| Package | Description |
|---|---|
| com.nimbusds.oauth2.sdk |
Classes for representing, serialising and parsing OAuth 2.0 client requests
and authorisation server responses.
|
| com.nimbusds.oauth2.sdk.assertions |
Common SAML 2.0 and JWT bearer assertion classes.
|
| com.nimbusds.oauth2.sdk.assertions.jwt |
JWT bearer assertions.
|
| com.nimbusds.oauth2.sdk.assertions.saml2 |
SAML 2.0 bearer assertions.
|
| com.nimbusds.oauth2.sdk.id |
Common OAuth 2.0 identifier and identity classes.
|
| com.nimbusds.openid.connect.sdk.claims |
Claims and claim sets used in OpenID Connect.
|
| com.nimbusds.openid.connect.sdk.op |
OpenID Connect Provider (OP) classes.
|
| com.nimbusds.openid.connect.sdk.validators |
Client-side OpenID Connect ID token, access token and authorisation code
validators.
|
| Modifier and Type | Method and Description |
|---|---|
Issuer |
TokenIntrospectionSuccessResponse.getIssuer()
Returns the token issuer.
|
| Modifier and Type | Method and Description |
|---|---|
TokenIntrospectionSuccessResponse.Builder |
TokenIntrospectionSuccessResponse.Builder.issuer(Issuer iss)
Sets the token issuer.
|
| Modifier and Type | Method and Description |
|---|---|
Issuer |
AssertionDetails.getIssuer()
Returns the issuer.
|
| Constructor and Description |
|---|
AssertionDetails(Issuer issuer,
Subject subject,
List<Audience> audience,
Date iat,
Date exp,
Identifier id)
Creates a new assertion details instance.
|
| Constructor and Description |
|---|
JWTAssertionDetails(Issuer iss,
Subject sub,
Audience aud)
Creates a new JWT bearer assertion details (claims set) instance.
|
JWTAssertionDetails(Issuer iss,
Subject sub,
List<Audience> aud,
Date exp,
Date nbf,
Date iat,
JWTID jti,
Map<String,Object> other)
Creates a new JWT bearer assertion details (claims set) instance.
|
| Modifier and Type | Method and Description |
|---|---|
org.opensaml.saml2.core.Assertion |
SAML2AssertionValidator.validate(org.opensaml.saml2.core.Assertion assertion,
Issuer expectedIssuer,
Key key)
Validates the specified SAML 2.0 assertion.
|
org.opensaml.saml2.core.Assertion |
SAML2AssertionValidator.validate(String xml,
Issuer expectedIssuer,
Key key)
Validates the specified SAML 2.0 assertion.
|
| Constructor and Description |
|---|
SAML2AssertionDetails(Issuer issuer,
Subject subject,
Audience audience)
Creates a new SAML 2.0 bearer assertion details instance.
|
SAML2AssertionDetails(Issuer issuer,
Subject subject,
String subjectFormat,
Date subjectAuthTime,
ACR subjectACR,
List<Audience> audience,
Date exp,
Date nbf,
Date iat,
Identifier id,
InetAddress clientAddress,
Map<String,List<String>> attrStatement)
Creates a new SAML 2.0 bearer assertion details instance.
|
| Modifier and Type | Method and Description |
|---|---|
Issuer |
Actor.getIssuer()
Returns the optional issuer for the subject.
|
| Modifier and Type | Method and Description |
|---|---|
static boolean |
Issuer.isValid(Issuer value)
Checks if the specified issuer is a valid identifier.
|
| Constructor and Description |
|---|
Actor(Subject subject,
Issuer issuer,
Actor parent)
Creates a new actor.
|
| Constructor and Description |
|---|
IDTokenClaimsSet(Issuer iss,
Subject sub,
List<Audience> aud,
Date exp,
Date iat)
Creates a new minimal ID token claims set.
|
LogoutTokenClaimsSet(Issuer iss,
Subject sub,
List<Audience> aud,
Date iat,
JWTID jti,
SessionID sid)
Creates a new logout token claims set.
|
| Modifier and Type | Method and Description |
|---|---|
Issuer |
OIDCProviderMetadata.getIssuer()
Gets the issuer identifier.
|
| Modifier and Type | Method and Description |
|---|---|
static OIDCProviderMetadata |
OIDCProviderMetadata.resolve(Issuer issuer)
Resolves OpenID Provider metadata from the specified issuer
identifier.
|
static OIDCProviderMetadata |
OIDCProviderMetadata.resolve(Issuer issuer,
int connectTimeout,
int readTimeout)
Resolves OpenID Provider metadata from the specified issuer
identifier.
|
| Constructor and Description |
|---|
OIDCProviderConfigurationRequest(Issuer issuer)
Creates a new OpenID Connect provider configuration request.
