Package org.apache.polaris.service.auth

Class TokenRequestValidator

java.lang.Object

org.apache.polaris.service.auth.TokenRequestValidator

public class TokenRequestValidator
extends Object

Field Summary

Fields

Modifier and Type	Field	Description
static final Set<String>	ALLOWED_GRANT_TYPES
static final String	CLIENT_CREDENTIALS
static final String	TOKEN_EXCHANGE

Constructor Summary

Constructors

Constructor	Description
TokenRequestValidator()	Default constructor

Method Summary

Modifier and Type	Method	Description
Optional<OAuthTokenErrorResponse.Error>	validateForClientCredentialsFlow(String clientId, String clientSecret, String grantType, String scope)	Validates the incoming Client Credentials flow.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

TOKEN_EXCHANGE

public static final String TOKEN_EXCHANGE

See Also:

• Constant Field Values

CLIENT_CREDENTIALS

public static final String CLIENT_CREDENTIALS

See Also:

• Constant Field Values

ALLOWED_GRANT_TYPES

public static final Set<String> ALLOWED_GRANT_TYPES

Constructor Details

TokenRequestValidator

public TokenRequestValidator()

Default constructor

Method Details

validateForClientCredentialsFlow

public Optional<OAuthTokenErrorResponse.Error> validateForClientCredentialsFlow(String clientId,
 String clientSecret,
 String grantType,
 String scope)

Validates the incoming Client Credentials flow.

• Non-null scope: while optional in the spec we make it required and expect it to conform to the format

Parameters:

scope - while optional in the Iceberg REST API Spec we make it required and expect it to conform to the format "PRINCIPAL_ROLE:NAME PRINCIPAL_ROLE:NAME2 ..."