Index
All Classes and Interfaces|All Packages|Serialized Form
A
- accessToken() - Method in record class io.fluxzero.idp.client.OidcClient.TokenResponse
-
Returns the value of the
accessTokenrecord component. - accessToken(String, OidcTenantConfig) - Static method in record class io.fluxzero.idp.client.TokenValidationRequest
-
Creates a validation request for a bearer access token sent to backend APIs.
- addToTokenRequest(Map, String, String) - Method in record class io.fluxzero.idp.client.OidcClientCredentials
-
Adds the configured client authentication fields to a token request form.
- audiences() - Method in record class io.fluxzero.idp.client.JwtClaims
-
Returns the value of the
audiencesrecord component. - audiences() - Method in record class io.fluxzero.idp.client.TokenValidationRequest
-
Returns the value of the
audiencesrecord component. - authorizationEndpoint() - Method in record class io.fluxzero.idp.client.OidcDiscoveryDocument
-
Returns the value of the
authorizationEndpointrecord component. - authorizationUrl(OidcLoginState) - Method in class io.fluxzero.idp.client.OidcClient
-
Builds the authorization endpoint URL from a stateless login transaction.
- authorizationUrl(Pkce, String) - Method in class io.fluxzero.idp.client.OidcClient
-
Builds the authorization endpoint URL for authorization-code flow with PKCE S256.
C
- challenge() - Method in record class io.fluxzero.idp.client.Pkce
-
Returns the value of the
challengerecord component. - challenge(String) - Static method in record class io.fluxzero.idp.client.Pkce
-
Computes the S256 code challenge for a verifier.
- claim(String) - Method in record class io.fluxzero.idp.client.JwtClaims
-
Returns a string claim from the raw payload.
- clientCredentials() - Method in record class io.fluxzero.idp.client.OidcTenantConfig
-
Returns the value of the
clientCredentialsrecord component. - clientId() - Method in record class io.fluxzero.idp.client.OidcTenantConfig
-
Returns the value of the
clientIdrecord component. - codeVerifier() - Method in record class io.fluxzero.idp.client.OidcLoginState
-
Returns the value of the
codeVerifierrecord component. - config() - Method in class io.fluxzero.idp.client.OidcClient
- create(String, Duration) - Static method in record class io.fluxzero.idp.client.OidcLoginState
-
Creates a new login state using the system clock.
- create(String, Duration, Instant) - Static method in record class io.fluxzero.idp.client.OidcLoginState
-
Creates a new login state expiring after the supplied time-to-live.
D
- decode(String) - Static method in class io.fluxzero.idp.client.FormCodec
- decode(String, Instant) - Method in class io.fluxzero.idp.client.OidcLoginStateCodec
-
Decodes and validates a login state cookie value.
- decodeOrThrow(String) - Method in class io.fluxzero.idp.client.OidcLoginStateCodec
-
Decodes a cookie value and throws when it is invalid or tampered.
- decodeValue(String) - Static method in class io.fluxzero.idp.client.FormCodec
- discover(String) - Static method in class io.fluxzero.idp.client.OidcDiscovery
-
Discovers and caches metadata for an issuer.
- discovery() - Method in class io.fluxzero.idp.client.OidcClient
E
- email() - Method in record class io.fluxzero.idp.client.JwtClaims
-
Returns the value of the
emailrecord component. - encode(OidcLoginState) - Method in class io.fluxzero.idp.client.OidcLoginStateCodec
-
Encodes a login state into an encrypted cookie value.
- encode(String) - Static method in class io.fluxzero.idp.client.FormCodec
- encode(Map) - Static method in class io.fluxzero.idp.client.FormCodec
- endSessionEndpoint() - Method in record class io.fluxzero.idp.client.OidcDiscoveryDocument
-
Returns the value of the
endSessionEndpointrecord component. - endSessionUrl(String) - Method in class io.fluxzero.idp.client.OidcClient
-
Builds a tenant logout URL when the issuer advertises one.
- endSessionUrl(String, String) - Method in class io.fluxzero.idp.client.OidcClient
-
Builds a tenant logout URL with an optional ID token hint.
