Example usage for org.springframework.security.oauth2.common.exceptions InvalidTokenException getOAuth2ErrorCode

Introduction

In this page you can find the example usage for org.springframework.security.oauth2.common.exceptions InvalidTokenException getOAuth2ErrorCode.

Prototype

@Override
    public String getOAuth2ErrorCode() 

Source Link

Usage

From source file:org.cloudfoundry.identity.uaa.mock.token.TokenMvcMockTests.java

@Test
public void validateOldTokenAfterDeleteClientSecret() throws Exception {
    String clientId = "testclient" + generator.generate();
    String scopes = "space.*.developer,space.*.admin,org.*.reader,org.123*.admin,*.*,*";
    setUpClients(clientId, scopes, scopes, GRANT_TYPES, true);

    String body = getMockMvc()//from ww  w . j a  v a  2 s .co  m
            .perform(post("/oauth/token").accept(MediaType.APPLICATION_JSON_VALUE)
                    .header("Authorization",
                            "Basic " + new String(Base64.encode((clientId + ":" + SECRET).getBytes())))
                    .param("grant_type", "client_credentials").param("client_id", clientId)
                    .param("client_secret", SECRET))
            .andExpect(status().isOk()).andReturn().getResponse().getContentAsString();

    Map<String, Object> bodyMap = JsonUtils.readValue(body, new TypeReference<Map<String, Object>>() {
    });
    String access_token = (String) bodyMap.get("access_token");
    assertNotNull(access_token);

    clientDetailsService.addClientSecret(clientId, "newSecret");
    clientDetailsService.deleteClientSecret(clientId);

    MockHttpServletResponse response = getMockMvc().perform(post("/check_token")
            .header("Authorization", "Basic " + new String(Base64.encode("app:appclientsecret".getBytes())))
            .param("token", access_token)).andExpect(status().isBadRequest()).andReturn().getResponse();

    InvalidTokenException tokenRevokedException = JsonUtils.readValue(response.getContentAsString(),
            TokenRevokedException.class);
    assertEquals("invalid_token", tokenRevokedException.getOAuth2ErrorCode());
    assertEquals("revocable signature mismatch", tokenRevokedException.getMessage());
}

---