org.gcube.common.iam

Class D4ScienceIAMClientAuthn4Client

java.lang.Object

org.gcube.common.iam.AbstractIAMResponse

org.gcube.common.iam.D4ScienceIAMClientAuthn

org.gcube.common.iam.D4ScienceIAMClientAuthn4Client

All Implemented Interfaces:

IAMResponse

public class D4ScienceIAMClientAuthn4Client
extends D4ScienceIAMClientAuthn

D4Science IAM client authentication implementation for client credentials flow.

Author:

Mauro Mugnaini (Nubisware S.r.l.)

Constructor Summary

Constructors

Modifier	Constructor and Description
protected	D4ScienceIAMClientAuthn4Client(D4ScienceIAMClient iamClient, String clientId, String clientSecret) Creates a new client authentication instance using client credentials.
protected	D4ScienceIAMClientAuthn4Client(D4ScienceIAMClient iamClient, String clientId, String clientSecret, String context) Creates a new client authentication instance with specific context.

Method Summary

Modifier and Type	Method and Description
protected static org.gcube.common.keycloak.model.TokenResponse	performClientAuthn(D4ScienceIAMClient iamClient, String clientId, String clientSecret, String context) Performs the actual client authentication using client credentials flow.

Methods inherited from class org.gcube.common.iam.D4ScienceIAMClientAuthn

authorize, authorize

Methods inherited from class org.gcube.common.iam.AbstractIAMResponse

canBeRefreshed, getAccessToken, getAccessTokenString, getContactOrganization, getContactPerson, getContextRoles, getGlobalRoles, getIamClient, getName, getRefreshTokenString, getResourceRoles, getRoles, getTokenResponse, isAccessTokenValid, isAccessTokenValid, isExpired, isRefreshTokenValid, isRefreshTokenValid, refresh, refresh, setIamClient, setTokenResponse, verifyAccessToken, verifyAccessToken, verifyRefreshToken, verifyRefreshToken

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

D4ScienceIAMClientAuthn4Client

protected D4ScienceIAMClientAuthn4Client(D4ScienceIAMClient iamClient,
                                         String clientId,
                                         String clientSecret)
                                  throws D4ScienceIAMClientException

Creates a new client authentication instance using client credentials.

Parameters:

iamClient - the D4Science IAM client instance

clientId - the client ID

clientSecret - the client secret

Throws:

D4ScienceIAMClientException - if authentication fails

D4ScienceIAMClientAuthn4Client

protected D4ScienceIAMClientAuthn4Client(D4ScienceIAMClient iamClient,
                                         String clientId,
                                         String clientSecret,
                                         String context)
                                  throws D4ScienceIAMClientException

Creates a new client authentication instance with specific context.

Parameters:

iamClient - the D4Science IAM client instance

clientId - the client ID

clientSecret - the client secret

context - the requested token context audience

Throws:

D4ScienceIAMClientException - if authentication fails

Method Detail

performClientAuthn

protected static final org.gcube.common.keycloak.model.TokenResponse performClientAuthn(D4ScienceIAMClient iamClient,
                                                                                        String clientId,
                                                                                        String clientSecret,
                                                                                        String context)
                                                                                 throws D4ScienceIAMClientException

Performs the actual client authentication using client credentials flow.

Parameters:

iamClient - the D4Science IAM client instance

clientId - the client ID

clientSecret - the client secret

context - the requested token context audience

Returns:

the token response from authentication

Throws:

D4ScienceIAMClientException - if authentication fails