Index
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form
A
- AbstractOAuth2TokenAuthenticationToken<T extends org.springframework.security.oauth2.core.OAuth2Token> - Class in org.springframework.security.oauth2.server.resource.authentication
-
Base class for
AbstractAuthenticationTokenimplementations that expose common attributes between different OAuth 2.0 Access Token Formats. - AbstractOAuth2TokenAuthenticationToken(T) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.AbstractOAuth2TokenAuthenticationToken
-
Sub-class constructor.
- AbstractOAuth2TokenAuthenticationToken(T, Object, Object, Collection<? extends GrantedAuthority>) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.AbstractOAuth2TokenAuthenticationToken
- AbstractOAuth2TokenAuthenticationToken(T, Collection<? extends GrantedAuthority>) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.AbstractOAuth2TokenAuthenticationToken
-
Sub-class constructor.
- authenticate(Authentication) - Method in class org.springframework.security.oauth2.server.resource.authentication.DPoPAuthenticationProvider
- authenticate(Authentication) - Method in class org.springframework.security.oauth2.server.resource.authentication.JwtAuthenticationProvider
-
Decode and validate the Bearer Token.
- authenticate(Authentication) - Method in class org.springframework.security.oauth2.server.resource.authentication.JwtReactiveAuthenticationManager
- authenticate(Authentication) - Method in class org.springframework.security.oauth2.server.resource.authentication.OpaqueTokenAuthenticationProvider
-
Introspect and validate the opaque Bearer Token and then delegates
Authenticationinstantiation toOpaqueTokenAuthenticationConverter. - authenticate(Authentication) - Method in class org.springframework.security.oauth2.server.resource.authentication.OpaqueTokenReactiveAuthenticationManager
-
Introspect and validate the opaque Bearer Token and then delegates
Authenticationinstantiation toReactiveOpaqueTokenAuthenticationConverter.
B
- BadOpaqueTokenException - Exception in org.springframework.security.oauth2.server.resource.introspection
-
An exception similar to
BadCredentialsExceptionthat indicates an opaque token that is invalid in some way. - BadOpaqueTokenException(String) - Constructor for exception org.springframework.security.oauth2.server.resource.introspection.BadOpaqueTokenException
- BadOpaqueTokenException(String, Throwable) - Constructor for exception org.springframework.security.oauth2.server.resource.introspection.BadOpaqueTokenException
- BearerTokenAccessDeniedHandler - Class in org.springframework.security.oauth2.server.resource.web.access
-
Translates any
AccessDeniedExceptioninto an HTTP response in accordance with RFC 6750 Section 3: The WWW-Authenticate. - BearerTokenAccessDeniedHandler() - Constructor for class org.springframework.security.oauth2.server.resource.web.access.BearerTokenAccessDeniedHandler
- BearerTokenAuthentication - Class in org.springframework.security.oauth2.server.resource.authentication
-
An
Authenticationtoken that represents a successful authentication as obtained through a bearer token. - BearerTokenAuthentication(OAuth2AuthenticatedPrincipal, OAuth2AccessToken, Collection<? extends GrantedAuthority>) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.BearerTokenAuthentication
-
Constructs a
BearerTokenAuthenticationwith the provided arguments - BearerTokenAuthenticationEntryPoint - Class in org.springframework.security.oauth2.server.resource.web
-
An
AuthenticationEntryPointimplementation used to commence authentication of protected resource requests usingBearerTokenAuthenticationFilter. - BearerTokenAuthenticationEntryPoint() - Constructor for class org.springframework.security.oauth2.server.resource.web.BearerTokenAuthenticationEntryPoint
- BearerTokenAuthenticationFilter - Class in org.springframework.security.oauth2.server.resource.web.authentication
-
Authenticates requests that contain an OAuth 2.0 Bearer Token.
- BearerTokenAuthenticationFilter - Class in org.springframework.security.oauth2.server.resource.web
-
Deprecated.
- BearerTokenAuthenticationFilter(AuthenticationManager) - Constructor for class org.springframework.security.oauth2.server.resource.web.authentication.BearerTokenAuthenticationFilter
-
Construct a
BearerTokenAuthenticationFilterusing the provided parameter(s) - BearerTokenAuthenticationFilter(AuthenticationManager) - Constructor for class org.springframework.security.oauth2.server.resource.web.BearerTokenAuthenticationFilter
-
Deprecated.Construct a
BearerTokenAuthenticationFilterusing the provided parameter(s) - BearerTokenAuthenticationFilter(AuthenticationManagerResolver<HttpServletRequest>) - Constructor for class org.springframework.security.oauth2.server.resource.web.authentication.BearerTokenAuthenticationFilter
-
Construct a
BearerTokenAuthenticationFilterusing the provided parameter(s) - BearerTokenAuthenticationFilter(AuthenticationManagerResolver<HttpServletRequest>) - Constructor for class org.springframework.security.oauth2.server.resource.web.BearerTokenAuthenticationFilter
-
Deprecated.Construct a
BearerTokenAuthenticationFilterusing the provided parameter(s) - BearerTokenAuthenticationToken - Class in org.springframework.security.oauth2.server.resource.authentication
-
An
Authenticationthat contains a Bearer Token. - BearerTokenAuthenticationToken - Class in org.springframework.security.oauth2.server.resource
-
Deprecated.Please use
BearerTokenAuthenticationToken - BearerTokenAuthenticationToken(String) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.BearerTokenAuthenticationToken
-
Create a
BearerTokenAuthenticationTokenusing the provided parameter(s) - BearerTokenAuthenticationToken(String) - Constructor for class org.springframework.security.oauth2.server.resource.BearerTokenAuthenticationToken
-
Deprecated.Create a
BearerTokenAuthenticationTokenusing the provided parameter(s) - BearerTokenError - Class in org.springframework.security.oauth2.server.resource
-
A representation of a Bearer Token Error.
