Package ru.cg.webbpm.modules.security.api.token

Interface JwtTokenService

All Known Implementing Classes:
JwtTokenServiceImpl
public interface JwtTokenService
Author:
Flyur Karimov

  • Method Details

    • createAccessToken

      Token createAccessToken(String userAccountId, boolean simpleCredentials)
      Creates a token with a short duration Needed to requests authorization It must be stored on client side
      Parameters:
      userAccountId - - userAccountId
      simpleCredentials - - Is the credentials stored in simple_credentials table
      Returns:
      access token

    • createRefreshToken

      Token createRefreshToken(String userAccountId, boolean simpleCredentials)
      Creates a token with a long duration Needed to refresh access token It must be stored on client and backend side
      Parameters:
      userAccountId - - userAccountId
      simpleCredentials - - simpleCredentials
      Returns:
      refresh token

    • isValid

      boolean isValid(String authToken)

    • isValid

      boolean isValid(Token token)
      Validates token Check userAccountId existing and token expiration time
      Parameters:
      token - token
      Returns:
      true for valid token, else false

    • checkRefreshToken

      boolean checkRefreshToken(Token token)

    • getCredentials

      Credentials getCredentials(boolean simpleCredentials, String userAccountIdFromToken)

    • saveRefreshToken

      void saveRefreshToken(String userAccountId, Token newToken, String accessToken)
      Save refresh token in storage
      Parameters:
      userAccountId - - user account id
      newToken - new refresh token
      accessToken - - access token

    • updateRefreshToken

      void updateRefreshToken(String userAccountId, Token newToken, String oldToken, String accessToken)
      Update refresh token in storage
      Parameters:
      userAccountId - - user account id
      newToken - new refresh token
      oldToken - old refresh token
      accessToken - - access token

    • deleteRefreshToken

      void deleteRefreshToken(String accessToken)
      Delete refresh token from DB after logout
      Parameters:
      accessToken - - access token

    • getToken

      Token getToken(String token)