Package org.camunda.bpm.spring.boot.starter.security.oauth2.impl

Class OAuth2AuthenticationProvider

java.lang.Object

org.camunda.bpm.engine.rest.security.auth.impl.ContainerBasedAuthenticationProvider

org.camunda.bpm.spring.boot.starter.security.oauth2.impl.OAuth2AuthenticationProvider

All Implemented Interfaces:

AuthenticationProvider

public class OAuth2AuthenticationProvider
extends ContainerBasedAuthenticationProvider

Constructor Summary

Constructors

Constructor	Description
OAuth2AuthenticationProvider()

Method Summary

Modifier and Type	Method	Description
AuthenticationResult	extractAuthenticatedUser(jakarta.servlet.http.HttpServletRequest request, ProcessEngine engine)	Checks the request for authentication.

Methods inherited from class org.camunda.bpm.engine.rest.security.auth.impl.ContainerBasedAuthenticationProvider

augmentResponseByAuthenticationChallenge

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

OAuth2AuthenticationProvider

public OAuth2AuthenticationProvider()

Method Details

extractAuthenticatedUser

public AuthenticationResult extractAuthenticatedUser(jakarta.servlet.http.HttpServletRequest request,
 ProcessEngine engine)

Description copied from interface: AuthenticationProvider

Checks the request for authentication. May not return null, but always an AuthenticationResult that indicates, whether authentication was successful, and, if true, always provides the authenticated user. The result can only be successful if a valid user id was provided in the request. It is not required to provide the group or tenant id, as they will be resolved via the IdentityService (e.g. ProcessEngineAuthenticationFilter.setAuthenticatedUser(org.camunda.bpm.engine.ProcessEngine, java.lang.String, java.util.List<java.lang.String>, java.util.List<java.lang.String>)).

Specified by:

extractAuthenticatedUser in interface AuthenticationProvider

Overrides:

extractAuthenticatedUser in class ContainerBasedAuthenticationProvider

Parameters:

request - the request to authenticate

engine - the process engine the request addresses. May be used to authenticate against the engine's identity service.