All Classes and Interfaces
Class
Description
Base class for filters that redirect to the OpenID Provider when the user is not authorized.
Responsible for redirecting to the OpenID Provider.
Implements the OpenID Connect Back-Channel Logout URI.
Removes the OpenID Connect
sid from the LoggedOutSessionStore whenever a session
is destroyed.Implements the OpenID Connect Redirect URI for the authorization code
flow.
Contains the OpenID Connect-related configuration.
Ensures the user has a given role.
An implementation of
LoggedOutSessionStore that stores session IDs in memory.Ensures the user is authenticated.
A
UserPrincipal that extracts Keycloak realm roles from the user information.Tracks
SessionID values of sessions logged out with the OpenID Connect Back-Channel
Logout protocol through the BackchannelLogoutServlet.This servlet starts the authentication workflow and redirects back to a given URL afterward.
Implements a post-logout redirect URI for use with OpenID Connect RP-Initiated
Logout
This servlet starts the logout workflow and possibly redirects back to a given URL afterward.
A simple
UserPrincipal implementation with no role at all.Checks whether the user is authenticated.
An authenticated user.
Creates instances of
UserPrincipal to be exposed as requests' principal.