Index (Fluxzero IDP BFF client 0.22.0 API)

A B C D E F G H I K L M N O P R S T U V
All Classes and Interfaces|All Packages|Serialized Form

A

AcceptBackchannelLogout(BackchannelLogoutId, RelyingPartySessionId, String, Instant) - Constructor for record class io.fluxzero.idp.bff.session.api.SessionMutations.AcceptBackchannelLogout: Creates an instance of a AcceptBackchannelLogout record class.
access(BrowserHandle) - Method in class io.fluxzero.idp.bff.session.BffSessionCoordinator: Empty means a fresh login is needed.
access(BrowserHandle, Duration) - Method in class io.fluxzero.idp.bff.session.BffSessionCoordinator: Waits only for another consumer's confirmed refresh; never retries an uncertain token exchange.
accessExpiresAt() - Method in record class io.fluxzero.idp.bff.session.BffSessionCoordinator.SessionAccess: Returns the value of the accessExpiresAt record component.
accessToken() - Method in record class io.fluxzero.idp.bff.session.BffSessionCoordinator.SessionAccess: Returns the value of the accessToken record component.
addToMetadata(Metadata, User, boolean) - Method in class io.fluxzero.idp.bff.OidcUserProvider
application() - Method in record class io.fluxzero.idp.bff.session.SessionProtection.Context: Returns the value of the application record component.
ApplicationSession - Record Class in io.fluxzero.idp.bff.session.api.model
ApplicationSession(ApplicationSessionId, RelyingPartySessionId, Instant, long, String, Instant, SessionProtection.SealedValue) - Constructor for record class io.fluxzero.idp.bff.session.api.model.ApplicationSession: Creates an instance of a ApplicationSession record class.
applicationSessionId() - Method in record class io.fluxzero.idp.bff.session.api.model.ApplicationSession: Returns the value of the applicationSessionId record component.
applicationSessionId() - Method in record class io.fluxzero.idp.bff.session.api.SessionMutations.ClaimRefresh: Returns the value of the applicationSessionId record component.
applicationSessionId() - Method in record class io.fluxzero.idp.bff.session.api.SessionMutations.CompleteRefresh: Returns the value of the applicationSessionId record component.
applicationSessionId() - Method in record class io.fluxzero.idp.bff.session.api.SessionMutations.OpenSession: Returns the value of the applicationSessionId record component.
applicationSessionId() - Method in record class io.fluxzero.idp.bff.session.api.SessionMutations.RevokeSession: Returns the value of the applicationSessionId record component.
ApplicationSessionId - Class in io.fluxzero.idp.bff.session.api
ApplicationSessionId(String) - Constructor for class io.fluxzero.idp.bff.session.api.ApplicationSessionId
authorizationUrl() - Method in record class io.fluxzero.idp.bff.session.BffLoginCoordinator.LoginRedirect: Returns the value of the authorizationUrl record component.

