How to use

org.springframework.security.oauth2.common.DefaultOAuth2RefreshToken

constructor

private OAuth2RefreshToken buildRefreshTokenResponse(CompositeExpiringOAuth2RefreshToken refreshToken, boolean isRefreshTokenOpaque) {
  if (refreshToken == null) {
    return null;
  } else {
    if (isRefreshTokenOpaque) {
      return new DefaultOAuth2RefreshToken(refreshToken.getJti());
    } else {
      return new DefaultOAuth2RefreshToken(refreshToken.getValue());
    }
  }
}

private OAuth2RefreshToken createRefreshToken(OAuth2Authentication authentication) {
  if (!isSupportRefreshToken(authentication.getOAuth2Request())) {
    return null;
  }
  int validitySeconds = getRefreshTokenValiditySeconds(authentication.getOAuth2Request());
  String value = UUID.randomUUID().toString();
  if (validitySeconds > 0) {
    return new DefaultExpiringOAuth2RefreshToken(value, new Date(System.currentTimeMillis()
        + (validitySeconds * 1000L)));
  }
  return new DefaultOAuth2RefreshToken(value);
}

public static OAuth2AccessToken valueOf(Map<String, String> tokenParams) {
  DefaultOAuth2AccessToken token = new DefaultOAuth2AccessToken(tokenParams.get(ACCESS_TOKEN));
  if (tokenParams.containsKey(EXPIRES_IN)) {
    long expiration = 0;
    try {
      expiration = Long.parseLong(String.valueOf(tokenParams.get(EXPIRES_IN)));
    }
    catch (NumberFormatException e) {
      // fall through...
    }
    token.setExpiration(new Date(System.currentTimeMillis() + (expiration * 1000L)));
  }
  if (tokenParams.containsKey(REFRESH_TOKEN)) {
    String refresh = tokenParams.get(REFRESH_TOKEN);
    DefaultOAuth2RefreshToken refreshToken = new DefaultOAuth2RefreshToken(refresh);
    token.setRefreshToken(refreshToken);
  }
  if (tokenParams.containsKey(SCOPE)) {
    Set<String> scope = new TreeSet<String>();
    for (StringTokenizer tokenizer = new StringTokenizer(tokenParams.get(SCOPE), " ,"); tokenizer
        .hasMoreTokens();) {
      scope.add(tokenizer.nextToken());
    }
    token.setScope(scope);
  }
  if (tokenParams.containsKey(TOKEN_TYPE)) {
    token.setTokenType(tokenParams.get(TOKEN_TYPE));
  }
  return token;
}

accessToken.setRefreshToken(new DefaultOAuth2RefreshToken(refreshToken));

accessToken.setRefreshToken(new DefaultOAuth2RefreshToken(refreshToken));

  protected OAuth2AccessToken convertToExternal(JaxbOAuth2AccessToken jaxbAccessToken) {
    DefaultOAuth2AccessToken accessToken = new DefaultOAuth2AccessToken(jaxbAccessToken.getAccessToken());
    String refreshToken = jaxbAccessToken.getRefreshToken();
    if(refreshToken != null) {
      accessToken.setRefreshToken(new DefaultOAuth2RefreshToken(refreshToken));
    }
    Date expiration = jaxbAccessToken.getExpiration();
    if(expiration != null) {
      accessToken.setExpiration(expiration);
    }
    return accessToken;
  }
}

accessToken.setRefreshToken(new DefaultOAuth2RefreshToken(refreshToken));

private OAuth2RefreshToken createRefreshToken(OAuth2AccessToken encodedRefreshToken) {
  if (!jwtTokenEnhancer.isRefreshToken(encodedRefreshToken)) {
    throw new InvalidTokenException("Encoded token is not a refresh token");
  }
  if (encodedRefreshToken.getExpiration()!=null) {
    return new DefaultExpiringOAuth2RefreshToken(encodedRefreshToken.getValue(),
        encodedRefreshToken.getExpiration());            
  }
  return new DefaultOAuth2RefreshToken(encodedRefreshToken.getValue());
}

refreshTokenInfo.put(ACCESS_TOKEN_ID, tokenId);
encodedRefreshToken.setAdditionalInformation(refreshTokenInfo);
DefaultOAuth2RefreshToken token = new DefaultOAuth2RefreshToken(
    encode(encodedRefreshToken, authentication));
if (refreshToken instanceof ExpiringOAuth2RefreshToken) {

@Test
public void test_ensure_that_access_token_is_deleted_and_modified() {
  String tokenId = "access_token";
  DefaultOAuth2AccessToken token = new DefaultOAuth2AccessToken(tokenId);
  DefaultOAuth2RefreshToken refreshToken = new DefaultOAuth2RefreshToken("refresh_token");
  Map<String,Object> info = new HashMap(token.getAdditionalInformation());
  info.put(JTI, token.getValue());
  token.setAdditionalInformation(info);
  token.setRefreshToken(refreshToken);
  token.setExpiration(new Date());
}

CompositeToken compositeToken = new CompositeToken(tokenId);
compositeToken.setExpiration(accessTokenValidityResolver.resolve(clientId));
compositeToken.setRefreshToken(refreshToken == null ? null : new DefaultOAuth2RefreshToken(refreshToken));

