Index
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form
A
- AbstractOAuth2TokenAuthenticationBuilder(AbstractOAuth2TokenAuthenticationToken<T>) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.AbstractOAuth2TokenAuthenticationToken.AbstractOAuth2TokenAuthenticationBuilder
- AbstractOAuth2TokenAuthenticationToken<T extends org.springframework.security.oauth2.core.OAuth2Token> - Class in org.springframework.security.oauth2.server.resource.authentication
-
Base class for
AbstractAuthenticationTokenimplementations that expose common attributes between different OAuth 2.0 Access Token Formats. - AbstractOAuth2TokenAuthenticationToken(AbstractOAuth2TokenAuthenticationToken.AbstractOAuth2TokenAuthenticationBuilder<T, ?>) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.AbstractOAuth2TokenAuthenticationToken
- AbstractOAuth2TokenAuthenticationToken(T) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.AbstractOAuth2TokenAuthenticationToken
-
Sub-class constructor.
- AbstractOAuth2TokenAuthenticationToken(T, Object, Object, Collection<? extends GrantedAuthority>) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.AbstractOAuth2TokenAuthenticationToken
- AbstractOAuth2TokenAuthenticationToken(T, Collection<? extends GrantedAuthority>) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.AbstractOAuth2TokenAuthenticationToken
-
Sub-class constructor.
- AbstractOAuth2TokenAuthenticationToken.AbstractOAuth2TokenAuthenticationBuilder<T extends org.springframework.security.oauth2.core.OAuth2Token,
B extends AbstractOAuth2TokenAuthenticationToken.AbstractOAuth2TokenAuthenticationBuilder<T, B>> - Class in org.springframework.security.oauth2.server.resource.authentication -
A builder for
AbstractOAuth2TokenAuthenticationTokenimplementations - authenticate(Authentication) - Method in class org.springframework.security.oauth2.server.resource.authentication.DPoPAuthenticationProvider
- authenticate(Authentication) - Method in class org.springframework.security.oauth2.server.resource.authentication.JwtAuthenticationProvider
-
Decode and validate the Bearer Token.
- authenticate(Authentication) - Method in class org.springframework.security.oauth2.server.resource.authentication.JwtReactiveAuthenticationManager
- authenticate(Authentication) - Method in class org.springframework.security.oauth2.server.resource.authentication.OpaqueTokenAuthenticationProvider
-
Introspect and validate the opaque Bearer Token and then delegates
Authenticationinstantiation toOpaqueTokenAuthenticationConverter. - authenticate(Authentication) - Method in class org.springframework.security.oauth2.server.resource.authentication.OpaqueTokenReactiveAuthenticationManager
-
Introspect and validate the opaque Bearer Token and then delegates
Authenticationinstantiation toReactiveOpaqueTokenAuthenticationConverter. - AUTHORIZATION_SERVERS - Static variable in class org.springframework.security.oauth2.server.resource.OAuth2ProtectedResourceMetadataClaimNames
-
authorization_servers- a list ofissueridentifierURL's, for authorization servers that can be used with this protected resource - authorizationServer(String) - Method in class org.springframework.security.oauth2.server.resource.OAuth2ProtectedResourceMetadata.Builder
-
Add the issuer identifier for an authorization server, OPTIONAL.
- authorizationServers(Consumer<List<String>>) - Method in class org.springframework.security.oauth2.server.resource.OAuth2ProtectedResourceMetadata.Builder
-
A
Consumerof the issuer identifier values for the authorization servers, allowing the ability to add, replace, or remove, OPTIONAL.
B
- BadOpaqueTokenException - Exception in org.springframework.security.oauth2.server.resource.introspection
-
An exception similar to
BadCredentialsExceptionthat indicates an opaque token that is invalid in some way. - BadOpaqueTokenException(String) - Constructor for exception org.springframework.security.oauth2.server.resource.introspection.BadOpaqueTokenException
- BadOpaqueTokenException(String, Throwable) - Constructor for exception org.springframework.security.oauth2.server.resource.introspection.BadOpaqueTokenException
- BEARER_METHODS_SUPPORTED - Static variable in class org.springframework.security.oauth2.server.resource.OAuth2ProtectedResourceMetadataClaimNames
-
bearer_methods_supported- a list of the supported methods for sending an OAuth 2.0 bearer token to the protected resource. - bearerMethod(String) - Method in class org.springframework.security.oauth2.server.resource.OAuth2ProtectedResourceMetadata.Builder
-
Add a supported method for sending an OAuth 2.0 bearer token to the protected resource, OPTIONAL.
- bearerMethods(Consumer<List<String>>) - Method in class org.springframework.security.oauth2.server.resource.OAuth2ProtectedResourceMetadata.Builder
-
A
Consumerof the supported methods for sending an OAuth 2.0 bearer token to the protected resource, allowing the ability to add, replace, or remove, OPTIONAL. - BearerTokenAccessDeniedHandler - Class in org.springframework.security.oauth2.server.resource.web.access
-
Translates any
AccessDeniedExceptioninto an HTTP response in accordance with RFC 6750 Section 3: The WWW-Authenticate. - BearerTokenAccessDeniedHandler() - Constructor for class org.springframework.security.oauth2.server.resource.web.access.BearerTokenAccessDeniedHandler
- BearerTokenAuthentication - Class in org.springframework.security.oauth2.server.resource.authentication
-
An
Authenticationtoken that represents a successful authentication as obtained through a bearer token. - BearerTokenAuthentication(OAuth2AuthenticatedPrincipal, OAuth2AccessToken, Collection<? extends GrantedAuthority>) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.BearerTokenAuthentication
-
Constructs a
BearerTokenAuthenticationwith the provided arguments - BearerTokenAuthentication(BearerTokenAuthentication.Builder<?>) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.BearerTokenAuthentication
- BearerTokenAuthentication.Builder<B extends BearerTokenAuthentication.Builder<B>> - Class in org.springframework.security.oauth2.server.resource.authentication
-
A builder preserving the concrete
Authenticationtype - BearerTokenAuthenticationConverter - Class in org.springframework.security.oauth2.server.resource.web.authentication
-
Implementation of
AuthenticationConverter, that converts request toBearerTokenAuthenticationToken - BearerTokenAuthenticationConverter() - Constructor for class org.springframework.security.oauth2.server.resource.web.authentication.BearerTokenAuthenticationConverter
- BearerTokenAuthenticationEntryPoint - Class in org.springframework.security.oauth2.server.resource.web
-
An
AuthenticationEntryPointimplementation used to commence authentication of protected resource requests usingBearerTokenAuthenticationFilter. - BearerTokenAuthenticationEntryPoint() - Constructor for class org.springframework.security.oauth2.server.resource.web.BearerTokenAuthenticationEntryPoint
- BearerTokenAuthenticationFilter - Class in org.springframework.security.oauth2.server.resource.web.authentication
-
Authenticates requests that contain an OAuth 2.0 Bearer Token.