B

backchannel(String) - Method in class io.fluxzero.idp.bff.session.BffLogoutCoordinator: Requires registration with backchannel_logout_session_required=true.
BackchannelLogout - Record Class in io.fluxzero.idp.bff.session.api.model: Accepted signed logout identity; only hashes, never the token or raw issuer/client/sid/jti.
BackchannelLogout(BackchannelLogoutId, String, Instant) - Constructor for record class io.fluxzero.idp.bff.session.api.model.BackchannelLogout: Creates an instance of a BackchannelLogout record class.
backchannelLogoutId() - Method in record class io.fluxzero.idp.bff.session.api.model.BackchannelLogout: Returns the value of the backchannelLogoutId record component.
backchannelLogoutId() - Method in record class io.fluxzero.idp.bff.session.api.SessionMutations.AcceptBackchannelLogout: Returns the value of the backchannelLogoutId record component.
BackchannelLogoutId - Class in io.fluxzero.idp.bff.session.api
BackchannelLogoutId(String) - Constructor for class io.fluxzero.idp.bff.session.api.BackchannelLogoutId
begin(String) - Method in class io.fluxzero.idp.bff.session.BffLoginCoordinator
begin(String, String) - Method in class io.fluxzero.idp.bff.session.BffLoginCoordinator: Saves the trusted per-login callback and reuses it verbatim during code exchange.
begin(String, String, Map) - Method in class io.fluxzero.idp.bff.session.BffLoginCoordinator
beginLogin(SecretValue, Duration) - Method in class io.fluxzero.idp.bff.session.ModelBffSessionStore
BeginLogin(LoginTransactionId, String, Instant, SessionProtection.SealedValue) - Constructor for record class io.fluxzero.idp.bff.session.api.SessionMutations.BeginLogin: Creates an instance of a BeginLogin record class.
BffLoginCoordinator - Class in io.fluxzero.idp.bff.session: Protected, in-process authorization-code flow above the eventless application-session Models.
BffLoginCoordinator(OidcTenantConfig, OidcDiscoveryDocument, OidcTransport, OidcClientAuthentication, Set, ModelBffSessionStore, Duration, Duration) - Constructor for class io.fluxzero.idp.bff.session.BffLoginCoordinator
BffLoginCoordinator.LoginRedirect - Record Class in io.fluxzero.idp.bff.session: Explicit access belongs only to the protected cookie/redirect adapter, never ordinary serialization.
BffLoginCoordinator.SessionOpened - Record Class in io.fluxzero.idp.bff.session: Tokens remain server-side. csrf may be exposed only to the authenticated same-origin browser.
BffLoginRejectedException - Exception Class in io.fluxzero.idp.bff.session: A consumed, denied or invalid login requires a fresh attempt; dependency failures are separate.
BffLoginRejectedException() - Constructor for exception class io.fluxzero.idp.bff.session.BffLoginRejectedException
BffLogoutCoordinator - Class in io.fluxzero.idp.bff.session: Local application logout and session-required back-channel logout.
BffLogoutRejectedException - Exception Class in io.fluxzero.idp.bff.session: Invalid logout evidence; contains no token, identifier or dependency failure details.
BffLogoutRejectedException() - Constructor for exception class io.fluxzero.idp.bff.session.BffLogoutRejectedException
BffSessionCoordinator - Class in io.fluxzero.idp.bff.session: Protected session access, with single-owner token refresh and no authorization decisions.
BffSessionCoordinator.SessionAccess - Record Class in io.fluxzero.idp.bff.session: In-process credential access, never a browser DTO or ordinary message.
BrowserHandle - Class in io.fluxzero.idp.bff.session: A 256-bit opaque browser capability.
BrowserSessionBoundary - Class in io.fluxzero.idp.bff.session: Cookie/CSRF policy shared by application BFFs; it never establishes identity or authorization.
BrowserSessionBoundary(URI, String, boolean) - Constructor for class io.fluxzero.idp.bff.session.BrowserSessionBoundary: HTTP is permitted only by an explicit local-development flag and a loopback or .localhost host.
BrowserSessionBoundary(URI, String, boolean, Set) - Constructor for class io.fluxzero.idp.bff.session.BrowserSessionBoundary: Explicit additional browser origins, for a frontend and API on separate same-site hosts.

C

callback(BrowserHandle, BrowserHandle, String, String, String) - Method in class io.fluxzero.idp.bff.session.BffLoginCoordinator: HTTP must reject duplicate parameters before calling.
callback(WebRequest) - Method in class io.fluxzero.idp.bff.OidcIntegration: Handles an application-owned callback route with the same state, PKCE, nonce and session checks.
callbackState() - Method in record class io.fluxzero.idp.bff.session.ModelBffSessionStore.PendingLogin: Returns the value of the callbackState record component.
cancel() - Method in class io.fluxzero.idp.bff.OidcIntegration: Cancels only this integration; application handlers and the Fluxzero instance remain running.
ciphertext() - Method in record class io.fluxzero.idp.bff.session.SessionProtection.SealedValue: Returns the value of the ciphertext record component.
claim() - Method in record class io.fluxzero.idp.bff.session.api.SessionMutations.ClaimRefresh: Returns the value of the claim record component.
claim() - Method in record class io.fluxzero.idp.bff.session.api.SessionMutations.CompleteRefresh: Returns the value of the claim record component.
claim() - Method in record class io.fluxzero.idp.bff.session.ModelBffSessionStore.RefreshClaim: Returns the value of the claim record component.
claimRefresh(BrowserHandle, long, Duration) - Method in class io.fluxzero.idp.bff.session.ModelBffSessionStore: No lease takeover: after an uncertain token rotation, reauthenticate instead of replaying the old token.
ClaimRefresh(ApplicationSessionId, long, String, Instant, Instant) - Constructor for record class io.fluxzero.idp.bff.session.api.SessionMutations.ClaimRefresh: Creates an instance of a ClaimRefresh record class.
claims() - Method in record class io.fluxzero.idp.bff.OidcUserProvider.Identity: Returns the value of the claims record component.
clearCookie() - Method in class io.fluxzero.idp.bff.session.BrowserSessionBoundary
client() - Method in record class io.fluxzero.idp.bff.session.BffSessionCoordinator.SessionAccess: Returns the value of the client record component.
close() - Method in class io.fluxzero.idp.bff.OidcIntegration
close() - Method in record class io.fluxzero.idp.bff.session.BffSessionCoordinator.SessionAccess
close() - Method in record class io.fluxzero.idp.bff.session.ModelBffSessionStore.SessionSnapshot
close() - Method in class io.fluxzero.idp.bff.session.SecretValue
completeRefresh(ModelBffSessionStore.RefreshClaim, SecretValue) - Method in class io.fluxzero.idp.bff.session.ModelBffSessionStore
CompleteRefresh(ApplicationSessionId, String, Instant, SessionProtection.SealedValue) - Constructor for record class io.fluxzero.idp.bff.session.api.SessionMutations.CompleteRefresh: Creates an instance of a CompleteRefresh record class.
consumeLogin(BrowserHandle, BrowserHandle) - Method in class io.fluxzero.idp.bff.session.ModelBffSessionStore
containsUser(Metadata) - Method in class io.fluxzero.idp.bff.OidcUserProvider
Context(String, String, String, Instant) - Constructor for record class io.fluxzero.idp.bff.session.SessionProtection.Context: Creates an instance of a Context record class.
cookie() - Method in record class io.fluxzero.idp.bff.session.BffLoginCoordinator.LoginRedirect: Returns the value of the cookie record component.
cookie() - Method in record class io.fluxzero.idp.bff.session.BffLoginCoordinator.SessionOpened: Returns the value of the cookie record component.
cookie() - Method in record class io.fluxzero.idp.bff.session.ModelBffSessionStore.PendingLogin: Returns the value of the cookie record component.
cookie() - Method in record class io.fluxzero.idp.bff.session.ModelBffSessionStore.RefreshClaim: Returns the value of the cookie record component.
cookieName() - Method in class io.fluxzero.idp.bff.session.BrowserSessionBoundary
copy() - Method in class io.fluxzero.idp.bff.session.SecretValue: Caller owns and must discard this transient copy; never dispatch it through ordinary messaging.
create() - Static method in class io.fluxzero.idp.bff.session.BrowserHandle
csrf() - Method in record class io.fluxzero.idp.bff.session.BffLoginCoordinator.SessionOpened: Returns the value of the csrf record component.
csrf() - Method in record class io.fluxzero.idp.bff.session.BffSessionCoordinator.SessionAccess: Returns the value of the csrf record component.