- equals(Object) - Method in record class io.fluxzero.idp.client.JwtClaims
-
Indicates whether some other object is "equal to" this one.
- equals(Object) - Method in record class io.fluxzero.idp.client.OidcClient.TokenResponse
-
Indicates whether some other object is "equal to" this one.
- equals(Object) - Method in record class io.fluxzero.idp.client.OidcClientCredentials
-
Indicates whether some other object is "equal to" this one.
- equals(Object) - Method in record class io.fluxzero.idp.client.OidcDiscoveryDocument
-
Indicates whether some other object is "equal to" this one.
- equals(Object) - Method in record class io.fluxzero.idp.client.OidcLoginState
-
Indicates whether some other object is "equal to" this one.
- equals(Object) - Method in record class io.fluxzero.idp.client.OidcTenantConfig
-
Indicates whether some other object is "equal to" this one.
- equals(Object) - Method in record class io.fluxzero.idp.client.Pkce
-
Indicates whether some other object is "equal to" this one.
- equals(Object) - Method in record class io.fluxzero.idp.client.TokenValidationRequest
-
Indicates whether some other object is "equal to" this one.
- exchangeCode(String, String) - Method in class io.fluxzero.idp.client.OidcClient
-
Exchanges an authorization code for ID and access tokens.
- expectedTokenUse() - Method in record class io.fluxzero.idp.client.TokenValidationRequest
-
Returns the value of the
expectedTokenUserecord component. - expiresAt() - Method in record class io.fluxzero.idp.client.JwtClaims
-
Returns the value of the
expiresAtrecord component. - expiresAt() - Method in record class io.fluxzero.idp.client.OidcLoginState
-
Returns the value of the
expiresAtrecord component. - expiresIn() - Method in record class io.fluxzero.idp.client.OidcClient.TokenResponse
-
Returns the value of the
expiresInrecord component.
F
- FormCodec - Class in io.fluxzero.idp.client
-
Minimal form-url-encoding helper for OIDC endpoints.
- from(String) - Static method in enum class io.fluxzero.idp.client.OidcTokenEndpointAuthMethod
G
- generate() - Static method in record class io.fluxzero.idp.client.Pkce
-
Generates a new verifier/challenge pair for one authorization attempt.
H
- hashCode() - Method in record class io.fluxzero.idp.client.JwtClaims
-
Returns a hash code value for this object.
- hashCode() - Method in record class io.fluxzero.idp.client.OidcClient.TokenResponse
-
Returns a hash code value for this object.
- hashCode() - Method in record class io.fluxzero.idp.client.OidcClientCredentials
-
Returns a hash code value for this object.
- hashCode() - Method in record class io.fluxzero.idp.client.OidcDiscoveryDocument
-
Returns a hash code value for this object.
- hashCode() - Method in record class io.fluxzero.idp.client.OidcLoginState
-
Returns a hash code value for this object.
- hashCode() - Method in record class io.fluxzero.idp.client.OidcTenantConfig
-
Returns a hash code value for this object.
- hashCode() - Method in record class io.fluxzero.idp.client.Pkce
-
Returns a hash code value for this object.
- hashCode() - Method in record class io.fluxzero.idp.client.TokenValidationRequest
-
Returns a hash code value for this object.
I
- idToken() - Method in record class io.fluxzero.idp.client.OidcClient.TokenResponse
-
Returns the value of the
idTokenrecord component. - idToken(String, OidcTenantConfig) - Static method in record class io.fluxzero.idp.client.TokenValidationRequest
-
Creates a validation request for an ID token returned to the BFF callback.
- io.fluxzero.idp.client - package io.fluxzero.idp.client
-
Shared Fluxzero IDP client helpers for Fluxzero applications.
