Index

A C D E F G H I J L M N O P R S T U V W 
All Classes and Interfaces|All Packages|Serialized Form

A

accessToken() - Method in record class io.fluxzero.idp.client.OidcClient.TokenResponse
Returns the value of the accessToken record component.
accessToken(String, OidcTenantConfig) - Static method in record class io.fluxzero.idp.client.TokenValidationRequest
Creates a validation request for a bearer access token sent to backend APIs.
addToTokenRequest(Map, String, String) - Method in record class io.fluxzero.idp.client.OidcClientCredentials
Adds the configured client authentication fields to a token request form.
audiences() - Method in record class io.fluxzero.idp.client.JwtClaims
Returns the value of the audiences record component.
audiences() - Method in record class io.fluxzero.idp.client.TokenValidationRequest
Returns the value of the audiences record component.
authorizationEndpoint() - Method in record class io.fluxzero.idp.client.OidcDiscoveryDocument
Returns the value of the authorizationEndpoint record component.
authorizationUrl(OidcLoginState) - Method in class io.fluxzero.idp.client.OidcClient
Builds the authorization endpoint URL from a stateless login transaction.
authorizationUrl(Pkce, String) - Method in class io.fluxzero.idp.client.OidcClient
Builds the authorization endpoint URL for authorization-code flow with PKCE S256.

C

challenge() - Method in record class io.fluxzero.idp.client.Pkce
Returns the value of the challenge record component.
challenge(String) - Static method in record class io.fluxzero.idp.client.Pkce
Computes the S256 code challenge for a verifier.
claim(String) - Method in record class io.fluxzero.idp.client.JwtClaims
Returns a string claim from the raw payload.
clientCredentials() - Method in record class io.fluxzero.idp.client.OidcTenantConfig
Returns the value of the clientCredentials record component.
clientId() - Method in record class io.fluxzero.idp.client.OidcTenantConfig
Returns the value of the clientId record component.
codeVerifier() - Method in record class io.fluxzero.idp.client.OidcLoginState
Returns the value of the codeVerifier record component.
config() - Method in class io.fluxzero.idp.client.OidcClient
 
create(String, Duration) - Static method in record class io.fluxzero.idp.client.OidcLoginState
Creates a new login state using the system clock.
create(String, Duration, Instant) - Static method in record class io.fluxzero.idp.client.OidcLoginState
Creates a new login state expiring after the supplied time-to-live.

D

decode(String) - Static method in class io.fluxzero.idp.client.FormCodec
 
decode(String, Instant) - Method in class io.fluxzero.idp.client.OidcLoginStateCodec
Decodes and validates a login state cookie value.
decodeOrThrow(String) - Method in class io.fluxzero.idp.client.OidcLoginStateCodec
Decodes a cookie value and throws when it is invalid or tampered.
decodeValue(String) - Static method in class io.fluxzero.idp.client.FormCodec
 
discover(String) - Static method in class io.fluxzero.idp.client.OidcDiscovery
Discovers and caches metadata for an issuer.
discovery() - Method in class io.fluxzero.idp.client.OidcClient
 

E

email() - Method in record class io.fluxzero.idp.client.JwtClaims
Returns the value of the email record component.
encode(OidcLoginState) - Method in class io.fluxzero.idp.client.OidcLoginStateCodec
Encodes a login state into an encrypted cookie value.
encode(String) - Static method in class io.fluxzero.idp.client.FormCodec
 
encode(Map) - Static method in class io.fluxzero.idp.client.FormCodec
 
endSessionEndpoint() - Method in record class io.fluxzero.idp.client.OidcDiscoveryDocument
Returns the value of the endSessionEndpoint record component.
endSessionUrl(String) - Method in class io.fluxzero.idp.client.OidcClient
Builds a tenant logout URL when the issuer advertises one.
endSessionUrl(String, String) - Method in class io.fluxzero.idp.client.OidcClient
Builds a tenant logout URL with an optional ID token hint.
equals(Object) - Method in record class io.fluxzero.idp.client.JwtClaims
Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class io.fluxzero.idp.client.OidcClient.TokenResponse
Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class io.fluxzero.idp.client.OidcClientCredentials
Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class io.fluxzero.idp.client.OidcDiscoveryDocument
Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class io.fluxzero.idp.client.OidcLoginState
Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class io.fluxzero.idp.client.OidcTenantConfig
Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class io.fluxzero.idp.client.Pkce
Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class io.fluxzero.idp.client.TokenValidationRequest
Indicates whether some other object is "equal to" this one.
exchangeCode(String, String) - Method in class io.fluxzero.idp.client.OidcClient
Exchanges an authorization code for ID and access tokens.
expectedTokenUse() - Method in record class io.fluxzero.idp.client.TokenValidationRequest
Returns the value of the expectedTokenUse record component.
expiresAt() - Method in record class io.fluxzero.idp.client.JwtClaims
Returns the value of the expiresAt record component.
expiresAt() - Method in record class io.fluxzero.idp.client.OidcLoginState
Returns the value of the expiresAt record component.
expiresIn() - Method in record class io.fluxzero.idp.client.OidcClient.TokenResponse
Returns the value of the expiresIn record component.

