Package com.symphony.bdk.core.auth.impl

Class ExtensionAppAuthenticatorCertImpl

java.lang.Object

com.symphony.bdk.core.auth.impl.AbstractExtensionAppAuthenticator

com.symphony.bdk.core.auth.impl.ExtensionAppAuthenticatorCertImpl

All Implemented Interfaces:

ExtensionAppAuthenticator

@API(status=INTERNAL)
public class ExtensionAppAuthenticatorCertImpl
extends AbstractExtensionAppAuthenticator

Extension app authenticator Cert implementation.

See Also:

• Application Authentication

Field Summary

Fields inherited from class com.symphony.bdk.core.auth.impl.AbstractExtensionAppAuthenticator

appId, tokensRepository

Constructor Summary

Constructors

Constructor	Description
ExtensionAppAuthenticatorCertImpl(com.symphony.bdk.core.config.model.BdkRetryConfig retryConfig, String appId, com.symphony.bdk.http.api.ApiClient sessionAuthClient)
ExtensionAppAuthenticatorCertImpl(com.symphony.bdk.core.config.model.BdkRetryConfig retryConfig, String appId, com.symphony.bdk.http.api.ApiClient sessionAuthClient, ExtensionAppTokensRepository tokensRepository)

Method Summary

Modifier and Type	Method	Description
protected ExtensionAppTokens	authenticateAndRetrieveTokens(String appToken)
AppAuthSession	authenticateExtensionApp(String appToken)	Authenticates an extension app.
protected PodCertificate	callGetPodCertificate()
protected String	getAuthenticationBasePath()
protected String	getPodCertificateBasePath()
UserClaim	validateJwt(String jwt)	Validates a JWT against the pod certificate

Methods inherited from class com.symphony.bdk.core.auth.impl.AbstractExtensionAppAuthenticator

getPodCertificate, retrieveExtAppTokens, retrieveExtensionAppSession, validateTokens

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

ExtensionAppAuthenticatorCertImpl

public ExtensionAppAuthenticatorCertImpl(com.symphony.bdk.core.config.model.BdkRetryConfig retryConfig,
 String appId,
 com.symphony.bdk.http.api.ApiClient sessionAuthClient)

ExtensionAppAuthenticatorCertImpl

public ExtensionAppAuthenticatorCertImpl(com.symphony.bdk.core.config.model.BdkRetryConfig retryConfig,
 String appId,
 com.symphony.bdk.http.api.ApiClient sessionAuthClient,
 ExtensionAppTokensRepository tokensRepository)

Method Details

authenticateExtensionApp

@Nonnull
public AppAuthSession authenticateExtensionApp(String appToken)
                                        throws AuthUnauthorizedException

Authenticates an extension app.

Parameters:

appToken - The token generated by application backend.

Returns:

the extension app authentication session.

Throws:

AuthUnauthorizedException - when the bot is unauthorized.

authenticateAndRetrieveTokens

protected ExtensionAppTokens authenticateAndRetrieveTokens(String appToken)
                                                    throws com.symphony.bdk.http.api.ApiException

Specified by:

authenticateAndRetrieveTokens in class AbstractExtensionAppAuthenticator

Throws:

com.symphony.bdk.http.api.ApiException

callGetPodCertificate

protected PodCertificate callGetPodCertificate()
                                        throws com.symphony.bdk.http.api.ApiException

Specified by:

callGetPodCertificate in class AbstractExtensionAppAuthenticator

Throws:

com.symphony.bdk.http.api.ApiException

validateJwt

public UserClaim validateJwt(String jwt)
                      throws AuthInitializationException

Validates a JWT against the pod certificate

Parameters:

jwt - the JWT to be validated

Returns:

the UserClaim containing all information in JWT claim "user" if JWT successfully validated

Throws:

AuthInitializationException - if JWT cannot be validated or if JWT is invalid

See Also:

• Verifying, Decoding and Using the JWT

getPodCertificateBasePath

protected String getPodCertificateBasePath()

Specified by:

getPodCertificateBasePath in class AbstractExtensionAppAuthenticator

getAuthenticationBasePath

protected String getAuthenticationBasePath()

Specified by:

getAuthenticationBasePath in class AbstractExtensionAppAuthenticator