authentication instanceof OAuth2Authentication)) {
			return result;
		}

		OAuth2Authentication oauth2Authentication = (OAuth2Authentication) authentication;
		OAuth2Request clientAuthentication = oauth2Authentication.getOAuth2Request();
		ClientDetails client = clientDetailsService.loadClientByClientId(clientAuthentication.getClientId());
		Set<String> scopes = clientAuthentication.getScope();
		if (oauth2Authentication.isClientOnly() && clientAuthoritiesAreScopes) {
			scopes = AuthorityUtils.authorityListToSet(clientAuthentication.getAuthorities());
		}

		for (ConfigAttribute attribute : attributes) {
			if (this.supports(attribute)) {

				result = ACCESS_GRANTED;

				for (String scope : scopes) {
					if (!client.getScope().contains(scope)) {
						result = ACCESS_DENIED;
						break;
					}
				}

				if (result == ACCESS_DENIED && throwException) {
					InsufficientScopeException failure = new InsufficientScopeException(
							"Insufficient scope for this resource", client.getScope());
					throw new AccessDeniedException(failure.getMessage(), failure);
				}

				return result;
			}
		}

		return result;
	}
 

import org.springframework.security.oauth2.provider.ClientDetails; //導入方法依賴的package包/類
@Test
public void testClientDetailsFromNonPropertyFile() {

	// valid client details NOT from property file
	ClientDetails clientDetails = clientDetailsService.loadClientByClientId("my-client-id-non-property-file");
	assertNotNull(clientDetailsService);
	assertEquals("my-client-id-non-property-file", clientDetails.getClientId());
	assertEquals("my-client-secret-non-property-file", clientDetails.getClientSecret());

	Set<String> grantTypes = clientDetails.getAuthorizedGrantTypes();
	assertNotNull(grantTypes);
	assertEquals(2, grantTypes.size());
	assertTrue(grantTypes.contains("password"));
	assertTrue(grantTypes.contains("authorization_code"));

	Set<String> scopes = clientDetails.getScope();
	assertNotNull(scopes);
	assertEquals(2, scopes.size());
	assertTrue(scopes.contains("scope1"));
	assertTrue(scopes.contains("scope2"));

	Collection<GrantedAuthority> authorities = clientDetails.getAuthorities();
	assertNotNull(authorities);
	assertEquals(2, authorities.size());
	assertTrue(AuthorityUtils.authorityListToSet(authorities).contains("ROLE_USER"));
	assertTrue(AuthorityUtils.authorityListToSet(authorities).contains("ROLE_ANONYMOUS"));
}
 

import org.springframework.security.oauth2.provider.ClientDetails; //導入方法依賴的package包/類
@Test
public void testClientDetailsFromPropertyFile() {

	// valid client details from property file
	ClientDetails clientDetails = clientDetailsService.loadClientByClientId("my-client-id-property-file");
	assertNotNull(clientDetailsService);
	assertEquals("my-client-id-property-file", clientDetails.getClientId());
	assertEquals("my-client-secret-property-file", clientDetails.getClientSecret());

	Set<String> grantTypes = clientDetails.getAuthorizedGrantTypes();
	assertNotNull(grantTypes);
	assertEquals(2, grantTypes.size());
	assertTrue(grantTypes.contains("password"));
	assertTrue(grantTypes.contains("authorization_code"));

	Set<String> scopes = clientDetails.getScope();
	assertNotNull(scopes);
	assertEquals(2, scopes.size());
	assertTrue(scopes.contains("scope1"));
	assertTrue(scopes.contains("scope2"));

	Collection<GrantedAuthority> authorities = clientDetails.getAuthorities();
	assertNotNull(authorities);
	assertEquals(2, authorities.size());
	assertTrue(AuthorityUtils.authorityListToSet(authorities).contains("ROLE_USER"));
	assertTrue(AuthorityUtils.authorityListToSet(authorities).contains("ROLE_ANONYMOUS"));
}