F

FormCodec - Class in io.fluxzero.idp.client
Minimal form-url-encoding helper for OIDC endpoints.
from(String) - Static method in enum class io.fluxzero.idp.client.OidcTokenEndpointAuthMethod
 

G

generate() - Static method in record class io.fluxzero.idp.client.Pkce
Generates a new verifier/challenge pair for one authorization attempt.

H

hashCode() - Method in record class io.fluxzero.idp.client.JwtClaims
Returns a hash code value for this object.
hashCode() - Method in record class io.fluxzero.idp.client.OidcClient.TokenResponse
Returns a hash code value for this object.
hashCode() - Method in record class io.fluxzero.idp.client.OidcClientCredentials
Returns a hash code value for this object.
hashCode() - Method in record class io.fluxzero.idp.client.OidcDiscoveryDocument
Returns a hash code value for this object.
hashCode() - Method in record class io.fluxzero.idp.client.OidcLoginState
Returns a hash code value for this object.
hashCode() - Method in record class io.fluxzero.idp.client.OidcTenantConfig
Returns a hash code value for this object.
hashCode() - Method in record class io.fluxzero.idp.client.Pkce
Returns a hash code value for this object.
hashCode() - Method in record class io.fluxzero.idp.client.TokenValidationRequest
Returns a hash code value for this object.

I

idToken() - Method in record class io.fluxzero.idp.client.OidcClient.TokenResponse
Returns the value of the idToken record component.
idToken(String, OidcTenantConfig) - Static method in record class io.fluxzero.idp.client.TokenValidationRequest
Creates a validation request for an ID token returned to the BFF callback.
io.fluxzero.idp.client - package io.fluxzero.idp.client
Shared Fluxzero IDP client helpers for Fluxzero applications.
isExpired(Instant) - Method in record class io.fluxzero.idp.client.OidcLoginState
Returns true when this login attempt is expired at the supplied time.
issuedAt() - Method in record class io.fluxzero.idp.client.JwtClaims
Returns the value of the issuedAt record component.
issuer() - Method in record class io.fluxzero.idp.client.JwtClaims
Returns the value of the issuer record component.
issuer() - Method in record class io.fluxzero.idp.client.OidcDiscoveryDocument
Returns the value of the issuer record component.
issuer() - Method in record class io.fluxzero.idp.client.OidcTenantConfig
Returns the value of the issuer record component.
issuer() - Method in record class io.fluxzero.idp.client.TokenValidationRequest
Returns the value of the issuer record component.

J

json() - Method in record class io.fluxzero.idp.client.JwtClaims
Returns the value of the json record component.
json() - Method in record class io.fluxzero.idp.client.OidcClient.TokenResponse
Returns the value of the json record component.
json() - Method in record class io.fluxzero.idp.client.OidcDiscoveryDocument
Returns the value of the json record component.
JwksTokenValidator - Class in io.fluxzero.idp.client
Default Fluxzero OIDC token validator for RS256 JWTs exposed through a tenant JWKS endpoint.
JwksTokenValidator() - Constructor for class io.fluxzero.idp.client.JwksTokenValidator
 
jwksUri() - Method in record class io.fluxzero.idp.client.OidcDiscoveryDocument
Returns the value of the jwksUri record component.
JwtClaims - Record Class in io.fluxzero.idp.client
Normalized claims extracted from a validated OIDC JWT.
JwtClaims(String, String, List, Instant, Instant, Instant, String, String, String, String, JsonNode) - Constructor for record class io.fluxzero.idp.client.JwtClaims
Creates an instance of a JwtClaims record class.

L

leeway() - Method in record class io.fluxzero.idp.client.TokenValidationRequest
Returns the value of the leeway record component.
loadValidators() - Static method in class io.fluxzero.idp.client.TokenValidators
Loads available validators from the current classpath.

M

matchesState(String) - Method in record class io.fluxzero.idp.client.OidcLoginState
Returns true when the callback state matches this login attempt.

