public Authentication createAuthentication ( HttpServletRequest request , ConsumerAuthentication authentication , OAuthAccessProviderToken authToken ) { if ( authToken != null ) { Authentication userAuthentication = authToken . getUserAuthentication ( ) ; if ( userAuthentication instanceof AbstractAuthenticationToken ) { //initialize the details with the consumer that is actually making the request on behalf of the user. ( ( AbstractAuthenticationToken ) userAuthentication ) . setDetails ( new OAuthAuthenticationDetails ( request , authentication . getConsumerDetails ( ) ) ) ; } return userAuthentication ; } return authentication ; }
Default implementation returns the user authentication associated with the auth token if the token is provided . Otherwise the consumer authentication is returned .