Versions Compared

Old Version 12

changes.mady.by.user Former user

Saved on

compared with

New Version 13

changes.mady.by.user Former user

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

This topic includes a list of all the WSO2 Identity Server extension points related to OAuth. All implementations using the following extension points must be configured in the <IS_HOME>/repository/conf/identity/identity.xml file under the OAuth element.

...

Usage

Scope handlers are executed during the scope validation step when issuing an access token. Multiple scope handlers can be registered using a sample configuration given below.

Code Block
languagexml
<OAuth>
....
    <ScopeHandlers>
        <ScopeHandler class="org.fully.qualified.class.name.CustomScopeHandler">
           <Property name="foo">foo-value</Property>
        </ScopeHandler>    
    </ScopeHandlers>
Abstract Class

org.wso2.carbon.identity.oauth2.validators.OAuth2ScopeHandler

Extended Scope Validator

Usage

These are executed during the token validation stepwhen validating an access token. Multiple scope validators can be registered using a sample configuration given below.


Code Block
languagexml
<OAuth>
....
    <ScopeValidators>
        <ScopeValidator class="org.fully.qualified.class.name.ExtendedScopeValidator">
           <Property name="foo">foo-value</Property>
        </ScopeValidators>    
    </ScopeValidators>


Abstract Class

org.wso2.carbon.identity.oauth2.validators.OAuth2ScopeValidator


Client Auth handler

UsageThis extension point can be used when the client credential authentication needs to be customized. By default the Identity Server validate the client id and secret.
Interfaceorg.wso2.carbon.identity.oauth2.token.handlers.clientauth.ClientAuthenticationHandler

...

TokenPersistenceProcessor

Usage

Implementations are used to process keys and secrets just before storing them in the database, e.g., to encrypt tokens before storing them in the database. Implementations of this interface can be configured through the identity.xml file.

Its recommended to configure this in initial configuration. If not already persisted data has to migrate in to new format.

Interfaceorg.wso2.carbon.identity.oauth.tokenprocessor.TokenPersistenceProcessor
Abstract class/default implementation

  • org.wso2.carbon.identity.oauth.tokenprocessor.EncryptionDecryptionPersistenceProcessor

  • org.wso2.carbon.identity.oauth.tokenprocessor.PlainTextPersistenceProcessor

...