Interface MicroProfileAuthorization

All Superinterfaces:

AuthorizationProvider

public interface MicroProfileAuthorization
extends AuthorizationProvider

Implementation of the Microprofile MP-JWT 1.1 RBAC based on the access token groups key.

Author:

Paulo Lopes.

Method Summary

Static Methods

Modifier and Type	Method	Description
static MicroProfileAuthorization	create()	Factory method to create a Authorization provider for tokens adhering to the MP-JWT 1.1 spec.

Methods inherited from interface AuthorizationProvider

getAuthorizations, getId

Method Details

create

static MicroProfileAuthorization create()

Factory method to create a Authorization provider for tokens adhering to the MP-JWT 1.1 spec. When the user is known to not be a JWT, (e.g.: a OAuth2 response token) then the root claim is expected to be extracted from User.attributes() under the key accessToken.

Returns:

a AuthorizationProvider