Package org.springframework.security.oauth2.server.resource.authentication
package org.springframework.security.oauth2.server.resource.authentication
OAuth 2.0 Resource Server
Authentications and supporting classes and
interfaces.-
ClassesClassDescriptionBase class for
AbstractAuthenticationTokenimplementations that expose common attributes between different OAuth 2.0 Access Token Formats.AbstractOAuth2TokenAuthenticationToken.AbstractOAuth2TokenAuthenticationBuilder<T extends OAuth2Token,B extends AbstractOAuth2TokenAuthenticationToken.AbstractOAuth2TokenAuthenticationBuilder<T, B>> A builder forAbstractOAuth2TokenAuthenticationTokenimplementationsAnAuthenticationtoken that represents a successful authentication as obtained through a bearer token.A builder preserving the concreteAuthenticationtypeAnAuthenticationthat contains a Bearer Token.AnAuthenticationProviderimplementation that is responsible for authenticating a DPoP-bound access token for a protected resource request.AnAuthenticationrepresenting a protected resource request with a DPoP-bound access token.Uses an expression for extracting the token claim value to use for mappingauthorities.AnAuthenticationProviderimplementation of theJwt-encoded Bearer Tokens for protecting OAuth 2.0 Resource Servers.JwtAuthenticationToken.Builder<B extends JwtAuthenticationToken.Builder<B>>A builder forJwtAuthenticationTokeninstancesExtracts theGrantedAuthoritys from scope attributes typically found in aJwt.An implementation ofAuthenticationManagerResolverthat resolves a JWT-basedAuthenticationManagerbased on the Issuer in a signed JWT (JWS).An implementation ofReactiveAuthenticationManagerResolverthat resolves a JWT-basedReactiveAuthenticationManagerbased on the Issuer in a signed JWT (JWS).AReactiveAuthenticationManagerfor Jwt tokens.AnAuthenticationProviderimplementation for opaque Bearer Tokens, using an OAuth 2.0 Introspection Endpoint to check the token's validity and reveal its attributes.AnReactiveAuthenticationManagerimplementation for opaque Bearer Tokens, using an OAuth 2.0 Introspection Endpoint to check the token's validity and reveal its attributes.Reactive version ofJwtAuthenticationConverterfor converting aJwtto aMono<AbstractAuthenticationToken>.A reactiveConverterfor adapting a non-blocking imperativeConverterAdapts aConverter<Jwt, Collection<GrantedAuthority>>to aConverter<Jwt, Flux<GrantedAuthority>>.