@Test
public void ensure_that_access_token_is_deleted_and_modified() {
  String tokenId = "access_token";
  DefaultOAuth2AccessToken token = new DefaultOAuth2AccessToken(tokenId);
  DefaultOAuth2RefreshToken refreshToken = new DefaultOAuth2RefreshToken("refresh_token");
  Map<String,Object> info = new HashMap(token.getAdditionalInformation());
  info.put(JTI, token.getValue());
  token.setAdditionalInformation(info);
  token.setRefreshToken(refreshToken);
  token.setExpiration(new Date());
  DefaultOAuth2AccessToken result = granter.prepareForSerialization(token);
  assertSame(token, result);
  assertEquals(refreshToken.getValue(), result.getAdditionalInformation().get(JTI));
  assertNull(result.getValue());
  verify(tokenStore).delete(eq(tokenId), anyInt(), eq(IdentityZoneHolder.get().getId()));
}

@Override
public OAuth2RefreshToken readRefreshToken(String tokenValue) {
  FieldSearchFilter filter = new FieldSearchFilter("refreshtoken", tokenValue, true);
  FieldSearchFilter[] filters = {filter};
  List<String> accessTokens = super.searchId(filters);
  if (null != accessTokens && accessTokens.size() > 0) {
    return new DefaultOAuth2RefreshToken(tokenValue);
  }
  return null;
}

private OAuth2RefreshToken createRefreshToken(OAuth2Authentication authentication) {
  if (!isSupportRefreshToken(authentication.getOAuth2Request())) {
    return null;
  }
  int validitySeconds = getRefreshTokenValiditySeconds(authentication.getOAuth2Request());
  String value = UUID.randomUUID().toString();
  if (validitySeconds > 0) {
    return new DefaultExpiringOAuth2RefreshToken(value, new Date(System.currentTimeMillis()
        + (validitySeconds * 1000L)));
  }
  return new DefaultOAuth2RefreshToken(value);
}

private OAuth2RefreshToken createRefreshToken(OAuth2Authentication authentication) {
  if (!isSupportRefreshToken(authentication.getOAuth2Request())) {
    return null;
  }
  int validitySeconds = getRefreshTokenValiditySeconds(authentication.getOAuth2Request());
  String value = UUID.randomUUID().toString();
  if (validitySeconds > 0) {
    return new DefaultExpiringOAuth2RefreshToken(value, new Date(System.currentTimeMillis()
        + (validitySeconds * 1000L)));
  }
  return new DefaultOAuth2RefreshToken(value);
}

private OAuth2RefreshToken createRefreshToken(OAuth2Authentication authentication) {
  if (!isSupportRefreshToken(authentication.getOAuth2Request())) {
    return null;
  }
  int validitySeconds = getRefreshTokenValiditySeconds(authentication.getOAuth2Request());
  String value = UUID.randomUUID().toString();
  if (validitySeconds > 0) {
    return new DefaultExpiringOAuth2RefreshToken(value, new Date(System.currentTimeMillis()
        + (validitySeconds * 1000L)));
  }
  return new DefaultOAuth2RefreshToken(value);
}

@Test
public void readAuthenticationForRefreshToken() throws Exception {
  when(tokenDAO.readAuthenticationForRefreshToken(Mockito.any(OAuth2RefreshToken.class))).thenReturn(Mockito.any(OAuth2Authentication.class));
  OAuth2RefreshToken refreshToken = new DefaultOAuth2RefreshToken("value");
  OAuth2Authentication auth = this.tokenManager.readAuthenticationForRefreshToken(refreshToken);
  Assert.assertNull(auth);
  Mockito.verify(tokenDAO, Mockito.times(1)).readAuthenticationForRefreshToken(refreshToken);
}

@Test
public void removeRefreshToken() throws Exception {
  OAuth2RefreshToken refreshToken = new DefaultOAuth2RefreshToken("value_1");
  this.tokenManager.removeRefreshToken(refreshToken);
  Mockito.verify(tokenDAO, Mockito.times(1)).removeAccessTokenUsingRefreshToken("value_1");
}

@Override
public OAuth2AccessToken getAccessToken(OAuth2ProtectedResourceDetails resource, Authentication authentication) {
  ClientUser clientUser = getClientUser(authentication);
  String accessToken = clientUser.getAccessToken();
  Calendar expirationDate = clientUser.getAccessTokenValidity();
  if (accessToken == null) return null;
  DefaultOAuth2AccessToken oAuth2AccessToken = new DefaultOAuth2AccessToken(accessToken);
  oAuth2AccessToken.setExpiration(expirationDate.getTime());
  oAuth2AccessToken.setRefreshToken(new DefaultOAuth2RefreshToken(clientUser.getRefreshToken()));
  return oAuth2AccessToken;
}

private OAuth2RefreshToken createRefreshToken(OAuth2AccessToken encodedRefreshToken) {
  if (!jwtTokenEnhancer.isRefreshToken(encodedRefreshToken)) {
    throw new InvalidTokenException("Encoded token is not a refresh token");
  }
  if (encodedRefreshToken.getExpiration()!=null) {
    return new DefaultExpiringOAuth2RefreshToken(encodedRefreshToken.getValue(),
        encodedRefreshToken.getExpiration());            
  }
  return new DefaultOAuth2RefreshToken(encodedRefreshToken.getValue());
}