D

deadline() - Method in record class io.fluxzero.idp.bff.session.api.SessionMutations.ClaimRefresh: Returns the value of the deadline record component.
deadline() - Method in record class io.fluxzero.idp.bff.session.ModelBffSessionStore.RefreshClaim: Returns the value of the deadline record component.

E

equals(Object) - Method in record class io.fluxzero.idp.bff.OidcUserProvider.Identity: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class io.fluxzero.idp.bff.session.api.model.ApplicationSession: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class io.fluxzero.idp.bff.session.api.model.BackchannelLogout: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class io.fluxzero.idp.bff.session.api.model.LoginTransaction: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class io.fluxzero.idp.bff.session.api.model.RelyingPartySession: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class io.fluxzero.idp.bff.session.api.SessionMutations.AcceptBackchannelLogout: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class io.fluxzero.idp.bff.session.api.SessionMutations.BeginLogin: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class io.fluxzero.idp.bff.session.api.SessionMutations.ClaimRefresh: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class io.fluxzero.idp.bff.session.api.SessionMutations.CompleteRefresh: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class io.fluxzero.idp.bff.session.api.SessionMutations.OpenSession: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class io.fluxzero.idp.bff.session.api.SessionMutations.RevokeRelyingPartySession: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class io.fluxzero.idp.bff.session.api.SessionMutations.RevokeSession: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class io.fluxzero.idp.bff.session.BffLoginCoordinator.LoginRedirect: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class io.fluxzero.idp.bff.session.BffLoginCoordinator.SessionOpened: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class io.fluxzero.idp.bff.session.BffSessionCoordinator.SessionAccess: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class io.fluxzero.idp.bff.session.ModelBffSessionStore.PendingLogin: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class io.fluxzero.idp.bff.session.ModelBffSessionStore.RefreshClaim: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class io.fluxzero.idp.bff.session.ModelBffSessionStore.SessionSnapshot: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class io.fluxzero.idp.bff.session.SessionProtection.Context: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class io.fluxzero.idp.bff.session.SessionProtection.SealedValue: Indicates whether some other object is "equal to" this one.
evidenceDigest() - Method in record class io.fluxzero.idp.bff.session.api.model.BackchannelLogout: Returns the value of the evidenceDigest record component.
evidenceDigest() - Method in record class io.fluxzero.idp.bff.session.api.SessionMutations.AcceptBackchannelLogout: Returns the value of the evidenceDigest record component.
expectedVersion() - Method in record class io.fluxzero.idp.bff.session.api.SessionMutations.ClaimRefresh: Returns the value of the expectedVersion record component.
expiresAt() - Method in record class io.fluxzero.idp.bff.session.api.model.ApplicationSession: Returns the value of the expiresAt record component.
expiresAt() - Method in record class io.fluxzero.idp.bff.session.api.model.LoginTransaction: Returns the value of the expiresAt record component.
expiresAt() - Method in record class io.fluxzero.idp.bff.session.api.SessionMutations.BeginLogin: Returns the value of the expiresAt record component.
expiresAt() - Method in record class io.fluxzero.idp.bff.session.api.SessionMutations.OpenSession: Returns the value of the expiresAt record component.
expiresAt() - Method in record class io.fluxzero.idp.bff.session.BffLoginCoordinator.LoginRedirect: Returns the value of the expiresAt record component.
expiresAt() - Method in record class io.fluxzero.idp.bff.session.BffLoginCoordinator.SessionOpened: Returns the value of the expiresAt record component.
expiresAt() - Method in record class io.fluxzero.idp.bff.session.BffSessionCoordinator.SessionAccess: Returns the value of the expiresAt record component.
expiresAt() - Method in record class io.fluxzero.idp.bff.session.ModelBffSessionStore.PendingLogin: Returns the value of the expiresAt record component.
expiresAt() - Method in record class io.fluxzero.idp.bff.session.ModelBffSessionStore.RefreshClaim: Returns the value of the expiresAt record component.
expiresAt() - Method in record class io.fluxzero.idp.bff.session.ModelBffSessionStore.SessionSnapshot: Returns the value of the expiresAt record component.
expiresAt() - Method in record class io.fluxzero.idp.bff.session.SessionProtection.Context: Returns the value of the expiresAt record component.

