All Classes and Interfaces
Class
Description
Builder for the
OidcTenantConfig.Authentication config.Annotation that can be used to list Authentication Context Class Reference (ACR) values to enforce a required
authentication level for the endpoint classes and methods.
Selects
CodeAuthenticationMechanism.Authorization Code Flow Session State
Selects
BearerAuthenticationMechanism.Default TokenIntrospection and UserInfo Cache implementation.
When a DPoP proof must include a nonce, register an implementation of this interface as a CDI bean
to provide and validate a nonce value.
JavaScriptRequestChecker can be used to check if the current request was made
by JavaScript running inside Single-page application (SPA).
Builder for the
OidcTenantConfig.Logout.Builder for the
OidcTenantConfig.Backchannel.A CDI event that facilitates programmatic OIDC tenant setup.
Default TokenIntrospection and UserInfo cache configuration.
An implementation of JWTCallerPrincipal
Provides access to OIDC UserInfo, token introspection and revocation endpoints.
OIDC redirect filter which can be used to customize redirect requests to OIDC authorization and logout endpoints
as well as local redirects to OIDC tenant error, session expired and other pages.
OIDC redirect context which provides access to the routing context, current OIDC tenant configuration, redirect uri
and additional query parameters.
OIDC Context that can be used to run blocking OIDC tasks.
Deprecated, for removal: This API element is subject to removal in a future version.
Defines the authorization request properties when authenticating
users using the Authorization Code Grant Type.
Supported cache control directives
SameSite attribute values for the session cookie.
SameSite attribute values for the session cookie.
Authorization code flow response mode
Authorization code flow response mode
Deprecated, for removal: This API element is subject to removal in a future version.
use the
builder
invalid reference
OidcTenantConfigBuilder.BackchannelBuilderDeprecated, for removal: This API element is subject to removal in a future version.
use the
TokenConfigBuilder.BindingConfigBuilder builderDeprecated, for removal: This API element is subject to removal in a future version.
use the
OidcTenantConfigBuilder.CertificateChainBuilder builderConfiguration of the certificate chain which can be used to verify tokens.
Deprecated, for removal: This API element is subject to removal in a future version.
use the
OidcTenantConfigBuilder.CodeGrantBuilder builderAuthorization Code grant configuration
Deprecated, for removal: This API element is subject to removal in a future version.
use the
LogoutConfigBuilder builderDeprecated, for removal: This API element is subject to removal in a future version.
Optional introspection endpoint-specific authentication configuration.
Deprecated, for removal: This API element is subject to removal in a future version.
use the
OidcTenantConfigBuilder.JwksBuilder builderDeprecated, for removal: This API element is subject to removal in a future version.
use the
LogoutConfigBuilder builderPushed authorization request (PAR) configuration.
Deprecated, for removal: This API element is subject to removal in a future version.
Protected resource metadata.
Deprecated, for removal: This API element is subject to removal in a future version.
use the
OidcTenantConfigBuilder.RolesBuilder builderSupported asymmetric signature algorithms
Supported asymmetric signature algorithms
Deprecated, for removal: This API element is subject to removal in a future version.
use the
TokenConfigBuilder builderDeprecated, for removal: This API element is subject to removal in a future version.
use the
OidcTenantConfigBuilder.TokenStateManagerBuilder builderDefault Authorization Code token state manager configuration
Supported session cookie key encryption algorithms
Supported session cookie key encryption algorithms
Builder for the
OidcTenantConfig.Builder for the
OidcTenantConfig.CertificateChain.Builder for the
OidcTenantConfig.CodeGrant.Builder for the
OidcTenantConfig.IntrospectionCredentials.Builder for the
OidcTenantConfig.Jwks.Builder for the
OidcTenantConfig.ResourceMetadata.Builder for the
OidcTenantConfig.Roles.Builder for the
OidcTenantConfig.TokenStateManager.Sets default
OidcTenantConfig.tenantId() to the tenant's named key.Annotation that can be used to restrict
OidcRedirectFilter to specific redirect locationsSecurity event.
Annotation which can be used to associate OIDC tenant configurations with the endpoint classes and methods.
A tenant resolver is responsible for resolving the
OidcTenantConfig for tenants, dynamically.Qualifier used to specify which named tenants are associated with one or more OIDC feature.
Tenant-specific
SecurityIdentity provider.A tenant resolver is responsible for resolving tenants dynamically so that the proper configuration can be used accordingly.
TokenCertificateValidator can be used to verify X509 certificate chain
that is inlined in the JWT token as a 'x5c' header value.
Builder for the
OidcTenantConfig.Token.Builder for the
OidcTenantConfig.Token.TokenCustomizer can be used to change token headers to their original value for the token verification to succeed.
Represents a token introspection result
Token introspection cache.
Authorization Code Flow Token State Manager.
UserInfo cache.
AuthenticationConfigBuilderbuilder