All Classes and Interfaces
Class
Description
Base class for cookie configuration properties classes.
Base implementation class for
OutgoingRequestProcessorMatcher.Binds the authentication object to a route argument.
A base
SecurityRule class to extend from that provides
helper methods to get the roles from the claims and compare them
to the roles allowed by the rule.Abstract implementation of
TokenAuthenticationFactory which creates an authentication for a set of claims.Stores the combination of access and refresh tokens.
Contract to generate
AccessRefreshToken for a particular user.Implementation of
LoginHandler for Token Based Authentication.Configuration for access tokens.
Access token configuration.
Configuration for the access token cookie.
Triggered when a JWT access token is generated.
Represents the state of an authentication.
Binds the authentication object to a route argument.
A runtime exception thrown when authentication fails.
Handles the server response when an
AuthenticationException is thrown.Signalises an authentication failure and stores the failure reason.
Enums describes the different authentication failures.
Describes a bean which attempts to read an
Authentication from an HTTP Request being executed.Different authentication strategies shipped with Micronaut Security.
A condition that matches a supplied list of authentication modes.
Defines the Authentication mode being used.
Defines an authentication provider.
Represents a request to authenticate.
The response of an authentication attempt.
Options for how to handle multiple authentication providers.
An Authenticator operates on several
AuthenticationProvider instances returning the first
authenticated AuthenticationResponse.Exception thrown when access to a protected resource is denied.
Configuration for basic authentication.
An implementation of
AuthenticationFetcher that decodes a username
and password from the Authorization header and authenticates the credentials
against any AuthenticationProviders available.Utility class for Basic Auth.
Encapsulates an Access Token response as described in RFC 6749.
Configuration for the
BearerTokenReader.Default implementation of
BearerTokenConfiguration.Reads JWT token from
HttpHeaders.AUTHORIZATION header.Authentication claims.
Identifies the recipients that the JWT is intended for.
An implementation of the Authentication interface intended to be used
by clients that deserialize token information into an authentication.
A security rule implementation backed by the
SecurityConfiguration.getInterceptUrlMap().Base configuration for all controllers.
It evaluates to true if micronaut.security.authentication is set to idtoken or cookie.
Abstract class which defines an implementation of
RedirectingLoginHandler where a redirect response is issued.Stores the last unauthorized URL in a cookie to redirect back to after
logging in.
Reads the token from the configured io.micronaut.security.token.jwt.cookie.
Generates http responses with access and refresh token.
Provides the default behavior for responding to an
AuthorizationException.Decorates a InterceptUrlPattern}.
Validates the
IntrospectionRequest.getToken() with the available TokenValidator.Get redirection URLs combining context path and redirect configuration.
Default implementation of
RolesFinder.Default implementation of
SecurityService.Default implementation of
TokenResolver.OAuth 2.0.
OAuth 2.0 Error Response.
Configuration about where to redirect if forbidden.
Propagates a token based off of a header.
HTTP header token propagation configuration.
Http header token propagation configuration.
Reads a token from an HTTP request and removes prefix from HTTP Header Value.
Decorates a
InterceptUrlMapPattern.Encapsulates the configuration of
IntrospectionController.Given a
IntrospectionRequest generates a IntrospectionResponse.A parameter representing the token along with optional parameters representing
additional context that is known by the protected resource to aid the authorization server in its response.
A security rule implementation backed by the
SecurityConfigurationProperties.getIpPatterns() ()}.A single ASCII error code as described in Issuing an Access Token - Error Response section of OAuth 2.0 spec.
Generates the "jti" (Token ID) claim, which provides a unique identifier for the token.
Utility methods to avoid verbosity of logging statements.
Handles login requests.
Encapsulates the configuration of
LoginController.Event triggered when an unsuccessful login takes place.
Defines how to respond to a successful or failed login attempt.
Event triggered when a successful login takes place.
Encapsulates the configuration of
LogoutController.Implementation of
LogoutControllerConfiguration used to configure the LogoutController.Event triggered when the user logs out.
Responsible for logging the user out and returning
an appropriate response.
A controller that handles token refresh.
Encapsulates the configuration of
OauthController.Configures the provided
OauthController.An Runtime exception which implements
ErrorResponse.Returns an application/json response for a
OauthErrorResponseException with status 400.A single ASCII error code as described in Obtaining Authorization - Error Response seciton of OAuth 2.0 spec.
Responsible for binding a
Principal to a route argument.Keep track of state before login.
Utility class to get the name qualifier value.
ConfigurationProperties implementation of RedirectConfiguration.Forbidden redirect configuration.
Forbidden redirect configuration.
Unauthorized redirect configuration.
A marker contract to indicate the login handler
returns redirecting responses.
Get redirection URLs combining context path and redirect configuration.
Configuration about where to redirect after a successful refresh request.
Configuration for the refresh token cookie.
Triggered when a JWT refresh token is generated.
Responsible for generating refresh tokens.
Responsible for persisting refresh tokens and retrieving
user details by a refresh token.
Responsible for validating a refresh token
is in a valid format.
Retrieves roles from token claims.
Security rule implementation for the
Secured annotation.Context for supporting
Secured annotation expressions with object references.Defines security configuration properties.
Stores configuration for JWT.
Security Filter.
Configuration for
SecurityFilter.ConfigurationProperties implementation of SecurityFilterConfiguration.Informs the
SecurityFilter filter what to do with the given request.The result of a security rule check.
Provides a set of convenient methods related to authentication and authorization.
Finds any sensitive endpoints and processes requests that match their
id.
An implementation of the
Authentication interfaced intended to
be used on the server side to create authentication objects from
user data found through any means.Utility methods to prepend a URL with the context path provided via
ServerContextPathProvider.Creates an
Authentication object from a token.Attempts to retrieve a token form the
HttpRequest and if existing validated.Defines Security Token Configuration.
Defines Security Token Configuration.
Clears the cookie configured via
CookieLoginHandler.Represents configuration for a cookie that will store a token.
Reads the token from the configured io.micronaut.security.token.jwt.cookie.
Responsible for generating token strings.
Token propagation Configuration.
Token Propagation Configuration Properties.
HttpClientFilter to enable Token propagation.Responsible for retrieving and writing tokens for the purpose
of propagation between services.
Responsible for reading the token data from a request.
Encapsulate the request to get a new access token.
Responsible for converting token information to an
AccessRefreshToken.Returns the token from the provided request.
Triggered when a token is validated.
Responsible for token validation and claims retrieval.
Configuration about where to redirect if unauthorized.
An Authentication derived from an X509Certificate.
Binds the authentication if it's an
X509Authentication to a route argument.Creates an Authentication if an X.509 client certificate is present and a
name (CN) can be extracted.
X.509 authentication configuration.
Configuration for X.509 authentication.