Class UserSessionRefreshTokenMetaDataProducer

java.lang.Object

com.kingsrook.qqq.backend.core.model.metadata.MetaDataProducer<QTableMetaData>

com.kingsrook.qqq.backend.core.modules.authentication.implementations.metadata.UserSessionRefreshTokenMetaDataProducer

All Implemented Interfaces:

MetaDataProducerInterface<QTableMetaData>

public class UserSessionRefreshTokenMetaDataProducer
extends MetaDataProducer<QTableMetaData>

Meta Data Producer for UserSessionRefreshToken. Adding this table to an instance that uses OAuth2 authentication opts the app in to server-side refresh-token storage (#1041). The table is hidden and not audited, as its contents are credentials (encrypted at rest - #1048). It is also locked down (#1048): its permission rules require a dedicated permission (NO_ACCESS_PERMISSION_BASE_NAME + ".hasAccess") that no role should ever be granted - and, as the table is hidden, that permission is not offered among the instance's available permissions - so the table API, query, export, reports and UI all deny it, even to admins. The authentication module's own reads and writes run as the system user, which isn't subject to this.

Field Summary

Fields

Modifier and Type	Field	Description
static final String	NO_ACCESS_PERMISSION_BASE_NAME

Fields inherited from interface com.kingsrook.qqq.backend.core.model.metadata.MetaDataProducerInterface

DEFAULT_SORT_ORDER

Constructor Summary

Constructors

Constructor	Description
UserSessionRefreshTokenMetaDataProducer(String backendName)	Constructor

Method Summary

Modifier and Type	Method	Description
QTableMetaData	produce(QInstance qInstance)	Produce the metaData object.

Methods inherited from class com.kingsrook.qqq.backend.core.model.metadata.MetaDataProducer

getSourceClass, setSourceClass, withSourceClass

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface com.kingsrook.qqq.backend.core.model.metadata.MetaDataProducerInterface

getSortOrder, isEnabled

Field Details

NO_ACCESS_PERMISSION_BASE_NAME

public static final String NO_ACCESS_PERMISSION_BASE_NAME

See Also:

• Constant Field Values

Constructor Details

UserSessionRefreshTokenMetaDataProducer

public UserSessionRefreshTokenMetaDataProducer(String backendName)

Constructor

Method Details

produce

public QTableMetaData produce(QInstance qInstance)
                       throws QException

Description copied from interface: MetaDataProducerInterface

Produce the metaData object. Generally, you don't want to add it to the instance yourself - but the instance is there in case you need it to get other metaData.

Throws:

QException