- BearerTokenError(String, HttpStatus, String, String) - Constructor for class org.springframework.security.oauth2.server.resource.BearerTokenError
-
Create a
BearerTokenErrorusing the provided parameters - BearerTokenError(String, HttpStatus, String, String, String) - Constructor for class org.springframework.security.oauth2.server.resource.BearerTokenError
-
Create a
BearerTokenErrorusing the provided parameters - BearerTokenErrorCodes - Class in org.springframework.security.oauth2.server.resource
-
Standard error codes defined by the OAuth 2.0 Authorization Framework: Bearer Token Usage.
- BearerTokenErrors - Class in org.springframework.security.oauth2.server.resource
-
A factory for creating
BearerTokenErrorinstances that correspond to the registered Bearer Token Error Codes. - BearerTokenResolver - Interface in org.springframework.security.oauth2.server.resource.web
-
A strategy for resolving Bearer Tokens from the
HttpServletRequest. - BearerTokenServerAccessDeniedHandler - Class in org.springframework.security.oauth2.server.resource.web.access.server
-
Translates any
AccessDeniedExceptioninto an HTTP response in accordance with RFC 6750 Section 3: The WWW-Authenticate. - BearerTokenServerAccessDeniedHandler() - Constructor for class org.springframework.security.oauth2.server.resource.web.access.server.BearerTokenServerAccessDeniedHandler
- BearerTokenServerAuthenticationEntryPoint - Class in org.springframework.security.oauth2.server.resource.web.server
-
An
AuthenticationEntryPointimplementation used to commence authentication of protected resource requests usingBearerTokenAuthenticationFilter. - BearerTokenServerAuthenticationEntryPoint() - Constructor for class org.springframework.security.oauth2.server.resource.web.server.BearerTokenServerAuthenticationEntryPoint
- build() - Method in class org.springframework.security.oauth2.server.resource.introspection.SpringOpaqueTokenIntrospector.Builder
-
Creates a
SpringOpaqueTokenIntrospector - build() - Method in class org.springframework.security.oauth2.server.resource.introspection.SpringReactiveOpaqueTokenIntrospector.Builder
-
Creates a
SpringReactiveOpaqueTokenIntrospector
C
- clientId(String) - Method in class org.springframework.security.oauth2.server.resource.introspection.SpringOpaqueTokenIntrospector.Builder
-
The builder will
encodethe client id that you provide, so please give the unencoded value. - clientId(String) - Method in class org.springframework.security.oauth2.server.resource.introspection.SpringReactiveOpaqueTokenIntrospector.Builder
-
The builder will
encodethe client id that you provide, so please give the unencoded value. - clientSecret(String) - Method in class org.springframework.security.oauth2.server.resource.introspection.SpringOpaqueTokenIntrospector.Builder
-
The builder will
encodethe client secret that you provide, so please give the unencoded value. - clientSecret(String) - Method in class org.springframework.security.oauth2.server.resource.introspection.SpringReactiveOpaqueTokenIntrospector.Builder
-
The builder will
encodethe client secret that you provide, so please give the unencoded value. - commence(HttpServletRequest, HttpServletResponse, AuthenticationException) - Method in class org.springframework.security.oauth2.server.resource.web.BearerTokenAuthenticationEntryPoint
-
Collect error details from the provided parameters and format according to RFC 6750, specifically
error,error_description,error_uri, andscope. - commence(ServerWebExchange, AuthenticationException) - Method in class org.springframework.security.oauth2.server.resource.web.server.BearerTokenServerAuthenticationEntryPoint
- convert(String, OAuth2AuthenticatedPrincipal) - Method in interface org.springframework.security.oauth2.server.resource.introspection.OpaqueTokenAuthenticationConverter
-
Converts a successful introspection result into an authentication result.
- convert(String, OAuth2AuthenticatedPrincipal) - Method in interface org.springframework.security.oauth2.server.resource.introspection.ReactiveOpaqueTokenAuthenticationConverter
-
Converts a successful introspection result into an authentication result.
- convert(Jwt) - Method in class org.springframework.security.oauth2.server.resource.authentication.DelegatingJwtGrantedAuthoritiesConverter
-
Extract
GrantedAuthoritys from the givenJwt. - convert(Jwt) - Method in class org.springframework.security.oauth2.server.resource.authentication.ExpressionJwtGrantedAuthoritiesConverter
-
Extract
GrantedAuthoritys from the givenJwt. - convert(Jwt) - Method in class org.springframework.security.oauth2.server.resource.authentication.JwtAuthenticationConverter
- convert(Jwt) - Method in class org.springframework.security.oauth2.server.resource.authentication.JwtBearerTokenAuthenticationConverter
- convert(Jwt) - Method in class org.springframework.security.oauth2.server.resource.authentication.JwtGrantedAuthoritiesConverter
-
Extract
GrantedAuthoritys from the givenJwt. - convert(Jwt) - Method in class org.springframework.security.oauth2.server.resource.authentication.ReactiveJwtAuthenticationConverter
- convert(Jwt) - Method in class org.springframework.security.oauth2.server.resource.authentication.ReactiveJwtAuthenticationConverterAdapter
- convert(Jwt) - Method in class org.springframework.security.oauth2.server.resource.authentication.ReactiveJwtGrantedAuthoritiesConverterAdapter
- convert(ServerWebExchange) - Method in class org.springframework.security.oauth2.server.resource.web.server.authentication.ServerBearerTokenAuthenticationConverter
D
- DefaultBearerTokenResolver - Class in org.springframework.security.oauth2.server.resource.web
-
The default
BearerTokenResolverimplementation based on RFC 6750. - DefaultBearerTokenResolver() - Constructor for class org.springframework.security.oauth2.server.resource.web.DefaultBearerTokenResolver
- DelegatingJwtGrantedAuthoritiesConverter - Class in org.springframework.security.oauth2.server.resource.authentication
-
A
JwttoGrantedAuthorityConverterthat is a composite of converters. - DelegatingJwtGrantedAuthoritiesConverter(Collection<Converter<Jwt, Collection<GrantedAuthority>>>) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.DelegatingJwtGrantedAuthoritiesConverter
- DelegatingJwtGrantedAuthoritiesConverter(Converter<Jwt, Collection<GrantedAuthority>>...) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.DelegatingJwtGrantedAuthoritiesConverter
-
Constructs a
DelegatingJwtGrantedAuthoritiesConverterusing the provided array ofConverters - doFilterInternal(HttpServletRequest, HttpServletResponse, FilterChain) - Method in class org.springframework.security.oauth2.server.resource.web.authentication.BearerTokenAuthenticationFilter
-
Extract any Bearer Token from the request and attempt an authentication.
