com.okta.spring.boot.oauth

Interface AuthoritiesProvider

public interface AuthoritiesProvider

Allows for custom GrantedAuthoritys to be added to the current OAuth Principal. Multiple implementations are allowed, by default OAuth scopes are converted to Authorities with the format SCOPE_<scope-name> and if a `groups` claim exists in the access or id token, those are converted as well. Example usage:

     @Bean
     AuthoritiesProvider myCustomAuthoritiesProvider() {
         return (user, userRequest) -> lookupExtraAuthoritesByName(user.getAttributes().get("email"));
     }
 

Since:

1.4.0

Method Summary

Modifier and Type	Method and Description
java.util.Collection<? extends org.springframework.security.core.GrantedAuthority>	getAuthorities(org.springframework.security.oauth2.core.user.OAuth2User user, org.springframework.security.oauth2.client.userinfo.OAuth2UserRequest userRequest)
default java.util.Collection<? extends org.springframework.security.core.GrantedAuthority>	getAuthorities(org.springframework.security.oauth2.core.oidc.user.OidcUser user, org.springframework.security.oauth2.client.oidc.userinfo.OidcUserRequest userRequest)

Method Detail

getAuthorities

java.util.Collection<? extends org.springframework.security.core.GrantedAuthority> getAuthorities(org.springframework.security.oauth2.core.user.OAuth2User user,
                                                                                                  org.springframework.security.oauth2.client.userinfo.OAuth2UserRequest userRequest)

getAuthorities

default java.util.Collection<? extends org.springframework.security.core.GrantedAuthority> getAuthorities(org.springframework.security.oauth2.core.oidc.user.OidcUser user,
                                                                                                          org.springframework.security.oauth2.client.oidc.userinfo.OidcUserRequest userRequest)