- BearerTokenAuthenticationFilter(AuthenticationManager) - Constructor for class org.springframework.security.oauth2.server.resource.web.authentication.BearerTokenAuthenticationFilter
-
Construct a
BearerTokenAuthenticationFilterusing the provided parameter(s) - BearerTokenAuthenticationFilter(AuthenticationManagerResolver<HttpServletRequest>) - Constructor for class org.springframework.security.oauth2.server.resource.web.authentication.BearerTokenAuthenticationFilter
-
Construct a
BearerTokenAuthenticationFilterusing the provided parameter(s) - BearerTokenAuthenticationFilter(AuthenticationManagerResolver<HttpServletRequest>, AuthenticationConverter) - Constructor for class org.springframework.security.oauth2.server.resource.web.authentication.BearerTokenAuthenticationFilter
-
Construct this filter using the provided parameters
- BearerTokenAuthenticationFilter(AuthenticationManager, AuthenticationConverter) - Constructor for class org.springframework.security.oauth2.server.resource.web.authentication.BearerTokenAuthenticationFilter
-
Construct this filter using the provided parameters
- BearerTokenAuthenticationToken - Class in org.springframework.security.oauth2.server.resource.authentication
-
An
Authenticationthat contains a Bearer Token. - BearerTokenAuthenticationToken(String) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.BearerTokenAuthenticationToken
-
Create a
BearerTokenAuthenticationTokenusing the provided parameter(s) - BearerTokenError - Class in org.springframework.security.oauth2.server.resource
-
A representation of a Bearer Token Error.
- BearerTokenError(String, HttpStatus, String, String) - Constructor for class org.springframework.security.oauth2.server.resource.BearerTokenError
-
Create a
BearerTokenErrorusing the provided parameters - BearerTokenError(String, HttpStatus, String, String, String) - Constructor for class org.springframework.security.oauth2.server.resource.BearerTokenError
-
Create a
BearerTokenErrorusing the provided parameters - BearerTokenErrorCodes - Class in org.springframework.security.oauth2.server.resource
-
Standard error codes defined by the OAuth 2.0 Authorization Framework: Bearer Token Usage.
- BearerTokenErrors - Class in org.springframework.security.oauth2.server.resource
-
A factory for creating
BearerTokenErrorinstances that correspond to the registered Bearer Token Error Codes. - BearerTokenResolver - Interface in org.springframework.security.oauth2.server.resource.web
-
A strategy for resolving Bearer Tokens from the
HttpServletRequest. - BearerTokenServerAccessDeniedHandler - Class in org.springframework.security.oauth2.server.resource.web.access.server
-
Translates any
AccessDeniedExceptioninto an HTTP response in accordance with RFC 6750 Section 3: The WWW-Authenticate. - BearerTokenServerAccessDeniedHandler() - Constructor for class org.springframework.security.oauth2.server.resource.web.access.server.BearerTokenServerAccessDeniedHandler
- BearerTokenServerAuthenticationEntryPoint - Class in org.springframework.security.oauth2.server.resource.web.server
-
An
AuthenticationEntryPointimplementation used to commence authentication of protected resource requests usingBearerTokenAuthenticationFilter. - BearerTokenServerAuthenticationEntryPoint() - Constructor for class org.springframework.security.oauth2.server.resource.web.server.BearerTokenServerAuthenticationEntryPoint
- build() - Method in class org.springframework.security.oauth2.server.resource.authentication.BearerTokenAuthentication.Builder
- build() - Method in class org.springframework.security.oauth2.server.resource.authentication.JwtAuthenticationToken.Builder
- build() - Method in class org.springframework.security.oauth2.server.resource.introspection.SpringOpaqueTokenIntrospector.Builder
-
Creates a
SpringOpaqueTokenIntrospector - build() - Method in class org.springframework.security.oauth2.server.resource.introspection.SpringReactiveOpaqueTokenIntrospector.Builder
-
Creates a
SpringReactiveOpaqueTokenIntrospector - build() - Method in class org.springframework.security.oauth2.server.resource.OAuth2ProtectedResourceMetadata.Builder
-
Validate the claims and build the
OAuth2ProtectedResourceMetadata. - builder() - Static method in class org.springframework.security.oauth2.server.resource.OAuth2ProtectedResourceMetadata
-
Constructs a new
OAuth2ProtectedResourceMetadata.Builderwith empty claims. - Builder(BearerTokenAuthentication) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.BearerTokenAuthentication.Builder
- Builder(JwtAuthenticationToken) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.JwtAuthenticationToken.Builder
C
- claim(String, Object) - Method in class org.springframework.security.oauth2.server.resource.OAuth2ProtectedResourceMetadata.Builder
-
Sets the claim.
- claims(Consumer<Map<String, Object>>) - Method in class org.springframework.security.oauth2.server.resource.OAuth2ProtectedResourceMetadata.Builder
-
Provides access to every
OAuth2ProtectedResourceMetadata.Builder.claim(String, Object)declared so far allowing the ability to add, replace, or remove. - clientId(String) - Method in class org.springframework.security.oauth2.server.resource.introspection.SpringOpaqueTokenIntrospector.Builder
-
The builder will
encodethe client id that you provide, so please give the unencoded value. - clientId(String) - Method in class org.springframework.security.oauth2.server.resource.introspection.SpringReactiveOpaqueTokenIntrospector.Builder
-
The builder will
encodethe client id that you provide, so please give the unencoded value. - clientSecret(String) - Method in class org.springframework.security.oauth2.server.resource.introspection.SpringOpaqueTokenIntrospector.Builder
-
The builder will
encodethe client secret that you provide, so please give the unencoded value. - clientSecret(String) - Method in class org.springframework.security.oauth2.server.resource.introspection.SpringReactiveOpaqueTokenIntrospector.Builder
-
The builder will
encodethe client secret that you provide, so please give the unencoded value. - commence(HttpServletRequest, HttpServletResponse, AuthenticationException) - Method in class org.springframework.security.oauth2.server.resource.web.BearerTokenAuthenticationEntryPoint
-
Collect error details from the provided parameters and format according to RFC 6750, specifically
error,error_description,error_uri, andscope. - commence(ServerWebExchange, AuthenticationException) - Method in class org.springframework.security.oauth2.server.resource.web.server.BearerTokenServerAuthenticationEntryPoint
- convert(HttpServletRequest) - Method in class org.springframework.security.oauth2.server.resource.web.authentication.BearerTokenAuthenticationConverter
- convert(String, OAuth2AuthenticatedPrincipal) - Method in interface org.springframework.security.oauth2.server.resource.introspection.OpaqueTokenAuthenticationConverter
-
Converts a successful introspection result into an authentication result.
- convert(String, OAuth2AuthenticatedPrincipal) - Method in interface org.springframework.security.oauth2.server.resource.introspection.ReactiveOpaqueTokenAuthenticationConverter
-
Converts a successful introspection result into an authentication result.