F

FileSessionProtection - Class in io.fluxzero.idp.bff.session: AES-256-GCM session protection with a lazily supplied, application-scoped key ring.
FileSessionProtection(Path) - Constructor for class io.fluxzero.idp.bff.session.FileSessionProtection
fromMessage(HasMessage) - Method in class io.fluxzero.idp.bff.OidcUserProvider

G

getActiveUser() - Method in class io.fluxzero.idp.bff.OidcUserProvider
getSystemUser() - Method in class io.fluxzero.idp.bff.OidcUserProvider
getUserById(Object) - Method in class io.fluxzero.idp.bff.OidcUserProvider

H

hashCode() - Method in record class io.fluxzero.idp.bff.OidcUserProvider.Identity: Returns a hash code value for this object.
hashCode() - Method in record class io.fluxzero.idp.bff.session.api.model.ApplicationSession: Returns a hash code value for this object.
hashCode() - Method in record class io.fluxzero.idp.bff.session.api.model.BackchannelLogout: Returns a hash code value for this object.
hashCode() - Method in record class io.fluxzero.idp.bff.session.api.model.LoginTransaction: Returns a hash code value for this object.
hashCode() - Method in record class io.fluxzero.idp.bff.session.api.model.RelyingPartySession: Returns a hash code value for this object.
hashCode() - Method in record class io.fluxzero.idp.bff.session.api.SessionMutations.AcceptBackchannelLogout: Returns a hash code value for this object.
hashCode() - Method in record class io.fluxzero.idp.bff.session.api.SessionMutations.BeginLogin: Returns a hash code value for this object.
hashCode() - Method in record class io.fluxzero.idp.bff.session.api.SessionMutations.ClaimRefresh: Returns a hash code value for this object.
hashCode() - Method in record class io.fluxzero.idp.bff.session.api.SessionMutations.CompleteRefresh: Returns a hash code value for this object.
hashCode() - Method in record class io.fluxzero.idp.bff.session.api.SessionMutations.OpenSession: Returns a hash code value for this object.
hashCode() - Method in record class io.fluxzero.idp.bff.session.api.SessionMutations.RevokeRelyingPartySession: Returns a hash code value for this object.
hashCode() - Method in record class io.fluxzero.idp.bff.session.api.SessionMutations.RevokeSession: Returns a hash code value for this object.
hashCode() - Method in record class io.fluxzero.idp.bff.session.BffLoginCoordinator.LoginRedirect: Returns a hash code value for this object.
hashCode() - Method in record class io.fluxzero.idp.bff.session.BffLoginCoordinator.SessionOpened: Returns a hash code value for this object.
hashCode() - Method in record class io.fluxzero.idp.bff.session.BffSessionCoordinator.SessionAccess: Returns a hash code value for this object.
hashCode() - Method in record class io.fluxzero.idp.bff.session.ModelBffSessionStore.PendingLogin: Returns a hash code value for this object.
hashCode() - Method in record class io.fluxzero.idp.bff.session.ModelBffSessionStore.RefreshClaim: Returns a hash code value for this object.
hashCode() - Method in record class io.fluxzero.idp.bff.session.ModelBffSessionStore.SessionSnapshot: Returns a hash code value for this object.
hashCode() - Method in record class io.fluxzero.idp.bff.session.SessionProtection.Context: Returns a hash code value for this object.
hashCode() - Method in record class io.fluxzero.idp.bff.session.SessionProtection.SealedValue: Returns a hash code value for this object.