N

name() - Method in record class io.fluxzero.idp.client.JwtClaims
Returns the value of the name record component.
none() - Static method in record class io.fluxzero.idp.client.OidcClientCredentials
 
NONE - Enum constant in enum class io.fluxzero.idp.client.OidcTokenEndpointAuthMethod
 
normalizeIssuer(String) - Static method in record class io.fluxzero.idp.client.OidcTenantConfig
Normalizes an issuer for exact claim comparison.
notBefore() - Method in record class io.fluxzero.idp.client.JwtClaims
Returns the value of the notBefore record component.
now() - Method in record class io.fluxzero.idp.client.TokenValidationRequest
Returns the value of the now record component.

O

OidcClient - Class in io.fluxzero.idp.client
Small OIDC client for authorization-code-with-PKCE application flows.
OidcClient(OidcTenantConfig) - Constructor for class io.fluxzero.idp.client.OidcClient
Creates a client that discovers OIDC endpoints from the configured issuer.
OidcClient(OidcTenantConfig, OidcDiscoveryDocument) - Constructor for class io.fluxzero.idp.client.OidcClient
Creates a client with already discovered metadata.
OidcClient.TokenResponse - Record Class in io.fluxzero.idp.client
Raw token response returned by an OIDC tenant.
OidcClientCredentials - Record Class in io.fluxzero.idp.client
Credentials used by a confidential application when exchanging an authorization code.
OidcClientCredentials(OidcTokenEndpointAuthMethod, String, String) - Constructor for record class io.fluxzero.idp.client.OidcClientCredentials
Creates an instance of a OidcClientCredentials record class.
OidcDiscovery - Class in io.fluxzero.idp.client
Fetches and caches OIDC discovery documents for configured issuers.
OidcDiscoveryDocument - Record Class in io.fluxzero.idp.client
OIDC discovery metadata used by Fluxzero application authentication helpers.
OidcDiscoveryDocument(String, String, String, String, String, String, JsonNode) - Constructor for record class io.fluxzero.idp.client.OidcDiscoveryDocument
Creates an instance of a OidcDiscoveryDocument record class.
OidcLoginState - Record Class in io.fluxzero.idp.client
Stateless BFF login transaction data for one OIDC Authorization Code + PKCE attempt.
OidcLoginState(String, String, String, Instant) - Constructor for record class io.fluxzero.idp.client.OidcLoginState
Creates an instance of a OidcLoginState record class.
OidcLoginStateCodec - Class in io.fluxzero.idp.client
Encodes OidcLoginState into an encrypted, authenticated, cookie-safe value.
OidcLoginStateCodec(byte[]) - Constructor for class io.fluxzero.idp.client.OidcLoginStateCodec
Creates a codec from a raw AES key.
OidcLoginStateCodec(String) - Constructor for class io.fluxzero.idp.client.OidcLoginStateCodec
Creates a codec from a shared application secret.
OidcTenantConfig - Record Class in io.fluxzero.idp.client
Tenant-specific OIDC settings for a Fluxzero application.
OidcTenantConfig(String, String, String, String, String) - Constructor for record class io.fluxzero.idp.client.OidcTenantConfig
 
OidcTenantConfig(String, String, String, String, String, OidcClientCredentials) - Constructor for record class io.fluxzero.idp.client.OidcTenantConfig
Creates an instance of a OidcTenantConfig record class.
OidcTokenEndpointAuthMethod - Enum Class in io.fluxzero.idp.client
Client authentication method used at the OIDC token endpoint.

P

pkce() - Method in record class io.fluxzero.idp.client.OidcLoginState
Returns the PKCE pair derived from the stored verifier.
Pkce - Record Class in io.fluxzero.idp.client
PKCE verifier and S256 challenge pair.
Pkce(String, String) - Constructor for record class io.fluxzero.idp.client.Pkce
Creates an instance of a Pkce record class.
priority() - Method in interface io.fluxzero.idp.client.TokenValidator
Orders validators when multiple implementations are present.
PRIVATE_KEY_JWT - Enum constant in enum class io.fluxzero.idp.client.OidcTokenEndpointAuthMethod
 
privateJwk() - Method in record class io.fluxzero.idp.client.OidcClientCredentials
Returns the value of the privateJwk record component.
privateKeyJwt(String) - Static method in record class io.fluxzero.idp.client.OidcClientCredentials
 
privateKeyJwt(String, String) - Static method in record class io.fluxzero.idp.client.OidcClientCredentials
 

R

redirectTo() - Method in record class io.fluxzero.idp.client.OidcLoginState
Returns the value of the redirectTo record component.
redirectUri() - Method in record class io.fluxzero.idp.client.OidcTenantConfig
Returns the value of the redirectUri record component.
resourceAudience() - Method in record class io.fluxzero.idp.client.OidcTenantConfig
Returns the value of the resourceAudience record component.