- convert(Jwt) - Method in class org.springframework.security.oauth2.server.resource.authentication.DelegatingJwtGrantedAuthoritiesConverter
-
Extract
GrantedAuthoritys from the givenJwt. - convert(Jwt) - Method in class org.springframework.security.oauth2.server.resource.authentication.ExpressionJwtGrantedAuthoritiesConverter
-
Extract
GrantedAuthoritys from the givenJwt. - convert(Jwt) - Method in class org.springframework.security.oauth2.server.resource.authentication.JwtAuthenticationConverter
- convert(Jwt) - Method in class org.springframework.security.oauth2.server.resource.authentication.JwtBearerTokenAuthenticationConverter
- convert(Jwt) - Method in class org.springframework.security.oauth2.server.resource.authentication.JwtGrantedAuthoritiesConverter
-
Extract
GrantedAuthoritys from the givenJwt. - convert(Jwt) - Method in class org.springframework.security.oauth2.server.resource.authentication.ReactiveJwtAuthenticationConverter
- convert(Jwt) - Method in class org.springframework.security.oauth2.server.resource.authentication.ReactiveJwtAuthenticationConverterAdapter
- convert(Jwt) - Method in class org.springframework.security.oauth2.server.resource.authentication.ReactiveJwtGrantedAuthoritiesConverterAdapter
- convert(ServerWebExchange) - Method in class org.springframework.security.oauth2.server.resource.web.server.authentication.ServerBearerTokenAuthenticationConverter
- credentials(Object) - Method in class org.springframework.security.oauth2.server.resource.authentication.AbstractOAuth2TokenAuthenticationToken.AbstractOAuth2TokenAuthenticationBuilder
- credentials(Object) - Method in class org.springframework.security.oauth2.server.resource.authentication.BearerTokenAuthentication.Builder
- credentials(Object) - Method in class org.springframework.security.oauth2.server.resource.authentication.JwtAuthenticationToken.Builder
-
A synonym for
JwtAuthenticationToken.Builder.token(Jwt)
D
- DefaultBearerTokenResolver - Class in org.springframework.security.oauth2.server.resource.web
-
The default
BearerTokenResolverimplementation based on RFC 6750. - DefaultBearerTokenResolver() - Constructor for class org.springframework.security.oauth2.server.resource.web.DefaultBearerTokenResolver
- DelegatingJwtGrantedAuthoritiesConverter - Class in org.springframework.security.oauth2.server.resource.authentication
-
A
JwttoGrantedAuthorityConverterthat is a composite of converters. - DelegatingJwtGrantedAuthoritiesConverter(Collection<Converter<Jwt, Collection<GrantedAuthority>>>) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.DelegatingJwtGrantedAuthoritiesConverter
- DelegatingJwtGrantedAuthoritiesConverter(Converter<Jwt, Collection<GrantedAuthority>>...) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.DelegatingJwtGrantedAuthoritiesConverter
-
Constructs a
DelegatingJwtGrantedAuthoritiesConverterusing the provided array ofConverters - doFilterInternal(HttpServletRequest, HttpServletResponse, FilterChain) - Method in class org.springframework.security.oauth2.server.resource.web.authentication.BearerTokenAuthenticationFilter
-
Extract any Bearer Token from the request and attempt an authentication.
- doFilterInternal(HttpServletRequest, HttpServletResponse, FilterChain) - Method in class org.springframework.security.oauth2.server.resource.web.OAuth2ProtectedResourceMetadataFilter
- DPoPAuthenticationProvider - Class in org.springframework.security.oauth2.server.resource.authentication
-
An
AuthenticationProviderimplementation that is responsible for authenticating a DPoP-bound access token for a protected resource request. - DPoPAuthenticationProvider(AuthenticationManager) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.DPoPAuthenticationProvider
-
Constructs a
DPoPAuthenticationProviderusing the provided parameters. - DPoPAuthenticationToken - Class in org.springframework.security.oauth2.server.resource.authentication
-
An
Authenticationrepresenting a protected resource request with a DPoP-bound access token. - DPoPAuthenticationToken(String, String, String, String) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.DPoPAuthenticationToken
-
Constructs a
DPoPAuthenticationTokenusing the provided parameters.
E
- ExpressionJwtGrantedAuthoritiesConverter - Class in org.springframework.security.oauth2.server.resource.authentication
-
Uses an expression for extracting the token claim value to use for mapping
authorities. - ExpressionJwtGrantedAuthoritiesConverter(Expression) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.ExpressionJwtGrantedAuthoritiesConverter
-
Constructs a
ExpressionJwtGrantedAuthoritiesConverterusing the providedauthoritiesClaimExpression.
F
- filter(ClientRequest, ExchangeFunction) - Method in class org.springframework.security.oauth2.server.resource.web.reactive.function.client.ServerBearerExchangeFilterFunction
- filter(ClientRequest, ExchangeFunction) - Method in class org.springframework.security.oauth2.server.resource.web.reactive.function.client.ServletBearerExchangeFilterFunction
- fromTrustedIssuers(String...) - Static method in class org.springframework.security.oauth2.server.resource.authentication.JwtIssuerAuthenticationManagerResolver
-
Construct a
JwtIssuerAuthenticationManagerResolverusing the provided parameters - fromTrustedIssuers(String...) - Static method in class org.springframework.security.oauth2.server.resource.authentication.JwtIssuerReactiveAuthenticationManagerResolver
-
Construct a
JwtIssuerReactiveAuthenticationManagerResolverusing the provided parameters - fromTrustedIssuers(Collection<String>) - Static method in class org.springframework.security.oauth2.server.resource.authentication.JwtIssuerAuthenticationManagerResolver
-
Construct a
JwtIssuerAuthenticationManagerResolverusing the provided parameters - fromTrustedIssuers(Collection<String>) - Static method in class org.springframework.security.oauth2.server.resource.authentication.JwtIssuerReactiveAuthenticationManagerResolver
-
Construct a
JwtIssuerReactiveAuthenticationManagerResolverusing the provided parameters - fromTrustedIssuers(Predicate<String>) - Static method in class org.springframework.security.oauth2.server.resource.authentication.JwtIssuerAuthenticationManagerResolver
-
Construct a
JwtIssuerAuthenticationManagerResolverusing the provided parameters - fromTrustedIssuers(Predicate<String>) - Static method in class org.springframework.security.oauth2.server.resource.authentication.JwtIssuerReactiveAuthenticationManagerResolver
-
Construct a
JwtIssuerReactiveAuthenticationManagerResolverusing the provided parameters
G
- getAccessToken() - Method in class org.springframework.security.oauth2.server.resource.authentication.DPoPAuthenticationToken
-
Returns the DPoP-bound access token.
- getAttributes() - Method in class org.springframework.security.oauth2.server.resource.introspection.OAuth2IntrospectionAuthenticatedPrincipal
-
Gets the attributes of the OAuth 2.0 Token Introspection in map form.
- getAuthorities() - Method in class org.springframework.security.oauth2.server.resource.introspection.OAuth2IntrospectionAuthenticatedPrincipal
-
Get the
CollectionofGrantedAuthoritys associated with this OAuth 2.0 Token Introspection - getAuthorizationServers() - Method in interface org.springframework.security.oauth2.server.resource.OAuth2ProtectedResourceMetadataClaimAccessor
-
Returns a list of
issueridentifierURL's, for authorization servers that can be used with this protected resource(authorization_servers). - getBearerMethodsSupported() - Method in interface org.springframework.security.oauth2.server.resource.OAuth2ProtectedResourceMetadataClaimAccessor
-
Returns a list of the supported methods for sending an OAuth 2.0 bearer token to the protected resource.
