org.mitre.openid.connect.client

Class NamedAdminAuthoritiesMapper

java.lang.Object

org.mitre.openid.connect.client.NamedAdminAuthoritiesMapper

All Implemented Interfaces:

OIDCAuthoritiesMapper

public class NamedAdminAuthoritiesMapper
extends Object
implements OIDCAuthoritiesMapper

Simple mapper that adds ROLE_USER to the authorities map for all queries, plus adds ROLE_ADMIN if the subject and issuer pair are found in the configurable "admins" set.

Author:

jricher

Constructor Summary

Constructors

Constructor and Description
NamedAdminAuthoritiesMapper()

Method Summary

Modifier and Type	Method and Description
Set<SubjectIssuerGrantedAuthority>	getAdmins()
Collection<? extends org.springframework.security.core.GrantedAuthority>	mapAuthorities(com.nimbusds.jwt.JWT idToken, UserInfo userInfo)
void	setAdmins(Set<SubjectIssuerGrantedAuthority> admins)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

NamedAdminAuthoritiesMapper

public NamedAdminAuthoritiesMapper()

Method Detail

mapAuthorities

public Collection<? extends org.springframework.security.core.GrantedAuthority> mapAuthorities(com.nimbusds.jwt.JWT idToken,
                                                                                               UserInfo userInfo)

Specified by:

mapAuthorities in interface OIDCAuthoritiesMapper

Parameters:

idToken - the ID Token (parsed as a JWT, cannot be @null)

userInfo - userInfo of the current user (could be @null)

Returns:

the set of authorities to map to this user

getAdmins

public Set<SubjectIssuerGrantedAuthority> getAdmins()

Returns:

the admins

setAdmins

public void setAdmins(Set<SubjectIssuerGrantedAuthority> admins)

Parameters:

admins - the admins to set