com.sap.cloud.security.xsuaa.client

Interface OAuth2TokenService

All Known Implementing Classes:

AbstractOAuth2TokenService, DefaultOAuth2TokenService, XsuaaOAuth2TokenService

public interface OAuth2TokenService

Retrieves OAuth2 Access Tokens as documented here: https://docs.cloudfoundry.org/api/uaa/version/4.31.0/index.html#token

Method Summary

Modifier and Type	Method and Description
default OAuth2TokenResponse	retrieveAccessTokenViaClientCredentialsGrant(URI tokenEndpointUri, ClientCredentials clientCredentials, String subdomain, Map<String,String> optionalParameters) Deprecated. gets removed in favor of retrieveAccessTokenViaClientCredentialsGrant(URI, ClientCredentials, String, Map, boolean) with next major version 3.0.0
OAuth2TokenResponse	retrieveAccessTokenViaClientCredentialsGrant(URI tokenEndpointUri, ClientCredentials clientCredentials, String subdomain, Map<String,String> optionalParameters, boolean disableCacheForRequest) Requests access token from OAuth Server with client credentials.
default OAuth2TokenResponse	retrieveAccessTokenViaJwtBearerTokenGrant(URI tokenEndpointUri, ClientCredentials clientCredentials, String token, String subdomain, Map<String,String> optionalParameters) Deprecated. gets removed in favor of retrieveAccessTokenViaJwtBearerTokenGrant(URI, ClientCredentials, String, String, Map, boolean) with next major version 3.0.0
OAuth2TokenResponse	retrieveAccessTokenViaJwtBearerTokenGrant(URI tokenEndpointUri, ClientCredentials clientCredentials, String token, String subdomain, Map<String,String> optionalParameters, boolean disableCacheForRequest)
default OAuth2TokenResponse	retrieveAccessTokenViaPasswordGrant(URI tokenEndpointUri, ClientCredentials clientCredentials, String username, String password, String subdomain, Map<String,String> optionalParameters) Deprecated. gets removed in favor of retrieveAccessTokenViaPasswordGrant(URI, ClientCredentials, String, String, String, Map, boolean) with next major version 3.0.0
OAuth2TokenResponse	retrieveAccessTokenViaPasswordGrant(URI tokenEndpointUri, ClientCredentials clientCredentials, String username, String password, String subdomain, Map<String,String> optionalParameters, boolean disableCacheForRequest) Requests access token from OAuth Server with user / password.
default OAuth2TokenResponse	retrieveAccessTokenViaRefreshToken(URI tokenEndpointUri, ClientCredentials clientCredentials, String refreshToken, String subdomain) Deprecated. gets removed in favor of retrieveAccessTokenViaRefreshToken(URI, ClientCredentials, String, String, boolean) with next major version 3.0.0
OAuth2TokenResponse	retrieveAccessTokenViaRefreshToken(URI tokenEndpointUri, ClientCredentials clientCredentials, String refreshToken, String subdomain, boolean disableCacheForRequest) Requests access token from OAuth Server with refresh-token.
OAuth2TokenResponse	retrieveAccessTokenViaUserTokenGrant(URI tokenEndpointUri, ClientCredentials clientCredentials, String token, String subdomain, Map<String,String> optionalParameters) Deprecated. instead use jwt bearer {retrieveAccessTokenViaJwtBearerTokenGrant(URI, ClientCredentials, String, String, Map)}.

Method Detail

retrieveAccessTokenViaClientCredentialsGrant

OAuth2TokenResponse retrieveAccessTokenViaClientCredentialsGrant(@Nonnull
                                                                 URI tokenEndpointUri,
                                                                 @Nonnull
                                                                 ClientCredentials clientCredentials,
                                                                 @Nullable
                                                                 String subdomain,
                                                                 @Nullable
                                                                 Map<String,String> optionalParameters,
                                                                 boolean disableCacheForRequest)
                                                          throws OAuth2ServiceException

Requests access token from OAuth Server with client credentials.

