Package org.springframework.security.oauth2.client
package org.springframework.security.oauth2.client
Core classes and interfaces providing support for OAuth 2.0 Client.
-
ClassDescriptionAn implementation of an
OAuth2AuthorizedClientProviderfor theauthorization_codegrant.An implementation of aReactiveOAuth2AuthorizedClientProviderfor theauthorization_codegrant.An implementation of anOAuth2AuthorizedClientManagerthat is capable of operating outside of the context of aHttpServletRequest, e.g.The default implementation of thecontextAttributesMapper.An implementation of aReactiveOAuth2AuthorizedClientManagerthat is capable of operating outside of the context of aServerWebExchange, e.g.The default implementation of thecontextAttributesMapper.This exception is thrown on the client side when an attempt to authenticate or authorize an OAuth 2.0 client fails.This exception is thrown when an OAuth 2.0 Client is required to obtain authorization from the Resource Owner.An implementation of anOAuth2AuthorizedClientProviderfor theclient_credentialsgrant.An implementation of aReactiveOAuth2AuthorizedClientProviderfor theclient_credentialsgrant.An implementation of anOAuth2AuthorizedClientProviderthat simply delegates to its internalListofOAuth2AuthorizedClientProvider(s).An implementation of aReactiveOAuth2AuthorizedClientProviderthat simply delegates to its internalListofReactiveOAuth2AuthorizedClientProvider(s).AnOAuth2AuthorizedClientServicethat storesAuthorized Client(s)in-memory.AnOAuth2AuthorizedClientServicethat storesAuthorized Client(s)in-memory.A JDBC implementation of anOAuth2AuthorizedClientServicethat uses aJdbcOperationsforOAuth2AuthorizedClientpersistence.A holder for anOAuth2AuthorizedClientand End-UserAuthentication(Resource Owner).The defaultFunctionthat mapsJdbcOAuth2AuthorizedClientService.OAuth2AuthorizedClientHolderto aListofSqlParameterValue.An implementation of anOAuth2AuthorizedClientProviderfor thejwt-bearergrant.An implementation of anReactiveOAuth2AuthorizedClientProviderfor thejwt-bearergrant.A context that holds authorization-specific state and is used by anOAuth2AuthorizedClientProviderwhen attempting to authorize (or re-authorize) an OAuth 2.0 Client.A builder forOAuth2AuthorizationContext.Handles when an OAuth 2.0 Client fails to authorize (or re-authorize) via the Authorization Server or Resource Server.Handles when an OAuth 2.0 Client has been successfully authorized (or re-authorized) via the Authorization Server.A representation of an OAuth 2.0 "Authorized Client".The identifier forOAuth2AuthorizedClient.Implementations of this interface are responsible for the overall management ofAuthorized Client(s).A strategy for authorizing (or re-authorizing) an OAuth 2.0 Client.A builder that builds aDelegatingOAuth2AuthorizedClientProvidercomposed of one or moreOAuth2AuthorizedClientProvider(s) that implement specific authorization grants.Implementations of this interface are responsible for the management ofAuthorized Client(s), which provide the purpose of associating anAccess Tokencredential to aClientand Resource Owner, who is thePrincipalthat originally granted the authorization.Represents a request theOAuth2AuthorizedClientManageruses toauthorize(or re-authorize) theclientidentified by the providedclientRegistrationId.A builder forOAuth2AuthorizeRequest.Deprecated.The latest OAuth 2.0 Security Best Current Practice disallows the use of the Resource Owner Password Credentials grant.Deprecated.The latest OAuth 2.0 Security Best Current Practice disallows the use of the Resource Owner Password Credentials grant.A R2DBC implementation ofReactiveOAuth2AuthorizedClientServicethat uses aDatabaseClientforOAuth2AuthorizedClientpersistence.A holder forOAuth2AuthorizedClientdata and End-UserAuthentication(Resource Owner).The defaultFunctionthat mapsR2dbcReactiveOAuth2AuthorizedClientService.OAuth2AuthorizedClientHolderto aMapofStringandParameter.The defaultBiFunctionthat maps the currentio.r2dbc.spi.Rowto aR2dbcReactiveOAuth2AuthorizedClientService.OAuth2AuthorizedClientHolder.Handles when an OAuth 2.0 Client fails to authorize (or re-authorize) via the authorization server or resource server.Handles when an OAuth 2.0 Client has been successfully authorized (or re-authorized) via the authorization server.Implementations of this interface are responsible for the overall management ofAuthorized Client(s).A strategy for authorizing (or re-authorizing) an OAuth 2.0 Client.A builder that builds aDelegatingReactiveOAuth2AuthorizedClientProvidercomposed of one or moreReactiveOAuth2AuthorizedClientProvider(s) that implement specific authorization grants.Implementations of this interface are responsible for the management ofAuthorized Client(s), which provide the purpose of associating anAccess Tokencredential to aClientand Resource Owner, who is thePrincipalthat originally granted the authorization.An implementation of anOAuth2AuthorizedClientProviderfor therefresh_tokengrant.An implementation of aReactiveOAuth2AuthorizedClientProviderfor therefresh_tokengrant.AnOAuth2AuthorizationFailureHandlerthat removes anOAuth2AuthorizedClientwhen theOAuth2Error.getErrorCode()matches one of the configuredOAuth 2.0 error codes.Removes anOAuth2AuthorizedClientfrom anOAuth2AuthorizedClientRepositoryorOAuth2AuthorizedClientService.AReactiveOAuth2AuthorizationFailureHandlerthat removes anOAuth2AuthorizedClientwhen theOAuth2Error.getErrorCode()matches one of the configuredOAuth 2.0 error codes.An implementation of anOAuth2AuthorizedClientProviderfor thetoken-exchangegrant.An implementation of anReactiveOAuth2AuthorizedClientProviderfor thetoken-exchangegrant.