Module iu.util.auth.config

Package iu.auth.config

Class SelfIssuedAccessToken

java.lang.Object

iu.auth.config.SelfIssuedAccessToken

All Implemented Interfaces:

IuApiCredentials, IuPrincipalIdentity, Principal

public class SelfIssuedAccessToken
extends Object
implements IuApiCredentials

Encapsulates a self-issued access token suitable for server-to-server invocation between nodes associated by a web of trust relationship.

Constructor Summary

Constructors

Constructor	Description
SelfIssuedAccessToken(IuPrivateKeyPrincipal pkp, URI audience, Duration tokenTtl, IuCallerAttributes caller)	Constructor, for use by the self-issuing client endpoint.
SelfIssuedAccessToken(IuPrivateKeyPrincipal pkp, URI audience, Duration tokenTtl, String bearerToken)	Constructor, for use by the verifying server endpoint.

Method Summary

Modifier and Type	Method	Description
void	applyTo(HttpRequest.Builder requestBuilder)	Applies the client's API credentials to an HTTP request.
Instant	getAuthTime()	Gets the point in time the principal's credentials were verified by the authentication provider.
Instant	getExpires()	Gets the point in time after which the principal's authenticated session is expired.
Instant	getIssuedAt()	Gets the point in time proof of principal identity was issued by an authentication provider.
String	getIssuer()	Gets the principal name of the principal issuer.
String	getName()
Subject	getSubject()	Gets a subject including this principal, related principals, and implied credentials.
String	toString()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Methods inherited from interface edu.iu.auth.IuPrincipalIdentity

implies

Methods inherited from interface java.security.Principal

equals, hashCode

Constructor Details

SelfIssuedAccessToken

public SelfIssuedAccessToken(IuPrivateKeyPrincipal pkp,
 URI audience,
 Duration tokenTtl,
 IuCallerAttributes caller)

Constructor, for use by the self-issuing client endpoint.

Parameters:

pkp - Issuer identity metadata

audience - Remote audience URI

tokenTtl - Duration between token issue and expiration times

caller - Caller attributes

SelfIssuedAccessToken

public SelfIssuedAccessToken(IuPrivateKeyPrincipal pkp,
 URI audience,
 Duration tokenTtl,
 String bearerToken)

Constructor, for use by the verifying server endpoint.

Parameters:

pkp - Issuer identity metadata

audience - Remote audience URI

tokenTtl - Duration between token issue and expiration times

bearerToken - Bearer token

Method Details

getName

public String getName()

Specified by:

getName in interface Principal

getIssuer

public String getIssuer()

Description copied from interface: IuPrincipalIdentity

Gets the principal name of the principal issuer.

Specified by:

getIssuer in interface IuPrincipalIdentity

Returns:

issuer principal name; e.g., OIDC Provider URI or SAML IDP Entity ID

getIssuedAt

public Instant getIssuedAt()

Description copied from interface: IuPrincipalIdentity

Gets the point in time proof of principal identity was issued by an authentication provider.

Specified by:

getIssuedAt in interface IuPrincipalIdentity

Returns:

Instant

getAuthTime

public Instant getAuthTime()

Description copied from interface: IuPrincipalIdentity

Gets the point in time the principal's credentials were verified by the authentication provider.

Specified by:

getAuthTime in interface IuPrincipalIdentity

Returns:

Instant

getExpires

public Instant getExpires()

Description copied from interface: IuPrincipalIdentity

Gets the point in time after which the principal's authenticated session is expired.

Specified by:

getExpires in interface IuPrincipalIdentity

Returns:

Instant

getSubject

public Subject getSubject()

Description copied from interface: IuPrincipalIdentity

Gets a subject including this principal, related principals, and implied credentials.

Specified by:

getSubject in interface IuPrincipalIdentity

Returns:

Subject

applyTo

public void applyTo(HttpRequest.Builder requestBuilder)
             throws IuAuthenticationException

Description copied from interface: IuApiCredentials

Applies the client's API credentials to an HTTP request.

Specified by:

applyTo in interface IuApiCredentials

Parameters:

requestBuilder - HttpRequest.Builder

Throws:

IuAuthenticationException - If authenticated credentials have expired or been revoked since initial authorization

toString

public String toString()

Specified by:

toString in interface Principal

Overrides:

toString in class Object