Package net.ltgt.oidc.servlet
@CheckReturnValue
@NullMarked
package net.ltgt.oidc.servlet
-
ClassDescriptionBase class for filters that redirect to the OpenID Provider when the user is not authorized.Responsible for redirecting to the OpenID Provider.Implements the OpenID Connect Back-Channel Logout URI.Removes the OpenID Connect
sidfrom theLoggedOutSessionStorewhenever a session is destroyed.Implements the OpenID Connect Redirect URI for the authorization code flow.Contains the OpenID Connect-related configuration.Ensures the user has a given role.An implementation ofLoggedOutSessionStorethat stores session IDs in memory.Ensures the user is authenticated.AUserPrincipalthat extracts Keycloak realm roles from the user information.TracksSessionIDvalues of sessions logged out with the OpenID Connect Back-Channel Logout protocol through theBackchannelLogoutServlet.This servlet starts the authentication workflow and redirects back to a given URL afterward.Implements a post-logout redirect URI for use with OpenID Connect RP-Initiated LogoutThis servlet starts the logout workflow and possibly redirects back to a given URL afterward.Handles OAuth tokens acquired at authentication time (by theCallbackServlet) once they're no longer needed.AnOAuthTokensHandlerthat immediately (though asynchronously) revokes the access token.A simpleUserPrincipalimplementation with no role at all.Checks whether the user is authenticated.An authenticated user.Creates instances ofUserPrincipalto be exposed as requests' principal.