All Classes

Class	Description
AbstractEncryptionAlgorithmsLookupStrategy	A base class for lookup strategies that return encryption algorithms and make use of the AlgorithmRegistry.
AccessTokenHashValidator	A validator that checks the access_token value matches its encoded at_hash representation in the id_token.
ACRClaimsValidator	Check the ACR values requested were received.
AudienceClaimsValidator	Verifies the Audience (aud) claim contains the appropriate value.
AuthenticationAudienceClaimsValidator	Verifies the Audience (aud) claim contains the appropriate value in JWT authentication.
AuthenticationTimeClaimsValidator	Verifies the auth_time (when the End-User authentication took place): If the authnLifetimeLookup returns 0 seconds (e.g.
AuthTimeRequestedActivationCondition	Has the auth_time claim been requested?
BaseJWTSignatureSecurityHandler	Base class for security message handlers which evaluate a JWT signature with a signature trust engine.
BaseSignedJWTTrustEngine<TrustBasisType>	A TrustEngine implementation for Signed JSON Web Tokens.
BasicDecryptionConfiguration	Basic implementation of DecryptionConfiguration for handling JWEs.
BasicEncryptionConfiguration	Basic implementation of EncryptionConfiguration for handling JWE encryption.
BasicJOSEObjectCredentialResolver	A basic implementation of JOSEObjectCredentialResolver.
BasicSignatureSigningConfiguration	The configuration information to use when generating an signed JWT.
BasicSignatureSigningParametersResolver	Basic implementation of an SignatureSigningParametersResolver.
BasicSignatureValidationConfiguration	Basic implementation of SignatureValidationConfiguration for signed JWTs.
BasicSignatureValidationParametersResolver	Basic implementation of SignatureValidationParametersResolver.
ChainingJOSEObjectCredentialResolver	A concrete implementation of AbstractChainingCredentialResolver which is scoped to the simple JOSEObjectCredentialResolver type.
ChainingJWTClaimsValidator	A ClaimsValidator implementation that validates a JWT claims set from a chain of configured validators.
CheckClientJWTDecryptionConfiguration	An action that uses a OIDCClientInformation to verify the encryption parameters of an incoming encrypted JWT are compliant with configuration in the client metadata.
CheckClientJWTSignatureAlgorithmHandler	A MessageHandler that uses a OIDCClientInformation to verify the signature of a signed JWT uses expected algorithm.
ClaimExistsActivationCondition	Activation condition to check a claim exists in the claims set.
ClientInformationCredentialResolver	A JOSEObjectCredentialResolver that resolves credentials from the jwks or contents of jwks_uri of a ClientInformation.
ClientInformationDataEncryptionAlgorithmsLookupStrategy	A lookup strategy that finds data/content encryption algorithms from local configuration that are compatible with those advertised by the RP/client information.
ClientInformationJWTTrustEngine	An implementation of SignatureTrustEngine which evaluates the validity and trustworthiness of JWT signatures.
ClientInformationKeyTransportEncryptionAlgorithmsLookupStrategy	A lookup strategy that finds key transport algorithms from local configuration that are compatible with those configured to RP.
ClientInformationSignatureSigningParametersResolver	An implementation of an SignatureSigningParametersResolver that extends the BasicSignatureSigningParametersResolver functionality by adding a configurable lookup strategy for fetching the desired algorithm value from OIDCClientInformation.
ClientSecretCriterionCredentialResolver	Extracts a credential held inside the ClientSecretCredentialCriterion from the given criteria set.
CollectionJOSEObjectCredentialResolver	An implementation of BasicJOSEObjectCredentialResolver that uses a Collection as the underlying credential source.
DataEncryptionAlgorithmCriterion	An implementation of an Criterion which specifies content encryption algorithm criteria.
DecryptJWE	Decrypt the located JWE using the decryption parameters stored in the security context.
DefaultDataEncryptionAlgorithmsLookupStrategy	A BiFunction which pulls data encryption (content encryption) algorithms to use from the encryption configuration and filters them.
DefaultDecryptionParametersResolver	Basic implementation of DecryptionParametersResolver.
DefaultEncryptionParametersResolver	Default implementation of an EncryptionParametersResolver.