- isExpired(Instant) - Method in record class io.fluxzero.idp.client.OidcLoginState
-
Returns
truewhen this login attempt is expired at the supplied time. - issuedAt() - Method in record class io.fluxzero.idp.client.JwtClaims
-
Returns the value of the
issuedAtrecord component. - issuer() - Method in record class io.fluxzero.idp.client.JwtClaims
-
Returns the value of the
issuerrecord component. - issuer() - Method in record class io.fluxzero.idp.client.OidcDiscoveryDocument
-
Returns the value of the
issuerrecord component. - issuer() - Method in record class io.fluxzero.idp.client.OidcTenantConfig
-
Returns the value of the
issuerrecord component. - issuer() - Method in record class io.fluxzero.idp.client.TokenValidationRequest
-
Returns the value of the
issuerrecord component.
J
- json() - Method in record class io.fluxzero.idp.client.JwtClaims
-
Returns the value of the
jsonrecord component. - json() - Method in record class io.fluxzero.idp.client.OidcClient.TokenResponse
-
Returns the value of the
jsonrecord component. - json() - Method in record class io.fluxzero.idp.client.OidcDiscoveryDocument
-
Returns the value of the
jsonrecord component. - JwksTokenValidator - Class in io.fluxzero.idp.client
-
Default Fluxzero OIDC token validator for RS256 JWTs exposed through a tenant JWKS endpoint.
- JwksTokenValidator() - Constructor for class io.fluxzero.idp.client.JwksTokenValidator
- jwksUri() - Method in record class io.fluxzero.idp.client.OidcDiscoveryDocument
-
Returns the value of the
jwksUrirecord component. - JwtClaims - Record Class in io.fluxzero.idp.client
-
Normalized claims extracted from a validated OIDC JWT.
- JwtClaims(String, String, List, Instant, Instant, Instant, String, String, String, String, JsonNode) - Constructor for record class io.fluxzero.idp.client.JwtClaims
-
Creates an instance of a
JwtClaimsrecord class.
L
- leeway() - Method in record class io.fluxzero.idp.client.TokenValidationRequest
-
Returns the value of the
leewayrecord component. - loadValidators() - Static method in class io.fluxzero.idp.client.TokenValidators
-
Loads available validators from the current classpath.
M
- matchesState(String) - Method in record class io.fluxzero.idp.client.OidcLoginState
-
Returns
truewhen the callback state matches this login attempt.
N
- name() - Method in record class io.fluxzero.idp.client.JwtClaims
-
Returns the value of the
namerecord component. - none() - Static method in record class io.fluxzero.idp.client.OidcClientCredentials
- NONE - Enum constant in enum class io.fluxzero.idp.client.OidcTokenEndpointAuthMethod
- normalizeIssuer(String) - Static method in record class io.fluxzero.idp.client.OidcTenantConfig
-
Normalizes an issuer for URL construction by removing trailing slashes.
- notBefore() - Method in record class io.fluxzero.idp.client.JwtClaims
-
Returns the value of the
notBeforerecord component. - now() - Method in record class io.fluxzero.idp.client.TokenValidationRequest
-
Returns the value of the
nowrecord component.
O
- OidcClient - Class in io.fluxzero.idp.client
-
Small OIDC client for authorization-code-with-PKCE application flows.
- OidcClient(OidcTenantConfig) - Constructor for class io.fluxzero.idp.client.OidcClient
-
Creates a client that discovers OIDC endpoints from the configured issuer.
- OidcClient(OidcTenantConfig, OidcDiscoveryDocument) - Constructor for class io.fluxzero.idp.client.OidcClient
-
Creates a client with already discovered metadata.
- OidcClient.TokenResponse - Record Class in io.fluxzero.idp.client
-
Raw token response returned by an OIDC tenant.
- OidcClientCredentials - Record Class in io.fluxzero.idp.client
-
Credentials used by a confidential application when exchanging an authorization code.
- OidcClientCredentials(OidcTokenEndpointAuthMethod, String, String) - Constructor for record class io.fluxzero.idp.client.OidcClientCredentials
-
Creates an instance of a
OidcClientCredentialsrecord class. - OidcDiscovery - Class in io.fluxzero.idp.client
-
Fetches and caches OIDC discovery documents for configured issuers.
- OidcDiscoveryDocument - Record Class in io.fluxzero.idp.client
-
OIDC discovery metadata used by Fluxzero application authentication helpers.
