Package | Description |
---|---|
fish.payara.security.openid | |
fish.payara.security.openid.controller | |
fish.payara.security.openid.domain | |
fish.payara.security.openid.http |
Modifier and Type | Method and Description |
---|---|
OpenIdConfiguration |
OpenIdCredential.getConfiguration() |
Constructor and Description |
---|
OpenIdCredential(javax.json.JsonObject tokensObject,
javax.security.enterprise.authentication.mechanism.http.HttpMessageContext httpContext,
OpenIdConfiguration configuration) |
Modifier and Type | Field and Description |
---|---|
protected OpenIdConfiguration |
TokenClaimsSetVerifier.configuration |
Modifier and Type | Method and Description |
---|---|
OpenIdConfiguration |
ConfigurationController.buildConfig(OpenIdAuthenticationDefinition definition)
Creates the
OpenIdConfiguration using the properties as defined
in an OpenIdAuthenticationDefinition annotation or using MP
Config source. |
Modifier and Type | Method and Description |
---|---|
javax.security.enterprise.AuthenticationStatus |
AuthenticationController.authenticateUser(OpenIdConfiguration configuration,
javax.security.enterprise.authentication.mechanism.http.HttpMessageContext httpMessageContext)
(1) The RP (Client) sends a request to the OpenId Connect Provider (OP)
to authenticates the End-User using the Authorization Code Flow and
authorization Code is returned from the Authorization Endpoint.
|
OpenIdNonce |
NonceController.get(OpenIdConfiguration configuration,
javax.security.enterprise.authentication.mechanism.http.HttpMessageContext context) |
Optional<OpenIdState> |
StateController.get(OpenIdConfiguration configuration,
javax.security.enterprise.authentication.mechanism.http.HttpMessageContext context) |
javax.ws.rs.core.Response |
TokenController.getTokens(OpenIdConfiguration configuration,
javax.servlet.http.HttpServletRequest request)
(4) A Client makes a token request to the token endpoint and the OpenId
Provider responds with an ID Token and an Access Token.
|
javax.json.JsonObject |
UserInfoController.getUserInfo(OpenIdConfiguration configuration,
AccessToken accessToken)
(6) The RP send a request with the Access Token to the UserInfo Endpoint
and requests the claims about the End-User.
|
javax.ws.rs.core.Response |
TokenController.refreshTokens(OpenIdConfiguration configuration,
RefreshToken refreshToken)
Makes a refresh request to the token endpoint and the OpenId Provider
responds with a new (updated) Access Token and Refreshs Token.
|
void |
NonceController.remove(OpenIdConfiguration configuration,
javax.security.enterprise.authentication.mechanism.http.HttpMessageContext context) |
void |
StateController.remove(OpenIdConfiguration configuration,
javax.security.enterprise.authentication.mechanism.http.HttpMessageContext context) |
void |
NonceController.store(OpenIdNonce nonce,
OpenIdConfiguration configuration,
javax.security.enterprise.authentication.mechanism.http.HttpMessageContext context) |
void |
StateController.store(OpenIdState state,
OpenIdConfiguration configuration,
javax.security.enterprise.authentication.mechanism.http.HttpMessageContext context) |
Map<String,Object> |
TokenController.validateAccessToken(AccessTokenImpl accessToken,
com.nimbusds.jose.Algorithm idTokenAlgorithm,
Map<String,Object> idTokenClaims,
OpenIdConfiguration configuration)
(5.2) Validate the Access Token & it's claims and verify the signature.
|
Map<String,Object> |
TokenController.validateIdToken(IdentityTokenImpl idToken,
javax.security.enterprise.authentication.mechanism.http.HttpMessageContext httpContext,
OpenIdConfiguration configuration)
(5.1) Validate Id Token's claims and verify ID Token's signature.
|
Map<String,Object> |
TokenController.validateRefreshedIdToken(IdentityToken previousIdToken,
IdentityTokenImpl newIdToken,
javax.security.enterprise.authentication.mechanism.http.HttpMessageContext httpContext,
OpenIdConfiguration configuration)
Validate Id Token received from Successful Refresh Response.
|
Constructor and Description |
---|
AccessTokenClaimsSetVerifier(AccessToken accessToken,
com.nimbusds.jose.Algorithm idTokenAlgorithm,
Map<String,Object> idTokenClaims,
OpenIdConfiguration configuration) |
IdTokenClaimsSetVerifier(String expectedNonceHash,
OpenIdConfiguration configuration) |
RefreshedIdTokenClaimsSetVerifier(IdentityToken previousIdToken,
OpenIdConfiguration configuration) |
TokenClaimsSetVerifier(OpenIdConfiguration configuration) |
Constructor and Description |
---|
AccessTokenImpl(OpenIdConfiguration configuration,
String tokenType,
String token,
Long expiresIn,
String scopeValue) |
Modifier and Type | Method and Description |
---|---|
static HttpStorageController |
HttpStorageController.getInstance(OpenIdConfiguration configuration,
javax.security.enterprise.authentication.mechanism.http.HttpMessageContext httpContext) |
Copyright © 2019. All rights reserved.