I

Identity(String, String, JsonNode) - Constructor for record class io.fluxzero.idp.bff.OidcUserProvider.Identity: Creates an instance of a Identity record class.
identityClaims() - Method in record class io.fluxzero.idp.bff.session.BffSessionCoordinator.SessionAccess: Returns the value of the identityClaims record component.
io.fluxzero.idp.bff - package io.fluxzero.idp.bff
io.fluxzero.idp.bff.session - package io.fluxzero.idp.bff.session
io.fluxzero.idp.bff.session.api - package io.fluxzero.idp.bff.session.api: Internal mutation contracts.
io.fluxzero.idp.bff.session.api.model - package io.fluxzero.idp.bff.session.api.model
io.fluxzero.idp.bff.spring - package io.fluxzero.idp.bff.spring
issuer() - Method in record class io.fluxzero.idp.bff.OidcUserProvider.Identity: Returns the value of the issuer record component.
issuer() - Method in record class io.fluxzero.idp.bff.session.BffSessionCoordinator.SessionAccess: Returns the value of the issuer record component.

K

keyVersion() - Method in record class io.fluxzero.idp.bff.session.SessionProtection.SealedValue: Returns the value of the keyVersion record component.

L

local(BrowserHandle, BrowserSessionBoundary, String, List, List, String) - Method in class io.fluxzero.idp.bff.session.BffLogoutCoordinator: Removes only this application cookie's server-side session.
LoginRedirect(BrowserHandle, Instant, String) - Constructor for record class io.fluxzero.idp.bff.session.BffLoginCoordinator.LoginRedirect: Creates an instance of a LoginRedirect record class.
LoginTransaction - Record Class in io.fluxzero.idp.bff.session.api.model
LoginTransaction(LoginTransactionId, String, Instant, SessionProtection.SealedValue) - Constructor for record class io.fluxzero.idp.bff.session.api.model.LoginTransaction: Creates an instance of a LoginTransaction record class.
loginTransactionId() - Method in record class io.fluxzero.idp.bff.session.api.model.LoginTransaction: Returns the value of the loginTransactionId record component.
loginTransactionId() - Method in record class io.fluxzero.idp.bff.session.api.SessionMutations.BeginLogin: Returns the value of the loginTransactionId record component.
LoginTransactionId - Class in io.fluxzero.idp.bff.session.api
LoginTransactionId(String) - Constructor for class io.fluxzero.idp.bff.session.api.LoginTransactionId
logoutLifecycle() - Method in class io.fluxzero.idp.bff.session.BffLoginCoordinator: Logout shares the same configured issuer, verifier and application-session store.

M

ModelBffSessionStore - Class in io.fluxzero.idp.bff.session: Reusable application-session lifecycle, independent of IDP management, tenants and user mapping.
ModelBffSessionStore(String, SessionProtection) - Constructor for class io.fluxzero.idp.bff.session.ModelBffSessionStore
ModelBffSessionStore.PendingLogin - Record Class in io.fluxzero.idp.bff.session
ModelBffSessionStore.RefreshClaim - Record Class in io.fluxzero.idp.bff.session
ModelBffSessionStore.SessionSnapshot - Record Class in io.fluxzero.idp.bff.session

N

now() - Method in record class io.fluxzero.idp.bff.session.api.SessionMutations.ClaimRefresh: Returns the value of the now record component.
now() - Method in record class io.fluxzero.idp.bff.session.api.SessionMutations.CompleteRefresh: Returns the value of the now record component.

O

OidcAutoConfiguration - Class in io.fluxzero.idp.bff.spring: Spring Boot entry point.
OidcAutoConfiguration() - Constructor for class io.fluxzero.idp.bff.spring.OidcAutoConfiguration
oidcIntegration(Fluxzero, Environment) - Method in class io.fluxzero.idp.bff.spring.OidcSpringConfiguration
OidcIntegration - Class in io.fluxzero.idp.bff: Optional application HTTP integration.
OidcSpringConfiguration - Class in io.fluxzero.idp.bff.spring: Import this configuration in plain Spring; Spring Boot discovers it automatically.
OidcSpringConfiguration() - Constructor for class io.fluxzero.idp.bff.spring.OidcSpringConfiguration
OidcUserProvider - Class in io.fluxzero.idp.bff: Resolves browser requests through the registered OidcIntegration.
OidcUserProvider(UserProvider, BiFunction) - Constructor for class io.fluxzero.idp.bff.OidcUserProvider: Also supplies the request for application policies such as explicitly authorized impersonation.
OidcUserProvider(UserProvider, Function) - Constructor for class io.fluxzero.idp.bff.OidcUserProvider
OidcUserProvider.Identity - Record Class in io.fluxzero.idp.bff: Claims from the validated ID token in the encrypted session; never implied application roles.
open(SessionProtection.Context, SessionProtection.SealedValue) - Method in class io.fluxzero.idp.bff.session.FileSessionProtection
open(SessionProtection.Context, SessionProtection.SealedValue) - Method in interface io.fluxzero.idp.bff.session.SessionProtection
openSession(String, String, String, SecretValue, Duration) - Method in class io.fluxzero.idp.bff.session.ModelBffSessionStore: issuer/client/sid must come from already verified protocol evidence, never browser selectors.
OpenSession(ApplicationSessionId, RelyingPartySessionId, Instant, SessionProtection.SealedValue) - Constructor for record class io.fluxzero.idp.bff.session.api.SessionMutations.OpenSession: Creates an instance of a OpenSession record class.
origin() - Method in class io.fluxzero.idp.bff.session.BrowserSessionBoundary

