Package org.alfresco.repo.security.authentication.identityservice

Class PasswordGrantFlowHandler

java.lang.Object

org.alfresco.repo.security.authentication.identityservice.PasswordGrantFlowHandler

public class PasswordGrantFlowHandler
extends Object

Constructor Summary

Constructors

Constructor	Description
PasswordGrantFlowHandler(org.springframework.security.oauth2.client.registration.ClientRegistration clientRegistration)

Method Summary

Modifier and Type	Method	Description
IdentityServiceFacade.AccessTokenAuthorization	passwordGrantFlow(IdentityServiceFacade.AuthorizationGrant authorizationGrant)	Deprecated. The OAuth 2.0 Security Best Current Practice disallows the use of the Resource Owner Password Credentials grant.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

PasswordGrantFlowHandler

public PasswordGrantFlowHandler(org.springframework.security.oauth2.client.registration.ClientRegistration clientRegistration)

Method Details

passwordGrantFlow

@Deprecated(since="26.1")
public IdentityServiceFacade.AccessTokenAuthorization passwordGrantFlow(IdentityServiceFacade.AuthorizationGrant authorizationGrant)
                                                                 throws IOException,
com.nimbusds.oauth2.sdk.ParseException

Deprecated.

The OAuth 2.0 Security Best Current Practice disallows the use of the Resource Owner Password Credentials grant. See reference OAuth 2.0 Security Best Current Practice.. It was added as backward compatibility with Spring Framework 7. Meant to be removed in the future.

Handles the password grant flow for obtaining an access token. Replacement for Spring Security implementation removed in Spring 7.

Parameters:

authorizationGrant - the authorization grant

Returns:

the access token authorization

Throws:

IOException - if an I/O error occurs

com.nimbusds.oauth2.sdk.ParseException - if parsing the token response fails

See Also:

• Section 4.3.2 Access Token Request (Resource Owner Password Credentials Grant)
• Section 4.3.3 Access Token Response (Resource Owner Password Credentials Grant)