- getClaims() - Method in class org.springframework.security.oauth2.server.resource.introspection.OAuth2IntrospectionAuthenticatedPrincipal
- getClaims() - Method in class org.springframework.security.oauth2.server.resource.OAuth2ProtectedResourceMetadata
-
Returns the metadata as claims.
- getCredentials() - Method in class org.springframework.security.oauth2.server.resource.authentication.AbstractOAuth2TokenAuthenticationToken
- getCredentials() - Method in class org.springframework.security.oauth2.server.resource.authentication.BearerTokenAuthenticationToken
- getCredentials() - Method in class org.springframework.security.oauth2.server.resource.authentication.DPoPAuthenticationToken
- getDPoPProof() - Method in class org.springframework.security.oauth2.server.resource.authentication.DPoPAuthenticationToken
-
Returns the DPoP Proof
Jwt. - getHttpStatus() - Method in class org.springframework.security.oauth2.server.resource.BearerTokenError
-
Return the HTTP status.
- getMethod() - Method in class org.springframework.security.oauth2.server.resource.authentication.DPoPAuthenticationToken
-
Returns the value of the HTTP method of the request.
- getName() - Method in class org.springframework.security.oauth2.server.resource.authentication.JwtAuthenticationToken
-
The principal name which is, by default, the
Jwt's subject - getName() - Method in class org.springframework.security.oauth2.server.resource.introspection.OAuth2IntrospectionAuthenticatedPrincipal
- getPrincipal() - Method in class org.springframework.security.oauth2.server.resource.authentication.AbstractOAuth2TokenAuthenticationToken
- getPrincipal() - Method in class org.springframework.security.oauth2.server.resource.authentication.BearerTokenAuthenticationToken
- getPrincipal() - Method in class org.springframework.security.oauth2.server.resource.authentication.DPoPAuthenticationToken
- getResource() - Method in interface org.springframework.security.oauth2.server.resource.OAuth2ProtectedResourceMetadataClaimAccessor
-
Returns the
URLthe protected resource asserts as its resource identifier(resource). - getResourceName() - Method in interface org.springframework.security.oauth2.server.resource.OAuth2ProtectedResourceMetadataClaimAccessor
-
Returns the name of the protected resource intended for display to the end user
(resource_name). - getResourceUri() - Method in class org.springframework.security.oauth2.server.resource.authentication.DPoPAuthenticationToken
-
Returns the value of the HTTP resource URI of the request, without query and fragment parts.
- getScope() - Method in class org.springframework.security.oauth2.server.resource.BearerTokenError
-
Return the scope.
- getScopes() - Method in interface org.springframework.security.oauth2.server.resource.OAuth2ProtectedResourceMetadataClaimAccessor
-
Returns a list of
scopevalues supported, that are used in authorization requests to request access to this protected resource(scopes_supported). - getToken() - Method in class org.springframework.security.oauth2.server.resource.authentication.AbstractOAuth2TokenAuthenticationToken
-
Get the token bound to this
Authentication. - getToken() - Method in class org.springframework.security.oauth2.server.resource.authentication.BearerTokenAuthenticationToken
-
Get the Bearer Token
- getTokenAttributes() - Method in class org.springframework.security.oauth2.server.resource.authentication.AbstractOAuth2TokenAuthenticationToken
-
Returns the attributes of the access token.
- getTokenAttributes() - Method in class org.springframework.security.oauth2.server.resource.authentication.BearerTokenAuthentication
- getTokenAttributes() - Method in class org.springframework.security.oauth2.server.resource.authentication.JwtAuthenticationToken
H
- handle(HttpServletRequest, HttpServletResponse, AccessDeniedException) - Method in class org.springframework.security.oauth2.server.resource.web.access.BearerTokenAccessDeniedHandler
-
Collect error details from the provided parameters and format according to RFC 6750, specifically
error,error_description,error_uri, andscope. - handle(ServerWebExchange, AccessDeniedException) - Method in class org.springframework.security.oauth2.server.resource.web.access.server.BearerTokenServerAccessDeniedHandler
- HeaderBearerTokenResolver - Class in org.springframework.security.oauth2.server.resource.web
-
Generic resolver extracting pre-authenticated JWT identity from a custom header.
- HeaderBearerTokenResolver(String) - Constructor for class org.springframework.security.oauth2.server.resource.web.HeaderBearerTokenResolver
I
- INSUFFICIENT_SCOPE - Static variable in class org.springframework.security.oauth2.server.resource.BearerTokenErrorCodes
-
insufficient_scope- The request requires higher privileges than provided by the access token. - insufficientScope(String, String) - Static method in class org.springframework.security.oauth2.server.resource.BearerTokenErrors
-
Create a
BearerTokenErrorcaused by an invalid token - introspect(String) - Method in interface org.springframework.security.oauth2.server.resource.introspection.OpaqueTokenIntrospector
-
Introspect and verify the given token, returning its attributes.
- introspect(String) - Method in interface org.springframework.security.oauth2.server.resource.introspection.ReactiveOpaqueTokenIntrospector
-
Introspect and verify the given token, returning its attributes.
- introspect(String) - Method in class org.springframework.security.oauth2.server.resource.introspection.SpringOpaqueTokenIntrospector
- introspect(String) - Method in class org.springframework.security.oauth2.server.resource.introspection.SpringReactiveOpaqueTokenIntrospector
- INVALID_REQUEST - Static variable in class org.springframework.security.oauth2.server.resource.BearerTokenErrorCodes
-
invalid_request- The request is missing a required parameter, includes an unsupported parameter or parameter value, repeats the same parameter, uses more than one method for including an access token, or is otherwise malformed. - INVALID_TOKEN - Static variable in class org.springframework.security.oauth2.server.resource.BearerTokenErrorCodes
-
invalid_token- The access token provided is expired, revoked, malformed, or invalid for other reasons. - InvalidBearerTokenException - Exception in org.springframework.security.oauth2.server.resource
-
An
OAuth2AuthenticationExceptionthat indicates an invalid bearer token. - InvalidBearerTokenException(String) - Constructor for exception org.springframework.security.oauth2.server.resource.InvalidBearerTokenException
-
Construct an instance of
InvalidBearerTokenExceptiongiven the provided description. - InvalidBearerTokenException(String, Throwable) - Constructor for exception org.springframework.security.oauth2.server.resource.InvalidBearerTokenException
-
Construct an instance of
InvalidBearerTokenExceptiongiven the provided description and cause The description will be wrapped into anOAuth2Errorinstance as theerror_description. - invalidRequest(String) - Static method in class org.springframework.security.oauth2.server.resource.BearerTokenErrors
-
Create a
BearerTokenErrorcaused by an invalid request - invalidToken(String) - Static method in class org.springframework.security.oauth2.server.resource.BearerTokenErrors
-
Create a
BearerTokenErrorcaused by an invalid token - isTlsClientCertificateBoundAccessTokens() - Method in interface org.springframework.security.oauth2.server.resource.OAuth2ProtectedResourceMetadataClaimAccessor
-
Returns
trueto indicate protected resource support for mutual-TLS client certificate-bound access tokens(tls_client_certificate_bound_access_tokens).
