Package org.apache.juneau.petstore.auth

Class StubBearerTokenValidator

java.lang.Object

org.apache.juneau.petstore.auth.StubBearerTokenValidator

All Implemented Interfaces:

TokenValidator

public class StubBearerTokenValidator
extends Object
implements TokenValidator

Stub TokenValidator for the petstore demo — recognises an in-memory map of opaque bearer tokens.

NOT FOR PRODUCTION USE. This is a sample/demo validator that maps fixed token strings to fixed user principals. Real deployments should plug in JwtTokenValidator from juneau-rest-server-auth-jwt (signed JWTs against a JWKS), an opaque-token store backed by a database, or RFC 7662 introspection.

Default token table:

• petstore-user → principal "alice"
• petstore-admin → principal "admin"

Other token strings throw AuthenticationException carrying a WWW-Authenticate: Bearer realm="petstore" challenge — the AuthFilterChain in turn returns 401.

Field Summary

Fields

Modifier and Type	Field	Description
static final Map<String,String>	DEFAULT_TOKENS	Default in-memory token table.

Constructor Summary

Constructors

Constructor	Description
StubBearerTokenValidator()	Constructor using the DEFAULT_TOKENS table.
StubBearerTokenValidator(Map<String,String> tokenToUser)	Constructor.

Method Summary

Modifier and Type	Method	Description
Principal	validate(String token)	Validates the supplied bearer token and returns the associated Principal.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

DEFAULT_TOKENS

public static final Map<String,String> DEFAULT_TOKENS

Default in-memory token table.

Constructor Details

StubBearerTokenValidator

public StubBearerTokenValidator()

Constructor using the DEFAULT_TOKENS table.

StubBearerTokenValidator

public StubBearerTokenValidator(Map<String,String> tokenToUser)

Constructor.

Parameters:

tokenToUser - Map of token string to principal name. Copied defensively.

Method Details

validate

public Principal validate(String token)
                   throws AuthenticationException

Description copied from interface: TokenValidator

Validates the supplied bearer token and returns the associated Principal.

Specified by:

validate in interface TokenValidator

Parameters:

token - The raw token string from Authorization: Bearer <token>. Never null.

Returns:

The authenticated principal. Must not be null on success.

Throws:

AuthenticationException - If the token is invalid, expired, revoked, or otherwise unacceptable.