- DPoPAuthenticationProvider - Class in org.springframework.security.oauth2.server.resource.authentication
-
An
AuthenticationProviderimplementation that is responsible for authenticating a DPoP-bound access token for a protected resource request. - DPoPAuthenticationProvider(AuthenticationManager) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.DPoPAuthenticationProvider
-
Constructs a
DPoPAuthenticationProviderusing the provided parameters. - DPoPAuthenticationToken - Class in org.springframework.security.oauth2.server.resource.authentication
-
An
Authenticationrepresenting a protected resource request with a DPoP-bound access token. - DPoPAuthenticationToken(String, String, String, String) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.DPoPAuthenticationToken
-
Constructs a
DPoPAuthenticationTokenusing the provided parameters.
E
- ExpressionJwtGrantedAuthoritiesConverter - Class in org.springframework.security.oauth2.server.resource.authentication
-
Uses an expression for extracting the token claim value to use for mapping
authorities. - ExpressionJwtGrantedAuthoritiesConverter(Expression) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.ExpressionJwtGrantedAuthoritiesConverter
-
Constructs a
ExpressionJwtGrantedAuthoritiesConverterusing the providedauthoritiesClaimExpression.
F
- filter(ClientRequest, ExchangeFunction) - Method in class org.springframework.security.oauth2.server.resource.web.reactive.function.client.ServerBearerExchangeFilterFunction
- filter(ClientRequest, ExchangeFunction) - Method in class org.springframework.security.oauth2.server.resource.web.reactive.function.client.ServletBearerExchangeFilterFunction
- fromTrustedIssuers(String...) - Static method in class org.springframework.security.oauth2.server.resource.authentication.JwtIssuerAuthenticationManagerResolver
-
Construct a
JwtIssuerAuthenticationManagerResolverusing the provided parameters - fromTrustedIssuers(String...) - Static method in class org.springframework.security.oauth2.server.resource.authentication.JwtIssuerReactiveAuthenticationManagerResolver
-
Construct a
JwtIssuerReactiveAuthenticationManagerResolverusing the provided parameters - fromTrustedIssuers(Collection<String>) - Static method in class org.springframework.security.oauth2.server.resource.authentication.JwtIssuerAuthenticationManagerResolver
-
Construct a
JwtIssuerAuthenticationManagerResolverusing the provided parameters - fromTrustedIssuers(Collection<String>) - Static method in class org.springframework.security.oauth2.server.resource.authentication.JwtIssuerReactiveAuthenticationManagerResolver
-
Construct a
JwtIssuerReactiveAuthenticationManagerResolverusing the provided parameters - fromTrustedIssuers(Predicate<String>) - Static method in class org.springframework.security.oauth2.server.resource.authentication.JwtIssuerAuthenticationManagerResolver
-
Construct a
JwtIssuerAuthenticationManagerResolverusing the provided parameters - fromTrustedIssuers(Predicate<String>) - Static method in class org.springframework.security.oauth2.server.resource.authentication.JwtIssuerReactiveAuthenticationManagerResolver
-
Construct a
JwtIssuerReactiveAuthenticationManagerResolverusing the provided parameters
G
- getAccessToken() - Method in class org.springframework.security.oauth2.server.resource.authentication.DPoPAuthenticationToken
-
Returns the DPoP-bound access token.
- getAttributes() - Method in class org.springframework.security.oauth2.server.resource.introspection.OAuth2IntrospectionAuthenticatedPrincipal
-
Gets the attributes of the OAuth 2.0 Token Introspection in map form.
- getAuthorities() - Method in class org.springframework.security.oauth2.server.resource.introspection.OAuth2IntrospectionAuthenticatedPrincipal
-
Get the
CollectionofGrantedAuthoritys associated with this OAuth 2.0 Token Introspection - getClaims() - Method in class org.springframework.security.oauth2.server.resource.introspection.OAuth2IntrospectionAuthenticatedPrincipal
- getCredentials() - Method in class org.springframework.security.oauth2.server.resource.authentication.AbstractOAuth2TokenAuthenticationToken
- getCredentials() - Method in class org.springframework.security.oauth2.server.resource.authentication.BearerTokenAuthenticationToken
- getCredentials() - Method in class org.springframework.security.oauth2.server.resource.authentication.DPoPAuthenticationToken
- getDPoPProof() - Method in class org.springframework.security.oauth2.server.resource.authentication.DPoPAuthenticationToken
-
Returns the DPoP Proof
Jwt. - getHttpStatus() - Method in class org.springframework.security.oauth2.server.resource.BearerTokenError
-
Return the HTTP status.
- getMethod() - Method in class org.springframework.security.oauth2.server.resource.authentication.DPoPAuthenticationToken
-
Returns the value of the HTTP method of the request.
- getName() - Method in class org.springframework.security.oauth2.server.resource.authentication.JwtAuthenticationToken
-
The principal name which is, by default, the
Jwt's subject - getName() - Method in class org.springframework.security.oauth2.server.resource.introspection.OAuth2IntrospectionAuthenticatedPrincipal
- getPrincipal() - Method in class org.springframework.security.oauth2.server.resource.authentication.AbstractOAuth2TokenAuthenticationToken
- getPrincipal() - Method in class org.springframework.security.oauth2.server.resource.authentication.BearerTokenAuthenticationToken
- getPrincipal() - Method in class org.springframework.security.oauth2.server.resource.authentication.DPoPAuthenticationToken
- getResourceUri() - Method in class org.springframework.security.oauth2.server.resource.authentication.DPoPAuthenticationToken
-
Returns the value of the HTTP resource URI of the request, without query and fragment parts.