J
- JwtAuthenticationConverter - Class in org.springframework.security.oauth2.server.resource.authentication
- JwtAuthenticationConverter() - Constructor for class org.springframework.security.oauth2.server.resource.authentication.JwtAuthenticationConverter
- JwtAuthenticationProvider - Class in org.springframework.security.oauth2.server.resource.authentication
-
An
AuthenticationProviderimplementation of theJwt-encoded Bearer Tokens for protecting OAuth 2.0 Resource Servers. - JwtAuthenticationProvider(JwtDecoder) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.JwtAuthenticationProvider
- JwtAuthenticationToken - Class in org.springframework.security.oauth2.server.resource.authentication
- JwtAuthenticationToken(Jwt) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.JwtAuthenticationToken
-
Constructs a
JwtAuthenticationTokenusing the provided parameters. - JwtAuthenticationToken(Jwt, Collection<? extends GrantedAuthority>) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.JwtAuthenticationToken
-
Constructs a
JwtAuthenticationTokenusing the provided parameters. - JwtAuthenticationToken(Jwt, Collection<? extends GrantedAuthority>, String) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.JwtAuthenticationToken
-
Constructs a
JwtAuthenticationTokenusing the provided parameters. - JwtAuthenticationToken(JwtAuthenticationToken.Builder<?>) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.JwtAuthenticationToken
- JwtAuthenticationToken.Builder<B extends JwtAuthenticationToken.Builder<B>> - Class in org.springframework.security.oauth2.server.resource.authentication
-
A builder for
JwtAuthenticationTokeninstances - JwtBearerTokenAuthenticationConverter - Class in org.springframework.security.oauth2.server.resource.authentication
- JwtBearerTokenAuthenticationConverter() - Constructor for class org.springframework.security.oauth2.server.resource.authentication.JwtBearerTokenAuthenticationConverter
- JwtGrantedAuthoritiesConverter - Class in org.springframework.security.oauth2.server.resource.authentication
-
Extracts the
GrantedAuthoritys from scope attributes typically found in aJwt. - JwtGrantedAuthoritiesConverter() - Constructor for class org.springframework.security.oauth2.server.resource.authentication.JwtGrantedAuthoritiesConverter
- JwtIssuerAuthenticationManagerResolver - Class in org.springframework.security.oauth2.server.resource.authentication
-
An implementation of
AuthenticationManagerResolverthat resolves a JWT-basedAuthenticationManagerbased on the Issuer in a signed JWT (JWS). - JwtIssuerAuthenticationManagerResolver(AuthenticationManagerResolver<String>) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.JwtIssuerAuthenticationManagerResolver
-
Construct a
JwtIssuerAuthenticationManagerResolverusing the provided parameters Note that theAuthenticationManagerResolverprovided in this constructor will need to verify that the issuer is trusted. - JwtIssuerReactiveAuthenticationManagerResolver - Class in org.springframework.security.oauth2.server.resource.authentication
-
An implementation of
ReactiveAuthenticationManagerResolverthat resolves a JWT-basedReactiveAuthenticationManagerbased on the Issuer in a signed JWT (JWS). - JwtIssuerReactiveAuthenticationManagerResolver(ReactiveAuthenticationManagerResolver<String>) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.JwtIssuerReactiveAuthenticationManagerResolver
-
Construct a
JwtIssuerReactiveAuthenticationManagerResolverusing the provided parameters Note that theReactiveAuthenticationManagerResolverprovided in this constructor will need to verify that the issuer is trusted. - JwtReactiveAuthenticationManager - Class in org.springframework.security.oauth2.server.resource.authentication
-
A
ReactiveAuthenticationManagerfor Jwt tokens. - JwtReactiveAuthenticationManager(ReactiveJwtDecoder) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.JwtReactiveAuthenticationManager
N
- name(String) - Method in class org.springframework.security.oauth2.server.resource.authentication.JwtAuthenticationToken.Builder
-
The name to use.
O
- OAuth2IntrospectionAuthenticatedPrincipal - Class in org.springframework.security.oauth2.server.resource.introspection
-
A domain object that wraps the attributes of OAuth 2.0 Token Introspection.
- OAuth2IntrospectionAuthenticatedPrincipal(String, Map<String, Object>, Collection<GrantedAuthority>) - Constructor for class org.springframework.security.oauth2.server.resource.introspection.OAuth2IntrospectionAuthenticatedPrincipal
-
Constructs an
OAuth2IntrospectionAuthenticatedPrincipalusing the provided parameters. - OAuth2IntrospectionAuthenticatedPrincipal(Map<String, Object>, Collection<GrantedAuthority>) - Constructor for class org.springframework.security.oauth2.server.resource.introspection.OAuth2IntrospectionAuthenticatedPrincipal
-
Constructs an
OAuth2IntrospectionAuthenticatedPrincipalusing the provided parameters. - OAuth2IntrospectionException - Exception in org.springframework.security.oauth2.server.resource.introspection
-
Base exception for all OAuth 2.0 Introspection related errors
- OAuth2IntrospectionException(String) - Constructor for exception org.springframework.security.oauth2.server.resource.introspection.OAuth2IntrospectionException
- OAuth2IntrospectionException(String, Throwable) - Constructor for exception org.springframework.security.oauth2.server.resource.introspection.OAuth2IntrospectionException
- OAuth2ProtectedResourceMetadata - Class in org.springframework.security.oauth2.server.resource
-
A representation of an OAuth 2.0 Protected Resource Metadata response, which is returned from an OAuth 2.0 Resource Server's Metadata Endpoint, and contains a set of claims about the Resource Server's configuration.
- OAuth2ProtectedResourceMetadata.Builder - Class in org.springframework.security.oauth2.server.resource
-
Helps configure an
OAuth2ProtectedResourceMetadata. - OAuth2ProtectedResourceMetadataClaimAccessor - Interface in org.springframework.security.oauth2.server.resource
-
A
ClaimAccessorfor the claims a Resource Server describes about its configuration, used in OAuth 2.0 Protected Resource Metadata. - OAuth2ProtectedResourceMetadataClaimNames - Class in org.springframework.security.oauth2.server.resource
-
The names of the claims a Resource Server describes about its configuration, used in OAuth 2.0 Protected Resource Metadata.
- OAuth2ProtectedResourceMetadataFilter - Class in org.springframework.security.oauth2.server.resource.web
-
A
Filterthat processes OAuth 2.0 Protected Resource Metadata Requests. - OAuth2ProtectedResourceMetadataFilter() - Constructor for class org.springframework.security.oauth2.server.resource.web.OAuth2ProtectedResourceMetadataFilter
- OpaqueTokenAuthenticationConverter - Interface in org.springframework.security.oauth2.server.resource.introspection
-
Convert a successful introspection result into an authentication result.
- OpaqueTokenAuthenticationProvider - Class in org.springframework.security.oauth2.server.resource.authentication
-
An
AuthenticationProviderimplementation for opaque Bearer Tokens, using an OAuth 2.0 Introspection Endpoint to check the token's validity and reveal its attributes. - OpaqueTokenAuthenticationProvider(OpaqueTokenIntrospector) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.OpaqueTokenAuthenticationProvider
-
Creates a
OpaqueTokenAuthenticationProviderwith the provided parameters - OpaqueTokenIntrospector - Interface in org.springframework.security.oauth2.server.resource.introspection
-
A contract for introspecting and verifying an OAuth 2.0 token.
