Package com.rabbitmq.client.impl

Class OAuth2ClientCredentialsGrantCredentialsProvider

java.lang.Object

com.rabbitmq.client.impl.RefreshProtectedCredentialsProvider<OAuth2ClientCredentialsGrantCredentialsProvider.Token>

com.rabbitmq.client.impl.OAuth2ClientCredentialsGrantCredentialsProvider

All Implemented Interfaces:

CredentialsProvider

public class OAuth2ClientCredentialsGrantCredentialsProvider
extends RefreshProtectedCredentialsProvider<OAuth2ClientCredentialsGrantCredentialsProvider.Token>

A CredentialsProvider that performs an OAuth 2 Client Credentials flow to retrieve a token.

The provider has different parameters to set, e.g. the token endpoint URI of the OAuth server to request, the client ID, the client secret, the grant type, etc. The OAuth2ClientCredentialsGrantCredentialsProvider.OAuth2ClientCredentialsGrantCredentialsProviderBuilder class is the preferred way to create an instance of the provider.

The implementation uses the JDK HttpURLConnection API to request the OAuth server. This can be easily changed by overriding the retrieveToken() method.

This class expects a JSON document as a response and needs Jackson to deserialize the response into a OAuth2ClientCredentialsGrantCredentialsProvider.Token. This can be changed by overriding the parseToken(String) method.

TLS is supported by providing a HTTPS URI and setting a SSLContext. See OAuth2ClientCredentialsGrantCredentialsProvider.OAuth2ClientCredentialsGrantCredentialsProviderBuilder.tls() for more information. Applications in production should always use HTTPS to retrieve tokens.

If more customization is needed, a connectionConfigurator callback can be provided to configure the connection.

See Also:

• RefreshProtectedCredentialsProvider
• CredentialsRefreshService
• OAuth2ClientCredentialsGrantCredentialsProvider.OAuth2ClientCredentialsGrantCredentialsProviderBuilder
• OAuth2ClientCredentialsGrantCredentialsProvider.OAuth2ClientCredentialsGrantCredentialsProviderBuilder.tls()

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
private static class	OAuth2ClientCredentialsGrantCredentialsProvider.JacksonTokenLookup
static class	OAuth2ClientCredentialsGrantCredentialsProvider.OAuth2ClientCredentialsGrantCredentialsProviderBuilder	Helper to create OAuth2ClientCredentialsGrantCredentialsProvider instances.
static class	OAuth2ClientCredentialsGrantCredentialsProvider.TlsConfiguration	TLS configuration for a OAuth2ClientCredentialsGrantCredentialsProvider.
static class	OAuth2ClientCredentialsGrantCredentialsProvider.Token

Field Summary

Fields

Modifier and Type	Field	Description
private final String	clientId
private final String	clientSecret
private final Consumer<HttpURLConnection>	connectionConfigurator
private final String	grantType
private final HostnameVerifier	hostnameVerifier
private final String	id
private final Map<String,String>	parameters
private final SSLSocketFactory	sslSocketFactory
private final String	tokenEndpointUri
private final AtomicReference<Function<String,OAuth2ClientCredentialsGrantCredentialsProvider.Token>>	tokenExtractor
private static final String	UTF_8_CHARSET

Constructor Summary

Constructors

Constructor	Description
OAuth2ClientCredentialsGrantCredentialsProvider(String tokenEndpointUri, String clientId, String clientSecret, String grantType)	Use OAuth2ClientCredentialsGrantCredentialsProvider.OAuth2ClientCredentialsGrantCredentialsProviderBuilder to create an instance.
OAuth2ClientCredentialsGrantCredentialsProvider(String tokenEndpointUri, String clientId, String clientSecret, String grantType, Map<String,String> parameters)	Use OAuth2ClientCredentialsGrantCredentialsProvider.OAuth2ClientCredentialsGrantCredentialsProviderBuilder to create an instance.
OAuth2ClientCredentialsGrantCredentialsProvider(String tokenEndpointUri, String clientId, String clientSecret, String grantType, Map<String,String> parameters, Consumer<HttpURLConnection> connectionConfigurator)	Use OAuth2ClientCredentialsGrantCredentialsProvider.OAuth2ClientCredentialsGrantCredentialsProviderBuilder to create an instance.
OAuth2ClientCredentialsGrantCredentialsProvider(String tokenEndpointUri, String clientId, String clientSecret, String grantType, Map<String,String> parameters, HostnameVerifier hostnameVerifier, SSLSocketFactory sslSocketFactory)	Use OAuth2ClientCredentialsGrantCredentialsProvider.OAuth2ClientCredentialsGrantCredentialsProviderBuilder to create an instance.
OAuth2ClientCredentialsGrantCredentialsProvider(String tokenEndpointUri, String clientId, String clientSecret, String grantType, Map<String,String> parameters, HostnameVerifier hostnameVerifier, SSLSocketFactory sslSocketFactory, Consumer<HttpURLConnection> connectionConfigurator)	Use OAuth2ClientCredentialsGrantCredentialsProvider.OAuth2ClientCredentialsGrantCredentialsProviderBuilder to create an instance.
OAuth2ClientCredentialsGrantCredentialsProvider(String tokenEndpointUri, String clientId, String clientSecret, String grantType, HostnameVerifier hostnameVerifier, SSLSocketFactory sslSocketFactory)	Use OAuth2ClientCredentialsGrantCredentialsProvider.OAuth2ClientCredentialsGrantCredentialsProviderBuilder to create an instance.

