service.tut.pori.users.google

Class GoogleUserService

java.lang.Object

service.tut.pori.users.google.GoogleUserService

@HTTPService(name="google")
public class GoogleUserService
extends java.lang.Object

Google User Service method definitions. This class defines the APIs for registering a new account with the system and authentication using Google credentials, or more precisely, using the Google OAuth 2.0 authentication. The methods also describe the means for granting the system authorization for accessing content of the Google account. Creating an account or authenticating with Google credentials does not automatically grant the system persistent permissions for accessing the account contents. Note that the Google User Service does not contain a method for removing an existing user account. An existing account can be removed using the User Service

Constructor Summary

Constructors

Constructor and Description
GoogleUserService()

Method Summary

Modifier and Type	Method and Description
Response	authorize(AuthenticationParameter authenticatedUser) This method can be used to grant the service access to the authenticated user's Google account.
Response	login(AuthenticationParameter authenticatedUser, StringParameter accessToken) This method can be used to authenticate the user using Google credentials.
Response	oAuth2Callback(StringParameter authorizationCode, StringParameter errorCode, StringParameter nonce) This method is called by Google after user has either denied or granted the service permission to his/her Google account, and is not meant to be used directly by the end-users.
Response	register(StringParameter accessToken) This method can be used to register a new user using a Google account.
Response	unauthorize(AuthenticationParameter authenticatedUser) This method allows a user to revoke the previously given authorization permissions.

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

GoogleUserService

public GoogleUserService()

Method Detail

oAuth2Callback

@HTTPServiceMethod(name="oAuth2callback")
public Response oAuth2Callback(@HTTPMethodParameter(name="code",required=false)
                                                                          StringParameter authorizationCode,
                                                                          @HTTPMethodParameter(name="error",required=false)
                                                                          StringParameter errorCode,
                                                                          @HTTPMethodParameter(name="state")
                                                                          StringParameter nonce)

This method is called by Google after user has either denied or granted the service permission to his/her Google account, and is not meant to be used directly by the end-users. The method implements the OAuth2 authorization process as defined by Google.

Parameters:

authorizationCode - OAuth2 authorization code generated by Google.

errorCode - Optional error message as reported by Google.

nonce - Short-lived nonce value randomly generated by the authorization process.

Returns:

response

unauthorize

@HTTPServiceMethod(name="unauthorize")
public Response unauthorize(@HTTPAuthenticationParameter
                                                                    AuthenticationParameter authenticatedUser)

This method allows a user to revoke the previously given authorization permissions. Note that calling this method does not prevent user from authenticating (logging in) using the credentials, nor will it remove the user account from the system, but calling this method will prevent the system from accessing the user's content stored in the Google account. In practice this means, that no synchronization can be performed for the account until authorization is restored. All previously synchronized content will be removed from the system.

Parameters:

authenticatedUser -

Returns:

response

login

@HTTPServiceMethod(name="login")
public Response login(@HTTPAuthenticationParameter(required=false)
                                                        AuthenticationParameter authenticatedUser,
                                                        @HTTPMethodParameter(name="access_token")
                                                        StringParameter accessToken)

This method can be used to authenticate the user using Google credentials. The external account connection must be created either by registering the user as a new user using Google credentials or by authorizing the use of the Google account before the login functionality can be used. The passed access token is used to validate the user identity. The token scope should contain at least profile. Additional Google OAuth2 scopes can be present, but are not required.

Parameters:

authenticatedUser -

accessToken - OAuth2 access token as provided by Google.

Returns:

response

register

@HTTPServiceMethod(name="register")
public Response register(@HTTPMethodParameter(name="access_token")
                                                              StringParameter accessToken)

This method can be used to register a new user using a Google account. The passed access token is used to retrieve the required registration details from the account. The token scope should contain at least profile, additional Google OAuth2 scopes can be present, but are not required. The Google account is assumed to be personal, and an attempt to use the same account to create multiple accounts will result in an error.

Parameters:

accessToken - OAuth2 access token as provided by Google.

Returns:

response

authorize

@HTTPServiceMethod(name="authorize")
public Response authorize(@HTTPAuthenticationParameter
                                                                AuthenticationParameter authenticatedUser)

This method can be used to grant the service access to the authenticated user's Google account. This method will redirect to Google's consent page asking user's permission to access the account. The default configuration will ask permissions for https://picasaweb.google.com/data/ and profile Google OAuth2 scopes, though the actual scopes required will depend on the services to be used. The authorization process will use the default OAuth2 authentication flow as implemented by Google, firstly redirecting the user to the consent page, which in turn will redirect the user back to the OAuth2 callback method. The callback method will show status message notifying the result of the authorization. The method assumes that Google accounts are personal and an attempt to authorize the same Google account for multiple users will result in error.

Parameters:

authenticatedUser -

Returns:

response