P

parse(String) - Static method in class io.fluxzero.idp.bff.session.BrowserHandle
PendingLogin(BrowserHandle, BrowserHandle, Instant) - Constructor for record class io.fluxzero.idp.bff.session.ModelBffSessionStore.PendingLogin: Creates an instance of a PendingLogin record class.
permitsMutation(String, List, List, BrowserHandle, String) - Method in class io.fluxzero.idp.bff.session.BrowserSessionBoundary: A synchronizer token is generated independently and retained in the protected session payload.
permitsSocket(List, String) - Method in class io.fluxzero.idp.bff.session.BrowserSessionBoundary: Browsers send Origin on WebSocket handshakes; the proxy retains it for later frames.
protectedValue() - Method in record class io.fluxzero.idp.bff.session.api.model.ApplicationSession: Returns the value of the protectedValue record component.
protectedValue() - Method in record class io.fluxzero.idp.bff.session.api.model.LoginTransaction: Returns the value of the protectedValue record component.
protectedValue() - Method in record class io.fluxzero.idp.bff.session.ModelBffSessionStore.SessionSnapshot: Returns the value of the protectedValue record component.
protectSocket(SocketSession, WebRequest) - Static method in class io.fluxzero.idp.bff.OidcIntegration: Wrap the SocketSession before retaining it for server pushes.
purpose() - Method in record class io.fluxzero.idp.bff.session.SessionProtection.Context: Returns the value of the purpose record component.

R

readCookie(List) - Method in class io.fluxzero.idp.bff.session.BrowserSessionBoundary: Duplicate or malformed cookie values are rejected, not resolved by first/last-header precedence.
recordId() - Method in record class io.fluxzero.idp.bff.session.SessionProtection.Context: Returns the value of the recordId record component.
refreshClaim() - Method in record class io.fluxzero.idp.bff.session.api.model.ApplicationSession: Returns the value of the refreshClaim record component.
RefreshClaim(BrowserHandle, String, Instant, Instant) - Constructor for record class io.fluxzero.idp.bff.session.ModelBffSessionStore.RefreshClaim: Creates an instance of a RefreshClaim record class.
refreshDeadline() - Method in record class io.fluxzero.idp.bff.session.api.model.ApplicationSession: Returns the value of the refreshDeadline record component.
refreshInProgress() - Method in record class io.fluxzero.idp.bff.session.ModelBffSessionStore.SessionSnapshot: Returns the value of the refreshInProgress record component.
refreshUser(User, HasMessage) - Method in class io.fluxzero.idp.bff.OidcUserProvider
register(Fluxzero) - Static method in class io.fluxzero.idp.bff.OidcIntegration: Registers once for this Fluxzero instance.
register(Fluxzero, PropertySource) - Static method in class io.fluxzero.idp.bff.OidcIntegration: Explicit property source for composition; Spring delegates here with the SDK source taking precedence.
RelyingPartySession - Record Class in io.fluxzero.idp.bff.session.api.model: A hashed issuer/client/sid binding, including a terminal logout fence; never an identity session.
RelyingPartySession(RelyingPartySessionId, boolean) - Constructor for record class io.fluxzero.idp.bff.session.api.model.RelyingPartySession: Creates an instance of a RelyingPartySession record class.
relyingPartySessionId() - Method in record class io.fluxzero.idp.bff.session.api.model.ApplicationSession: Returns the value of the relyingPartySessionId record component.
relyingPartySessionId() - Method in record class io.fluxzero.idp.bff.session.api.model.RelyingPartySession: Returns the value of the relyingPartySessionId record component.
relyingPartySessionId() - Method in record class io.fluxzero.idp.bff.session.api.SessionMutations.AcceptBackchannelLogout: Returns the value of the relyingPartySessionId record component.
relyingPartySessionId() - Method in record class io.fluxzero.idp.bff.session.api.SessionMutations.OpenSession: Returns the value of the relyingPartySessionId record component.
relyingPartySessionId() - Method in record class io.fluxzero.idp.bff.session.api.SessionMutations.RevokeRelyingPartySession: Returns the value of the relyingPartySessionId record component.
RelyingPartySessionId - Class in io.fluxzero.idp.bff.session.api
RelyingPartySessionId(String) - Constructor for class io.fluxzero.idp.bff.session.api.RelyingPartySessionId
removeFromMetadata(Metadata) - Method in class io.fluxzero.idp.bff.OidcUserProvider
requiresMessageBasedLocalResolution() - Method in class io.fluxzero.idp.bff.OidcUserProvider
retainUntil() - Method in record class io.fluxzero.idp.bff.session.api.model.BackchannelLogout: Returns the value of the retainUntil record component.
retainUntil() - Method in record class io.fluxzero.idp.bff.session.api.SessionMutations.AcceptBackchannelLogout: Returns the value of the retainUntil record component.
returnPath() - Method in record class io.fluxzero.idp.bff.session.BffLoginCoordinator.SessionOpened: Returns the value of the returnPath record component.
returnPath(String) - Static method in class io.fluxzero.idp.bff.session.BrowserSessionBoundary: Preserves local router paths, query and fragment, without ambiguous/external redirect targets.
reveal() - Method in class io.fluxzero.idp.bff.session.BrowserHandle: Only for the protected HTTP cookie/authorization boundary.
revoked() - Method in record class io.fluxzero.idp.bff.session.api.model.RelyingPartySession: Returns the value of the revoked record component.
revokeRelyingPartySession(String, String, String) - Method in class io.fluxzero.idp.bff.session.ModelBffSessionStore: Only call after validating signature, issuer, audience, iat, jti and logout events.
RevokeRelyingPartySession(RelyingPartySessionId) - Constructor for record class io.fluxzero.idp.bff.session.api.SessionMutations.RevokeRelyingPartySession: Creates an instance of a RevokeRelyingPartySession record class.
revokeSession(BrowserHandle) - Method in class io.fluxzero.idp.bff.session.ModelBffSessionStore
RevokeSession(ApplicationSessionId) - Constructor for record class io.fluxzero.idp.bff.session.api.SessionMutations.RevokeSession: Creates an instance of a RevokeSession record class.