- getScope() - Method in class org.springframework.security.oauth2.server.resource.BearerTokenError
-
Return the scope.
- getToken() - Method in class org.springframework.security.oauth2.server.resource.authentication.AbstractOAuth2TokenAuthenticationToken
-
Get the token bound to this
Authentication. - getToken() - Method in class org.springframework.security.oauth2.server.resource.authentication.BearerTokenAuthenticationToken
-
Get the Bearer Token
- getTokenAttributes() - Method in class org.springframework.security.oauth2.server.resource.authentication.AbstractOAuth2TokenAuthenticationToken
-
Returns the attributes of the access token.
- getTokenAttributes() - Method in class org.springframework.security.oauth2.server.resource.authentication.BearerTokenAuthentication
- getTokenAttributes() - Method in class org.springframework.security.oauth2.server.resource.authentication.JwtAuthenticationToken
H
- handle(HttpServletRequest, HttpServletResponse, AccessDeniedException) - Method in class org.springframework.security.oauth2.server.resource.web.access.BearerTokenAccessDeniedHandler
-
Collect error details from the provided parameters and format according to RFC 6750, specifically
error,error_description,error_uri, andscope. - handle(ServerWebExchange, AccessDeniedException) - Method in class org.springframework.security.oauth2.server.resource.web.access.server.BearerTokenServerAccessDeniedHandler
- HeaderBearerTokenResolver - Class in org.springframework.security.oauth2.server.resource.web
-
Generic resolver extracting pre-authenticated JWT identity from a custom header.
- HeaderBearerTokenResolver(String) - Constructor for class org.springframework.security.oauth2.server.resource.web.HeaderBearerTokenResolver
I
- INSUFFICIENT_SCOPE - Static variable in class org.springframework.security.oauth2.server.resource.BearerTokenErrorCodes
-
insufficient_scope- The request requires higher privileges than provided by the access token. - insufficientScope(String, String) - Static method in class org.springframework.security.oauth2.server.resource.BearerTokenErrors
-
Create a
BearerTokenErrorcaused by an invalid token - introspect(String) - Method in class org.springframework.security.oauth2.server.resource.introspection.NimbusOpaqueTokenIntrospector
-
Deprecated.
- introspect(String) - Method in class org.springframework.security.oauth2.server.resource.introspection.NimbusReactiveOpaqueTokenIntrospector
-
Deprecated.
- introspect(String) - Method in interface org.springframework.security.oauth2.server.resource.introspection.OpaqueTokenIntrospector
-
Introspect and verify the given token, returning its attributes.
- introspect(String) - Method in interface org.springframework.security.oauth2.server.resource.introspection.ReactiveOpaqueTokenIntrospector
-
Introspect and verify the given token, returning its attributes.
- introspect(String) - Method in class org.springframework.security.oauth2.server.resource.introspection.SpringOpaqueTokenIntrospector
- introspect(String) - Method in class org.springframework.security.oauth2.server.resource.introspection.SpringReactiveOpaqueTokenIntrospector
- INVALID_REQUEST - Static variable in class org.springframework.security.oauth2.server.resource.BearerTokenErrorCodes
-
invalid_request- The request is missing a required parameter, includes an unsupported parameter or parameter value, repeats the same parameter, uses more than one method for including an access token, or is otherwise malformed. - INVALID_TOKEN - Static variable in class org.springframework.security.oauth2.server.resource.BearerTokenErrorCodes
-
invalid_token- The access token provided is expired, revoked, malformed, or invalid for other reasons. - InvalidBearerTokenException - Exception in org.springframework.security.oauth2.server.resource
-
An
OAuth2AuthenticationExceptionthat indicates an invalid bearer token. - InvalidBearerTokenException(String) - Constructor for exception org.springframework.security.oauth2.server.resource.InvalidBearerTokenException
-
Construct an instance of
InvalidBearerTokenExceptiongiven the provided description. - InvalidBearerTokenException(String, Throwable) - Constructor for exception org.springframework.security.oauth2.server.resource.InvalidBearerTokenException
-
Construct an instance of
InvalidBearerTokenExceptiongiven the provided description and cause The description will be wrapped into anOAuth2Errorinstance as theerror_description. - invalidRequest(String) - Static method in class org.springframework.security.oauth2.server.resource.BearerTokenErrors
-
Create a
BearerTokenErrorcaused by an invalid request - invalidToken(String) - Static method in class org.springframework.security.oauth2.server.resource.BearerTokenErrors
-
Create a
BearerTokenErrorcaused by an invalid token
J
- JwtAuthenticationConverter - Class in org.springframework.security.oauth2.server.resource.authentication
- JwtAuthenticationConverter() - Constructor for class org.springframework.security.oauth2.server.resource.authentication.JwtAuthenticationConverter
- JwtAuthenticationProvider - Class in org.springframework.security.oauth2.server.resource.authentication
-
An
AuthenticationProviderimplementation of theJwt-encoded Bearer Tokens for protecting OAuth 2.0 Resource Servers. - JwtAuthenticationProvider(JwtDecoder) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.JwtAuthenticationProvider
- JwtAuthenticationToken - Class in org.springframework.security.oauth2.server.resource.authentication
- JwtAuthenticationToken(Jwt) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.JwtAuthenticationToken
-
Constructs a
JwtAuthenticationTokenusing the provided parameters. - JwtAuthenticationToken(Jwt, Collection<? extends GrantedAuthority>) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.JwtAuthenticationToken
-
Constructs a
JwtAuthenticationTokenusing the provided parameters. - JwtAuthenticationToken(Jwt, Collection<? extends GrantedAuthority>, String) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.JwtAuthenticationToken
-
Constructs a
JwtAuthenticationTokenusing the provided parameters. - JwtBearerTokenAuthenticationConverter - Class in org.springframework.security.oauth2.server.resource.authentication
- JwtBearerTokenAuthenticationConverter() - Constructor for class org.springframework.security.oauth2.server.resource.authentication.JwtBearerTokenAuthenticationConverter
- JwtGrantedAuthoritiesConverter - Class in org.springframework.security.oauth2.server.resource.authentication
-
Extracts the
GrantedAuthoritys from scope attributes typically found in aJwt. - JwtGrantedAuthoritiesConverter() - Constructor for class org.springframework.security.oauth2.server.resource.authentication.JwtGrantedAuthoritiesConverter
- JwtIssuerAuthenticationManagerResolver - Class in org.springframework.security.oauth2.server.resource.authentication
-
An implementation of
AuthenticationManagerResolverthat resolves a JWT-basedAuthenticationManagerbased on the Issuer in a signed JWT (JWS). - JwtIssuerAuthenticationManagerResolver(String...) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.JwtIssuerAuthenticationManagerResolver
-
Deprecated, for removal: This API element is subject to removal in a future version.
