Package dev.relism.flash.ext.security

package dev.relism.flash.ext.security

Class	Description
Authenticated	The handler or MCP tool requires an authenticated caller.
AuthenticationEntryPoint	Answers a request that needs a caller and carries no credential at all.
AuthenticationFailedException	A credential was presented and rejected.
AuthenticationMechanism	Reads one kind of credential off a request.
InMemorySessionStore	One instance's sessions, lost on restart.
LoginMethod	A way to sign in, listed at GET /auth/methods for a client to offer.
LoginMethod.Kind
PermitAll	Anyone may call the handler.
Principal	Who an AuthenticationMechanism proved the caller to be.
RoleResolver	Whether a caller holds a role — read from a token, a database, anywhere.
RolesAllowed	The caller must hold at least one of these roles, as decided by the configured RoleResolver.
ScopesAllowed	The caller's credential must grant every one of these scopes.
SecurityExtension	Flash security: the authentication chain, the policies security annotations declare, sessions, and the /auth/logout and /auth/methods routes.
SecurityIdentity	The authenticated caller of the current request: the Principal a mechanism produced, the application user it resolves to, and the roles and scopes it holds.
SecurityPolicy	What a handler's or tool's security annotations require, compiled once at boot.
SecurityScheme	A credential as OpenAPI names and defines it, the WWW-Authenticate challenge an anonymous API call receives for it, and — for OAuth — the issuer that grants it.
Session	A signed-in principal, kept server-side under the id its cookie carries.
SessionRefresher	Renews an expired session — with a refresh token, typically.
SessionStore	Where sessions live.
Target	The resource a role is checked on: the values RolesAllowed.on() names, read from path and query parameters on HTTP and from tool arguments on MCP.
UserResolver<U>	The application user a verified principal belongs to — typically found, or provisioned, by issuer and subject.