org.nuxeo.opensocial.shindig.oauth

Class NuxeoOAuthRequest

java.lang.Object

org.apache.shindig.gadgets.oauth.OAuthRequest

org.nuxeo.opensocial.shindig.oauth.NuxeoOAuthRequest

public class NuxeoOAuthRequest
extends org.apache.shindig.gadgets.oauth.OAuthRequest

This is complete crap. I end up copying the class because the idiots made all the implementation classes private for no reason. Look for the string "NUXEO NUXEO NUXEO CHANGE" to see my changes. irritated @author Ian Smith

Field Summary

Fields

Modifier and Type	Field and Description
protected static Pattern	ALLOWED_PARAM_NAME
protected org.apache.shindig.gadgets.oauth.OAuthClientState	clientState State information from client
protected org.apache.shindig.gadgets.oauth.OAuthFetcherConfig	fetcherConfig Configuration options for the fetcher.
static String	NUXEO_INTERNAL_REQUEST
protected static String	OPENSOCIAL_APPID
protected static String	OPENSOCIAL_APPURL
protected static String	OPENSOCIAL_OWNERID
protected static String	OPENSOCIAL_PROXIED_CONTENT
protected static String	OPENSOCIAL_VIEWERID
protected org.apache.shindig.gadgets.oauth.OAuthResponseParams	responseParams OAuth specific stuff to include in the response.
static String	XOAUTH_APP_URL
protected static String	XOAUTH_PUBLIC_KEY_NEW
protected static String	XOAUTH_PUBLIC_KEY_OLD

Constructor Summary

Constructors

Constructor and Description
NuxeoOAuthRequest(org.apache.shindig.gadgets.oauth.OAuthFetcherConfig fetcherConfig, org.apache.shindig.gadgets.http.HttpFetcher fetcher)
NuxeoOAuthRequest(org.apache.shindig.gadgets.oauth.OAuthFetcherConfig fetcherConfig, org.apache.shindig.gadgets.http.HttpFetcher fetcher, List<net.oauth.OAuth.Parameter> trustedParams)

Method Summary

Modifier and Type	Method and Description
org.apache.shindig.gadgets.http.HttpResponse	fetch(org.apache.shindig.gadgets.http.HttpRequest request) OAuth authenticated fetch.
protected boolean	isInternalRequest()
org.apache.shindig.gadgets.http.HttpRequest	sanitizeAndSign(org.apache.shindig.gadgets.http.HttpRequest base, List<net.oauth.OAuth.Parameter> params, boolean tokenEndpoint) Start with an HttpRequest.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

NUXEO_INTERNAL_REQUEST

public static final String NUXEO_INTERNAL_REQUEST

See Also:

Constant Field Values

XOAUTH_APP_URL

public static final String XOAUTH_APP_URL

See Also:

Constant Field Values

OPENSOCIAL_OWNERID

protected static final String OPENSOCIAL_OWNERID

See Also:

Constant Field Values

OPENSOCIAL_VIEWERID

protected static final String OPENSOCIAL_VIEWERID

See Also:

Constant Field Values

OPENSOCIAL_APPID

protected static final String OPENSOCIAL_APPID

See Also:

Constant Field Values

OPENSOCIAL_APPURL

protected static final String OPENSOCIAL_APPURL

See Also:

Constant Field Values

OPENSOCIAL_PROXIED_CONTENT

protected static final String OPENSOCIAL_PROXIED_CONTENT

See Also:

Constant Field Values

XOAUTH_PUBLIC_KEY_OLD

protected static final String XOAUTH_PUBLIC_KEY_OLD

See Also:

Constant Field Values

XOAUTH_PUBLIC_KEY_NEW

protected static final String XOAUTH_PUBLIC_KEY_NEW

See Also:

Constant Field Values

ALLOWED_PARAM_NAME

protected static final Pattern ALLOWED_PARAM_NAME

fetcherConfig

protected final org.apache.shindig.gadgets.oauth.OAuthFetcherConfig fetcherConfig

Configuration options for the fetcher.

clientState

protected org.apache.shindig.gadgets.oauth.OAuthClientState clientState

State information from client

responseParams

protected org.apache.shindig.gadgets.oauth.OAuthResponseParams responseParams

OAuth specific stuff to include in the response.

Constructor Detail

NuxeoOAuthRequest

public NuxeoOAuthRequest(org.apache.shindig.gadgets.oauth.OAuthFetcherConfig fetcherConfig,
                         org.apache.shindig.gadgets.http.HttpFetcher fetcher)

Parameters:

fetcherConfig - configuration options for the fetcher

fetcher - fetcher to use for actually making requests

NuxeoOAuthRequest

public NuxeoOAuthRequest(org.apache.shindig.gadgets.oauth.OAuthFetcherConfig fetcherConfig,
                         org.apache.shindig.gadgets.http.HttpFetcher fetcher,
                         List<net.oauth.OAuth.Parameter> trustedParams)

Parameters:

fetcherConfig - configuration options for the fetcher

fetcher - fetcher to use for actually making requests

trustedParams - additional parameters to include in all outgoing OAuth requests, useful for client data that can't be pulled from the security token but is still trustworthy.

Method Detail

fetch

public org.apache.shindig.gadgets.http.HttpResponse fetch(org.apache.shindig.gadgets.http.HttpRequest request)

OAuth authenticated fetch.

Overrides:

fetch in class org.apache.shindig.gadgets.oauth.OAuthRequest

isInternalRequest

protected boolean isInternalRequest()

sanitizeAndSign

public org.apache.shindig.gadgets.http.HttpRequest sanitizeAndSign(org.apache.shindig.gadgets.http.HttpRequest base,
                                                                   List<net.oauth.OAuth.Parameter> params,
                                                                   boolean tokenEndpoint)
                                                            throws org.apache.shindig.gadgets.oauth.OAuthResponseParams.OAuthRequestException

Start with an HttpRequest. Throw if there are any attacks in the query. Throw if there are any attacks in the post body. Build up OAuth parameter list. Sign it. Add OAuth parameters to new request. Send it.

Overrides:

sanitizeAndSign in class org.apache.shindig.gadgets.oauth.OAuthRequest

Throws:

org.apache.shindig.gadgets.oauth.OAuthResponseParams.OAuthRequestException