com.aspc.cms.rest.plugin.oidc

Class OidcCallbackV1

java.lang.Object

com.aspc.cms.rest.plugin.oidc.OidcCallbackV1

All Implemented Interfaces:

RestPluginProcess

public class OidcCallbackV1
extends java.lang.Object
implements RestPluginProcess

REST plugin that handles the OIDC Authorisation Code Flow callback from Amazon Cognito.

Endpoint: GET /oidc/callback

After the user authenticates with Cognito's managed login page, Cognito redirects to this endpoint with an authorisation code. This plugin:

1. Validates the request parameters
2. Exchanges the authorisation code for tokens via Cognito's token endpoint
3. Stores the refresh token in a secure, HttpOnly cookie
4. Caches access/ID tokens temporarily for frontend retrieval
5. Sets a short-lived session token cookie
6. Redirects the user to the configured frontend URL

Author:

Claude

Constructor Summary

Constructors

Constructor and Description
OidcCallbackV1()

Method Summary

Modifier and Type	Method and Description
static OidcRedirectResponse	buildErrorRedirect(java.lang.String frontendUrl, java.lang.String error, java.lang.String errorDescription) Builds a redirect response to the frontend with error parameters.
java.lang.Object	restCreate(WebClient client, RestDefinition restDefinition, MutableDataSource mds) HTTP POST calls the the Create ReST service.
java.lang.Object	restDelete(WebClient client, RestDefinition restDefinition, MutableDataSource mds) HTTP DELETE calls the the Delete ReST service.
java.lang.Object	restRetrieve(WebClient client, RestDefinition restDefinition, ReadOnlyDataSource rds) HTTP GET calls the the Retrieval ReST service.
java.lang.Object	restUpdate(WebClient client, RestDefinition restDefinition, MutableDataSource mds) HTTP PUT calls the the Update ReST service.
static void	validateRedirectUrl(java.lang.String redirectUrl, OidcConfig config) Validates that the redirect URL origin is in the allowed origins list.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

OidcCallbackV1

public OidcCallbackV1()

Method Detail

restRetrieve

@CheckReturnValue
 @Nonnull
public java.lang.Object restRetrieve(@Nonnull
                                                                 WebClient client,
                                                                 @Nonnull
                                                                 RestDefinition restDefinition,
                                                                 @Nonnull
                                                                 ReadOnlyDataSource rds)
                                                          throws java.lang.Exception

Description copied from interface: RestPluginProcess

HTTP GET calls the the Retrieval ReST service.

Specified by:

restRetrieve in interface RestPluginProcess

Parameters:

client - the client. Null means check only of ops

restDefinition - the definition

rds - the data source to use

Returns:

the JSON object/array if processed.

Throws:

java.lang.UnsupportedOperationException - if this method is NOT supported.

java.lang.Exception - an error has occurred.

restCreate

@CheckReturnValue
 @Nonnull
public java.lang.Object restCreate(@Nonnull
                                                               WebClient client,
                                                               @Nonnull
                                                               RestDefinition restDefinition,
                                                               @Nonnull
                                                               MutableDataSource mds)
                                                        throws java.lang.Exception

Description copied from interface: RestPluginProcess

HTTP POST calls the the Create ReST service.

Specified by:

restCreate in interface RestPluginProcess

Parameters:

client - the client. Null means check only of ops

restDefinition - the definition

mds - the data source to use

Returns:

the JSON object/array if processed.

Throws:

java.lang.UnsupportedOperationException - if this method is NOT supported.

ExceptionResponse - an error has occurred.

java.lang.Exception

restUpdate

@CheckReturnValue
 @Nonnull
public java.lang.Object restUpdate(@Nonnull
                                                               WebClient client,
                                                               @Nonnull
                                                               RestDefinition restDefinition,
                                                               @Nonnull
                                                               MutableDataSource mds)
                                                        throws java.lang.Exception

Description copied from interface: RestPluginProcess

HTTP PUT calls the the Update ReST service.

Specified by:

restUpdate in interface RestPluginProcess

Parameters:

client - the client. Null means check only of ops

restDefinition - the definition

mds - the data source to use

Returns:

the JSON object/array if processed.

Throws:

java.lang.UnsupportedOperationException - if this method is NOT supported.

ExceptionResponse - an error has occurred.

java.lang.Exception

restDelete

@CheckReturnValue
 @Nonnull
public java.lang.Object restDelete(@Nonnull
                                                               WebClient client,
                                                               @Nonnull
                                                               RestDefinition restDefinition,
                                                               @Nonnull
                                                               MutableDataSource mds)
                                                        throws java.lang.Exception

Description copied from interface: RestPluginProcess

HTTP DELETE calls the the Delete ReST service.

Specified by:

restDelete in interface RestPluginProcess

Parameters:

client - the client. Null means check only of ops

restDefinition - the definition

mds - the data source to use.

Returns:

the JSON object/array if processed.

Throws:

java.lang.UnsupportedOperationException - if this method is NOT supported.

ExceptionResponse - an error has occurred.

java.lang.Exception

validateRedirectUrl

public static void validateRedirectUrl(@Nonnull
                                       java.lang.String redirectUrl,
                                       @Nonnull
                                       OidcConfig config)
                                throws RestExceptionResponse

Validates that the redirect URL origin is in the allowed origins list.

Parameters:

redirectUrl - the URL to validate

config - the OIDC configuration

Throws:

RestExceptionResponse - if the redirect URL is not allowed

buildErrorRedirect

@CheckReturnValue
 @Nonnull
public static OidcRedirectResponse buildErrorRedirect(@Nonnull
                                                                                  java.lang.String frontendUrl,
                                                                                  @Nonnull
                                                                                  java.lang.String error,
                                                                                  java.lang.String errorDescription)

Builds a redirect response to the frontend with error parameters.