DefaultKeyTransportEncryptionAlgorithmsLookupStrategy	A BiFunction that retrieves and filters the key transport encryption algorithms from the EncryptionConfiguration inside the criteria set.
EncryptJWTHandler	A MessageHandler that encrypts a JWT using the EncryptionParameters found in the SecurityParametersContext.
EvaluableKeyIDCredentialCriterion	Instance of evaluable credential criteria for evaluating credential key IDs.
EvaluableMACKeyLengthCredentialCriterion	Instance of evaluable credential criteria for evaluating if the key length of the secret key inside the credential is compatible with the MAC algorithm given.
ExactMatchClaimsValidator	Validator that checks a JWT claim exactly matches (by Object equality) a value returned by a lookup strategy.
ExpiryClaimsValidator	Iff an expiration time (exp) claim is present, verifies that it is ahead of the current time, else the JWT claims set is rejected.
ExplicitKeySignedJWTTrustEngine	An implementation of SignatureTrustEngine which evaluates the validity and trustworthiness of JWT signatures.
ExplicitKeyTrustEvaluator	Auxillary trust evaluator for evaluating an untrusted key or credential against a trusted key or credential.
ForcedAuthenticationActivationCondition	Has forced authentication been requested?
FunctionClaimsValidator	A ClaimsValidator that relies on an injected BiFunction.
IDTokenClaims	Enum of those OIDC ID token claims that are not part of the standard JWT claims set.
IssuedAtClaimsValidator	If the 'iat' claim is present in the JWT, verifies it is not to far away from the current time.
JWETokenDecrypter	Supports decryption of encrypted JSON Web Tokens using the JSON Web Encryption standard.
JWTClaims	Enum that represents the standard set of registered JWT claims.
JWTIdentifierClaimsValidator	Verifies the identifier (jit) from the JWT against replay via configurable ReplayCache.
JWTIdentifierRevocationValidator	Verifies the identifier (jit) from the JWT against revocation via configurable RevocationCache.
JWTMessageSignatureSecurityHandler	A MessageHandler that uses a TrustEngine to evaluate the signature of a signed JWT.
JWTSignatureValidationUtil	Generic utility class for helping JWT signature validation.
KeyManagmentAlgorithmCriterion	An implementation of Criterion which specifies key management algorithm criteria.
LocalJOSEObjectCredentialResolver	A simple specialization of BasicJOSEObjectCredentialResolver which is capable of resolving local credentials from a supplied CredentialResolver which manages local credentials.
NonceValidationActivationCondition	Determines if nonce validation should occur.
NotBeforeClaimsValidator	Iff a not-before-time (nbf) claim is present, makes sure it is before the current time.
NumberOfClaimValuesActivationCondition	Activation condition to check the number of values a claim has against a given predicate.
OIDCDecryptionParameters	Deprecated, for removal: This API element is subject to removal in a future version.
OIDCSignatureValidationParameters	Deprecated, for removal: This API element is subject to removal in a future version.
ProhibitedClaimsValidator	Verify the claims set does not contain any of the described set of claims.
ProviderMetadataCredentialResolver	A LocalJOSEObjectCredentialResolver that resolves credentials from the jwks_uri of an OpenID Provider.
ProviderMetadataDataEncryptionAlgorithmsLookupStrategy	A lookup strategy that finds data/content encryption algorithms from local configuration that are compatible with those advertised by the OpenID Provider.
ProviderMetadataKeyTransportEncryptionAlgorithmsLookupStrategy	A lookup strategy that finds key transport algorithms from local configuration that are compatible with those advertised by the downstream OpenID Provider.
RelyingPartySigningParametersResolver	A specialization of BasicSignatureSigningParametersResolver which supports selecting signing credentials from client_secret credential criterion (e.g.
RequestedEssentialACRClaimsLookupStrategy	Strategy that looks up any requested ACR claims from the requested claims object that have to be contained in the token's claims set.
RequiredClaimsValidator	Verify the claims set contains the given set of required claims.
ReturnAllCollectionJOSEObjectCredentialResolver	An implementation of JOSEObjectCredentialResolver that uses a Collection as the underlying credential source.
SignJWTHandler	Message handler that signs a JWT and sets it back to the message context via an update consumer.