Index (flash-ext-security-oidc 2.1.0-7f225e0 API)

A

accessToken() - Method in record class dev.relism.flash.ext.security.oidc.OidcPrincipal: Returns the value of the accessToken record component.
allowLocalProviders() - Method in class dev.relism.flash.ext.security.oidc.OidcExtension: Lets OidcExtension.register(dev.relism.flash.ext.security.oidc.OidcProvider) accept http and private addresses — for a provider on a developer's machine, never in production.
at(String) - Static method in class dev.relism.flash.ext.security.oidc.ClaimRoles: Roles at a dot-separated claim path — realm_access.roles for Keycloak, groups for most others.
authenticate(Request) - Method in class dev.relism.flash.ext.security.oidc.OidcExtension

claim(String) - Method in record class dev.relism.flash.ext.security.oidc.OidcPrincipal
ClaimRoles - Class in dev.relism.flash.ext.security.oidc: Roles read from the provider's token instead of the application's own data.
claims() - Method in record class dev.relism.flash.ext.security.oidc.OidcPrincipal: Returns the value of the claims record component.
clientId() - Method in record class dev.relism.flash.ext.security.oidc.OidcProvider: Returns the value of the clientId record component.
clientSecret() - Method in record class dev.relism.flash.ext.security.oidc.OidcProvider: Returns the value of the clientSecret record component.
configure(FlashRegistrar<?>, FlashContext) - Method in class dev.relism.flash.ext.security.oidc.OidcExtension

dev.relism.flash.ext.security.oidc - package dev.relism.flash.ext.security.oidc

email() - Method in record class dev.relism.flash.ext.security.oidc.OidcPrincipal
equals(Object) - Method in record class dev.relism.flash.ext.security.oidc.OidcPrincipal: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class dev.relism.flash.ext.security.oidc.OidcProvider: Indicates whether some other object is "equal to" this one.

hasAudience(String) - Method in record class dev.relism.flash.ext.security.oidc.OidcPrincipal
hashCode() - Method in record class dev.relism.flash.ext.security.oidc.OidcPrincipal: Returns a hash code value for this object.
hashCode() - Method in record class dev.relism.flash.ext.security.oidc.OidcProvider: Returns a hash code value for this object.
hasRole(SecurityIdentity, String, Target) - Method in class dev.relism.flash.ext.security.oidc.ClaimRoles
hasScope(String) - Method in record class dev.relism.flash.ext.security.oidc.OidcPrincipal: From scope (space-delimited) or scp; a token that grants none grants none.

id() - Method in record class dev.relism.flash.ext.security.oidc.OidcProvider: Returns the value of the id record component.
issuer() - Method in record class dev.relism.flash.ext.security.oidc.OidcPrincipal
issuer() - Method in record class dev.relism.flash.ext.security.oidc.OidcProvider: Returns the value of the issuer record component.

logoutUrl() - Method in record class dev.relism.flash.ext.security.oidc.OidcPrincipal: Returns the value of the logoutUrl record component.

name() - Method in record class dev.relism.flash.ext.security.oidc.OidcPrincipal: Returns the value of the name record component.
name() - Method in record class dev.relism.flash.ext.security.oidc.OidcProvider: Returns the value of the name record component.
name(String) - Method in record class dev.relism.flash.ext.security.oidc.OidcProvider

of(Principal) - Method in class dev.relism.flash.ext.security.oidc.ClaimRoles: The roles principal's token carries; none for a caller OIDC did not authenticate.
of(String, String, String, String) - Static method in record class dev.relism.flash.ext.security.oidc.OidcProvider
OidcExtension - Class in dev.relism.flash.ext.security.oidc: OpenID Connect: bearer access tokens from any configured provider, and browser sign-in through the authorization code flow with PKCE, which ends in a SecurityExtension session renewed with the refresh token.
OidcExtension(OidcProvider...) - Constructor for class dev.relism.flash.ext.security.oidc.OidcExtension
OidcPrincipal - Record Class in dev.relism.flash.ext.security.oidc: A caller an OpenID Provider vouched for: through a bearer access token, or by signing in.
OidcPrincipal(String, String, Map<String, Object>, String, String, String) - Constructor for record class dev.relism.flash.ext.security.oidc.OidcPrincipal: Creates an instance of a OidcPrincipal record class.
OidcProvider - Record Class in dev.relism.flash.ext.security.oidc: An OpenID Provider the application trusts, and the client the application is registered as there.
OidcProvider(String, String, String, String, String, String) - Constructor for record class dev.relism.flash.ext.security.oidc.OidcProvider: Creates an instance of a OidcProvider record class.

provider() - Method in record class dev.relism.flash.ext.security.oidc.OidcPrincipal: Returns the value of the provider record component.

refreshToken() - Method in record class dev.relism.flash.ext.security.oidc.OidcPrincipal: Returns the value of the refreshToken record component.
register(OidcProvider) - Method in class dev.relism.flash.ext.security.oidc.OidcExtension: Trusts another provider from now on — an organization connecting its own.

scopes() - Method in record class dev.relism.flash.ext.security.oidc.OidcProvider: Returns the value of the scopes record component.
scopes(String) - Method in record class dev.relism.flash.ext.security.oidc.OidcProvider

toString() - Method in record class dev.relism.flash.ext.security.oidc.OidcPrincipal: Returns a string representation of this record class.
toString() - Method in record class dev.relism.flash.ext.security.oidc.OidcProvider: Returns a string representation of this record class.

unregister(String) - Method in class dev.relism.flash.ext.security.oidc.OidcExtension: Stops trusting a provider: its tokens are no longer this mechanism's, its sessions stop renewing.

verify(OidcProvider, String) - Method in class dev.relism.flash.ext.security.oidc.OidcExtension: Checks a provider before trusting it: discovery, the client ID and secret, and the redirect URI a sign-in from origin will send.