Package org.apache.nifi.web.security.oidc.revocation

Class StandardTokenRevocationResponseClient

java.lang.Object

org.apache.nifi.web.security.oidc.revocation.StandardTokenRevocationResponseClient

All Implemented Interfaces:

TokenRevocationResponseClient

public class StandardTokenRevocationResponseClient
extends Object
implements TokenRevocationResponseClient

Standard implementation for handling Token Revocation Requests using Spring REST Operations

Field Summary

Fields

Modifier and Type	Field	Description
private final org.springframework.security.oauth2.client.registration.ClientRegistrationRepository	clientRegistrationRepository
private static final org.slf4j.Logger	logger
private final org.springframework.web.client.RestOperations	restOperations
(package private) static final String	REVOCATION_ENDPOINT

Constructor Summary

Constructors

Constructor	Description
StandardTokenRevocationResponseClient(org.springframework.web.client.RestOperations restOperations, org.springframework.security.oauth2.client.registration.ClientRegistrationRepository clientRegistrationRepository)

Method Summary

Modifier and Type	Method	Description
private org.springframework.http.RequestEntity<?>	getRequestEntity(TokenRevocationRequest revocationRequest, org.springframework.security.oauth2.client.registration.ClientRegistration clientRegistration)
private org.springframework.http.ResponseEntity<?>	getResponseEntity(TokenRevocationRequest revocationRequest, org.springframework.security.oauth2.client.registration.ClientRegistration clientRegistration)
private URI	getRevocationEndpoint(org.springframework.security.oauth2.client.registration.ClientRegistration clientRegistration)
TokenRevocationResponse	getRevocationResponse(TokenRevocationRequest revocationRequest)	Get Revocation Response as described in RFC 7009 Section 2.2 or return success when the Revocation Endpoint is not configured

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

REVOCATION_ENDPOINT

static final String REVOCATION_ENDPOINT

See Also:

• Constant Field Values

logger

private static final org.slf4j.Logger logger

restOperations

private final org.springframework.web.client.RestOperations restOperations

clientRegistrationRepository

private final org.springframework.security.oauth2.client.registration.ClientRegistrationRepository clientRegistrationRepository

Constructor Details

StandardTokenRevocationResponseClient

public StandardTokenRevocationResponseClient(org.springframework.web.client.RestOperations restOperations,
 org.springframework.security.oauth2.client.registration.ClientRegistrationRepository clientRegistrationRepository)

Method Details

getRevocationResponse

public TokenRevocationResponse getRevocationResponse(TokenRevocationRequest revocationRequest)

Get Revocation Response as described in RFC 7009 Section 2.2 or return success when the Revocation Endpoint is not configured

Specified by:

getRevocationResponse in interface TokenRevocationResponseClient

Parameters:

revocationRequest - Revocation Request is required

Returns:

Token Revocation Response

getResponseEntity

private org.springframework.http.ResponseEntity<?> getResponseEntity(TokenRevocationRequest revocationRequest,
 org.springframework.security.oauth2.client.registration.ClientRegistration clientRegistration)

getRequestEntity

private org.springframework.http.RequestEntity<?> getRequestEntity(TokenRevocationRequest revocationRequest,
 org.springframework.security.oauth2.client.registration.ClientRegistration clientRegistration)

getRevocationEndpoint

private URI getRevocationEndpoint(org.springframework.security.oauth2.client.registration.ClientRegistration clientRegistration)