fahrscheine-bitte.core — fahrscheine-bitte 0.3.0

check-consented-scopes clj

(check-consented-scopes tokeninfo required-scopes)

Checks if every scope is mentioned in the 'scope' attribute of the token info: {"scope" ["read" "write"]}

check-corresponding-attributes clj

(check-corresponding-attributes tokeninfo required-scopes)

Checks if every scope has a truthy attribute in the token info of the same name: {"read": true, "write": true}

explain-reason-code clj

extract-access-token clj

(extract-access-token request)

Extracts the Bearer token from the Authorization header.

fetch-tokeninfo clj

make-cached-access-token-resolver clj

(make-cached-access-token-resolver
  tokeninfo-url
  {:keys [ttl-ms max-size client-middleware]
   :or {ttl-ms 120000 max-size 100 client-middleware identity}})

make-oauth2-s1st-security-handler clj

(make-oauth2-s1st-security-handler access-token-resolver-fn scope-checker-fn)

Returns a swagger1st security handler that checks OAuth 2.0 tokens.

• access-token-resolver-fn takes a token and returns tokeninfo: https://tools.ietf.org/html/rfc7662#section-2.2
• scope-checker-fn takes tokeninfo and requirements and returns true if scopes in the tokeninfo match the requirements

make-wrap-oauth2-token-verifier clj

(make-wrap-oauth2-token-verifier access-token-resolver-fn)

Returns a swagger1st security handler that checks OAuth 2.0 tokens.

• access-token-resolver-fn takes a token and returns tokeninfo: https://tools.ietf.org/html/rfc7662#section-2.2

wrap-log-auth-error clj

(wrap-log-auth-error next-handler logger-fn)