- OpaqueTokenReactiveAuthenticationManager - Class in org.springframework.security.oauth2.server.resource.authentication
-
An
ReactiveAuthenticationManagerimplementation for opaque Bearer Tokens, using an OAuth 2.0 Introspection Endpoint to check the token's validity and reveal its attributes. - OpaqueTokenReactiveAuthenticationManager(ReactiveOpaqueTokenIntrospector) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.OpaqueTokenReactiveAuthenticationManager
-
Creates a
OpaqueTokenReactiveAuthenticationManagerwith the provided parameters - org.springframework.security.oauth2.server.resource - package org.springframework.security.oauth2.server.resource
-
OAuth 2.0 Resource Server core classes and interfaces providing support.
- org.springframework.security.oauth2.server.resource.authentication - package org.springframework.security.oauth2.server.resource.authentication
-
OAuth 2.0 Resource Server
Authentications and supporting classes and interfaces. - org.springframework.security.oauth2.server.resource.introspection - package org.springframework.security.oauth2.server.resource.introspection
-
OAuth 2.0 Introspection supporting classes and interfaces.
- org.springframework.security.oauth2.server.resource.web - package org.springframework.security.oauth2.server.resource.web
-
OAuth 2.0 Resource Server
Filter's and supporting classes and interfaces. - org.springframework.security.oauth2.server.resource.web.access - package org.springframework.security.oauth2.server.resource.web.access
-
OAuth 2.0 Resource Server access denial classes and interfaces.
- org.springframework.security.oauth2.server.resource.web.access.server - package org.springframework.security.oauth2.server.resource.web.access.server
- org.springframework.security.oauth2.server.resource.web.authentication - package org.springframework.security.oauth2.server.resource.web.authentication
- org.springframework.security.oauth2.server.resource.web.reactive.function.client - package org.springframework.security.oauth2.server.resource.web.reactive.function.client
- org.springframework.security.oauth2.server.resource.web.server - package org.springframework.security.oauth2.server.resource.web.server
- org.springframework.security.oauth2.server.resource.web.server.authentication - package org.springframework.security.oauth2.server.resource.web.server.authentication
P
- principal(Object) - Method in class org.springframework.security.oauth2.server.resource.authentication.AbstractOAuth2TokenAuthenticationToken.AbstractOAuth2TokenAuthenticationBuilder
- principal(Object) - Method in class org.springframework.security.oauth2.server.resource.authentication.BearerTokenAuthentication.Builder
-
Use this principal.
- principal(Object) - Method in class org.springframework.security.oauth2.server.resource.authentication.JwtAuthenticationToken.Builder
-
A synonym for
JwtAuthenticationToken.Builder.token(Jwt)
R
- ReactiveJwtAuthenticationConverter - Class in org.springframework.security.oauth2.server.resource.authentication
-
Reactive version of
JwtAuthenticationConverterfor converting aJwtto aMono<AbstractAuthenticationToken>. - ReactiveJwtAuthenticationConverter() - Constructor for class org.springframework.security.oauth2.server.resource.authentication.ReactiveJwtAuthenticationConverter
- ReactiveJwtAuthenticationConverterAdapter - Class in org.springframework.security.oauth2.server.resource.authentication
-
A reactive
Converterfor adapting a non-blocking imperativeConverter - ReactiveJwtAuthenticationConverterAdapter(Converter<Jwt, AbstractAuthenticationToken>) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.ReactiveJwtAuthenticationConverterAdapter
- ReactiveJwtGrantedAuthoritiesConverterAdapter - Class in org.springframework.security.oauth2.server.resource.authentication
-
Adapts a
Converter<Jwt, Collection<GrantedAuthority>>to aConverter<Jwt, Flux<GrantedAuthority>>. - ReactiveJwtGrantedAuthoritiesConverterAdapter(Converter<Jwt, Collection<GrantedAuthority>>) - Constructor for class org.springframework.security.oauth2.server.resource.authentication.ReactiveJwtGrantedAuthoritiesConverterAdapter
- ReactiveOpaqueTokenAuthenticationConverter - Interface in org.springframework.security.oauth2.server.resource.introspection
-
Convert a successful introspection result into an authentication result.
- ReactiveOpaqueTokenIntrospector - Interface in org.springframework.security.oauth2.server.resource.introspection
-
A contract for introspecting and verifying an OAuth 2.0 token.
- resolve(HttpServletRequest) - Method in class org.springframework.security.oauth2.server.resource.authentication.JwtIssuerAuthenticationManagerResolver
-
Return an
AuthenticationManagerbased off of the `iss` claim found in the request's bearer token - resolve(HttpServletRequest) - Method in interface org.springframework.security.oauth2.server.resource.web.BearerTokenResolver
-
Resolve any Bearer Token value from the request.
- resolve(HttpServletRequest) - Method in class org.springframework.security.oauth2.server.resource.web.DefaultBearerTokenResolver
- resolve(HttpServletRequest) - Method in class org.springframework.security.oauth2.server.resource.web.HeaderBearerTokenResolver
- resolve(ServerWebExchange) - Method in class org.springframework.security.oauth2.server.resource.authentication.JwtIssuerReactiveAuthenticationManagerResolver
-
Return an
AuthenticationManagerbased off of the `iss` claim found in the request's bearer token - resource(String) - Method in class org.springframework.security.oauth2.server.resource.OAuth2ProtectedResourceMetadata.Builder
-
Sets the resource identifier for the protected resource, REQUIRED.
- RESOURCE - Static variable in class org.springframework.security.oauth2.server.resource.OAuth2ProtectedResourceMetadataClaimNames
-
resource- theURLthe protected resource asserts as its resource identifier - RESOURCE_NAME - Static variable in class org.springframework.security.oauth2.server.resource.OAuth2ProtectedResourceMetadataClaimNames
-
resource_name- the name of the protected resource intended for display to the end user - resourceName(String) - Method in class org.springframework.security.oauth2.server.resource.OAuth2ProtectedResourceMetadata.Builder
-
Sets the name of the protected resource intended for display to the end user, RECOMMENDED.
