com.microsoft.aad.msal4j

Class AbstractClientApplicationBase.Builder<T extends AbstractClientApplicationBase.Builder<T>>

java.lang.Object

com.microsoft.aad.msal4j.AbstractClientApplicationBase.Builder<T>

Direct Known Subclasses:

ConfidentialClientApplication.Builder, PublicClientApplication.Builder

Enclosing class:

AbstractClientApplicationBase

public abstract static class AbstractClientApplicationBase.Builder<T extends AbstractClientApplicationBase.Builder<T>>
extends Object

Constructor Summary

Constructors

Constructor and Description
Builder(String clientId) Constructor to create instance of Builder of client application

Method Summary

Modifier and Type	Method and Description
T	aadInstanceDiscoveryResponse(String val) Sets instance discovery response data which will be used for determining tenant discovery endpoint and authority aliases.
T	applicationName(String val) Sets application name for telemetry purposes
T	applicationVersion(String val) Sets application version for telemetry purposes
T	authority(String val) Set URL of the authenticating authority or security token service (STS) from which MSAL will acquire security tokens.
T	autoDetectRegion(boolean val) Indicates that the library should attempt to discover the Azure region the application is running in when fetching the instance discovery metadata.
T	azureRegion(String val) Set the region that the library will use to format authorities in token requests.
T	b2cAuthority(String val) Set URL of the authenticating B2C authority from which MSAL will acquire tokens Valid B2C authorities should look like: https://<something.b2clogin.com/<tenant>/<policy> MSAL Java also supports a legacy B2C authority format, which looks like: https://<host>/tfp/<tenant>/<policy> However, MSAL Java will eventually stop supporting the legacy format.
T	clientCapabilities(Set<String> capabilities)
T	connectTimeoutForDefaultHttpClient(Integer val) Sets the connect timeout value used in HttpsURLConnection connections made by DefaultHttpClient, and is not needed if using a custom HTTP client
T	correlationId(String val) Set optional correlation id to be used by the API.
T	executorService(ExecutorService val) Sets ExecutorService to be used to execute the requests.
T	httpClient(IHttpClient val) Sets HTTP client to be used by the client application for all HTTP requests.
T	instanceDiscovery(boolean val) Historically, MSAL would connect to a central endpoint located at ``https://login.microsoftonline.com`` to acquire some metadata, especially when using an unfamiliar authority.
T	logPii(boolean val) Set logPii - boolean value, which determines whether Pii (personally identifiable information) will be logged in.
T	proxy(Proxy val) Sets Proxy configuration to be used by the client application (MSAL4J by default uses HttpsURLConnection) for all network communication.
T	readTimeoutForDefaultHttpClient(Integer val) Sets the read timeout value used in HttpsURLConnection connections made by DefaultHttpClient, and is not needed if using a custom HTTP client
T	setTokenCacheAccessAspect(ITokenCacheAccessAspect val) Sets ITokenCacheAccessAspect to be used for cache_data persistence.
T	sslSocketFactory(SSLSocketFactory val) Sets SSLSocketFactory to be used by the client application for all network communication.
T	validateAuthority(boolean val) Set a boolean value telling the application if the authority needs to be verified against a list of known authorities.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

Builder

public Builder(String clientId)

Constructor to create instance of Builder of client application

Parameters:

clientId - Client ID (Application ID) of the application as registered in the application registration portal (portal.azure.com)

Method Detail

authority

public T authority(String val)
            throws MalformedURLException

Set URL of the authenticating authority or security token service (STS) from which MSAL will acquire security tokens. The default value is IClientApplicationBase.DEFAULT_AUTHORITY

Parameters:

val - a string value of authority

Returns:

instance of the Builder on which method was called

Throws:

MalformedURLException - if val is malformed URL

b2cAuthority

public T b2cAuthority(String val)
               throws MalformedURLException

Set URL of the authenticating B2C authority from which MSAL will acquire tokens Valid B2C authorities should look like: https://<something.b2clogin.com/<tenant>/<policy> MSAL Java also supports a legacy B2C authority format, which looks like: https://<host>/tfp/<tenant>/<policy> However, MSAL Java will eventually stop supporting the legacy format. See here for information on how to migrate to the new format: https://aka.ms/msal4j-b2c

Parameters:

val - a boolean value for validateAuthority

Returns:

instance of the Builder on which method was called

Throws:

MalformedURLException

validateAuthority

public T validateAuthority(boolean val)

Set a boolean value telling the application if the authority needs to be verified against a list of known authorities. Authority is only validated when: 1 - It is an Azure Active Directory authority (not B2C or ADFS) 2 - Instance discovery metadata is not set via AbstractClientApplicationBase.aadAadInstanceDiscoveryResponse

The default value is true.

Parameters:

val - a boolean value for validateAuthority

Returns:

instance of the Builder on which method was called

correlationId

public T correlationId(String val)

Set optional correlation id to be used by the API. If not provided, the API generates a random UUID.

Parameters:

val - a string value of correlation id

Returns:

instance of the Builder on which method was called

logPii

public T logPii(boolean val)

Set logPii - boolean value, which determines whether Pii (personally identifiable information) will be logged in. The default value is false.

Parameters:

val - a boolean value for logPii

Returns:

instance of the Builder on which method was called

executorService

public T executorService(ExecutorService val)

Sets ExecutorService to be used to execute the requests. Developer is responsible for maintaining the lifecycle of the ExecutorService.

Parameters:

val - an instance of ExecutorService

Returns:

instance of the Builder on which method was called

proxy

public T proxy(Proxy val)

Sets Proxy configuration to be used by the client application (MSAL4J by default uses HttpsURLConnection) for all network communication. If no proxy value is passed in, system defined properties are used. If HTTP client is set on the client application (via ClientApplication.builder().httpClient()), proxy configuration should be done on the HTTP client object being passed in, and not through this method.

Parameters:

val - an instance of Proxy

Returns:

instance of the Builder on which method was called

httpClient

public T httpClient(IHttpClient val)

Sets HTTP client to be used by the client application for all HTTP requests. Allows for fine grained configuration of HTTP client.

Parameters:

val - Implementation of IHttpClient

Returns:

instance of the Builder on which method was called

sslSocketFactory

public T sslSocketFactory(SSLSocketFactory val)

Sets SSLSocketFactory to be used by the client application for all network communication. If HTTP client is set on the client application (via ClientApplication.builder().httpClient()), any configuration of SSL should be done on the HTTP client and not through this method.

Parameters:

val - an instance of SSLSocketFactory

Returns:

instance of the Builder on which method was called

connectTimeoutForDefaultHttpClient

public T connectTimeoutForDefaultHttpClient(Integer val)

Sets the connect timeout value used in HttpsURLConnection connections made by DefaultHttpClient, and is not needed if using a custom HTTP client

Parameters:

val - timeout value in milliseconds

Returns:

instance of the Builder on which method was called

readTimeoutForDefaultHttpClient

public T readTimeoutForDefaultHttpClient(Integer val)

Sets the read timeout value used in HttpsURLConnection connections made by DefaultHttpClient, and is not needed if using a custom HTTP client

Parameters:

val - timeout value in milliseconds

Returns:

instance of the Builder on which method was called

applicationName

public T applicationName(String val)

Sets application name for telemetry purposes

Parameters:

val - application name

Returns:

instance of the Builder on which method was called

applicationVersion

public T applicationVersion(String val)

Sets application version for telemetry purposes

Parameters:

val - application version

Returns:

instance of the Builder on which method was called

setTokenCacheAccessAspect

public T setTokenCacheAccessAspect(ITokenCacheAccessAspect val)

Sets ITokenCacheAccessAspect to be used for cache_data persistence.

Parameters:

val - an instance of ITokenCacheAccessAspect

Returns:

instance of the Builder on which method was called

aadInstanceDiscoveryResponse

public T aadInstanceDiscoveryResponse(String val)

Sets instance discovery response data which will be used for determining tenant discovery endpoint and authority aliases.

Note that authority validation is not done even if AbstractClientApplicationBase.validateAuthority is set to true.

For more information, see https://aka.ms/msal4j-instance-discovery

Parameters:

val - JSON formatted value of response from AAD instance discovery endpoint

Returns:

instance of the Builder on which method was called

clientCapabilities

public T clientCapabilities(Set<String> capabilities)

autoDetectRegion

public T autoDetectRegion(boolean val)

Indicates that the library should attempt to discover the Azure region the application is running in when fetching the instance discovery metadata. Regions can only be detected when running in an Azure environment, such as an Azure VM or other service, or if the environment has environment variable named REGION_NAME configured. Although you can enable both autodetection here and a specific region with AbstractClientApplicationBase.azureRegion at the same time, the region set with AbstractClientApplicationBase.azureRegion will take priority if there is a mismatch. See here for more information about supported scenarios: https://aka.ms/msal4j-azure-regions

Parameters:

val - boolean (default is false)

Returns:

instance of the Builder on which method was called

azureRegion

public T azureRegion(String val)

Set the region that the library will use to format authorities in token requests. If given a valid Azure region, the library will attempt to make token requests at a regional ESTS-R endpoint rather than the global ESTS endpoint. Regions must be valid Azure regions and their short names should be used, such as 'westus' for the West US Azure region, 'centralus' for the Central US Azure region, etc. Although you can set a specific region here and enable autodetection with AbstractClientApplicationBase.autoDetectRegion at the same time the specific region set here will take priority over the autodetected region if there is a mismatch. See here for more information about supported scenarios: https://aka.ms/msal4j-azure-regions

Parameters:

val - String region name

Returns:

instance of the Builder on which method was called

instanceDiscovery

public T instanceDiscovery(boolean val)

Historically, MSAL would connect to a central endpoint located at ``https://login.microsoftonline.com`` to acquire some metadata, especially when using an unfamiliar authority. This behavior is known as Instance Discovery. This parameter defaults to true, which enables the Instance Discovery. If you do not know some authorities beforehand, yet still want MSAL to accept any authority that you will provide, you can use a ``False`` to unconditionally disable Instance Discovery.