- JwtIssuerAuthenticationManagerResolver(Collection<String>) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.JwtIssuerAuthenticationManagerResolver
-
Deprecated, for removal: This API element is subject to removal in a future version.
- JwtIssuerAuthenticationManagerResolver(AuthenticationManagerResolver<String>) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.JwtIssuerAuthenticationManagerResolver
-
Construct a
JwtIssuerAuthenticationManagerResolverusing the provided parameters Note that theAuthenticationManagerResolverprovided in this constructor will need to verify that the issuer is trusted. - JwtIssuerReactiveAuthenticationManagerResolver - Class in org.springframework.security.oauth2.server.resource.authentication
-
An implementation of
ReactiveAuthenticationManagerResolverthat resolves a JWT-basedReactiveAuthenticationManagerbased on the Issuer in a signed JWT (JWS). - JwtIssuerReactiveAuthenticationManagerResolver(String...) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.JwtIssuerReactiveAuthenticationManagerResolver
-
Deprecated, for removal: This API element is subject to removal in a future version.
- JwtIssuerReactiveAuthenticationManagerResolver(Collection<String>) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.JwtIssuerReactiveAuthenticationManagerResolver
-
Deprecated, for removal: This API element is subject to removal in a future version.
- JwtIssuerReactiveAuthenticationManagerResolver(ReactiveAuthenticationManagerResolver<String>) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.JwtIssuerReactiveAuthenticationManagerResolver
-
Construct a
JwtIssuerReactiveAuthenticationManagerResolverusing the provided parameters Note that theReactiveAuthenticationManagerResolverprovided in this constructor will need to verify that the issuer is trusted. - JwtReactiveAuthenticationManager - Class in org.springframework.security.oauth2.server.resource.authentication
-
A
ReactiveAuthenticationManagerfor Jwt tokens. - JwtReactiveAuthenticationManager(ReactiveJwtDecoder) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.JwtReactiveAuthenticationManager
N
- NimbusOpaqueTokenIntrospector - Class in org.springframework.security.oauth2.server.resource.introspection
-
Deprecated.Please use
SpringOpaqueTokenIntrospectorinstead - NimbusOpaqueTokenIntrospector(String, String, String) - Constructor for class org.springframework.security.oauth2.server.resource.introspection.NimbusOpaqueTokenIntrospector
-
Deprecated.Creates a
OpaqueTokenAuthenticationProviderwith the provided parameters - NimbusOpaqueTokenIntrospector(String, RestOperations) - Constructor for class org.springframework.security.oauth2.server.resource.introspection.NimbusOpaqueTokenIntrospector
-
Deprecated.Creates a
OpaqueTokenAuthenticationProviderwith the provided parameters The givenRestOperationsshould perform its own client authentication against the introspection endpoint. - NimbusReactiveOpaqueTokenIntrospector - Class in org.springframework.security.oauth2.server.resource.introspection
-
Deprecated.Please use
SpringReactiveOpaqueTokenIntrospectorinstead - NimbusReactiveOpaqueTokenIntrospector(String, String, String) - Constructor for class org.springframework.security.oauth2.server.resource.introspection.NimbusReactiveOpaqueTokenIntrospector
-
Deprecated.Creates a
OpaqueTokenReactiveAuthenticationManagerwith the provided parameters - NimbusReactiveOpaqueTokenIntrospector(String, WebClient) - Constructor for class org.springframework.security.oauth2.server.resource.introspection.NimbusReactiveOpaqueTokenIntrospector
-
Deprecated.Creates a
OpaqueTokenReactiveAuthenticationManagerwith the provided parameters
O
- OAuth2IntrospectionAuthenticatedPrincipal - Class in org.springframework.security.oauth2.server.resource.introspection
-
A domain object that wraps the attributes of OAuth 2.0 Token Introspection.
- OAuth2IntrospectionAuthenticatedPrincipal(String, Map<String, Object>, Collection<GrantedAuthority>) - Constructor for class org.springframework.security.oauth2.server.resource.introspection.OAuth2IntrospectionAuthenticatedPrincipal
-
Constructs an
OAuth2IntrospectionAuthenticatedPrincipalusing the provided parameters. - OAuth2IntrospectionAuthenticatedPrincipal(Map<String, Object>, Collection<GrantedAuthority>) - Constructor for class org.springframework.security.oauth2.server.resource.introspection.OAuth2IntrospectionAuthenticatedPrincipal
-
Constructs an
OAuth2IntrospectionAuthenticatedPrincipalusing the provided parameters. - OAuth2IntrospectionException - Exception in org.springframework.security.oauth2.server.resource.introspection
-
Base exception for all OAuth 2.0 Introspection related errors
- OAuth2IntrospectionException(String) - Constructor for exception org.springframework.security.oauth2.server.resource.introspection.OAuth2IntrospectionException
- OAuth2IntrospectionException(String, Throwable) - Constructor for exception org.springframework.security.oauth2.server.resource.introspection.OAuth2IntrospectionException
- OpaqueTokenAuthenticationConverter - Interface in org.springframework.security.oauth2.server.resource.introspection
-
Convert a successful introspection result into an authentication result.
