All Classes and Interfaces
Class
Description
AbstractOAuth2TokenAuthenticationToken<T extends org.springframework.security.oauth2.core.OAuth2Token>
Base class for
AbstractAuthenticationToken implementations that expose common
attributes between different OAuth 2.0 Access Token Formats.An exception similar to
BadCredentialsException that
indicates an opaque token that is invalid in some way.Translates any
AccessDeniedException into an HTTP response in accordance with
RFC 6750
Section 3: The WWW-Authenticate.An
Authentication token that represents a
successful authentication as obtained through a bearer token.An
AuthenticationEntryPoint implementation used to commence authentication of
protected resource requests using BearerTokenAuthenticationFilter.Authenticates requests that contain an OAuth 2.0
Bearer
Token.
Deprecated.
An
Authentication that contains a
Bearer
Token.Deprecated.
Please use
BearerTokenAuthenticationTokenA representation of a
Bearer Token
Error.
Standard error codes defined by the OAuth 2.0 Authorization Framework: Bearer Token
Usage.
A factory for creating
BearerTokenError instances that correspond to the
registered Bearer Token Error
Codes.A strategy for resolving
Bearer
Tokens from the
HttpServletRequest.Translates any
AccessDeniedException into an HTTP response in accordance with
RFC 6750
Section 3: The WWW-Authenticate.An
AuthenticationEntryPoint implementation used to commence authentication of
protected resource requests using BearerTokenAuthenticationFilter.The default
BearerTokenResolver implementation based on RFC 6750.A
Jwt to GrantedAuthority Converter that is a composite of
converters.An
AuthenticationProvider implementation that is responsible for authenticating
a DPoP-bound access token for a protected resource request.An
Authentication representing a protected resource request with a DPoP-bound
access token.Uses an expression for extracting the token claim value to use for mapping
authorities.Generic resolver extracting pre-authenticated JWT identity from a custom header.
An
OAuth2AuthenticationException that indicates an invalid bearer token.An
AuthenticationProvider implementation of the Jwt-encoded
Bearer
Tokens for protecting OAuth 2.0 Resource Servers.Extracts the
GrantedAuthoritys from scope attributes typically found in a
Jwt.An implementation of
AuthenticationManagerResolver that resolves a JWT-based
AuthenticationManager based on the Issuer in
a signed JWT (JWS).An implementation of
ReactiveAuthenticationManagerResolver that resolves a
JWT-based ReactiveAuthenticationManager based on the Issuer in
a signed JWT (JWS).A
ReactiveAuthenticationManager for Jwt tokens.Deprecated.
Please use
SpringOpaqueTokenIntrospector insteadDeprecated.
Please use
SpringReactiveOpaqueTokenIntrospector insteadA domain object that wraps the attributes of OAuth 2.0 Token Introspection.
Base exception for all OAuth 2.0 Introspection related errors
Convert a successful introspection result into an authentication result.
An
AuthenticationProvider implementation for opaque
Bearer
Tokens, using an
OAuth 2.0 Introspection
Endpoint to check the token's validity and reveal its attributes.A contract for introspecting and verifying an OAuth 2.0 token.
An
ReactiveAuthenticationManager implementation for opaque
Bearer
Tokens, using an
OAuth 2.0 Introspection
Endpoint to check the token's validity and reveal its attributes.Reactive version of
JwtAuthenticationConverter for converting a Jwt to
a Mono<AbstractAuthenticationToken>.A reactive
Converter for adapting a non-blocking imperative ConverterAdapts a
Converter<Jwt, Collection<GrantedAuthority>> to
a Converter<Jwt, Flux<GrantedAuthority>>.Convert a successful introspection result into an authentication result.
A contract for introspecting and verifying an OAuth 2.0 token.
An
ExchangeFilterFunction that adds the
Bearer
Token from an existing OAuth2Token tied to the current
Authentication.A strategy for resolving
Bearer
Tokens from the
ServerWebExchange.An
ExchangeFilterFunction that adds the
Bearer
Token from an existing OAuth2Token tied to the current
Authentication.A Spring implementation of
OpaqueTokenIntrospector that verifies and
introspects a token using the configured
OAuth 2.0 Introspection
Endpoint.Used to build
SpringOpaqueTokenIntrospector.A Spring implementation of
ReactiveOpaqueTokenIntrospector that verifies and
introspects a token using the configured
OAuth 2.0 Introspection
Endpoint.Used to build
SpringReactiveOpaqueTokenIntrospector.
BearerTokenAuthenticationFilterinstead