S

seal(SessionProtection.Context, SecretValue) - Method in class io.fluxzero.idp.bff.session.FileSessionProtection
seal(SessionProtection.Context, SecretValue) - Method in interface io.fluxzero.idp.bff.session.SessionProtection
SealedValue(String, String) - Constructor for record class io.fluxzero.idp.bff.session.SessionProtection.SealedValue: Creates an instance of a SealedValue record class.
SecretValue - Class in io.fluxzero.idp.bff.session: In-process value only.
SecretValue(byte[]) - Constructor for class io.fluxzero.idp.bff.session.SecretValue
session(BrowserHandle) - Method in class io.fluxzero.idp.bff.session.ModelBffSessionStore
SessionAccess(String, String, String, String, BrowserHandle, SecretValue, Instant, Instant, JsonNode) - Constructor for record class io.fluxzero.idp.bff.session.BffSessionCoordinator.SessionAccess: Creates an instance of a SessionAccess record class.
SessionCommitUnavailableException - Exception Class in io.fluxzero.idp.bff.session: The session mutation did not report a confirmed commit.
sessionLifecycle() - Method in class io.fluxzero.idp.bff.session.BffLoginCoordinator: Session access/refresh uses exactly the login's protocol trust boundary and application store.
SessionMutations - Class in io.fluxzero.idp.bff.session.api: Local deterministic transitions only.
SessionMutations.AcceptBackchannelLogout - Record Class in io.fluxzero.idp.bff.session.api: Replay identity and exact RP fence share one commit; external verification already completed.
SessionMutations.BeginLogin - Record Class in io.fluxzero.idp.bff.session.api
SessionMutations.ClaimRefresh - Record Class in io.fluxzero.idp.bff.session.api
SessionMutations.CompleteRefresh - Record Class in io.fluxzero.idp.bff.session.api
SessionMutations.OpenSession - Record Class in io.fluxzero.idp.bff.session.api
SessionMutations.RevokeRelyingPartySession - Record Class in io.fluxzero.idp.bff.session.api
SessionMutations.RevokeSession - Record Class in io.fluxzero.idp.bff.session.api
SessionMutations.Unavailable - Exception Class in io.fluxzero.idp.bff.session.api
SessionOpened(BrowserHandle, BrowserHandle, Instant, String) - Constructor for record class io.fluxzero.idp.bff.session.BffLoginCoordinator.SessionOpened: Creates an instance of a SessionOpened record class.
SessionProtection - Interface in io.fluxzero.idp.bff.session: Workload-owned authenticated encryption.
SessionProtection.Context - Record Class in io.fluxzero.idp.bff.session
SessionProtection.SealedValue - Record Class in io.fluxzero.idp.bff.session: Only authenticated ciphertext and a non-secret key version may enter either Model document.
SessionProtectionUnavailableException - Exception Class in io.fluxzero.idp.bff.session: Fail-closed custody failure; no provider message, plaintext or key detail escapes this boundary.
SessionProtectionUnavailableException() - Constructor for exception class io.fluxzero.idp.bff.session.SessionProtectionUnavailableException
SessionRefreshInProgressException - Exception Class in io.fluxzero.idp.bff.session: Another request owns refresh.
SessionRefreshInProgressException() - Constructor for exception class io.fluxzero.idp.bff.session.SessionRefreshInProgressException
SessionSnapshot(long, Instant, boolean, SecretValue) - Constructor for record class io.fluxzero.idp.bff.session.ModelBffSessionStore.SessionSnapshot: Creates an instance of a SessionSnapshot record class.
setCookie(BrowserHandle, Duration) - Method in class io.fluxzero.idp.bff.session.BrowserSessionBoundary
sid() - Method in record class io.fluxzero.idp.bff.session.BffSessionCoordinator.SessionAccess: Returns the value of the sid record component.
stateDigest() - Method in record class io.fluxzero.idp.bff.session.api.model.LoginTransaction: Returns the value of the stateDigest record component.
stateDigest() - Method in record class io.fluxzero.idp.bff.session.api.SessionMutations.BeginLogin: Returns the value of the stateDigest record component.
subject() - Method in record class io.fluxzero.idp.bff.OidcUserProvider.Identity: Returns the value of the subject record component.
subject() - Method in record class io.fluxzero.idp.bff.session.BffSessionCoordinator.SessionAccess: Returns the value of the subject record component.