- OpaqueTokenAuthenticationProvider - Class in org.springframework.security.oauth2.server.resource.authentication
-
An
AuthenticationProviderimplementation for opaque Bearer Tokens, using an OAuth 2.0 Introspection Endpoint to check the token's validity and reveal its attributes. - OpaqueTokenAuthenticationProvider(OpaqueTokenIntrospector) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.OpaqueTokenAuthenticationProvider
-
Creates a
OpaqueTokenAuthenticationProviderwith the provided parameters - OpaqueTokenIntrospector - Interface in org.springframework.security.oauth2.server.resource.introspection
-
A contract for introspecting and verifying an OAuth 2.0 token.
- OpaqueTokenReactiveAuthenticationManager - Class in org.springframework.security.oauth2.server.resource.authentication
-
An
ReactiveAuthenticationManagerimplementation for opaque Bearer Tokens, using an OAuth 2.0 Introspection Endpoint to check the token's validity and reveal its attributes. - OpaqueTokenReactiveAuthenticationManager(ReactiveOpaqueTokenIntrospector) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.OpaqueTokenReactiveAuthenticationManager
-
Creates a
OpaqueTokenReactiveAuthenticationManagerwith the provided parameters - org.springframework.security.oauth2.server.resource - package org.springframework.security.oauth2.server.resource
-
OAuth 2.0 Resource Server core classes and interfaces providing support.
- org.springframework.security.oauth2.server.resource.authentication - package org.springframework.security.oauth2.server.resource.authentication
-
OAuth 2.0 Resource Server
Authentications and supporting classes and interfaces. - org.springframework.security.oauth2.server.resource.introspection - package org.springframework.security.oauth2.server.resource.introspection
-
OAuth 2.0 Introspection supporting classes and interfaces.
- org.springframework.security.oauth2.server.resource.web - package org.springframework.security.oauth2.server.resource.web
-
OAuth 2.0 Resource Server
Filter's and supporting classes and interfaces. - org.springframework.security.oauth2.server.resource.web.access - package org.springframework.security.oauth2.server.resource.web.access
-
OAuth 2.0 Resource Server access denial classes and interfaces.
- org.springframework.security.oauth2.server.resource.web.access.server - package org.springframework.security.oauth2.server.resource.web.access.server
- org.springframework.security.oauth2.server.resource.web.authentication - package org.springframework.security.oauth2.server.resource.web.authentication
- org.springframework.security.oauth2.server.resource.web.reactive.function.client - package org.springframework.security.oauth2.server.resource.web.reactive.function.client
- org.springframework.security.oauth2.server.resource.web.server - package org.springframework.security.oauth2.server.resource.web.server
- org.springframework.security.oauth2.server.resource.web.server.authentication - package org.springframework.security.oauth2.server.resource.web.server.authentication
R
- ReactiveJwtAuthenticationConverter - Class in org.springframework.security.oauth2.server.resource.authentication
-
Reactive version of
JwtAuthenticationConverterfor converting aJwtto aMono<AbstractAuthenticationToken>. - ReactiveJwtAuthenticationConverter() - Constructor for class org.springframework.security.oauth2.server.resource.authentication.ReactiveJwtAuthenticationConverter
- ReactiveJwtAuthenticationConverterAdapter - Class in org.springframework.security.oauth2.server.resource.authentication
-
A reactive
Converterfor adapting a non-blocking imperativeConverter - ReactiveJwtAuthenticationConverterAdapter(Converter<Jwt, AbstractAuthenticationToken>) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.ReactiveJwtAuthenticationConverterAdapter
- ReactiveJwtGrantedAuthoritiesConverterAdapter - Class in org.springframework.security.oauth2.server.resource.authentication
-
Adapts a
Converter<Jwt, Collection<GrantedAuthority>>to aConverter<Jwt, Flux<GrantedAuthority>>. - ReactiveJwtGrantedAuthoritiesConverterAdapter(Converter<Jwt, Collection<GrantedAuthority>>) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.ReactiveJwtGrantedAuthoritiesConverterAdapter
- ReactiveOpaqueTokenAuthenticationConverter - Interface in org.springframework.security.oauth2.server.resource.introspection
-
Convert a successful introspection result into an authentication result.
- ReactiveOpaqueTokenIntrospector - Interface in org.springframework.security.oauth2.server.resource.introspection
-
A contract for introspecting and verifying an OAuth 2.0 token.
- resolve(HttpServletRequest) - Method in class org.springframework.security.oauth2.server.resource.authentication.JwtIssuerAuthenticationManagerResolver
-
Return an
AuthenticationManagerbased off of the `iss` claim found in the request's bearer token - resolve(HttpServletRequest) - Method in interface org.springframework.security.oauth2.server.resource.web.BearerTokenResolver
-
Resolve any Bearer Token value from the request.
- resolve(HttpServletRequest) - Method in class org.springframework.security.oauth2.server.resource.web.DefaultBearerTokenResolver
- resolve(HttpServletRequest) - Method in class org.springframework.security.oauth2.server.resource.web.HeaderBearerTokenResolver
- resolve(ServerWebExchange) - Method in class org.springframework.security.oauth2.server.resource.authentication.JwtIssuerReactiveAuthenticationManagerResolver
-
Return an
AuthenticationManagerbased off of the `iss` claim found in the request's bearer token
S
- ServerBearerExchangeFilterFunction - Class in org.springframework.security.oauth2.server.resource.web.reactive.function.client
-
An
ExchangeFilterFunctionthat adds the Bearer Token from an existingOAuth2Tokentied to the currentAuthentication. - ServerBearerExchangeFilterFunction() - Constructor for class org.springframework.security.oauth2.server.resource.web.reactive.function.client.ServerBearerExchangeFilterFunction
- ServerBearerTokenAuthenticationConverter - Class in org.springframework.security.oauth2.server.resource.web.server.authentication
-
A strategy for resolving Bearer Tokens from the
ServerWebExchange. - ServerBearerTokenAuthenticationConverter() - Constructor for class org.springframework.security.oauth2.server.resource.web.server.authentication.ServerBearerTokenAuthenticationConverter
- ServletBearerExchangeFilterFunction - Class in org.springframework.security.oauth2.server.resource.web.reactive.function.client
-
An
ExchangeFilterFunctionthat adds the Bearer Token from an existingOAuth2Tokentied to the currentAuthentication. - ServletBearerExchangeFilterFunction() - Constructor for class org.springframework.security.oauth2.server.resource.web.reactive.function.client.ServletBearerExchangeFilterFunction
- setAllowFormEncodedBodyParameter(boolean) - Method in class org.springframework.security.oauth2.server.resource.web.DefaultBearerTokenResolver
-
Set if transport of access token using form-encoded body parameter is supported.
