Interface OidcClientAuthentication

All Known Implementing Classes:

OidcClientCredentials

Functional Interface:

This is a functional interface and can therefore be used as the assignment target for a lambda expression or method reference.

@FunctionalInterface
public interface OidcClientAuthentication

Client authentication capability, independent of private-key storage and the HTTP transport.

Method Summary

Modifier and Type	Method	Description
void	addToTokenRequest(Map<String,Object> form, String clientId, String tokenEndpoint)
static OidcClientAuthentication	privateKeyJwt(BiFunction<String,String,String> assertionProvider)	Uses a fresh assertion from an application-owned signer for each request.

Method Details

addToTokenRequest

void addToTokenRequest(Map<String,Object> form,
 String clientId,
 String tokenEndpoint)

privateKeyJwt

static OidcClientAuthentication privateKeyJwt(BiFunction<String,String,String> assertionProvider)

Uses a fresh assertion from an application-owned signer for each request. The arguments are the configured client ID and discovered token endpoint, never browser input. The provider owns key custody, audience policy and bounded assertion claims (iss/sub/aud/iat/exp/jti). No private key is required in OidcTenantConfig. An unavailable signer never falls back to a public client.