Class BearerTokenAccessDeniedHandler

java.lang.Object

com.codename1.backend.security.oauth2.server.resource.BearerTokenAccessDeniedHandler

All Implemented Interfaces:

AccessDeniedHandler

public final class BearerTokenAccessDeniedHandler
extends Object
implements AccessDeniedHandler

Answers a request whose token is good and does not grant what the request needs, as RFC 6750 3.1 says to:

403   WWW-Authenticate: Bearer error="insufficient_scope",
          error_description="The request requires higher privileges than provided by the
          access token.", error_uri="https://tools.ietf.org/html/rfc6750#section-3.1",
          scope="orders:write"

The scope is there when the rule that refused the request asks for one.

Constructor Summary

Constructors

Constructor	Description
BearerTokenAccessDeniedHandler()

Method Summary

Modifier and Type	Method	Description
HttpServer.Response	handle(HttpServer.Request request, AccessDeniedException accessDeniedException)
void	setRealmName(String realmName)	A realm to name in the challenge; none unless set.

Methods inherited from class Object

clone, equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

BearerTokenAccessDeniedHandler

public BearerTokenAccessDeniedHandler()

Method Details

setRealmName

public void setRealmName(String realmName)

A realm to name in the challenge; none unless set.

handle

public HttpServer.Response handle(HttpServer.Request request,
 AccessDeniedException accessDeniedException)

Specified by:

handle in interface AccessDeniedHandler