All Classes

Class	Description
AbstractAuthenticatableOIDCContext	An abstract base class for subcontexts that carry information which may be authenticated.
AbstractTokenResponseLookupStrategy	Base class for looking up the token response context.
AbstractUserInfoResponseTypeCondition	Abstract predicate for pulling out the UserInfoResponseContext.
AbstractUserInfoTokenResponseLookupStrategy	Base class for looking up the UserInfo token response context.
AccessTokenLookupStrategy	Function that extracts the access_token from the AccessTokenResponseContext.
AccessTokenResponseContext	A context to hold an OIDC token request response.
AuthenticationRequestTimeLookupFunction	Lookup function that returns the time at which the RP sent the authentication request, as taken from the authentication request object.
ClientIDFromOAuth2ClientContextFunction	A function that pulls the client_id out of the OAuth2ClientContext.
DefaultEndUserClaimsLookupStrategy	Function that extracts the end-user's claims from the EndUserClaimsContext.
DefaultIDTokenLookupStrategy	Function that extracts the id_token from the AccessTokenResponseContext.
DefaultIssuerIDLookupFunction	Strategy to pull out the ID of the OIDC proxy issuer/provider from the OIDCPeerEntityContext.
DefaultUserInfoJWTLookupStrategy	Function that extracts the UserInfo claims as a JWT from the UserInfoResponseContext.
EncryptedIDTokenLookupStrategy	Function that extracts the id_token from the AccessTokenResponseContext iff it is an EncryptedJWT type.
EncryptedUserInfoJWTLookupStrategy	Function that extracts the UserInfo JWT from the UserInfoResponseContext iff it is an EncryptedJWT type.
EndUserClaimsContext	A context to hold the final set of claims associated with an authenticated end-user.
ExtraAudiencesLookupStrategy	Locate additional accepted audiences from the ID Token profile config value.
IDTokenInAccessTokenUpdateStrategy	Consumer to update the id_token in the AccessTokenResponseContext.
IDTokenJOSEHeaderLookupStrategy	Function that extracts the JWS JOSE header from the id_token inside the AccessTokenResponseContext.
InboundMessageContextFromProxyPRC	A ContextDataLookupFunction that returns the inbound MessageContext for a ProfileRequestContext located inside an AuthenticationContext i.e.
IsCodeFlowPredicate	A predicate that determines if the flow is a 'code-flow' using the Authentication Request that is inside the message context.
IsHybridFlowPredicate	A predicate that determines if the flow is a 'hybrid-flow' using the Authentication Request that is inside the message context.
IsImplicitFlowPredicate	A predicate that determines if the flow is a 'implicit-flow' using the Authentication Request that is inside the message context.
JWTClaimsSetFromRequestObjectLookupFunction	Extract the Payload from the Request Object inside the OIDCAuthenticationRequest.
MaxAgeLookupFunction	Locate the maximum authentication age from the authentication request (first) or profile configuration (second).
OAuth2AccessTokenPrincipal	Principal based on an OAuth 2.0 access token.
OAuth2ClientContext	A context to store information pertaining to the OAuth2 client (Relying Party) to use in communication with a OpenID Provider.
OAuth2RefreshTokenPrincipal	Principal based on an OAuth 2.0 refresh token.
OIDCAuthnContext	Manages state during proxied OIDC authentication via a Spring Controller.
OIDCProviderMetadataFromOuboundPeerLookupStrategy	Lookup function to extract the OIDCProviderMetadataContext from the OIDCPeerEntityContext in the outbound message.
OIDCProxyException	An exception to signal a general proxy error.
OIDCRPException	An exception to signal a general OIDC RelyingParty error.
OIDCSubjectIdentifierPrincipal	Principal based on an OIDC 'sub' (subject) identifier.
OutboundMessageContextFromProxyPRC	A ContextDataLookupFunction that returns the outbound MessageContext for a ProfileRequestContext located inside an AuthenticationContext i.e.
OutboundMessageHandlerContext	A context to stash controller parameters for use by message handlers.
PayloadFromRequestObjectLookupFunction	Extract the Payload from the Request Object inside the OIDCAuthenticationRequest.
RedirectUriLookupFunction	Pull a redirect_uri from the Relying Party profile config if present.
RequestObjectRequiredAndSupported	A predicate that tests whether a request object should be built based on what is configured in the profile configuration and whether the OP supports it.
RequestObjectSupportedSignatureSigningAlgorithms	Pull out the request object supported signature signing algorithms from the metadata.
RequestObjectTokenUpdateStrategy	Consumer that adds the JWT back to the Request Object in the OIDCAuthenticationRequest.
RequiresSignatureVerificationPredicate	Is successful TLS credential verification enough to validate the JWT in question or should JWT signature validation be applied? Defaults to true — signature verification is required.
SubFromIDTokenLookupFunction	A function that pulls the subject 'sub' out of the id_token in the AccessTokenResponseContext.
UserInfoHttpRequestMethodLookupStrategy	Locate the HTTP request method to use for the UserInfo request.
UserInfoInUserInfoResponseContextUpdateStrategy	Consumer strategy to update the UserInfo JWT in the UserInfoResponseContext.
UserInfoLookupCondition	Checks whether the UserInfo endpoint should be accessed to retrieve claims about the authenticated end-user.
UserInfoPlainResponseTypeCondition	Condition that returns true if the UserInfo response was an plain JSON type i.e.
UserInfoResponseContext	A context to hold the response from the UserInfo endpoint.