Package org.apache.polaris.service.auth

Interface DecodedToken

All Superinterfaces:

PrincipalAuthInfo

public interface DecodedToken
extends PrincipalAuthInfo

A specialized PrincipalAuthInfo used for internal authentication, when Polaris is the identity provider.

Method Summary

Modifier and Type	Method	Description
String	getClientId()
default String	getPrincipalName()	The principal name, or null if unknown.
default Set<String>	getPrincipalRoles()	The principal roles present in the token.
String	getScope()
String	getSub()

Methods inherited from interface org.apache.polaris.service.auth.PrincipalAuthInfo

getPrincipalId

Method Details

getClientId

String getClientId()

getSub

String getSub()

getScope

String getScope()

getPrincipalName

default String getPrincipalName()

Description copied from interface: PrincipalAuthInfo

The principal name, or null if unknown. Used for principal lookups by name.

Specified by:

getPrincipalName in interface PrincipalAuthInfo

getPrincipalRoles

default Set<String> getPrincipalRoles()

Description copied from interface: PrincipalAuthInfo

The principal roles present in the token. The special DefaultAuthenticator.PRINCIPAL_ROLE_ALL can be used to denote a request for all principal roles that the principal has access to.

Specified by:

getPrincipalRoles in interface PrincipalAuthInfo