Package com.okta.spring.boot.oauth

Interface AuthoritiesProvider

  • public interface AuthoritiesProvider
    Allows for custom GrantedAuthoritys to be added to the current OAuth Principal. Multiple implementations are allowed, by default OAuth scopes are converted to Authorities with the format SCOPE_<scope-name> and if a `groups` claim exists in the access or id token, those are converted as well. Example usage: 
    
     @Bean
     AuthoritiesProvider myCustomAuthoritiesProvider() {
         return (user, userRequest) -> lookupExtraAuthoritesByName(user.getAttributes().get("email"));
     }
    Since:
    1.4.0

    • Method Summary

      All Methods Instance Methods Abstract Methods Default Methods 
      Modifier and Type Method Description
      default Collection<? extends org.springframework.security.core.GrantedAuthority> getAuthorities​(org.springframework.security.oauth2.core.oidc.user.OidcUser user, org.springframework.security.oauth2.client.oidc.userinfo.OidcUserRequest userRequest)  
      Collection<? extends org.springframework.security.core.GrantedAuthority> getAuthorities​(org.springframework.security.oauth2.core.user.OAuth2User user, org.springframework.security.oauth2.client.userinfo.OAuth2UserRequest userRequest)  

    • Method Detail

      • getAuthorities

        Collection<? extends org.springframework.security.core.GrantedAuthority> getAuthorities​(org.springframework.security.oauth2.core.user.OAuth2User user,
                                                                                        org.springframework.security.oauth2.client.userinfo.OAuth2UserRequest userRequest)

      • getAuthorities

        default Collection<? extends org.springframework.security.core.GrantedAuthority> getAuthorities​(org.springframework.security.oauth2.core.oidc.user.OidcUser user,
                                                                                                org.springframework.security.oauth2.client.oidc.userinfo.OidcUserRequest userRequest)