Parameters:

tokenEndpointUri - the token endpoint URI.

clientCredentials - the client id and secret of the OAuth client, the recipient of the token.

subdomain - optionally indicates what Identity Zone this request goes to by supplying a subdomain (tenant).

optionalParameters - optional request parameters, can be null.

disableCacheForRequest - set to true disables the token cache for this request.

Returns:

the OAuth2AccessToken.

Throws:

OAuth2ServiceException - in case of an error during the http request.

retrieveAccessTokenViaClientCredentialsGrant

@Deprecated
default OAuth2TokenResponse retrieveAccessTokenViaClientCredentialsGrant(URI tokenEndpointUri,
                                                                                     ClientCredentials clientCredentials,
                                                                                     @Nullable
                                                                                     String subdomain,
                                                                                     @Nullable
                                                                                     Map<String,String> optionalParameters)
                                                                              throws OAuth2ServiceException

Deprecated. gets removed in favor of retrieveAccessTokenViaClientCredentialsGrant(URI, ClientCredentials, String, Map, boolean) with next major version 3.0.0

Same as retrieveAccessTokenViaClientCredentialsGrant(URI, ClientCredentials, String, Map, boolean) except that disableCacheForRequest is set to false.

Throws:

OAuth2ServiceException

retrieveAccessTokenViaUserTokenGrant

@Deprecated
OAuth2TokenResponse retrieveAccessTokenViaUserTokenGrant(URI tokenEndpointUri,
                                                                     ClientCredentials clientCredentials,
                                                                     String token,
                                                                     @Nullable
                                                                     String subdomain,
                                                                     @Nullable
                                                                     Map<String,String> optionalParameters)
                                                              throws OAuth2ServiceException

Deprecated. instead use jwt bearer {retrieveAccessTokenViaJwtBearerTokenGrant(URI, ClientCredentials, String, String, Map)}.

Exchanges user access token from OAuth Server with user access token. This endpoint returns only opaque access token, so that another call using {link #retrieveAccessTokenViaRefreshToken} is required.

Parameters:

tokenEndpointUri - the token endpoint URI.

clientCredentials - the client id and secret of the OAuth client, the recipient of the token.

token - the user bearer token, that represents an authenticated user.

subdomain - optionally indicates what Identity Zone this request goes to by supplying a subdomain (tenant).

optionalParameters - optional request parameters, can be null.

Returns:

the OAuth2AccessToken.

Throws:

OAuth2ServiceException - in case of an error during the http request.

retrieveAccessTokenViaRefreshToken

OAuth2TokenResponse retrieveAccessTokenViaRefreshToken(URI tokenEndpointUri,
                                                       ClientCredentials clientCredentials,
                                                       String refreshToken,
                                                       @Nullable
                                                       String subdomain,
                                                       boolean disableCacheForRequest)
                                                throws OAuth2ServiceException

Requests access token from OAuth Server with refresh-token.

Parameters:

tokenEndpointUri - the token endpoint URI.

clientCredentials - the client id and secret of the OAuth client, the recipient of the token.

refreshToken - the refresh token that was returned along with the access token {link #OAuth2AccessToken}.

subdomain - optionally indicates what Identity Zone this request goes to by supplying a subdomain (tenant).

disableCacheForRequest - set to true disables the token cache for this request.

Returns:

the OAuth2AccessToken

Throws:

OAuth2ServiceException - in case of an error during the http request.

retrieveAccessTokenViaRefreshToken

@Deprecated
default OAuth2TokenResponse retrieveAccessTokenViaRefreshToken(URI tokenEndpointUri,
                                                                           ClientCredentials clientCredentials,
                                                                           String refreshToken,
                                                                           @Nullable
                                                                           String subdomain)
                                                                    throws OAuth2ServiceException

Deprecated. gets removed in favor of retrieveAccessTokenViaRefreshToken(URI, ClientCredentials, String, String, boolean) with next major version 3.0.0

Same as retrieveAccessTokenViaRefreshToken(URI, ClientCredentials, String, String, boolean) except that disableCacheForRequest is set to false.

Throws:

OAuth2ServiceException

retrieveAccessTokenViaPasswordGrant

OAuth2TokenResponse retrieveAccessTokenViaPasswordGrant(URI tokenEndpointUri,
                                                        ClientCredentials clientCredentials,
                                                        String username,
                                                        String password,
                                                        @Nullable
                                                        String subdomain,
                                                        @Nullable
                                                        Map<String,String> optionalParameters,
                                                        boolean disableCacheForRequest)
                                                 throws OAuth2ServiceException

Requests access token from OAuth Server with user / password.

Parameters:

tokenEndpointUri - the token endpoint URI.

clientCredentials - the client id and secret of the OAuth client, the recipient of the token.

username - the username for the user trying to get a token

password - the password for the user trying to get a token

subdomain - optionally indicates what Identity Zone this request goes to by supplying a subdomain (tenant).

optionalParameters - optional request parameters, can be null.

disableCacheForRequest - set to true disables the token cache for this request.

Returns:

the OAuth2AccessToken

Throws:

OAuth2ServiceException - in case of an error during the http request.

retrieveAccessTokenViaPasswordGrant

@Deprecated
default OAuth2TokenResponse retrieveAccessTokenViaPasswordGrant(URI tokenEndpointUri,
                                                                            ClientCredentials clientCredentials,
                                                                            String username,
                                                                            String password,
                                                                            @Nullable
                                                                            String subdomain,
                                                                            @Nullable
                                                                            Map<String,String> optionalParameters)
                                                                     throws OAuth2ServiceException

Deprecated. gets removed in favor of retrieveAccessTokenViaPasswordGrant(URI, ClientCredentials, String, String, String, Map, boolean) with next major version 3.0.0

Same as retrieveAccessTokenViaPasswordGrant(URI, ClientCredentials, String, String, String, Map, boolean) except that disableCacheForRequest is set to false.

Throws:

OAuth2ServiceException

retrieveAccessTokenViaJwtBearerTokenGrant

OAuth2TokenResponse retrieveAccessTokenViaJwtBearerTokenGrant(URI tokenEndpointUri,
                                                              ClientCredentials clientCredentials,
                                                              String token,
                                                              @Nullable
                                                              String subdomain,
                                                              @Nullable
                                                              Map<String,String> optionalParameters,
                                                              boolean disableCacheForRequest)
                                                       throws OAuth2ServiceException

Parameters:

tokenEndpointUri - the token endpoint URI.

clientCredentials - the client id and secret of the OAuth client, the recipient of the token.

token - the JWT token identifying representing the user to be authenticated

subdomain - optionally indicates what Identity Zone this request goes to by supplying a subdomain (tenant).

optionalParameters - optional request parameters, can be null.

disableCacheForRequest - set to true disables the token cache for this request.

Returns:

the OAuth2AccessToken

Throws:

OAuth2ServiceException - in case of an error during the http request.

retrieveAccessTokenViaJwtBearerTokenGrant

@Deprecated
default OAuth2TokenResponse retrieveAccessTokenViaJwtBearerTokenGrant(URI tokenEndpointUri,
                                                                                  ClientCredentials clientCredentials,
                                                                                  String token,
                                                                                  @Nullable
                                                                                  String subdomain,
                                                                                  @Nullable
                                                                                  Map<String,String> optionalParameters)
                                                                           throws OAuth2ServiceException

Deprecated. gets removed in favor of retrieveAccessTokenViaJwtBearerTokenGrant(URI, ClientCredentials, String, String, Map, boolean) with next major version 3.0.0

Same as retrieveAccessTokenViaJwtBearerTokenGrant(URI, ClientCredentials, String, String, Map, boolean) except that disableCacheForRequest is set to false.

Throws:

OAuth2ServiceException