- setAllowFormEncodedBodyParameter(boolean) - Method in class org.springframework.security.oauth2.server.resource.web.server.authentication.ServerBearerTokenAuthenticationConverter
-
Set if transport of access token using form-encoded body parameter is supported.
- setAllowUriQueryParameter(boolean) - Method in class org.springframework.security.oauth2.server.resource.web.DefaultBearerTokenResolver
-
Set if transport of access token using URI query parameter is supported.
- setAllowUriQueryParameter(boolean) - Method in class org.springframework.security.oauth2.server.resource.web.server.authentication.ServerBearerTokenAuthenticationConverter
-
Set if transport of access token using URI query parameter is supported.
- setAuthenticationConverter(Converter<OAuth2TokenIntrospectionClaimAccessor, ? extends OAuth2AuthenticatedPrincipal>) - Method in class org.springframework.security.oauth2.server.resource.introspection.SpringOpaqueTokenIntrospector
-
Sets the
Converter<OAuth2TokenIntrospectionClaimAccessor, OAuth2AuthenticatedPrincipal>to use. - setAuthenticationConverter(Converter<OAuth2TokenIntrospectionClaimAccessor, Mono<? extends OAuth2AuthenticatedPrincipal>>) - Method in class org.springframework.security.oauth2.server.resource.introspection.SpringReactiveOpaqueTokenIntrospector
-
Sets the
Converter<OAuth2TokenIntrospectionClaimAccessor, OAuth2AuthenticatedPrincipal>to use. - setAuthenticationConverter(OpaqueTokenAuthenticationConverter) - Method in class org.springframework.security.oauth2.server.resource.authentication.OpaqueTokenAuthenticationProvider
-
Provide with a custom bean to turn successful introspection result into an
Authenticationinstance of your choice. - setAuthenticationConverter(ReactiveOpaqueTokenAuthenticationConverter) - Method in class org.springframework.security.oauth2.server.resource.authentication.OpaqueTokenReactiveAuthenticationManager
-
Provide with a custom bean to turn successful introspection result into an
Authenticationinstance of your choice. - setAuthenticationDetailsSource(AuthenticationDetailsSource<HttpServletRequest, ?>) - Method in class org.springframework.security.oauth2.server.resource.web.authentication.BearerTokenAuthenticationFilter
-
Set the
AuthenticationDetailsSourceto use. - setAuthenticationEntryPoint(AuthenticationEntryPoint) - Method in class org.springframework.security.oauth2.server.resource.web.authentication.BearerTokenAuthenticationFilter
-
Set the
AuthenticationEntryPointto use. - setAuthenticationFailureHandler(AuthenticationFailureHandler) - Method in class org.springframework.security.oauth2.server.resource.web.authentication.BearerTokenAuthenticationFilter
-
Set the
AuthenticationFailureHandlerto use. - setAuthoritiesClaimDelimiter(String) - Method in class org.springframework.security.oauth2.server.resource.authentication.JwtGrantedAuthoritiesConverter
-
Sets the regex to use for splitting the value of the authorities claim into
authorities. - setAuthoritiesClaimName(String) - Method in class org.springframework.security.oauth2.server.resource.authentication.JwtGrantedAuthoritiesConverter
-
Sets the name of token claim to use for mapping
authoritiesby this converter. - setAuthorityPrefix(String) - Method in class org.springframework.security.oauth2.server.resource.authentication.ExpressionJwtGrantedAuthoritiesConverter
-
Sets the prefix to use for
authoritiesmapped by this converter. - setAuthorityPrefix(String) - Method in class org.springframework.security.oauth2.server.resource.authentication.JwtGrantedAuthoritiesConverter
-
Sets the prefix to use for
authoritiesmapped by this converter. - setBearerTokenHeaderName(String) - Method in class org.springframework.security.oauth2.server.resource.web.DefaultBearerTokenResolver
-
Set this value to configure what header is checked when resolving a Bearer Token.
- setBearerTokenHeaderName(String) - Method in class org.springframework.security.oauth2.server.resource.web.server.authentication.ServerBearerTokenAuthenticationConverter
-
Set this value to configure what header is checked when resolving a Bearer Token.
- setBearerTokenResolver(BearerTokenResolver) - Method in class org.springframework.security.oauth2.server.resource.web.authentication.BearerTokenAuthenticationFilter
-
Set the
BearerTokenResolverto use. - setDPoPProofVerifierFactory(JwtDecoderFactory<DPoPProofContext>) - Method in class org.springframework.security.oauth2.server.resource.authentication.DPoPAuthenticationProvider
-
Sets the
JwtDecoderFactorythat provides aJwtDecoderfor the specifiedDPoPProofContextand is used for authenticating a DPoP ProofJwt. - setJwtAuthenticationConverter(Converter<Jwt, ? extends AbstractAuthenticationToken>) - Method in class org.springframework.security.oauth2.server.resource.authentication.JwtAuthenticationProvider
- setJwtAuthenticationConverter(Converter<Jwt, ? extends Mono<? extends AbstractAuthenticationToken>>) - Method in class org.springframework.security.oauth2.server.resource.authentication.JwtReactiveAuthenticationManager
-
Use the given
Converterfor converting aJwtinto anAbstractAuthenticationToken. - setJwtGrantedAuthoritiesConverter(Converter<Jwt, Collection<GrantedAuthority>>) - Method in class org.springframework.security.oauth2.server.resource.authentication.JwtAuthenticationConverter
-
Sets the
Converter<Jwt, Collection<GrantedAuthority>>to use. - setJwtGrantedAuthoritiesConverter(Converter<Jwt, Flux<GrantedAuthority>>) - Method in class org.springframework.security.oauth2.server.resource.authentication.ReactiveJwtAuthenticationConverter
-
Sets the
Converter<Jwt, Flux<GrantedAuthority>>to use. - setPrincipalClaimName(String) - Method in class org.springframework.security.oauth2.server.resource.authentication.JwtAuthenticationConverter
-
Sets the principal claim name.
