Interface OAuth2AuthorizationServerMetadataClaimAccessor
- All Superinterfaces:
ClaimAccessor
- All Known Subinterfaces:
OidcProviderMetadataClaimAccessor
- All Known Implementing Classes:
AbstractOAuth2AuthorizationServerMetadata,OAuth2AuthorizationServerMetadata,OidcProviderConfiguration
A
ClaimAccessor for the "claims" an Authorization Server describes about its
configuration, used in OAuth 2.0 Authorization Server Metadata and OpenID Connect
Discovery 1.0.- Since:
- 7.0
- See Also:
-
ClaimAccessorOAuth2AuthorizationServerMetadataClaimNames- 2. Authorization Server Metadata
- 3. OpenID Provider Metadata
- 4. Device Authorization Grant Metadata
- 3.3 Mutual-TLS Client Certificate-Bound Access Tokens Metadata
- 5.1 OAuth 2.0 Demonstrating Proof of Possession (DPoP) Metadata
- 5. OAuth 2.0 Pushed Authorization Requests Metadata
-
Method Summary
Modifier and TypeMethodDescriptiondefault URLReturns theURLof the OAuth 2.0 Authorization Endpoint(authorization_endpoint).default URLReturns theURLof the OAuth 2.0 Dynamic Client Registration Endpoint(registration_endpoint).Returns the Proof Key for Code Exchange (PKCE)code_challenge_methodvalues supported(code_challenge_methods_supported).default URLReturns theURLof the OAuth 2.0 Device Authorization Endpoint(device_authorization_endpoint).Returns theJSON Web Signature (JWS) algorithmssupported for DPoP Proof JWTs(dpop_signing_alg_values_supported).Returns the OAuth 2.0grant_typevalues supported(grant_types_supported).default URLReturns theURLthe Authorization Server asserts as its Issuer Identifier(issuer).default URLReturns theURLof the JSON Web Key Set(jwks_uri).default URLReturns theURLof the OAuth 2.0 Pushed Authorization Request Endpoint(pushed_authorization_request_endpoint).Returns the OAuth 2.0response_typevalues supported(response_types_supported).Returns the OAuth 2.0scopevalues supported(scopes_supported).default URLReturns theURLof the OAuth 2.0 Token Endpoint(token_endpoint).Returns the client authentication methods supported by the OAuth 2.0 Token Endpoint(token_endpoint_auth_methods_supported).default URLReturns theURLof the OAuth 2.0 Token Introspection Endpoint(introspection_endpoint).Returns the client authentication methods supported by the OAuth 2.0 Token Introspection Endpoint(introspection_endpoint_auth_methods_supported).default URLReturns theURLof the OAuth 2.0 Token Revocation Endpoint(revocation_endpoint).Returns the client authentication methods supported by the OAuth 2.0 Token Revocation Endpoint(revocation_endpoint_auth_methods_supported).default booleanReturnstrueto indicate support for mutual-TLS client certificate-bound access tokens(tls_client_certificate_bound_access_tokens).Methods inherited from interface org.springframework.security.oauth2.core.ClaimAccessor
getClaim, getClaimAsBoolean, getClaimAsInstant, getClaimAsMap, getClaimAsString, getClaimAsStringList, getClaimAsURL, getClaims, hasClaim
-
Method Details
-
getIssuer
Returns theURLthe Authorization Server asserts as its Issuer Identifier(issuer).- Returns:
- the
URLthe Authorization Server asserts as its Issuer Identifier
-
getAuthorizationEndpoint
Returns theURLof the OAuth 2.0 Authorization Endpoint(authorization_endpoint).- Returns:
- the
URLof the OAuth 2.0 Authorization Endpoint
-
getPushedAuthorizationRequestEndpoint
Returns theURLof the OAuth 2.0 Pushed Authorization Request Endpoint(pushed_authorization_request_endpoint).- Returns:
- the
URLof the OAuth 2.0 Pushed Authorization Request Endpoint
-
getDeviceAuthorizationEndpoint
Returns theURLof the OAuth 2.0 Device Authorization Endpoint(device_authorization_endpoint).- Returns:
- the
URLof the OAuth 2.0 Device Authorization Endpoint
-
getTokenEndpoint
Returns theURLof the OAuth 2.0 Token Endpoint(token_endpoint).- Returns:
- the
URLof the OAuth 2.0 Token Endpoint
-
getTokenEndpointAuthenticationMethods
Returns the client authentication methods supported by the OAuth 2.0 Token Endpoint(token_endpoint_auth_methods_supported).- Returns:
- the client authentication methods supported by the OAuth 2.0 Token Endpoint
-
getJwkSetUrl
Returns theURLof the JSON Web Key Set(jwks_uri).- Returns:
- the
URLof the JSON Web Key Set
-
getScopes
Returns the OAuth 2.0scopevalues supported(scopes_supported).- Returns:
- the OAuth 2.0
scopevalues supported
-
getResponseTypes
Returns the OAuth 2.0response_typevalues supported(response_types_supported).- Returns:
- the OAuth 2.0
response_typevalues supported
-
getGrantTypes
Returns the OAuth 2.0grant_typevalues supported(grant_types_supported).- Returns:
- the OAuth 2.0
grant_typevalues supported
-
getTokenRevocationEndpoint
Returns theURLof the OAuth 2.0 Token Revocation Endpoint(revocation_endpoint).- Returns:
- the
URLof the OAuth 2.0 Token Revocation Endpoint
-
getTokenRevocationEndpointAuthenticationMethods
Returns the client authentication methods supported by the OAuth 2.0 Token Revocation Endpoint(revocation_endpoint_auth_methods_supported).- Returns:
- the client authentication methods supported by the OAuth 2.0 Token Revocation Endpoint
-
getTokenIntrospectionEndpoint
Returns theURLof the OAuth 2.0 Token Introspection Endpoint(introspection_endpoint).- Returns:
- the
URLof the OAuth 2.0 Token Introspection Endpoint
-
getTokenIntrospectionEndpointAuthenticationMethods
Returns the client authentication methods supported by the OAuth 2.0 Token Introspection Endpoint(introspection_endpoint_auth_methods_supported).- Returns:
- the client authentication methods supported by the OAuth 2.0 Token Introspection Endpoint
-
getClientRegistrationEndpoint
Returns theURLof the OAuth 2.0 Dynamic Client Registration Endpoint(registration_endpoint).- Returns:
- the
URLof the OAuth 2.0 Dynamic Client Registration Endpoint
-
getCodeChallengeMethods
Returns the Proof Key for Code Exchange (PKCE)code_challenge_methodvalues supported(code_challenge_methods_supported).- Returns:
- the
code_challenge_methodvalues supported
-
isTlsClientCertificateBoundAccessTokens
default boolean isTlsClientCertificateBoundAccessTokens()Returnstrueto indicate support for mutual-TLS client certificate-bound access tokens(tls_client_certificate_bound_access_tokens).- Returns:
trueto indicate support for mutual-TLS client certificate-bound access tokens,falseotherwise
-
getDPoPSigningAlgorithms
Returns theJSON Web Signature (JWS) algorithmssupported for DPoP Proof JWTs(dpop_signing_alg_values_supported).- Returns:
- the
JSON Web Signature (JWS) algorithmssupported for DPoP Proof JWTs
-