S
- scope(String) - Method in class org.springframework.security.oauth2.server.resource.OAuth2ProtectedResourceMetadata.Builder
-
Add a
scopesupported in authorization requests to the protected resource, RECOMMENDED. - scopes(Consumer<List<String>>) - Method in class org.springframework.security.oauth2.server.resource.OAuth2ProtectedResourceMetadata.Builder
-
A
Consumerof thescopevalues supported in authorization requests to the protected resource, allowing the ability to add, replace, or remove, RECOMMENDED. - SCOPES_SUPPORTED - Static variable in class org.springframework.security.oauth2.server.resource.OAuth2ProtectedResourceMetadataClaimNames
-
scopes_supported- a list ofscopevalues supported, that are used in authorization requests to request access to this protected resource - ServerBearerExchangeFilterFunction - Class in org.springframework.security.oauth2.server.resource.web.reactive.function.client
-
An
ExchangeFilterFunctionthat adds the Bearer Token from an existingOAuth2Tokentied to the currentAuthentication. - ServerBearerExchangeFilterFunction() - Constructor for class org.springframework.security.oauth2.server.resource.web.reactive.function.client.ServerBearerExchangeFilterFunction
- ServerBearerTokenAuthenticationConverter - Class in org.springframework.security.oauth2.server.resource.web.server.authentication
-
A strategy for resolving Bearer Tokens from the
ServerWebExchange. - ServerBearerTokenAuthenticationConverter() - Constructor for class org.springframework.security.oauth2.server.resource.web.server.authentication.ServerBearerTokenAuthenticationConverter
- ServletBearerExchangeFilterFunction - Class in org.springframework.security.oauth2.server.resource.web.reactive.function.client
-
An
ExchangeFilterFunctionthat adds the Bearer Token from an existingOAuth2Tokentied to the currentAuthentication. - ServletBearerExchangeFilterFunction() - Constructor for class org.springframework.security.oauth2.server.resource.web.reactive.function.client.ServletBearerExchangeFilterFunction
- setAllowFormEncodedBodyParameter(boolean) - Method in class org.springframework.security.oauth2.server.resource.web.DefaultBearerTokenResolver
-
Set if transport of access token using form-encoded body parameter is supported.
- setAllowFormEncodedBodyParameter(boolean) - Method in class org.springframework.security.oauth2.server.resource.web.server.authentication.ServerBearerTokenAuthenticationConverter
-
Set if transport of access token using form-encoded body parameter is supported.
- setAllowUriQueryParameter(boolean) - Method in class org.springframework.security.oauth2.server.resource.web.DefaultBearerTokenResolver
-
Set if transport of access token using URI query parameter is supported.
- setAllowUriQueryParameter(boolean) - Method in class org.springframework.security.oauth2.server.resource.web.server.authentication.ServerBearerTokenAuthenticationConverter
-
Set if transport of access token using URI query parameter is supported.
- setAuthenticationConverter(Converter<OAuth2TokenIntrospectionClaimAccessor, ? extends OAuth2AuthenticatedPrincipal>) - Method in class org.springframework.security.oauth2.server.resource.introspection.SpringOpaqueTokenIntrospector
-
Sets the
Converter<OAuth2TokenIntrospectionClaimAccessor, OAuth2AuthenticatedPrincipal>to use. - setAuthenticationConverter(Converter<OAuth2TokenIntrospectionClaimAccessor, Mono<? extends OAuth2AuthenticatedPrincipal>>) - Method in class org.springframework.security.oauth2.server.resource.introspection.SpringReactiveOpaqueTokenIntrospector
-
Sets the
Converter<OAuth2TokenIntrospectionClaimAccessor, OAuth2AuthenticatedPrincipal>to use. - setAuthenticationConverter(OpaqueTokenAuthenticationConverter) - Method in class org.springframework.security.oauth2.server.resource.authentication.OpaqueTokenAuthenticationProvider
-
Provide with a custom bean to turn successful introspection result into an
Authenticationinstance of your choice. - setAuthenticationConverter(ReactiveOpaqueTokenAuthenticationConverter) - Method in class org.springframework.security.oauth2.server.resource.authentication.OpaqueTokenReactiveAuthenticationManager
-
Provide with a custom bean to turn successful introspection result into an
Authenticationinstance of your choice. - setAuthenticationDetailsSource(AuthenticationDetailsSource<HttpServletRequest, ?>) - Method in class org.springframework.security.oauth2.server.resource.web.authentication.BearerTokenAuthenticationConverter
-
Set the
AuthenticationDetailsSourceto use. - setAuthenticationDetailsSource(AuthenticationDetailsSource<HttpServletRequest, ?>) - Method in class org.springframework.security.oauth2.server.resource.web.authentication.BearerTokenAuthenticationFilter
-
Deprecated.
- setAuthenticationEntryPoint(AuthenticationEntryPoint) - Method in class org.springframework.security.oauth2.server.resource.web.authentication.BearerTokenAuthenticationFilter
-
Set the
AuthenticationEntryPointto use. - setAuthenticationFailureHandler(AuthenticationFailureHandler) - Method in class org.springframework.security.oauth2.server.resource.web.authentication.BearerTokenAuthenticationFilter
-
Set the
AuthenticationFailureHandlerto use. - setAuthoritiesClaimDelimiter(String) - Method in class org.springframework.security.oauth2.server.resource.authentication.JwtGrantedAuthoritiesConverter
-
Sets the regex to use for splitting the value of the authorities claim into
authorities. - setAuthoritiesClaimName(String) - Method in class org.springframework.security.oauth2.server.resource.authentication.JwtGrantedAuthoritiesConverter
-
Sets the name of token claim to use for mapping
authoritiesby this converter. - setAuthorityPrefix(String) - Method in class org.springframework.security.oauth2.server.resource.authentication.ExpressionJwtGrantedAuthoritiesConverter
-
Sets the prefix to use for
authoritiesmapped by this converter. - setAuthorityPrefix(String) - Method in class org.springframework.security.oauth2.server.resource.authentication.JwtGrantedAuthoritiesConverter
-
Sets the prefix to use for
authoritiesmapped by this converter. - setBearerTokenHeaderName(String) - Method in class org.springframework.security.oauth2.server.resource.web.DefaultBearerTokenResolver
-
Set this value to configure what header is checked when resolving a Bearer Token.
- setBearerTokenHeaderName(String) - Method in class org.springframework.security.oauth2.server.resource.web.server.authentication.ServerBearerTokenAuthenticationConverter
-
Set this value to configure what header is checked when resolving a Bearer Token.
- setBearerTokenResolver(BearerTokenResolver) - Method in class org.springframework.security.oauth2.server.resource.web.authentication.BearerTokenAuthenticationConverter
- setBearerTokenResolver(BearerTokenResolver) - Method in class org.springframework.security.oauth2.server.resource.web.authentication.BearerTokenAuthenticationFilter
-
Deprecated.Please provide an
AuthenticationConverterin the constructor instead - setDPoPProofVerifierFactory(JwtDecoderFactory<DPoPProofContext>) - Method in class org.springframework.security.oauth2.server.resource.authentication.DPoPAuthenticationProvider
-
Sets the
JwtDecoderFactorythat provides aJwtDecoderfor the specifiedDPoPProofContextand is used for authenticating a DPoP ProofJwt. - setJwtAuthenticationConverter(Converter<Jwt, ? extends AbstractAuthenticationToken>) - Method in class org.springframework.security.oauth2.server.resource.authentication.JwtAuthenticationProvider
- setJwtAuthenticationConverter(Converter<Jwt, ? extends Mono<? extends AbstractAuthenticationToken>>) - Method in class org.springframework.security.oauth2.server.resource.authentication.JwtReactiveAuthenticationManager
-
Use the given
Converterfor converting aJwtinto anAbstractAuthenticationToken. - setJwtGrantedAuthoritiesConverter(Converter<Jwt, Collection<GrantedAuthority>>) - Method in class org.springframework.security.oauth2.server.resource.authentication.JwtAuthenticationConverter
-
Sets the
Converter<Jwt, Collection<GrantedAuthority>>to use. - setJwtGrantedAuthoritiesConverter(Converter<Jwt, Flux<GrantedAuthority>>) - Method in class org.springframework.security.oauth2.server.resource.authentication.ReactiveJwtAuthenticationConverter
-
Sets the
Converter<Jwt, Flux<GrantedAuthority>>to use. - setPrincipalClaimName(String) - Method in class org.springframework.security.oauth2.server.resource.authentication.JwtAuthenticationConverter
-
Sets the principal claim name.