S

scope() - Method in record class io.fluxzero.idp.client.OidcClient.TokenResponse
Returns the value of the scope record component.
scope() - Method in record class io.fluxzero.idp.client.OidcTenantConfig
Returns the value of the scope record component.
state() - Method in record class io.fluxzero.idp.client.OidcLoginState
Returns the value of the state record component.
subject() - Method in record class io.fluxzero.idp.client.JwtClaims
Returns the value of the subject record component.
supports(TokenValidationRequest) - Method in interface io.fluxzero.idp.client.TokenValidator
Returns whether this validator should try to validate the request.

T

tenantId() - Method in record class io.fluxzero.idp.client.JwtClaims
Returns the value of the tenantId record component.
token() - Method in record class io.fluxzero.idp.client.TokenValidationRequest
Returns the value of the token record component.
tokenEndpoint() - Method in record class io.fluxzero.idp.client.OidcDiscoveryDocument
Returns the value of the tokenEndpoint record component.
tokenEndpointAudience() - Method in record class io.fluxzero.idp.client.OidcClientCredentials
Returns the value of the tokenEndpointAudience record component.
tokenEndpointAuthMethod() - Method in record class io.fluxzero.idp.client.OidcClientCredentials
Returns the value of the tokenEndpointAuthMethod record component.
TokenResponse(String, String, String, long, String, JsonNode) - Constructor for record class io.fluxzero.idp.client.OidcClient.TokenResponse
Creates an instance of a TokenResponse record class.
tokenType() - Method in record class io.fluxzero.idp.client.OidcClient.TokenResponse
Returns the value of the tokenType record component.
tokenUse() - Method in record class io.fluxzero.idp.client.JwtClaims
Returns the value of the tokenUse record component.
TokenValidationException - Exception Class in io.fluxzero.idp.client
Runtime exception raised when OIDC token exchange, discovery, or validation fails.
TokenValidationException(String) - Constructor for exception class io.fluxzero.idp.client.TokenValidationException
 
TokenValidationException(String, Throwable) - Constructor for exception class io.fluxzero.idp.client.TokenValidationException
 
TokenValidationRequest - Record Class in io.fluxzero.idp.client
Parameters for validating an ID or access token against a configured OIDC tenant.
TokenValidationRequest(String, String, List, String, Instant, Duration) - Constructor for record class io.fluxzero.idp.client.TokenValidationRequest
Creates an instance of a TokenValidationRequest record class.
TokenValidator - Interface in io.fluxzero.idp.client
Strategy for validating OIDC JWTs.
TokenValidators - Class in io.fluxzero.idp.client
ServiceLoader-backed token validator selector.
toString() - Method in record class io.fluxzero.idp.client.JwtClaims
Returns a string representation of this record class.
toString() - Method in record class io.fluxzero.idp.client.OidcClient.TokenResponse
Returns a string representation of this record class.
toString() - Method in record class io.fluxzero.idp.client.OidcClientCredentials
Returns a string representation of this record class.
toString() - Method in record class io.fluxzero.idp.client.OidcDiscoveryDocument
Returns a string representation of this record class.
toString() - Method in record class io.fluxzero.idp.client.OidcLoginState
Returns a string representation of this record class.
toString() - Method in record class io.fluxzero.idp.client.OidcTenantConfig
Returns a string representation of this record class.
toString() - Method in record class io.fluxzero.idp.client.Pkce
Returns a string representation of this record class.
toString() - Method in record class io.fluxzero.idp.client.TokenValidationRequest
Returns a string representation of this record class.

U

userInfoEndpoint() - Method in record class io.fluxzero.idp.client.OidcDiscoveryDocument
Returns the value of the userInfoEndpoint record component.

V

validate(TokenValidationRequest) - Method in class io.fluxzero.idp.client.JwksTokenValidator
 
validate(TokenValidationRequest) - Method in interface io.fluxzero.idp.client.TokenValidator
Validates the token and returns normalized claims.
validate(TokenValidationRequest) - Static method in class io.fluxzero.idp.client.TokenValidators
Validates a token with the first supporting validator that accepts it.
value() - Method in enum class io.fluxzero.idp.client.OidcTokenEndpointAuthMethod
 
valueOf(String) - Static method in enum class io.fluxzero.idp.client.OidcTokenEndpointAuthMethod
Returns the enum constant of this class with the specified name.
values() - Static method in enum class io.fluxzero.idp.client.OidcTokenEndpointAuthMethod
Returns an array containing the constants of this enum class, in the order they are declared.
verifier() - Method in record class io.fluxzero.idp.client.Pkce
Returns the value of the verifier record component.

W

withNow(Instant) - Method in record class io.fluxzero.idp.client.TokenValidationRequest
Returns a copy with a deterministic clock value.
A C D E F G H I J L M N O P R S T U V W 
All Classes and Interfaces|All Packages|Serialized Form