All Classes

Class Summary

Class	Description
AttemptedAuthenticationFlowIdAuditExtractor	An audit extractor to pull out the attempted authentication flow ID from the current authentication context.
DefaultDuoOIDCClientRegistry	The default Duo Client registry for mapping a DuoOIDCIntegration to either a new or existing DuoOIDCClient (assumed thread-safe) singleton instance.
DefaultRedirectURICreationStrategy	Constructive, pure, function that returns a redirect_uri from one of (ordered): A pre-registered redirect_uri on the Duo integration, DynamicDuoOIDCIntegration.getRegisteredRedirectURI().
DuoAudienceClaimLookupStrategy	Looks up the audience from the clientID in the DuoOIDCIntegration inside the context.
DuoAuthnDeviceIdAuditExtractor	An audit extractor to extract the Duo 2FA device ID (Key) from the auth_device inside the Duo token response.
DuoAuthnDeviceNameAuditExtractor	An audit extractor to extract the Duo 2FA device name from the auth_device in the Duo token response.
DuoClientIdAuditExtractor	An audit extractor to extract the Duo Client ID from the Duo integration.
DuoFactorAuditExtractor	An audit extractor to extract the Duo authentication factor from the Duo token response.
DuoIssuerClaimLookupStrategy	Find the issuer from the DuoOIDCIntegration.
DuoNonceClaimLookupStrategy	Find the nonce from the DuoAuthenticationContext.
DuoOIDCAuthnController	MVC controller for managing Duo 2FA exchanges implemented as an ExternalAuthentication mechanism.
DuoReasonAuditExtractor	An audit extractor to extract the Duo authentication reason from the Duo token response.
DuoRedirectUriAuditExtractor	An audit extractor to extract the Duo redirect URI from the Duo context.
DuoRequestStateAuditExtractor	An audit extractor to extract the Duo request state OAuth 2.0 parameter from the Duo context.
DuoResponseStateAuditExtractor	An audit extractor to extract the Duo response state OAuth 2.0 parameter from the Duo context.
DuoSupport	Helper methods for Duo 2FA.
DuoTransactionIdAuditExtractor	An audit extractor to extract the Duo transaction ID from the Duo token response.
DuoUsernameAuditExtractor	An audit extractor to extract the Duo username from the Duo context.
DuoUsernameClaimLookupStrategy	Find the authenticating principals username from the DuoAuthenticationContext.
ExchangeCodeForDuoToken	Action to exchange the authorization code in the Duo 2FA response for a Duo id_token that describes the result of 2FA.
FixedStringAuditExtractor	A simple audit extractor that allows a fixed string to be logged.
HealthCheckDuoOIDCAuthAPI	An action that checks the health of the Duo 2FA endpoint for the established Duo integration.
PopulateDuoAuthenticationContext	An action to create (or lookup) and populate the DuoOIDCAuthenticationContext with the username, chosen DuoOIDCIntegration, and DuoOIDCClient appropriate for this request.
ValidateDuoResponseState	Authentication action that validates the Duo response state parameter (which is required in the Duo flow) matches that in the 2FA request.
ValidateDuoTokenAuthenticationResult	A validation action that checks for a valid Duo authentication token and directly produces an AuthenticationResult based on the identity described by the token.
ValidateDuoTokenAuthenticationResult.DuoOIDCCleanupHook	A default cleanup hook that removes the DuoOIDCAuthenticationContext from the tree.
ValidateExternalAuthenticationContext	An action that checks for an ExternalAuthenticationContext for a signaled event via the ExternalAuthenticationContext.getAuthnError() method.
ValidateTokenClaims	Action that validates the claims of the Duo id_token using the supplied ClaimsValidator.
ValidateTokenClaims.DuoOIDAuthenticationContextCleanupHook	A cleanup hook that removes the 'nonce' parameter from the DuoOIDCAuthenticationContext so it could not be reused.
ValidateTokenSignature	Action to validate the JWT signature.