Class OAuth2ParameterNames

java.lang.Object
org.springframework.security.oauth2.core.endpoint.OAuth2ParameterNames

public final class OAuth2ParameterNames extends Object
Standard and custom (non-standard) parameter names defined in the OAuth Parameters Registry and used by the authorization endpoint, token endpoint and token revocation endpoint.
Since:
5.0
See Also:
  • Field Summary

    Fields
    Modifier and Type
    Field
    Description
    static final String
    access_token - used in Authorization Response and Access Token Response.
    static final String
    assertion - used in Access Token Request.
    static final String
    client_assertion - used in Access Token Request.
    static final String
    client_assertion_type - used in Access Token Request.
    static final String
    client_id - used in Authorization Request and Access Token Request.
    static final String
    client_secret - used in Access Token Request.
    static final String
    code - used in Authorization Response and Access Token Request.
    static final String
    device_code - used in Device Authorization Response and Device Access Token Request.
    static final String
    error - used in Authorization Response and Access Token Response.
    static final String
    error_description - used in Authorization Response and Access Token Response.
    static final String
    error_uri - used in Authorization Response and Access Token Response.
    static final String
    expires_in - used in Authorization Response and Access Token Response.
    static final String
    grant_type - used in Access Token Request.
    static final String
    interval - used in Device Authorization Response.
    static final String
    password - used in Access Token Request.
    static final String
    redirect_uri - used in Authorization Request and Access Token Request.
    static final String
    refresh_token - used in Access Token Request and Access Token Response.
    static final String
    Non-standard parameter (used internally).
    static final String
    response_type - used in Authorization Request.
    static final String
    scope - used in Authorization Request, Authorization Response, Access Token Request and Access Token Response.
    static final String
    state - used in Authorization Request and Authorization Response.
    static final String
    token - used in Token Revocation Request.
    static final String
    token_type - used in Authorization Response and Access Token Response.
    static final String
    token_type_hint - used in Token Revocation Request.
    static final String
    user_code - used in Device Authorization Response.
    static final String
    username - used in Access Token Request.
    static final String
    verification_uri - used in Device Authorization Response.
    static final String
    verification_uri_complete - used in Device Authorization Response.
  • Method Summary

    Methods inherited from class java.lang.Object

    clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
  • Field Details

    • GRANT_TYPE

      public static final String GRANT_TYPE
      grant_type - used in Access Token Request.
      See Also:
    • RESPONSE_TYPE

      public static final String RESPONSE_TYPE
      response_type - used in Authorization Request.
      See Also:
    • CLIENT_ID

      public static final String CLIENT_ID
      client_id - used in Authorization Request and Access Token Request.
      See Also:
    • CLIENT_SECRET

      public static final String CLIENT_SECRET
      client_secret - used in Access Token Request.
      See Also:
    • CLIENT_ASSERTION_TYPE

      public static final String CLIENT_ASSERTION_TYPE
      client_assertion_type - used in Access Token Request.
      Since:
      5.5
      See Also:
    • CLIENT_ASSERTION

      public static final String CLIENT_ASSERTION
      client_assertion - used in Access Token Request.
      Since:
      5.5
      See Also:
    • ASSERTION

      public static final String ASSERTION
      assertion - used in Access Token Request.
      Since:
      5.5
      See Also:
    • REDIRECT_URI

      public static final String REDIRECT_URI
      redirect_uri - used in Authorization Request and Access Token Request.
      See Also:
    • SCOPE

      public static final String SCOPE
      scope - used in Authorization Request, Authorization Response, Access Token Request and Access Token Response.
      See Also:
    • STATE

      public static final String STATE
      state - used in Authorization Request and Authorization Response.
      See Also:
    • CODE

      public static final String CODE
      code - used in Authorization Response and Access Token Request.
      See Also:
    • ACCESS_TOKEN

      public static final String ACCESS_TOKEN
      access_token - used in Authorization Response and Access Token Response.
      See Also:
    • TOKEN_TYPE

      public static final String TOKEN_TYPE
      token_type - used in Authorization Response and Access Token Response.
      See Also:
    • EXPIRES_IN

      public static final String EXPIRES_IN
      expires_in - used in Authorization Response and Access Token Response.
      See Also:
    • REFRESH_TOKEN

      public static final String REFRESH_TOKEN
      refresh_token - used in Access Token Request and Access Token Response.
      See Also:
    • USERNAME

      public static final String USERNAME
      username - used in Access Token Request.
      See Also:
    • PASSWORD

      public static final String PASSWORD
      password - used in Access Token Request.
      See Also:
    • ERROR

      public static final String ERROR
      error - used in Authorization Response and Access Token Response.
      See Also:
    • ERROR_DESCRIPTION

      public static final String ERROR_DESCRIPTION
      error_description - used in Authorization Response and Access Token Response.
      See Also:
    • ERROR_URI

      public static final String ERROR_URI
      error_uri - used in Authorization Response and Access Token Response.
      See Also:
    • REGISTRATION_ID

      public static final String REGISTRATION_ID
      Non-standard parameter (used internally).
      See Also:
    • TOKEN

      public static final String TOKEN
      token - used in Token Revocation Request.
      Since:
      5.5
      See Also:
    • TOKEN_TYPE_HINT

      public static final String TOKEN_TYPE_HINT
      token_type_hint - used in Token Revocation Request.
      Since:
      5.5
      See Also:
    • DEVICE_CODE

      public static final String DEVICE_CODE
      device_code - used in Device Authorization Response and Device Access Token Request.
      Since:
      6.1
      See Also:
    • USER_CODE

      public static final String USER_CODE
      user_code - used in Device Authorization Response.
      Since:
      6.1
      See Also:
    • VERIFICATION_URI

      public static final String VERIFICATION_URI
      verification_uri - used in Device Authorization Response.
      Since:
      6.1
      See Also:
    • VERIFICATION_URI_COMPLETE

      public static final String VERIFICATION_URI_COMPLETE
      verification_uri_complete - used in Device Authorization Response.
      Since:
      6.1
      See Also:
    • INTERVAL

      public static final String INTERVAL
      interval - used in Device Authorization Response.
      Since:
      6.1
      See Also: