javax.security.enterprise.AuthenticationStatus |
AuthenticationController.authenticateUser(OpenIdConfiguration configuration,
javax.servlet.http.HttpServletRequest request,
javax.servlet.http.HttpServletResponse response)
(1) The RP (Client) sends a request to the OpenId Connect Provider (OP)
to authenticates the End-User using the Authorization Code Flow and
authorization Code is returned from the Authorization Endpoint.
|
OpenIdNonce |
NonceController.get(OpenIdConfiguration configuration,
javax.servlet.http.HttpServletRequest request,
javax.servlet.http.HttpServletResponse response) |
Optional<OpenIdState> |
StateController.get(OpenIdConfiguration configuration,
javax.servlet.http.HttpServletRequest request,
javax.servlet.http.HttpServletResponse response) |
javax.ws.rs.core.Response |
TokenController.getTokens(OpenIdConfiguration configuration,
javax.servlet.http.HttpServletRequest request)
(4) A Client makes a token request to the token endpoint and the OpenId
Provider responds with an ID Token and an Access Token.
|
javax.json.JsonObject |
UserInfoController.getUserInfo(OpenIdConfiguration configuration,
AccessToken accessToken)
(6) The RP send a request with the Access Token to the UserInfo Endpoint
and requests the claims about the End-User.
|
javax.ws.rs.core.Response |
TokenController.refreshTokens(OpenIdConfiguration configuration,
RefreshToken refreshToken)
Makes a refresh request to the token endpoint and the OpenId Provider
responds with a new (updated) Access Token and Refreshs Token.
|
void |
NonceController.remove(OpenIdConfiguration configuration,
javax.servlet.http.HttpServletRequest request,
javax.servlet.http.HttpServletResponse response) |
void |
StateController.remove(OpenIdConfiguration configuration,
javax.servlet.http.HttpServletRequest request,
javax.servlet.http.HttpServletResponse response) |
void |
OriginalRequestController.store(OpenIdConfiguration configuration,
javax.servlet.http.HttpServletRequest request,
javax.servlet.http.HttpServletResponse response) |
void |
NonceController.store(OpenIdNonce nonce,
OpenIdConfiguration configuration,
javax.servlet.http.HttpServletRequest request,
javax.servlet.http.HttpServletResponse response) |
void |
StateController.store(OpenIdState state,
OpenIdConfiguration configuration,
javax.servlet.http.HttpServletRequest request,
javax.servlet.http.HttpServletResponse response) |
Map<String,Object> |
TokenController.validateAccessToken(AccessTokenImpl accessToken,
com.nimbusds.jose.Algorithm idTokenAlgorithm,
Map<String,Object> idTokenClaims,
OpenIdConfiguration configuration)
(5.2) Validate the Access Token & it's claims and verify the signature.
|
Map<String,Object> |
TokenController.validateIdToken(IdentityTokenImpl idToken,
javax.security.enterprise.authentication.mechanism.http.HttpMessageContext httpContext,
OpenIdConfiguration configuration)
(5.1) Validate Id Token's claims and verify ID Token's signature.
|
Map<String,Object> |
TokenController.validateRefreshedIdToken(IdentityToken previousIdToken,
IdentityTokenImpl newIdToken,
javax.security.enterprise.authentication.mechanism.http.HttpMessageContext httpContext,
OpenIdConfiguration configuration)
Validate Id Token received from Successful Refresh Response.
|