org.springframework.security.oauth2.provider.authentication

Class BearerTokenExtractor

java.lang.Object

org.springframework.security.oauth2.provider.authentication.BearerTokenExtractor

All Implemented Interfaces:

TokenExtractor

public class BearerTokenExtractor
extends Object
implements TokenExtractor

TokenExtractor that strips the authenticator from a bearer token request (with an Authorization header in the form "Bearer <TOKEN>", or as a request parameter if that fails). The access token is the principal in the authentication token that is extracted.

Author:

Dave Syer

Constructor Summary

Constructors

Constructor and Description
BearerTokenExtractor()

Method Summary

Modifier and Type	Method and Description
org.springframework.security.core.Authentication	extract(javax.servlet.http.HttpServletRequest request) Extract a token value from an incoming request without authentication.
protected String	extractHeaderToken(javax.servlet.http.HttpServletRequest request) Extract the OAuth bearer token from a header.
protected String	extractToken(javax.servlet.http.HttpServletRequest request)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

BearerTokenExtractor

public BearerTokenExtractor()

Method Detail

extract

public org.springframework.security.core.Authentication extract(javax.servlet.http.HttpServletRequest request)

Description copied from interface: TokenExtractor

Extract a token value from an incoming request without authentication.

Specified by:

extract in interface TokenExtractor

Parameters:

request - the current ServletRequest

Returns:

an authentication token whose principal is an access token (or null if there is none)

extractToken

protected String extractToken(javax.servlet.http.HttpServletRequest request)

extractHeaderToken

protected String extractHeaderToken(javax.servlet.http.HttpServletRequest request)

Extract the OAuth bearer token from a header.

Parameters:

request - The request.

Returns:

The token, or null if no OAuth authorization header was supplied.