io.gravitee.am.gateway.handler.oauth2.service.request.TokenRequest Maven / Gradle / Ivy

Go to download
/**
 * Copyright (C) 2015 The Gravitee team (http://gravitee.io)
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *         http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
package io.gravitee.am.gateway.handler.oauth2.service.request;

import io.gravitee.am.common.oauth2.Parameters;
import io.gravitee.common.util.LinkedMultiValueMap;
import io.gravitee.common.util.MultiValueMap;

/**
 * See Access Token Request
 *
 * @author David BRASSELY (david.brassely at graviteesource.com)
 * @author Titouan COMPIEGNE (titouan.compiegne at graviteesource.com)
 * @author GraviteeSource Team
 */
public class TokenRequest extends OAuth2Request {

    /**
     * The resource owner username.
     * REQUIRED for Resource Owner Password Credentials Grant
     */
    private String username;

    /**
     * The resource owner password.
     * REQUIRED for Resource Owner Password Credentials Grant
     */
    private String password;

    /**
     * REQUIRED for User Managed Access Grant
     */
    private String ticket;

    /**
     * REQUIRED for User Managed Access Grant
     */
    private String claimToken;

    /**
     * REQUIRED for User Managed Access Grant
     */
    private String claimTokenFormat;

    /**
     * REQUIRED for User Managed Access Grant
     */
    private String persistedClaimsToken;

    /**
     * REQUIRED for User Managed Access Grant
     */
    private String requestingPartyToken;

    public String getUsername() {
        return username;
    }

    public void setUsername(String username) {
        this.username = username;
    }

    public String getPassword() {
        return password;
    }

    public void setPassword(String password) {
        this.password = password;
    }

    public String getTicket() {
        return ticket;
    }

    public void setTicket(String ticket) {
        this.ticket = ticket;
    }

    public String getClaimToken() {
        return claimToken;
    }

    public void setClaimToken(String claimToken) {
        this.claimToken = claimToken;
    }

    public String getClaimTokenFormat() {
        return claimTokenFormat;
    }

    public void setClaimTokenFormat(String claimTokenFormat) {
        this.claimTokenFormat = claimTokenFormat;
    }

    public String getPersistedClaimsToken() {
        return persistedClaimsToken;
    }

    public void setPersistedClaimsToken(String persistedClaimsToken) {
        this.persistedClaimsToken = persistedClaimsToken;
    }

    public String getRequestingPartyToken() {
        return requestingPartyToken;
    }

    public void setRequestingPartyToken(String requestingPartyToken) {
        this.requestingPartyToken = requestingPartyToken;
    }

    public OAuth2Request createOAuth2Request() {
        MultiValueMap requestParameters = parameters();
        MultiValueMap safeRequestParameters = new LinkedMultiValueMap(requestParameters);

        // Remove password if present to prevent leaks
        safeRequestParameters.remove(Parameters.PASSWORD);
        safeRequestParameters.remove(Parameters.CLIENT_SECRET);

        OAuth2Request oAuth2Request = new OAuth2Request();
        // set technical information
        oAuth2Request.setId(id());
        oAuth2Request.setTransactionId(transactionId());
        oAuth2Request.setTimestamp(timestamp());
        oAuth2Request.setPath(path());
        oAuth2Request.setOrigin(getOrigin());
        oAuth2Request.setUri(uri());
        oAuth2Request.setScheme(scheme());
        oAuth2Request.setContextPath(contextPath());
        oAuth2Request.setMethod(method());
        oAuth2Request.setVersion(version());
        oAuth2Request.setHeaders(headers());
        oAuth2Request.setParameters(safeRequestParameters);
        oAuth2Request.setHttpResponse(getHttpResponse());
        oAuth2Request.setContext(getContext());

        // set OAuth 2.0 information
        oAuth2Request.setClientId(getClientId());
        oAuth2Request.setScopes(getScopes());
        oAuth2Request.setGrantType(getGrantType());
        oAuth2Request.setSubject(getSubject());
        oAuth2Request.setAdditionalParameters(getAdditionalParameters());
        oAuth2Request.setRefreshToken(getRefreshToken());
        oAuth2Request.setAuthorizationCode(getAuthorizationCode());

        // set UMA 2.0 permissions
        oAuth2Request.setPermissions(getPermissions());

        // certificate bound access token
        oAuth2Request.setConfirmationMethodX5S256(getConfirmationMethodX5S256());

        return oAuth2Request;
    }
}