Method Summary

Modifier and Type	Method	Description
private static String	basicAuthentication(String username, String password)
protected void	checkContentType(String headerField)
protected void	checkResponseCode(int responseCode)
protected void	configureConnection(HttpURLConnection connection)
protected void	configureConnectionForHttps(HttpURLConnection connection)
private static StringBuilder	encode(StringBuilder builder, String name, String value)
private static String	encode(String value, String charset)
boolean	equals(Object o)
protected String	extractResponseBody(InputStream inputStream)
String	getUsername()	Username to use for authentication
int	hashCode()
protected OAuth2ClientCredentialsGrantCredentialsProvider.Token	parseToken(String response)
protected String	passwordFromToken(OAuth2ClientCredentialsGrantCredentialsProvider.Token token)
protected OAuth2ClientCredentialsGrantCredentialsProvider.Token	retrieveToken()
protected Duration	timeBeforeExpiration(OAuth2ClientCredentialsGrantCredentialsProvider.Token token)
protected String	usernameFromToken(OAuth2ClientCredentialsGrantCredentialsProvider.Token token)

Methods inherited from class com.rabbitmq.client.impl.RefreshProtectedCredentialsProvider

getPassword, getTimeBeforeExpiration, refresh

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, toString, wait, wait, wait

Field Details

UTF_8_CHARSET

private static final String UTF_8_CHARSET

See Also:

• Constant Field Values

tokenEndpointUri

private final String tokenEndpointUri

clientId

private final String clientId

clientSecret

private final String clientSecret

grantType

private final String grantType

parameters

private final Map<String,String> parameters

tokenExtractor

private final AtomicReference<Function<String,OAuth2ClientCredentialsGrantCredentialsProvider.Token>> tokenExtractor

id

private final String id

hostnameVerifier

private final HostnameVerifier hostnameVerifier

sslSocketFactory

private final SSLSocketFactory sslSocketFactory

connectionConfigurator

private final Consumer<HttpURLConnection> connectionConfigurator

Constructor Details

OAuth2ClientCredentialsGrantCredentialsProvider

public OAuth2ClientCredentialsGrantCredentialsProvider(String tokenEndpointUri,
 String clientId,
 String clientSecret,
 String grantType)

Use OAuth2ClientCredentialsGrantCredentialsProvider.OAuth2ClientCredentialsGrantCredentialsProviderBuilder to create an instance.

Parameters:

tokenEndpointUri -

clientId -

clientSecret -

grantType -

OAuth2ClientCredentialsGrantCredentialsProvider

public OAuth2ClientCredentialsGrantCredentialsProvider(String tokenEndpointUri,
 String clientId,
 String clientSecret,
 String grantType,
 Map<String,String> parameters)

Use OAuth2ClientCredentialsGrantCredentialsProvider.OAuth2ClientCredentialsGrantCredentialsProviderBuilder to create an instance.

Parameters:

tokenEndpointUri -

clientId -

clientSecret -

grantType -

parameters -

OAuth2ClientCredentialsGrantCredentialsProvider

public OAuth2ClientCredentialsGrantCredentialsProvider(String tokenEndpointUri,
 String clientId,
 String clientSecret,
 String grantType,
 Map<String,String> parameters,
 Consumer<HttpURLConnection> connectionConfigurator)

Use OAuth2ClientCredentialsGrantCredentialsProvider.OAuth2ClientCredentialsGrantCredentialsProviderBuilder to create an instance.

Parameters:

tokenEndpointUri -

clientId -

clientSecret -

grantType -

parameters -

connectionConfigurator -

OAuth2ClientCredentialsGrantCredentialsProvider

public OAuth2ClientCredentialsGrantCredentialsProvider(String tokenEndpointUri,
 String clientId,
 String clientSecret,
 String grantType,
 HostnameVerifier hostnameVerifier,
 SSLSocketFactory sslSocketFactory)

Use OAuth2ClientCredentialsGrantCredentialsProvider.OAuth2ClientCredentialsGrantCredentialsProviderBuilder to create an instance.

Parameters:

tokenEndpointUri -

clientId -

clientSecret -

grantType -

hostnameVerifier -

sslSocketFactory -

OAuth2ClientCredentialsGrantCredentialsProvider

public OAuth2ClientCredentialsGrantCredentialsProvider(String tokenEndpointUri,
 String clientId,
 String clientSecret,
 String grantType,
 Map<String,String> parameters,
 HostnameVerifier hostnameVerifier,
 SSLSocketFactory sslSocketFactory)

Use OAuth2ClientCredentialsGrantCredentialsProvider.OAuth2ClientCredentialsGrantCredentialsProviderBuilder to create an instance.

Parameters:

tokenEndpointUri -

clientId -

clientSecret -

grantType -

parameters -

hostnameVerifier -

sslSocketFactory -

OAuth2ClientCredentialsGrantCredentialsProvider

public OAuth2ClientCredentialsGrantCredentialsProvider(String tokenEndpointUri,
 String clientId,
 String clientSecret,
 String grantType,
 Map<String,String> parameters,
 HostnameVerifier hostnameVerifier,
 SSLSocketFactory sslSocketFactory,
 Consumer<HttpURLConnection> connectionConfigurator)

Use OAuth2ClientCredentialsGrantCredentialsProvider.OAuth2ClientCredentialsGrantCredentialsProviderBuilder to create an instance.

Parameters:

tokenEndpointUri -

clientId -

clientSecret -

grantType -

parameters -

hostnameVerifier -

sslSocketFactory -

connectionConfigurator -

Method Details

encode

private static StringBuilder encode(StringBuilder builder,
 String name,
 String value)
                             throws UnsupportedEncodingException

Throws:

UnsupportedEncodingException

encode

private static String encode(String value,
 String charset)
                      throws UnsupportedEncodingException

Throws:

UnsupportedEncodingException

basicAuthentication

private static String basicAuthentication(String username,
 String password)

getUsername

public String getUsername()

Description copied from interface: CredentialsProvider

Username to use for authentication

Specified by:

getUsername in interface CredentialsProvider

Overrides:

getUsername in class RefreshProtectedCredentialsProvider<OAuth2ClientCredentialsGrantCredentialsProvider.Token>

Returns:

username

usernameFromToken

protected String usernameFromToken(OAuth2ClientCredentialsGrantCredentialsProvider.Token token)

Specified by:

usernameFromToken in class RefreshProtectedCredentialsProvider<OAuth2ClientCredentialsGrantCredentialsProvider.Token>

parseToken

protected OAuth2ClientCredentialsGrantCredentialsProvider.Token parseToken(String response)

retrieveToken

protected OAuth2ClientCredentialsGrantCredentialsProvider.Token retrieveToken()

Specified by:

retrieveToken in class RefreshProtectedCredentialsProvider<OAuth2ClientCredentialsGrantCredentialsProvider.Token>

checkContentType

protected void checkContentType(String headerField)
                         throws OAuthTokenManagementException

Throws:

OAuthTokenManagementException

checkResponseCode

protected void checkResponseCode(int responseCode)
                          throws OAuthTokenManagementException

Throws:

OAuthTokenManagementException

extractResponseBody

protected String extractResponseBody(InputStream inputStream)
                              throws IOException

Throws:

IOException

passwordFromToken

protected String passwordFromToken(OAuth2ClientCredentialsGrantCredentialsProvider.Token token)

Specified by:

passwordFromToken in class RefreshProtectedCredentialsProvider<OAuth2ClientCredentialsGrantCredentialsProvider.Token>

timeBeforeExpiration

protected Duration timeBeforeExpiration(OAuth2ClientCredentialsGrantCredentialsProvider.Token token)

Specified by:

timeBeforeExpiration in class RefreshProtectedCredentialsProvider<OAuth2ClientCredentialsGrantCredentialsProvider.Token>

configureConnection

protected void configureConnection(HttpURLConnection connection)

configureConnectionForHttps

protected void configureConnectionForHttps(HttpURLConnection connection)

equals

public boolean equals(Object o)

Overrides:

equals in class Object

hashCode

public int hashCode()

Overrides:

hashCode in class Object