com.authlete.common.dto

Class IntrospectionRequest

java.lang.Object

com.authlete.common.dto.IntrospectionRequest

All Implemented Interfaces:

Serializable

public class IntrospectionRequest
extends Object
implements Serializable

Request to Authlete's /auth/introspection API.

token (REQUIRED)

An access token to introspect.

scopes (OPTIONAL)

Scopes that should be covered by the access token.

subject (OPTIONAL)

The subject that should be associated with the access token.

clientCertificate (OPTIONAL)

The certificate presented by the client, used to validate TLS client certificate bound access tokens.

Author:

Takahiko Kawasaki

See Also:

Serialized Form

Constructor Summary

Constructors

Constructor and Description
IntrospectionRequest()

Method Summary

Modifier and Type	Method and Description
String	getClientCertificate() Get the client certificate, used to validate binding against access tokens using the TLS client certificate confirmation method.
String[]	getScopes() Get the scopes which are required to access the target protected resource.
String	getSubject() Get the subject (= end-user ID managed by the service implementation) which is required to access the target protected resource.
String	getToken() Get the access token.
IntrospectionRequest	setClientCertificate(String clientCertificate) Set the client certificate, used to validate binding against access tokens using the TLS client certificate confirmation method.
IntrospectionRequest	setScopes(String[] scopes) Set the scopes which are required to access the target protected resource.
IntrospectionRequest	setSubject(String subject) Set the subject (= end-user ID managed by the service implementation) which is required to access the target protected resource.
IntrospectionRequest	setToken(String token) Set the access token which has been issued by Authlete.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

IntrospectionRequest

public IntrospectionRequest()

Method Detail

getToken

public String getToken()

Get the access token.

setToken

public IntrospectionRequest setToken(String token)

Set the access token which has been issued by Authlete.

getScopes

public String[] getScopes()

Get the scopes which are required to access the target protected resource.

setScopes

public IntrospectionRequest setScopes(String[] scopes)

Set the scopes which are required to access the target protected resource. If the array contains a scope which is not covered by the access token, Authlete's /auth/introspection API returns FORBIDDEN as the action and insufficent_scope as the error code.

Parameters:

scopes - Scopes required to access the target protected resource. If null is given, Authlete's /auth/introspection endpoint does not perform scope checking.

getSubject

public String getSubject()

Get the subject (= end-user ID managed by the service implementation) which is required to access the target protected resource.

setSubject

public IntrospectionRequest setSubject(String subject)

Set the subject (= end-user ID managed by the service implementation) which is required to access the target protected resource. If the specified subject is different from the one associated with the access token, Authlete's /auth/introspection API returns FORBIDDEN as the action and invalid_request as the error code.

Parameters:

subject - Subject (= end-user ID managed by the service implementation) which is required to access the protected resource. If null is given, Authlete's /auth/introspection endpoint does not perform subject checking.

getClientCertificate

public String getClientCertificate()

Get the client certificate, used to validate binding against access tokens using the TLS client certificate confirmation method.

Returns:

The certificate in PEM format.

Since:

2.14

setClientCertificate

public IntrospectionRequest setClientCertificate(String clientCertificate)

Set the client certificate, used to validate binding against access tokens using the TLS client certificate confirmation method.

Parameters:

clientCertificate - The certificate in PEM format.

Since:

2.14