T

toString() - Method in record class io.fluxzero.idp.bff.OidcUserProvider.Identity: Returns a string representation of this record class.
toString() - Method in record class io.fluxzero.idp.bff.session.api.model.ApplicationSession: Returns a string representation of this record class.
toString() - Method in record class io.fluxzero.idp.bff.session.api.model.BackchannelLogout: Returns a string representation of this record class.
toString() - Method in record class io.fluxzero.idp.bff.session.api.model.LoginTransaction: Returns a string representation of this record class.
toString() - Method in record class io.fluxzero.idp.bff.session.api.model.RelyingPartySession: Returns a string representation of this record class.
toString() - Method in record class io.fluxzero.idp.bff.session.api.SessionMutations.AcceptBackchannelLogout: Returns a string representation of this record class.
toString() - Method in record class io.fluxzero.idp.bff.session.api.SessionMutations.BeginLogin: Returns a string representation of this record class.
toString() - Method in record class io.fluxzero.idp.bff.session.api.SessionMutations.ClaimRefresh: Returns a string representation of this record class.
toString() - Method in record class io.fluxzero.idp.bff.session.api.SessionMutations.CompleteRefresh: Returns a string representation of this record class.
toString() - Method in record class io.fluxzero.idp.bff.session.api.SessionMutations.OpenSession: Returns a string representation of this record class.
toString() - Method in record class io.fluxzero.idp.bff.session.api.SessionMutations.RevokeRelyingPartySession: Returns a string representation of this record class.
toString() - Method in record class io.fluxzero.idp.bff.session.api.SessionMutations.RevokeSession: Returns a string representation of this record class.
toString() - Method in record class io.fluxzero.idp.bff.session.BffLoginCoordinator.LoginRedirect: Returns a string representation of this record class.
toString() - Method in record class io.fluxzero.idp.bff.session.BffLoginCoordinator.SessionOpened: Returns a string representation of this record class.
toString() - Method in record class io.fluxzero.idp.bff.session.BffSessionCoordinator.SessionAccess: Returns a string representation of this record class.
toString() - Method in class io.fluxzero.idp.bff.session.BrowserHandle
toString() - Method in class io.fluxzero.idp.bff.session.FileSessionProtection
toString() - Method in record class io.fluxzero.idp.bff.session.ModelBffSessionStore.PendingLogin: Returns a string representation of this record class.
toString() - Method in record class io.fluxzero.idp.bff.session.ModelBffSessionStore.RefreshClaim: Returns a string representation of this record class.
toString() - Method in record class io.fluxzero.idp.bff.session.ModelBffSessionStore.SessionSnapshot: Returns a string representation of this record class.
toString() - Method in class io.fluxzero.idp.bff.session.SecretValue
toString() - Method in record class io.fluxzero.idp.bff.session.SessionProtection.Context: Returns a string representation of this record class.
toString() - Method in record class io.fluxzero.idp.bff.session.SessionProtection.SealedValue: Returns a string representation of this record class.

U

Unavailable() - Constructor for exception class io.fluxzero.idp.bff.session.api.SessionMutations.Unavailable

V

value() - Method in record class io.fluxzero.idp.bff.session.api.SessionMutations.BeginLogin: Returns the value of the value record component.
value() - Method in record class io.fluxzero.idp.bff.session.api.SessionMutations.CompleteRefresh: Returns the value of the value record component.
value() - Method in record class io.fluxzero.idp.bff.session.api.SessionMutations.OpenSession: Returns the value of the value record component.
version() - Method in record class io.fluxzero.idp.bff.session.api.model.ApplicationSession: Returns the value of the version record component.
version() - Method in record class io.fluxzero.idp.bff.session.ModelBffSessionStore.SessionSnapshot: Returns the value of the version record component.

A B C D E F G H I K L M N O P R S T U V
All Classes and Interfaces|All Packages|Serialized Form