All Classes and Interfaces
Class
Description
Construct an immutable configuration object.
Constraint restricts signature verification to a specific set of SignatureAlgorithms.Configures a
Authenticator instance.Validates user-provided credentials and returns a
Principal.This class implements the CEL filter for the cert identity pool.
Utility class for generating certificate metadata.
Enum for Certificate Metadata Identifiers, defined in spec
Client id/secret pair used for client credentials grants
ClientCredentialsGrantRepresents a client's request for authentication via client credentials
https://openid.net/specs/openid-connect-core-1_0.html#ClientAuthentication
Extends
JwtPrincipal with custom Confluent Cloud claimsRaised when a problem arises processing a configuration object.
Versioned Confluent Policy definition.
Extends
VerificationKeyResolver with ability to add custom Constraints.An interface for adding custom constraints to the token verification process.
A configuration value representing some duration.
Base class representing a client's OpenId authentication request.
HttpAuthenticator which decodes and validates JsonWebSignatures.HTTP Basic Authentication credentials.
HTTP Bearer Authentication credentials.
Generic container for HTTP Client credentials.
Supported HTTP Authentication Schemes.
Given
HttpAuthenticator authenticator, authenticate incoming request and set SecurityContext.Decode JWT to extract issuer field in the JWT claims.
Supported
ObjectMapper data formats.Configure
JwtAuthenticator instance.Authenticator which decodes and validates JsonWebSignatures.Constructs a new
JwtConsumer instance for JsonWebSignature decoding and validation.Fetches Signature Verification key information at the
URL found
in the tokens jku claim.JwtIssuer which fetches JsonWebKeySet from a trusted HTTPS endpoint.Constructs a new
JwtIssuer instance with a HttpsJwksVerificationKeyResolver.JwtIssuer which fetches trust bundle JwtBundle from SPIRE workload API.Constructs a new
JwtIssuerSpire instance.Interface with method that can be used to configure the SPIRE agent endpoint
for fetching trust bundle
JwtBundle.JwtIssuer with a static JsonWebKeySet.A
Principal implementation that wraps a JSON Web Token (JWT).Exception raised when a
Constraint can't be satisfied.Metadata returned by the IdP containing info useful for OpenId operations, such as token exchange endpoints
https://openid.net/specs/openid-connect-discovery-1_0.html#ProviderMetadata
Mock
JwtSource class
Visible for testing SPIFFE JWT-SVID changesOpenIdHttpClient processes authentication requests based on the OpenId spec
https://openid.net/specs/openid-connect-core-1_0.html
Evaluates a
ConfluentPolicy against a collection of verified claims.Any exception raised during policy rule compilation or evaluation.
Constructs a new object based on the contents read from some URL.
Supported
JsonWebSignature algorithms.Fetch JWKS data from SPIRE Trust Bundle.
A TrustPolicy describes who may assume some role.
This class implements a library similar to the
cel standard library,
but with only the subset of compile and program options that we want to support.Shared collection of configuration parameter input validations.
ResourceLoader for reading YAML encoded configurations.