All Classes and Interfaces
Class
Description
AbstractOAuth2TokenAuthenticationToken<T extends org.springframework.security.oauth2.core.OAuth2Token>
Base class for
AbstractAuthenticationToken implementations that expose common
attributes between different OAuth 2.0 Access Token Formats.AbstractOAuth2TokenAuthenticationToken.AbstractOAuth2TokenAuthenticationBuilder<T extends org.springframework.security.oauth2.core.OAuth2Token,B extends AbstractOAuth2TokenAuthenticationToken.AbstractOAuth2TokenAuthenticationBuilder<T,B>>
A builder for
AbstractOAuth2TokenAuthenticationToken implementationsAn exception similar to
BadCredentialsException that
indicates an opaque token that is invalid in some way.Translates any
AccessDeniedException into an HTTP response in accordance with
RFC 6750
Section 3: The WWW-Authenticate.An
Authentication token that represents a
successful authentication as obtained through a bearer token.A builder preserving the concrete
Authentication typeImplementation of
AuthenticationConverter, that converts request to
BearerTokenAuthenticationTokenAn
AuthenticationEntryPoint implementation used to commence authentication of
protected resource requests using BearerTokenAuthenticationFilter.Authenticates requests that contain an OAuth 2.0
Bearer
Token.
An
Authentication that contains a
Bearer
Token.A representation of a
Bearer Token
Error.
Standard error codes defined by the OAuth 2.0 Authorization Framework: Bearer Token
Usage.
A factory for creating
BearerTokenError instances that correspond to the
registered Bearer Token Error
Codes.A strategy for resolving
Bearer
Tokens from the
HttpServletRequest.Translates any
AccessDeniedException into an HTTP response in accordance with
RFC 6750
Section 3: The WWW-Authenticate.An
AuthenticationEntryPoint implementation used to commence authentication of
protected resource requests using BearerTokenAuthenticationFilter.The default
BearerTokenResolver implementation based on RFC 6750.A
Jwt to GrantedAuthority Converter that is a composite of
converters.An
AuthenticationProvider implementation that is responsible for authenticating
a DPoP-bound access token for a protected resource request.An
Authentication representing a protected resource request with a DPoP-bound
access token.Uses an expression for extracting the token claim value to use for mapping
authorities.Generic resolver extracting pre-authenticated JWT identity from a custom header.
An
OAuth2AuthenticationException that indicates an invalid bearer token.An
AuthenticationProvider implementation of the Jwt-encoded
Bearer
Tokens for protecting OAuth 2.0 Resource Servers.A builder for
JwtAuthenticationToken instancesExtracts the
GrantedAuthoritys from scope attributes typically found in a
Jwt.An implementation of
AuthenticationManagerResolver that resolves a JWT-based
AuthenticationManager based on the Issuer in
a signed JWT (JWS).An implementation of
ReactiveAuthenticationManagerResolver that resolves a
JWT-based ReactiveAuthenticationManager based on the Issuer in
a signed JWT (JWS).A
ReactiveAuthenticationManager for Jwt tokens.A domain object that wraps the attributes of OAuth 2.0 Token Introspection.
Base exception for all OAuth 2.0 Introspection related errors
A representation of an OAuth 2.0 Protected Resource Metadata response, which is
returned from an OAuth 2.0 Resource Server's Metadata Endpoint, and contains a set of
claims about the Resource Server's configuration.
Helps configure an
OAuth2ProtectedResourceMetadata.A
ClaimAccessor for the claims a Resource Server describes about its
configuration, used in OAuth 2.0 Protected Resource Metadata.The names of the claims a Resource Server describes about its configuration, used in
OAuth 2.0 Protected Resource Metadata.
A
Filter that processes OAuth 2.0 Protected Resource Metadata Requests.Convert a successful introspection result into an authentication result.
An
AuthenticationProvider implementation for opaque
Bearer
Tokens, using an
OAuth 2.0 Introspection
Endpoint to check the token's validity and reveal its attributes.A contract for introspecting and verifying an OAuth 2.0 token.
An
ReactiveAuthenticationManager implementation for opaque
Bearer
Tokens, using an
OAuth 2.0 Introspection
Endpoint to check the token's validity and reveal its attributes.Reactive version of
JwtAuthenticationConverter for converting a Jwt to
a Mono<AbstractAuthenticationToken>.A reactive
Converter for adapting a non-blocking imperative ConverterAdapts a
Converter<Jwt, Collection<GrantedAuthority>> to
a Converter<Jwt, Flux<GrantedAuthority>>.Convert a successful introspection result into an authentication result.
A contract for introspecting and verifying an OAuth 2.0 token.
An
ExchangeFilterFunction that adds the
Bearer
Token from an existing OAuth2Token tied to the current
Authentication.A strategy for resolving
Bearer
Tokens from the
ServerWebExchange.An
ExchangeFilterFunction that adds the
Bearer
Token from an existing OAuth2Token tied to the current
Authentication.A Spring implementation of
OpaqueTokenIntrospector that verifies and
introspects a token using the configured
OAuth 2.0 Introspection
Endpoint.Used to build
SpringOpaqueTokenIntrospector.A Spring implementation of
ReactiveOpaqueTokenIntrospector that verifies and
introspects a token using the configured
OAuth 2.0 Introspection
Endpoint.Used to build
SpringReactiveOpaqueTokenIntrospector.