Interface QServiceIdentityProviderInterface

All Known Implementing Classes:

LocalServiceIdentityProvider, OAuth2ServiceIdentityProvider

public interface QServiceIdentityProviderInterface

How an authentication module turns a declared service principal into a session (docs/SERVICE-IDENTITY.md section 4.2). The module decides: OAuth2 obtains a real access token (client_credentials) and builds a bearer session; local modules mint a QServiceSession.

Method Summary

Modifier and Type	Method	Description
QSession	sessionFor(QInstance qInstance, QServicePrincipalMetaData principal)	A fresh session for the principal.

Method Details

sessionFor

QSession sessionFor(QInstance qInstance,
 QServicePrincipalMetaData principal)
             throws QAuthenticationException

A fresh session for the principal. Throws when the principal is unavailable (no credentials, refused, revoked); never falls back to a system session.

Throws:

QAuthenticationException