io.micronaut.security.oauth2.openid.endpoints.authorization

Class DefaultStateProvider

java.lang.Object

io.micronaut.security.oauth2.openid.endpoints.authorization.DefaultStateProvider

All Implemented Interfaces:

StateProvider

@Singleton
public class DefaultStateProvider
extends java.lang.Object
implements StateProvider

A default state provider that stores the original request URI to redirect back to after authentication.

Since:

1.0.0

Author:

James Kleeh

Constructor Summary

Constructors

Constructor and Description
DefaultStateProvider(com.fasterxml.jackson.databind.ObjectMapper objectMapper)

Method Summary

Modifier and Type	Method and Description
protected java.lang.Object	buildState(io.micronaut.http.HttpRequest<?> request, boolean unauthorized) Creates the state object to be sent with the authorization redirect.
java.lang.Object	deserializeState(java.lang.String state)
java.lang.String	generateState(io.micronaut.http.HttpRequest<?> request)
protected java.lang.String	serializeState(java.lang.Object state) Serializes the state into a string for sending with the authorization redirect.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

DefaultStateProvider

public DefaultStateProvider(com.fasterxml.jackson.databind.ObjectMapper objectMapper)

Parameters:

objectMapper - To serialize the state

Method Detail

generateState

@Nullable
public java.lang.String generateState(io.micronaut.http.HttpRequest<?> request)

Specified by:

generateState in interface StateProvider

Parameters:

request - the original request prior redirect.

Returns:

A state parameter. A opaque value used to maintain state between the request and the callback.

deserializeState

public java.lang.Object deserializeState(java.lang.String state)

Specified by:

deserializeState in interface StateProvider

Parameters:

state - Serialized representation of State.

Returns:

A deserialized State object.

serializeState

@Nullable
protected java.lang.String serializeState(java.lang.Object state)

Serializes the state into a string for sending with the authorization redirect.

Parameters:

state - The state object

Returns:

The serialized state

buildState

@Nullable
protected java.lang.Object buildState(io.micronaut.http.HttpRequest<?> request,
                                                boolean unauthorized)

Creates the state object to be sent with the authorization redirect.

Parameters:

request - The originating request

unauthorized - whether the request was flagged as unauthorized

Returns:

The state object