com.microsoft.aad.msal4j

Class PublicClientApplication

java.lang.Object

com.microsoft.aad.msal4j.AbstractApplicationBase

com.microsoft.aad.msal4j.AbstractClientApplicationBase

com.microsoft.aad.msal4j.PublicClientApplication

All Implemented Interfaces:

IPublicClientApplication

public class PublicClientApplication
extends AbstractClientApplicationBase
implements IPublicClientApplication

Class to be used to acquire tokens for public client applications (Desktop, Mobile). For details see IPublicClientApplication

Conditionally thread-safe

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	PublicClientApplication.Builder

Field Summary

Fields

Modifier and Type	Field and Description
static String	DEFAULT_AUTHORITY

Fields inherited from class com.microsoft.aad.msal4j.AbstractClientApplicationBase

azureRegion

Fields inherited from class com.microsoft.aad.msal4j.AbstractApplicationBase

authenticationAuthority, log, tokenCache

Method Summary

Modifier and Type	Method and Description
CompletableFuture<IAuthenticationResult>	acquireToken(AuthorizationCodeParameters parameters) Acquires security token from the authority using an authorization code previously received.
CompletableFuture<IAuthenticationResult>	acquireToken(DeviceCodeFlowParameters parameters) Acquires security token from the authority using an device code flow.
CompletableFuture<IAuthenticationResult>	acquireToken(IntegratedWindowsAuthenticationParameters parameters) Acquires tokens from the authority configured in the application via Integrated Windows Authentication.
CompletableFuture<IAuthenticationResult>	acquireToken(InteractiveRequestParameters parameters) Acquires tokens from the authority using authorization code grant.
CompletableFuture<IAuthenticationResult>	acquireToken(RefreshTokenParameters parameters) Acquires a security token from the authority using a refresh token previously received.
CompletableFuture<IAuthenticationResult>	acquireToken(UserNamePasswordParameters parameters) Acquires tokens from the authority configured in the application via Username/Password authentication.
CompletableFuture<IAuthenticationResult>	acquireTokenSilently(SilentParameters parameters) Returns tokens from cache if present and not expired or acquires new tokens from the authority by using the refresh token present in cache.
String	authority()
static PublicClientApplication.Builder	builder(String clientId)
protected com.nimbusds.oauth2.sdk.auth.ClientAuthentication	clientAuthentication()
String	clientId()
String	correlationId()
CompletableFuture<Set<IAccount>>	getAccounts() Returns accounts in the cache
URL	getAuthorizationRequestUrl(AuthorizationRequestUrlParameters parameters) Computes the URL of the authorization request letting the user sign-in and consent to the application.
IHttpClient	httpClient() Sets HTTP client to be used by the client application for all HTTP requests.
boolean	logPii()
Proxy	proxy()
CompletableFuture<Void>	removeAccount(IAccount account) Removes IAccount from the cache
SSLSocketFactory	sslSocketFactory()
boolean	validateAuthority()

Methods inherited from class com.microsoft.aad.msal4j.AbstractClientApplicationBase

aadAadInstanceDiscoveryResponse, acquireToken, acquireToken, applicationName, applicationVersion, authority, autoDetectRegion, azureRegion, clientCapabilities, clientId, getAccounts, getAuthorizationRequestUrl, instanceDiscovery, tokenCache, validateAuthority

Methods inherited from class com.microsoft.aad.msal4j.AbstractApplicationBase

connectTimeoutForDefaultHttpClient, correlationId, httpClient, logPii, proxy, readTimeoutForDefaultHttpClient, sslSocketFactory

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

DEFAULT_AUTHORITY

public static final String DEFAULT_AUTHORITY

See Also:

Constant Field Values

Method Detail

acquireToken

public CompletableFuture<IAuthenticationResult> acquireToken(UserNamePasswordParameters parameters)

Description copied from interface: IPublicClientApplication

Acquires tokens from the authority configured in the application via Username/Password authentication.

Specified by:

acquireToken in interface IPublicClientApplication

Parameters:

parameters - instance of UserNamePasswordParameters

Returns:

CompletableFuture containing an IAuthenticationResult

acquireToken

public CompletableFuture<IAuthenticationResult> acquireToken(IntegratedWindowsAuthenticationParameters parameters)

Description copied from interface: IPublicClientApplication

Acquires tokens from the authority configured in the application via Integrated Windows Authentication.

Specified by:

acquireToken in interface IPublicClientApplication

Parameters:

parameters - instance of IntegratedWindowsAuthenticationParameters

Returns:

CompletableFuture containing an IAuthenticationResult

acquireToken

public CompletableFuture<IAuthenticationResult> acquireToken(DeviceCodeFlowParameters parameters)

Description copied from interface: IPublicClientApplication

Acquires security token from the authority using an device code flow. Flow is designed for devices that do not have access to a browser or have input constraints. The authorization server issues DeviceCode object with verification code, an end-user code and the end-user verification URI. DeviceCode is provided through deviceCodeConsumer callback. End-user should be instructed to use another device to connect to the authorization server to approve the access request. Since the client cannot receive incoming requests, it polls the authorization server repeatedly until the end-user completes the approval process.