- setPrincipalClaimName(String) - Method in class org.springframework.security.oauth2.server.resource.authentication.ReactiveJwtAuthenticationConverter
-
Sets the principal claim name.
- setProtectedResourceMetadataCustomizer(Consumer<OAuth2ProtectedResourceMetadata.Builder>) - Method in class org.springframework.security.oauth2.server.resource.web.OAuth2ProtectedResourceMetadataFilter
-
Sets the
Consumerproviding access to theOAuth2ProtectedResourceMetadata.Builderallowing the ability to customize the claims of the Resource Server's configuration. - setRealmName(String) - Method in class org.springframework.security.oauth2.server.resource.web.access.BearerTokenAccessDeniedHandler
-
Set the default realm name to use in the bearer token error response
- setRealmName(String) - Method in class org.springframework.security.oauth2.server.resource.web.access.server.BearerTokenServerAccessDeniedHandler
-
Set the default realm name to use in the bearer token error response
- setRealmName(String) - Method in class org.springframework.security.oauth2.server.resource.web.BearerTokenAuthenticationEntryPoint
-
Set the default realm name to use in the bearer token error response
- setRealmName(String) - Method in class org.springframework.security.oauth2.server.resource.web.server.BearerTokenServerAuthenticationEntryPoint
- setRequestEntityConverter(Converter<String, RequestEntity<?>>) - Method in class org.springframework.security.oauth2.server.resource.introspection.SpringOpaqueTokenIntrospector
-
Sets the
Converterused for converting the OAuth 2.0 access token to aRequestEntityrepresentation of the OAuth 2.0 token introspection request. - setSecurityContextHolderStrategy(SecurityContextHolderStrategy) - Method in class org.springframework.security.oauth2.server.resource.web.authentication.BearerTokenAuthenticationFilter
-
Sets the
SecurityContextHolderStrategyto use. - setSecurityContextRepository(SecurityContextRepository) - Method in class org.springframework.security.oauth2.server.resource.web.authentication.BearerTokenAuthenticationFilter
-
Sets the
SecurityContextRepositoryto save theSecurityContexton authentication success. - SpringOpaqueTokenIntrospector - Class in org.springframework.security.oauth2.server.resource.introspection
-
A Spring implementation of
OpaqueTokenIntrospectorthat verifies and introspects a token using the configured OAuth 2.0 Introspection Endpoint. - SpringOpaqueTokenIntrospector(String, String, String) - Constructor for class org.springframework.security.oauth2.server.resource.introspection.SpringOpaqueTokenIntrospector
-
Deprecated, for removal: This API element is subject to removal in a future version.Please use
SpringOpaqueTokenIntrospector.Builder - SpringOpaqueTokenIntrospector(String, RestOperations) - Constructor for class org.springframework.security.oauth2.server.resource.introspection.SpringOpaqueTokenIntrospector
-
Creates a
OpaqueTokenAuthenticationProviderwith the provided parameters The givenRestOperationsshould perform its own client authentication against the introspection endpoint. - SpringOpaqueTokenIntrospector.Builder - Class in org.springframework.security.oauth2.server.resource.introspection
-
Used to build
SpringOpaqueTokenIntrospector. - SpringReactiveOpaqueTokenIntrospector - Class in org.springframework.security.oauth2.server.resource.introspection
-
A Spring implementation of
ReactiveOpaqueTokenIntrospectorthat verifies and introspects a token using the configured OAuth 2.0 Introspection Endpoint. - SpringReactiveOpaqueTokenIntrospector(String, String, String) - Constructor for class org.springframework.security.oauth2.server.resource.introspection.SpringReactiveOpaqueTokenIntrospector
-
Deprecated, for removal: This API element is subject to removal in a future version.
- SpringReactiveOpaqueTokenIntrospector(String, WebClient) - Constructor for class org.springframework.security.oauth2.server.resource.introspection.SpringReactiveOpaqueTokenIntrospector
-
Creates a
OpaqueTokenReactiveAuthenticationManagerwith the provided parameters - SpringReactiveOpaqueTokenIntrospector.Builder - Class in org.springframework.security.oauth2.server.resource.introspection
-
Used to build
SpringReactiveOpaqueTokenIntrospector. - supports(Class<?>) - Method in class org.springframework.security.oauth2.server.resource.authentication.DPoPAuthenticationProvider
- supports(Class<?>) - Method in class org.springframework.security.oauth2.server.resource.authentication.JwtAuthenticationProvider
- supports(Class<?>) - Method in class org.springframework.security.oauth2.server.resource.authentication.OpaqueTokenAuthenticationProvider
T
- TLS_CLIENT_CERTIFICATE_BOUND_ACCESS_TOKENS - Static variable in class org.springframework.security.oauth2.server.resource.OAuth2ProtectedResourceMetadataClaimNames
-
tls_client_certificate_bound_access_tokens-trueto indicate protected resource support for mutual-TLS client certificate-bound access tokens - tlsClientCertificateBoundAccessTokens(boolean) - Method in class org.springframework.security.oauth2.server.resource.OAuth2ProtectedResourceMetadata.Builder
-
Set to
trueto indicate protected resource support for mutual-TLS client certificate-bound access tokens, OPTIONAL. - toBuilder() - Method in class org.springframework.security.oauth2.server.resource.authentication.BearerTokenAuthentication
- toBuilder() - Method in class org.springframework.security.oauth2.server.resource.authentication.JwtAuthenticationToken
- token(OAuth2AccessToken) - Method in class org.springframework.security.oauth2.server.resource.authentication.BearerTokenAuthentication.Builder
-
Use this token.
- token(Jwt) - Method in class org.springframework.security.oauth2.server.resource.authentication.JwtAuthenticationToken.Builder
-
Use this
tokenas the token, principal, and credentials. - token(T) - Method in class org.springframework.security.oauth2.server.resource.authentication.AbstractOAuth2TokenAuthenticationToken.AbstractOAuth2TokenAuthenticationBuilder
-
The OAuth 2.0 Token to use
W
- withIntrospectionUri(String) - Static method in class org.springframework.security.oauth2.server.resource.introspection.SpringOpaqueTokenIntrospector
-
Creates a
SpringOpaqueTokenIntrospector.Builderwith the given introspection endpoint uri - withIntrospectionUri(String) - Static method in class org.springframework.security.oauth2.server.resource.introspection.SpringReactiveOpaqueTokenIntrospector
-
Creates a
SpringReactiveOpaqueTokenIntrospector.Builderwith the given introspection endpoint uri
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form
AuthenticationConverterin the constructor and set theAuthenticationDetailsSourcethere instead. For example, you can useBearerTokenAuthenticationConverter.setAuthenticationDetailsSource(org.springframework.security.authentication.AuthenticationDetailsSource<jakarta.servlet.http.HttpServletRequest, ?>)