Class OAuthServerGetHandler

  • All Implemented Interfaces:
    LightHttpHandler, io.undertow.server.HttpHandler

    public class OAuthServerGetHandler
    extends Object
    implements LightHttpHandler
    Warning: This is a handler that should never be used. Putting the client secret in the query parameters is a very bad idea. And it is against the OAuth 2.0 spec. This handler is only used for testing and migrating. This is a handler to simulate other gateway products to allow consumers to get a client credentials token before sending a request with the authorization header. It will return a dummy token to the consumer app so that we don't need those apps to be modified to avoid the additional cost of migration. When subsequent requests comes in, the header handler will remove the authorization header and the TokenHandler will get a real JWT token from the downstream API authorization server and put it into the Authorization header.
    Author:
    Steve Hu
    • Constructor Detail

      • OAuthServerGetHandler

        public OAuthServerGetHandler()
    • Method Detail

      • handleRequest

        public void handleRequest​(io.undertow.server.HttpServerExchange exchange)
                           throws Exception
        Specified by:
        handleRequest in interface io.undertow.server.HttpHandler
        Throws:
        Exception