Specified by:

acquireToken in interface IPublicClientApplication

Parameters:

parameters - instance of DeviceCodeFlowParameters

Returns:

CompletableFuture containing an IAuthenticationResult

acquireToken

public CompletableFuture<IAuthenticationResult> acquireToken(InteractiveRequestParameters parameters)

Description copied from interface: IPublicClientApplication

Acquires tokens from the authority using authorization code grant. Will attempt to open the default system browser where the user can input the credentials interactively, consent to scopes, and do multi-factor authentication if such a policy is enabled on the Azure AD tenant. System browser can behavior can be customized via InteractiveRequestParameters.systemBrowserOptions. For more information, see https://aka.ms/msal4j-interactive-request

Specified by:

acquireToken in interface IPublicClientApplication

Parameters:

parameters - instance of InteractiveRequestParameters

Returns:

CompletableFuture containing an IAuthenticationResult

acquireTokenSilently

public CompletableFuture<IAuthenticationResult> acquireTokenSilently(SilentParameters parameters)
                                                              throws MalformedURLException

Returns tokens from cache if present and not expired or acquires new tokens from the authority by using the refresh token present in cache.

Overrides:

acquireTokenSilently in class AbstractClientApplicationBase

Parameters:

parameters - instance of SilentParameters

Returns:

A CompletableFuture object representing the IAuthenticationResult of the call.

Throws:

MalformedURLException - if authorityUrl from parameters is malformed URL

removeAccount

public CompletableFuture<Void> removeAccount(IAccount account)

Removes IAccount from the cache

Overrides:

removeAccount in class AbstractClientApplicationBase

Parameters:

account - instance of Account to be removed from cache

Returns:

CompletableFuture object representing account removal task.

clientAuthentication

protected com.nimbusds.oauth2.sdk.auth.ClientAuthentication clientAuthentication()

Specified by:

clientAuthentication in class AbstractClientApplicationBase

builder

public static PublicClientApplication.Builder builder(String clientId)

Parameters:

clientId - Client ID (Application ID) of the application as registered in the application registration portal (portal.azure.com)

Returns:

instance of Builder of PublicClientApplication

clientId

public String clientId()

Returns:

Client ID (Application ID) of the application as registered in the application registration portal (portal.azure.com) and as passed in the constructor of the application

authority

public String authority()

Returns:

URL of the authority, or security token service (STS) from which MSAL will acquire security tokens. Default value is IApplicationBase.DEFAULT_AUTHORITY

validateAuthority

public boolean validateAuthority()

Returns:

a boolean value which determines whether the authority needs to be verified against a list of known authorities.

getAuthorizationRequestUrl

public URL getAuthorizationRequestUrl(AuthorizationRequestUrlParameters parameters)

Computes the URL of the authorization request letting the user sign-in and consent to the application. The URL target the /authorize endpoint of the authority configured in the application object.

Once the user successfully authenticates, the response should contain an authorization code, which can then be passed in toAbstractClientApplicationBase.acquireToken(AuthorizationCodeParameters) to be exchanged for a token

Parameters:

parameters - AuthorizationRequestUrlParameters

Returns:

url of the authorization endpoint where the user can sign-in and consent to the application.

acquireToken

public CompletableFuture<IAuthenticationResult> acquireToken(AuthorizationCodeParameters parameters)

Acquires security token from the authority using an authorization code previously received.

Parameters:

parameters - AuthorizationCodeParameters

Returns:

A CompletableFuture object representing the IAuthenticationResult of the call.

acquireToken

public CompletableFuture<IAuthenticationResult> acquireToken(RefreshTokenParameters parameters)

Acquires a security token from the authority using a refresh token previously received. Can be used in migration to MSAL from ADAL, and in various integration scenarios where you have a refresh token available.

Parameters:

parameters - RefreshTokenParameters

Returns:

A CompletableFuture object representing the IAuthenticationResult of the call.

getAccounts

public CompletableFuture<Set<IAccount>> getAccounts()

Returns accounts in the cache

Returns:

set of unique accounts from cache which can be used for silent acquire token call

logPii

public boolean logPii()

Returns:

a boolean value which determines whether Pii (personally identifiable information) will be logged in

correlationId

public String correlationId()

Returns:

Correlation ID which is used for diagnostics purposes, is attached to token service requests Default value is random UUID

httpClient

public IHttpClient httpClient()

Sets HTTP client to be used by the client application for all HTTP requests. Allows for fine-grained configuration of HTTP client.

Returns:

instance of IHttpClient used by the application

proxy

public Proxy proxy()

Returns:

proxy used by the application for all network communication.

sslSocketFactory

public SSLSocketFactory sslSocketFactory()

Returns:

SSLSocketFactory used by the application for all network communication.