- setPrincipalClaimName(String) - Method in class org.springframework.security.oauth2.server.resource.authentication.ReactiveJwtAuthenticationConverter
-
Sets the principal claim name.
- setRealmName(String) - Method in class org.springframework.security.oauth2.server.resource.web.access.BearerTokenAccessDeniedHandler
-
Set the default realm name to use in the bearer token error response
- setRealmName(String) - Method in class org.springframework.security.oauth2.server.resource.web.access.server.BearerTokenServerAccessDeniedHandler
-
Set the default realm name to use in the bearer token error response
- setRealmName(String) - Method in class org.springframework.security.oauth2.server.resource.web.BearerTokenAuthenticationEntryPoint
-
Set the default realm name to use in the bearer token error response
- setRealmName(String) - Method in class org.springframework.security.oauth2.server.resource.web.server.BearerTokenServerAuthenticationEntryPoint
- setRequestEntityConverter(Converter<String, RequestEntity<?>>) - Method in class org.springframework.security.oauth2.server.resource.introspection.NimbusOpaqueTokenIntrospector
-
Deprecated.Sets the
Converterused for converting the OAuth 2.0 access token to aRequestEntityrepresentation of the OAuth 2.0 token introspection request. - setRequestEntityConverter(Converter<String, RequestEntity<?>>) - Method in class org.springframework.security.oauth2.server.resource.introspection.SpringOpaqueTokenIntrospector
-
Sets the
Converterused for converting the OAuth 2.0 access token to aRequestEntityrepresentation of the OAuth 2.0 token introspection request. - setSecurityContextHolderStrategy(SecurityContextHolderStrategy) - Method in class org.springframework.security.oauth2.server.resource.web.authentication.BearerTokenAuthenticationFilter
-
Sets the
SecurityContextHolderStrategyto use. - setSecurityContextRepository(SecurityContextRepository) - Method in class org.springframework.security.oauth2.server.resource.web.authentication.BearerTokenAuthenticationFilter
-
Sets the
SecurityContextRepositoryto save theSecurityContexton authentication success. - SpringOpaqueTokenIntrospector - Class in org.springframework.security.oauth2.server.resource.introspection
-
A Spring implementation of
OpaqueTokenIntrospectorthat verifies and introspects a token using the configured OAuth 2.0 Introspection Endpoint. - SpringOpaqueTokenIntrospector(String, String, String) - Constructor for class org.springframework.security.oauth2.server.resource.introspection.SpringOpaqueTokenIntrospector
-
Deprecated, for removal: This API element is subject to removal in a future version.Please use
SpringOpaqueTokenIntrospector.Builder - SpringOpaqueTokenIntrospector(String, RestOperations) - Constructor for class org.springframework.security.oauth2.server.resource.introspection.SpringOpaqueTokenIntrospector
-
Creates a
OpaqueTokenAuthenticationProviderwith the provided parameters The givenRestOperationsshould perform its own client authentication against the introspection endpoint. - SpringOpaqueTokenIntrospector.Builder - Class in org.springframework.security.oauth2.server.resource.introspection
-
Used to build
SpringOpaqueTokenIntrospector. - SpringReactiveOpaqueTokenIntrospector - Class in org.springframework.security.oauth2.server.resource.introspection
-
A Spring implementation of
ReactiveOpaqueTokenIntrospectorthat verifies and introspects a token using the configured OAuth 2.0 Introspection Endpoint. - SpringReactiveOpaqueTokenIntrospector(String, String, String) - Constructor for class org.springframework.security.oauth2.server.resource.introspection.SpringReactiveOpaqueTokenIntrospector
-
Deprecated, for removal: This API element is subject to removal in a future version.
- SpringReactiveOpaqueTokenIntrospector(String, WebClient) - Constructor for class org.springframework.security.oauth2.server.resource.introspection.SpringReactiveOpaqueTokenIntrospector
-
Creates a
OpaqueTokenReactiveAuthenticationManagerwith the provided parameters - SpringReactiveOpaqueTokenIntrospector.Builder - Class in org.springframework.security.oauth2.server.resource.introspection
-
Used to build
SpringReactiveOpaqueTokenIntrospector. - supports(Class<?>) - Method in class org.springframework.security.oauth2.server.resource.authentication.DPoPAuthenticationProvider
- supports(Class<?>) - Method in class org.springframework.security.oauth2.server.resource.authentication.JwtAuthenticationProvider
- supports(Class<?>) - Method in class org.springframework.security.oauth2.server.resource.authentication.OpaqueTokenAuthenticationProvider
W
- withIntrospectionUri(String) - Static method in class org.springframework.security.oauth2.server.resource.introspection.SpringOpaqueTokenIntrospector
-
Creates a
SpringOpaqueTokenIntrospector.Builderwith the given introspection endpoint uri - withIntrospectionUri(String) - Static method in class org.springframework.security.oauth2.server.resource.introspection.SpringReactiveOpaqueTokenIntrospector
-
Creates a
SpringReactiveOpaqueTokenIntrospector.Builderwith the given introspection endpoint uri
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form
BearerTokenAuthenticationFilterinstead