Index (flash-ext-security-test 2.1.0-2f06ca7 API)

A

accessToken() - Method in record class dev.relism.flash.ext.security.test.OAuthTestClient.Tokens: Returns the value of the accessToken record component.
as(Principal) - Static method in class dev.relism.flash.ext.security.test.TestSecurity: Sends the request as principal.
authorize(Principal) - Method in class dev.relism.flash.ext.security.test.OAuthTestClient: Signs in as user, allows this client if asked to, and exchanges the code: the application's default resource and no scope.
authorize(Principal, Map<String, String>) - Method in class dev.relism.flash.ext.security.test.OAuthTestClient: The same, with extra authorization request parameters — scope, resource.

bearer() - Method in record class dev.relism.flash.ext.security.test.OAuthTestClient.Tokens
bearer(String, Map<String, Object>) - Method in class dev.relism.flash.ext.security.test.FakeOidcProvider: Sends the request with a bearer FakeOidcProvider.token(java.lang.String, java.util.Map<java.lang.String, java.lang.Object>).

client(String, String...) - Method in class dev.relism.flash.ext.security.test.FakeOidcProvider: Refuses, from now on, any other secret or redirect URI — as a provider with this client registered would.
clientId() - Method in class dev.relism.flash.ext.security.test.OAuthTestClient
close() - Method in class dev.relism.flash.ext.security.test.FakeOidcProvider
configure(FlashRegistrar<?>, FlashContext) - Method in class dev.relism.flash.ext.security.test.TestSecurity

dev.relism.flash.ext.security.test - package dev.relism.flash.ext.security.test

equals(Object) - Method in record class dev.relism.flash.ext.security.test.OAuthTestClient.Tokens: Indicates whether some other object is "equal to" this one.
expiresIn(long) - Method in class dev.relism.flash.ext.security.test.FakeOidcProvider: Lifetime of the tokens sign-in and refresh issue — 0 expires a session at once.

FakeOidcProvider - Class in dev.relism.flash.ext.security.test: An OpenID Provider on a random local port: discovery, keys, and a token endpoint for the authorization code and refresh flows.
FakeOidcProvider() - Constructor for class dev.relism.flash.ext.security.test.FakeOidcProvider

hashCode() - Method in record class dev.relism.flash.ext.security.test.OAuthTestClient.Tokens: Returns a hash code value for this object.

idToken(String, Map<String, Object>) - Method in class dev.relism.flash.ext.security.test.FakeOidcProvider: A signed ID token for subject, which a resource server must never take for an access token.
issuer() - Method in class dev.relism.flash.ext.security.test.FakeOidcProvider

OAuthTestClient - Class in dev.relism.flash.ext.security.test: An OAuth 2.1 client of the application under test, driving its own authorization server the way an MCP client does: discovery (RFC 8414), registration (RFC 7591), authorization code with PKCE, consent, and the token exchange.
OAuthTestClient.Tokens - Record Class in dev.relism.flash.ext.security.test: What the exchange returned.
OidcTokens - Class in dev.relism.flash.ext.security.test: Real tokens from a real provider — Keycloak in Testcontainers, typically.

passwordGrant(String, String, String, String, String) - Static method in class dev.relism.flash.ext.security.test.OidcTokens: Sends the request with an access token obtained by the resource owner password grant.

REDIRECT_URI - Static variable in class dev.relism.flash.ext.security.test.OAuthTestClient: Where the authorization server sends the code: never contacted, only read off the redirect.
refresh(String) - Method in class dev.relism.flash.ext.security.test.OAuthTestClient: Trades a refresh token for a new pair.
refreshToken() - Method in record class dev.relism.flash.ext.security.test.OAuthTestClient.Tokens: Returns the value of the refreshToken record component.
register(FlashTest) - Static method in class dev.relism.flash.ext.security.test.OAuthTestClient: A public client, registered at the server's registration endpoint, allowed refresh tokens.

scope() - Method in record class dev.relism.flash.ext.security.test.OAuthTestClient.Tokens: Returns the value of the scope record component.
signInAs(String, Map<String, Object>) - Method in class dev.relism.flash.ext.security.test.FakeOidcProvider: Who sign-in and refresh vouch for, with what extra claims; the client id is always app.

TestSecurity - Class in dev.relism.flash.ext.security.test: Authenticates test requests as any Principal, whatever mechanisms the application installs — an OIDC user, an API key, a plain name — without an identity provider.
TestSecurity() - Constructor for class dev.relism.flash.ext.security.test.TestSecurity
token(String, Map<String, Object>) - Method in class dev.relism.flash.ext.security.test.FakeOidcProvider: A signed access token for subject, valid five minutes, with claims added — typ at+jwt (RFC 9068).
Tokens(String, String, String) - Constructor for record class dev.relism.flash.ext.security.test.OAuthTestClient.Tokens: Creates an instance of a Tokens record class.
toString() - Method in record class dev.relism.flash.ext.security.test.OAuthTestClient.Tokens: Returns a string representation of this record class.