- OidcDiscoveryDocument(String, String, String, String, String, String, JsonNode) - Constructor for record class io.fluxzero.idp.client.OidcDiscoveryDocument
-
Creates an instance of a
OidcDiscoveryDocumentrecord class. - OidcLoginState - Record Class in io.fluxzero.idp.client
-
Stateless BFF login transaction data for one OIDC Authorization Code + PKCE attempt.
- OidcLoginState(String, String, String, Instant) - Constructor for record class io.fluxzero.idp.client.OidcLoginState
-
Creates an instance of a
OidcLoginStaterecord class. - OidcLoginStateCodec - Class in io.fluxzero.idp.client
-
Encodes
OidcLoginStateinto an encrypted, authenticated, cookie-safe value. - OidcLoginStateCodec(byte[]) - Constructor for class io.fluxzero.idp.client.OidcLoginStateCodec
-
Creates a codec from a raw AES key.
- OidcLoginStateCodec(String) - Constructor for class io.fluxzero.idp.client.OidcLoginStateCodec
-
Creates a codec from a shared application secret.
- OidcTenantConfig - Record Class in io.fluxzero.idp.client
-
Tenant-specific OIDC settings for a Fluxzero application.
- OidcTenantConfig(String, String, String, String, String) - Constructor for record class io.fluxzero.idp.client.OidcTenantConfig
- OidcTenantConfig(String, String, String, String, String, OidcClientCredentials) - Constructor for record class io.fluxzero.idp.client.OidcTenantConfig
-
Creates an instance of a
OidcTenantConfigrecord class. - OidcTokenEndpointAuthMethod - Enum Class in io.fluxzero.idp.client
-
Client authentication method used at the OIDC token endpoint.
P
- pkce() - Method in record class io.fluxzero.idp.client.OidcLoginState
-
Returns the PKCE pair derived from the stored verifier.
- Pkce - Record Class in io.fluxzero.idp.client
-
PKCE verifier and S256 challenge pair.
- Pkce(String, String) - Constructor for record class io.fluxzero.idp.client.Pkce
-
Creates an instance of a
Pkcerecord class. - priority() - Method in interface io.fluxzero.idp.client.TokenValidator
-
Orders validators when multiple implementations are present.
- PRIVATE_KEY_JWT - Enum constant in enum class io.fluxzero.idp.client.OidcTokenEndpointAuthMethod
- privateJwk() - Method in record class io.fluxzero.idp.client.OidcClientCredentials
-
Returns the value of the
privateJwkrecord component. - privateKeyJwt(String) - Static method in record class io.fluxzero.idp.client.OidcClientCredentials
- privateKeyJwt(String, String) - Static method in record class io.fluxzero.idp.client.OidcClientCredentials
R
- redirectTo() - Method in record class io.fluxzero.idp.client.OidcLoginState
-
Returns the value of the
redirectTorecord component. - redirectUri() - Method in record class io.fluxzero.idp.client.OidcTenantConfig
-
Returns the value of the
redirectUrirecord component. - resourceAudience() - Method in record class io.fluxzero.idp.client.OidcTenantConfig
-
Returns the value of the
resourceAudiencerecord component.
S
- scope() - Method in record class io.fluxzero.idp.client.OidcClient.TokenResponse
-
Returns the value of the
scoperecord component. - scope() - Method in record class io.fluxzero.idp.client.OidcTenantConfig
-
Returns the value of the
scoperecord component. - state() - Method in record class io.fluxzero.idp.client.OidcLoginState
-
Returns the value of the
staterecord component. - subject() - Method in record class io.fluxzero.idp.client.JwtClaims
-
Returns the value of the
subjectrecord component. - supports(TokenValidationRequest) - Method in interface io.fluxzero.idp.client.TokenValidator
-
Returns whether this validator should try to validate the request.
T
- tenantId() - Method in record class io.fluxzero.idp.client.JwtClaims
-
Returns the value of the
tenantIdrecord component. - token() - Method in record class io.fluxzero.idp.client.TokenValidationRequest
-
Returns the value of the
tokenrecord component. - tokenEndpoint() - Method in record class io.fluxzero.idp.client.OidcDiscoveryDocument
-
Returns the value of the
tokenEndpointrecord component. - tokenEndpointAudience() - Method in record class io.fluxzero.idp.client.OidcClientCredentials
-
Returns the value of the
tokenEndpointAudiencerecord component. - tokenEndpointAuthMethod() - Method in record class io.fluxzero.idp.client.OidcClientCredentials
-
Returns the value of the
tokenEndpointAuthMethodrecord component. - TokenResponse(String, String, String, long, String, JsonNode) - Constructor for record class io.fluxzero.idp.client.OidcClient.TokenResponse
-
Creates an instance of a
TokenResponserecord class. - tokenType() - Method in record class io.fluxzero.idp.client.OidcClient.TokenResponse
-
Returns the value of the
tokenTyperecord component. - tokenUse() - Method in record class io.fluxzero.idp.client.JwtClaims
-
Returns the value of the
tokenUserecord component. - TokenValidationException - Exception Class in io.fluxzero.idp.client
-
Runtime exception raised when OIDC token exchange, discovery, or validation fails.
- TokenValidationException(String) - Constructor for exception class io.fluxzero.idp.client.TokenValidationException
- TokenValidationException(String, Throwable) - Constructor for exception class io.fluxzero.idp.client.TokenValidationException
- TokenValidationRequest - Record Class in io.fluxzero.idp.client
-
Parameters for validating an ID or access token against a configured OIDC tenant.
- TokenValidationRequest(String, String, List, String, Instant, Duration) - Constructor for record class io.fluxzero.idp.client.TokenValidationRequest
-
Creates an instance of a
TokenValidationRequestrecord class. - TokenValidator - Interface in io.fluxzero.idp.client
-
Strategy for validating OIDC JWTs.
- TokenValidators - Class in io.fluxzero.idp.client
-
ServiceLoader-backed token validator selector.
- toString() - Method in record class io.fluxzero.idp.client.JwtClaims
-
Returns a string representation of this record class.
- toString() - Method in record class io.fluxzero.idp.client.OidcClient.TokenResponse
-
Returns a string representation of this record class.
- toString() - Method in record class io.fluxzero.idp.client.OidcClientCredentials
-
Returns a string representation of this record class.
- toString() - Method in record class io.fluxzero.idp.client.OidcDiscoveryDocument
-
Returns a string representation of this record class.
- toString() - Method in record class io.fluxzero.idp.client.OidcLoginState
-
Returns a string representation of this record class.
- toString() - Method in record class io.fluxzero.idp.client.OidcTenantConfig
-
Returns a string representation of this record class.
- toString() - Method in record class io.fluxzero.idp.client.Pkce
-
Returns a string representation of this record class.
- toString() - Method in record class io.fluxzero.idp.client.TokenValidationRequest
-
Returns a string representation of this record class.
U
- userInfoEndpoint() - Method in record class io.fluxzero.idp.client.OidcDiscoveryDocument
-
Returns the value of the
userInfoEndpointrecord component.
V
- validate(TokenValidationRequest) - Method in class io.fluxzero.idp.client.JwksTokenValidator
- validate(TokenValidationRequest) - Method in interface io.fluxzero.idp.client.TokenValidator
-
Validates the token and returns normalized claims.
- validate(TokenValidationRequest) - Static method in class io.fluxzero.idp.client.TokenValidators
-
Validates a token with the first supporting validator that accepts it.
- value() - Method in enum class io.fluxzero.idp.client.OidcTokenEndpointAuthMethod
- valueOf(String) - Static method in enum class io.fluxzero.idp.client.OidcTokenEndpointAuthMethod
-
Returns the enum constant of this class with the specified name.
- values() - Static method in enum class io.fluxzero.idp.client.OidcTokenEndpointAuthMethod
-
Returns an array containing the constants of this enum class, in the order they are declared.
- verifier() - Method in record class io.fluxzero.idp.client.Pkce
-
Returns the value of the
verifierrecord component.
W
- withNow(Instant) - Method in record class io.fluxzero.idp.client.TokenValidationRequest
-
Returns a copy with a deterministic clock value.
All Classes and Interfaces|All Packages|Serialized Form