All Classes and Interfaces

Class	Description
FormCodec	Minimal form-url-encoding helper for OIDC endpoints.
JwksTokenValidator	OIDC token validator with a legacy RS256 default and explicit native signing-profile support.
JwtClaims	Normalized claims extracted from a validated OIDC JWT.
LogoutTokenClaims	Validated protocol evidence only; does not establish session ownership or perform logout.
OidcApplicationRoutes	Application-scoped route and callback configuration.
OidcClient	Small OIDC client for authorization-code-with-PKCE application flows.
OidcClient.TokenResponse	Raw token response returned by an OIDC tenant.
OidcClientAuthentication	Client authentication capability, independent of private-key storage and the HTTP transport.
OidcClientCredentials	Credentials used by a confidential application when exchanging an authorization code.
OidcDependencyUnavailableException	Temporary/uncertain transport or signer outcome, not invalid credentials.
OidcDiscovery	Fetches and caches OIDC discovery documents for configured issuers.
OidcDiscoveryDocument	OIDC discovery metadata used by Fluxzero application authentication helpers.
OidcLoginState	Stateless BFF login transaction data for one OIDC Authorization Code + PKCE attempt.
OidcLoginStateCodec	Encodes OidcLoginState into an encrypted, authenticated, cookie-safe value.
OidcTenantConfig	Tenant-specific OIDC settings for a Fluxzero application.
OidcTokenEndpointAuthMethod	Client authentication method used at the OIDC token endpoint.
OidcTransport	In-process HTTP boundary for OIDC protocol calls.
Pkce	PKCE verifier and S256 challenge pair.
TokenValidationException	Runtime exception raised when OIDC token exchange, discovery, or validation fails.
TokenValidationRequest	Parameters for validating an ID or access token against a configured OIDC tenant.
TokenValidator	Strategy for validating OIDC JWTs.
TokenValidators	ServiceLoader-backed token validator selector.