|
OIDCProviderMetadata(Issuer issuer,
List<SubjectType> subjectTypes,
URI jwkSetURI)
Creates a new OpenID Connect provider metadata instance.
|
| Modifier and Type | Method and Description |
|---|---|
Issuer |
IDTokenClaimsVerifier.getExpectedIssuer()
Returns the expected ID token issuer.
|
Issuer |
LogoutTokenClaimsVerifier.getExpectedIssuer()
Returns the expected ID token issuer.
|
| Modifier and Type | Method and Description |
|---|---|
static IDTokenValidator |
IDTokenValidator.create(Issuer opIssuer,
OIDCClientInformation clientInfo)
Creates a new ID token validator for the specified OpenID Provider,
which must publish its metadata at
[issuer-url]/.well-known/openid-configuration. |
static IDTokenValidator |
IDTokenValidator.create(Issuer opIssuer,
OIDCClientInformation clientInfo,
com.nimbusds.jose.jwk.source.JWKSource clientJWKSource,
int connectTimeout,
int readTimeout)
Creates a new ID token validator for the specified OpenID Provider,
which must publish its metadata at
[issuer-url]/.well-known/openid-configuration. |
| Constructor and Description |
|---|
IDTokenClaimsVerifier(Issuer issuer,
ClientID clientID,
Nonce nonce,
int maxClockSkew)
Creates a new ID token claims verifier.
|
IDTokenValidator(Issuer expectedIssuer,
ClientID clientID)
Creates a new validator for unsecured (plain) ID tokens.
|
IDTokenValidator(Issuer expectedIssuer,
ClientID clientID,
com.nimbusds.jose.JWSAlgorithm expectedJWSAlg,
com.nimbusds.jose.jwk.JWKSet jwkSet)
Creates a new validator for RSA or EC signed ID tokens where the
OpenID Provider's JWK set is specified by value.
|
IDTokenValidator(Issuer expectedIssuer,
ClientID clientID,
com.nimbusds.jose.JWSAlgorithm expectedJWSAlg,
Secret clientSecret)
Creates a new validator for HMAC protected ID tokens.
|
IDTokenValidator(Issuer expectedIssuer,
ClientID clientID,
com.nimbusds.jose.JWSAlgorithm expectedJWSAlg,
URL jwkSetURI)
Creates a new validator for RSA or EC signed ID tokens where the
OpenID Provider's JWK set is specified by URL.
|
IDTokenValidator(Issuer expectedIssuer,
ClientID clientID,
com.nimbusds.jose.JWSAlgorithm expectedJWSAlg,
URL jwkSetURI,
com.nimbusds.jose.util.ResourceRetriever resourceRetriever)
Creates a new validator for RSA or EC signed ID tokens where the
OpenID Provider's JWK set is specified by URL.
|
IDTokenValidator(Issuer expectedIssuer,
ClientID clientID,
com.nimbusds.jose.proc.JWSKeySelector jwsKeySelector,
com.nimbusds.jose.proc.JWEKeySelector jweKeySelector)
Creates a new ID token validator.
|
LogoutTokenClaimsVerifier(Issuer issuer,
ClientID clientID)
Creates a new logout token claims verifier.
|
LogoutTokenValidator(Issuer expectedIssuer,
ClientID clientID,
com.nimbusds.jose.JWSAlgorithm expectedJWSAlg,
com.nimbusds.jose.jwk.JWKSet jwkSet)
Creates a new validator for RSA or EC signed logout tokens where the
OpenID Provider's JWK set is specified by value.
|
LogoutTokenValidator(Issuer expectedIssuer,
ClientID clientID,
com.nimbusds.jose.JWSAlgorithm expectedJWSAlg,
Secret clientSecret)
Creates a new validator for HMAC protected logout tokens.
|
LogoutTokenValidator(Issuer expectedIssuer,
ClientID clientID,
com.nimbusds.jose.JWSAlgorithm expectedJWSAlg,
URL jwkSetURI)
Creates a new validator for RSA or EC signed logout tokens where the
OpenID Provider's JWK set is specified by URL.
|
LogoutTokenValidator(Issuer expectedIssuer,
ClientID clientID,
com.nimbusds.jose.JWSAlgorithm expectedJWSAlg,
URL jwkSetURI,
com.nimbusds.jose.util.ResourceRetriever resourceRetriever)
Creates a new validator for RSA or EC signed logout tokens where the
OpenID Provider's JWK set is specified by URL.
|
LogoutTokenValidator(Issuer expectedIssuer,
ClientID clientID,
com.nimbusds.jose.proc.JWSKeySelector jwsKeySelector,
com.nimbusds.jose.proc.JWEKeySelector jweKeySelector)
Creates a new logout token validator.
|
Copyright © 2018 Connect2id Ltd.. All rights reserved.