Module io.helidon.security.providers.google.login
Package io.helidon.security.providers.google.login

Class GoogleTokenProvider

java.lang.Object
io.helidon.security.providers.google.login.GoogleTokenProvider
All Implemented Interfaces:
AuthenticationProvider, OutboundSecurityProvider, SecurityProvider
public final class GoogleTokenProvider extends Object implements AuthenticationProvider, OutboundSecurityProvider
Provider supporting login button from front-end. This expects the token to be sent in a header. By default, Authorization header with bearer is expected, e.g.: Authorization: bearer abcdefg_google_id_token_from_login_button_callback. Configure login button as described here: https://developers.google.com/identity/sign-in/web/sign-in See google-login example.

  • Method Details

    • create

      public static GoogleTokenProvider create(Config config)
      Create an instance from configuration. Used by Security when configuring this provider from configuration by class name.
      Parameters:
      config - Configuration located on the provider's key
      Returns:
      Instance configured from the configuration instance

    • builder

      public static GoogleTokenProvider.Builder builder()
      Fluent API builder to build GoogleTokenProvider instance.
      Returns:
      Builder with just default values

    • authenticate

      public AuthenticationResponse authenticate(ProviderRequest providerRequest)
      Description copied from interface: AuthenticationProvider
      Authenticate a request. This may be just resolving headers (tokens) or full authentication (basic auth). Do not throw exception for normal processing (e.g. invalid credentials; you may throw an exception in case of misconfiguration). This method will be invoked for inbound requests ONLY.

      This method must provide either a Principal or a whole Subject either for a user or for service (or both).

      Specified by:
      authenticate in interface AuthenticationProvider
      Parameters:
      providerRequest - context of this security enforcement/validation
      Returns:
      response that either authenticates the request, fails authentication or abstains from authentication
      See Also:

    • isOutboundSupported

      public boolean isOutboundSupported(ProviderRequest providerRequest, SecurityEnvironment outboundEnv, EndpointConfig outboundConfig)
      Description copied from interface: OutboundSecurityProvider
      Check if the path to be executed is supported by this security provider. Defaults to true.
      Specified by:
      isOutboundSupported in interface OutboundSecurityProvider
      Parameters:
      providerRequest - context with environment, subject(s) etc. that was received
      outboundEnv - environment for outbound call
      outboundConfig - outbound endpoint configuration
      Returns:
      true if this identity propagator can generate required headers for the path defined

    • outboundSecurity

      public OutboundSecurityResponse outboundSecurity(ProviderRequest providerRequest, SecurityEnvironment outboundEnv, EndpointConfig outboundEndpointConfig)
      Description copied from interface: OutboundSecurityProvider
      Creates necessary updates to headers and entity needed for outbound security (e.g. identity propagation, s2s security etc.). This method will be invoked for outbound requests ONLY.
      Specified by:
      outboundSecurity in interface OutboundSecurityProvider
      Parameters:
      providerRequest - context with environment, subject(s) etc. that was received
      outboundEnv - environment for outbound call
      outboundEndpointConfig - outbound endpoint configuration
      Returns:
      response with generated headers and other possible configuration
      See Also: