Package org.springframework.security.oauth2.server.authorization.authentication

@NullMarked package org.springframework.security.oauth2.server.authorization.authentication

AuthenticationProvider implementations and related types for OAuth2 and OpenID Connect 1.0 flows handled by the authorization server.

Related Packages

Package	Description
org.springframework.security.oauth2.server.authorization	Support for an OAuth2 Authorization Server, including authorization persistence, consent, token services, and protocol endpoints.

Class	Description
ClientSecretAuthenticationProvider	An AuthenticationProvider implementation used for OAuth 2.0 Client Authentication, which authenticates the client_secret parameter.
JwtClientAssertionAuthenticationProvider	An AuthenticationProvider implementation used for OAuth 2.0 Client Authentication, which authenticates the Jwt client_assertion parameter.
JwtClientAssertionDecoderFactory	A factory that provides a JwtDecoder for the specified RegisteredClient and is used for authenticating a Jwt Bearer Token during OAuth 2.0 Client Authentication.
OAuth2AccessTokenAuthenticationContext	An OAuth2AuthenticationContext that holds an OAuth2AccessTokenAuthenticationToken and additional information and is used when customizing the OAuth2AccessTokenResponse.
OAuth2AccessTokenAuthenticationContext.Builder	A builder for OAuth2AccessTokenAuthenticationContext.
OAuth2AccessTokenAuthenticationToken	An Authentication implementation used when issuing an OAuth 2.0 Access Token and (optional) Refresh Token.
OAuth2AuthenticationContext	A context that holds an Authentication and (optionally) additional information and is used in an AuthenticationProvider.
OAuth2AuthenticationContext.AbstractBuilder<T extends OAuth2AuthenticationContext, B extends OAuth2AuthenticationContext.AbstractBuilder<T,B>>	A builder for subclasses of OAuth2AuthenticationContext.
OAuth2AuthorizationCodeAuthenticationProvider	An AuthenticationProvider implementation for the OAuth 2.0 Authorization Code Grant.
OAuth2AuthorizationCodeAuthenticationToken	An Authentication implementation used for the OAuth 2.0 Authorization Code Grant.
OAuth2AuthorizationCodeRequestAuthenticationContext	An OAuth2AuthenticationContext that holds an OAuth2AuthorizationCodeRequestAuthenticationToken and additional information and is used when validating the OAuth 2.0 Authorization Request parameters, as well as, determining if authorization consent is required.
OAuth2AuthorizationCodeRequestAuthenticationContext.Builder	A builder for OAuth2AuthorizationCodeRequestAuthenticationContext.
OAuth2AuthorizationCodeRequestAuthenticationException	This exception is thrown by OAuth2AuthorizationCodeRequestAuthenticationProvider when an attempt to authenticate the OAuth 2.0 Authorization Request (or Consent) fails.
OAuth2AuthorizationCodeRequestAuthenticationProvider	An AuthenticationProvider implementation for the OAuth 2.0 Authorization Request used in the Authorization Code Grant.
OAuth2AuthorizationCodeRequestAuthenticationToken	An Authentication implementation for the OAuth 2.0 Authorization Request used in the Authorization Code Grant.
OAuth2AuthorizationCodeRequestAuthenticationValidator	A Consumer providing access to the OAuth2AuthorizationCodeRequestAuthenticationContext containing an OAuth2AuthorizationCodeRequestAuthenticationToken and is the default authentication validator used for validating specific OAuth 2.0 Authorization Request parameters used in the Authorization Code Grant.
OAuth2AuthorizationConsentAuthenticationContext	An OAuth2AuthenticationContext that holds an OAuth2AuthorizationConsent.Builder and additional information and is used when customizing the building of the OAuth2AuthorizationConsent.
OAuth2AuthorizationConsentAuthenticationContext.Builder	A builder for OAuth2AuthorizationConsentAuthenticationContext.
OAuth2AuthorizationConsentAuthenticationProvider	An AuthenticationProvider implementation for the OAuth 2.0 Authorization Consent used in the Authorization Code Grant.
OAuth2AuthorizationConsentAuthenticationToken	An Authentication implementation for the OAuth 2.0 Authorization Consent used in the Authorization Code Grant.
OAuth2AuthorizationGrantAuthenticationToken	Base implementation of an Authentication representing an OAuth 2.0 Authorization Grant.
OAuth2ClientAuthenticationContext	An OAuth2AuthenticationContext that holds an OAuth2ClientAuthenticationToken and additional information and is used when validating an OAuth 2.0 Client Authentication.
OAuth2ClientAuthenticationContext.Builder	A builder for OAuth2ClientAuthenticationContext.
OAuth2ClientAuthenticationToken	An Authentication implementation used for OAuth 2.0 Client Authentication.
OAuth2ClientCredentialsAuthenticationContext	An OAuth2AuthenticationContext that holds an OAuth2ClientCredentialsAuthenticationToken and additional information and is used when validating the OAuth 2.0 Client Credentials Grant Request.
OAuth2ClientCredentialsAuthenticationContext.Builder	A builder for OAuth2ClientCredentialsAuthenticationContext.
OAuth2ClientCredentialsAuthenticationProvider	An AuthenticationProvider implementation for the OAuth 2.0 Client Credentials Grant.
OAuth2ClientCredentialsAuthenticationToken	An Authentication implementation used for the OAuth 2.0 Client Credentials Grant.
OAuth2ClientCredentialsAuthenticationValidator	A Consumer providing access to the OAuth2ClientCredentialsAuthenticationContext containing an OAuth2ClientCredentialsAuthenticationToken and is the default authentication validator used for validating specific OAuth 2.0 Client Credentials Grant Request parameters.
OAuth2ClientRegistrationAuthenticationContext	An OAuth2AuthenticationContext that holds an OAuth2ClientRegistrationAuthenticationToken and additional information and is used when validating the OAuth 2.0 Client Registration Request parameters.
OAuth2ClientRegistrationAuthenticationContext.Builder	A builder for OAuth2ClientRegistrationAuthenticationContext.
OAuth2ClientRegistrationAuthenticationProvider	An AuthenticationProvider implementation for the OAuth 2.0 Dynamic Client Registration Endpoint.
OAuth2ClientRegistrationAuthenticationToken	An Authentication implementation used for the OAuth 2.0 Dynamic Client Registration Endpoint.
OAuth2ClientRegistrationAuthenticationValidator	A Consumer providing access to the OAuth2ClientRegistrationAuthenticationContext containing an OAuth2ClientRegistrationAuthenticationToken and is the default authentication validator used for validating specific OAuth 2.0 Dynamic Client Registration Request parameters (RFC 7591).
OAuth2DeviceAuthorizationConsentAuthenticationProvider	An AuthenticationProvider implementation for the Device Authorization Consent used in the OAuth 2.0 Device Authorization Grant.
OAuth2DeviceAuthorizationConsentAuthenticationToken	An Authentication implementation for the Device Authorization Consent used in the OAuth 2.0 Device Authorization Grant.
OAuth2DeviceAuthorizationRequestAuthenticationProvider	An AuthenticationProvider implementation for the Device Authorization Request used in the OAuth 2.0 Device Authorization Grant.
OAuth2DeviceAuthorizationRequestAuthenticationToken	An Authentication implementation for the Device Authorization Request used in the OAuth 2.0 Device Authorization Grant.
OAuth2DeviceCodeAuthenticationProvider	An AuthenticationProvider implementation for the Device Access Token Request used in the OAuth 2.0 Device Authorization Grant.
OAuth2DeviceCodeAuthenticationToken	An Authentication implementation for the Device Access Token Request used in the OAuth 2.0 Device Authorization Grant.
OAuth2DeviceVerificationAuthenticationContext	An OAuth2AuthenticationContext that holds an OAuth2DeviceVerificationAuthenticationToken and additional information and is used when determining if authorization consent is required.
OAuth2DeviceVerificationAuthenticationContext.Builder	A builder for OAuth2DeviceVerificationAuthenticationContext.
OAuth2DeviceVerificationAuthenticationProvider	An AuthenticationProvider implementation for the Device Verification Request (submission of the user code) used in the OAuth 2.0 Device Authorization Grant.
OAuth2DeviceVerificationAuthenticationToken	An Authentication implementation for the Device Verification Request (submission of the user code) used in the OAuth 2.0 Device Authorization Grant.
OAuth2PushedAuthorizationRequestAuthenticationProvider	An AuthenticationProvider implementation for the OAuth 2.0 Pushed Authorization Request used in the Authorization Code Grant.
OAuth2PushedAuthorizationRequestAuthenticationToken	An Authentication implementation for the OAuth 2.0 Pushed Authorization Request used in the Authorization Code Grant.
OAuth2RefreshTokenAuthenticationProvider	An AuthenticationProvider implementation for the OAuth 2.0 Refresh Token Grant.
OAuth2RefreshTokenAuthenticationToken	An Authentication implementation used for the OAuth 2.0 Refresh Token Grant.
OAuth2TokenExchangeActor	A ClaimAccessor used for the OAuth 2.0 Token Exchange Grant to represent an actor in a OAuth2TokenExchangeCompositeAuthenticationToken (e.g.
OAuth2TokenExchangeAuthenticationProvider	An AuthenticationProvider implementation for the OAuth 2.0 Token Exchange Grant.
OAuth2TokenExchangeAuthenticationToken	An Authentication implementation used for the OAuth 2.0 Token Exchange Grant.
OAuth2TokenExchangeCompositeAuthenticationToken	An Authentication implementation used for the OAuth 2.0 Token Exchange Grant to represent the principal in a composite token (e.g.
OAuth2TokenIntrospectionAuthenticationProvider	An AuthenticationProvider implementation for OAuth 2.0 Token Introspection.
OAuth2TokenIntrospectionAuthenticationToken	An Authentication implementation used for OAuth 2.0 Token Introspection.
OAuth2TokenRevocationAuthenticationProvider	An AuthenticationProvider implementation for OAuth 2.0 Token Revocation.
OAuth2TokenRevocationAuthenticationToken	An Authentication implementation used for OAuth 2.0 Token Revocation.
PublicClientAuthenticationProvider	An AuthenticationProvider implementation used for OAuth 2.0 Public Client Authentication, which authenticates the code_verifier parameter.
X509ClientCertificateAuthenticationProvider	An AuthenticationProvider implementation used for OAuth 2.0 Client Authentication, which authenticates the client X509Certificate received when the tls_client_auth or self_signed_tls_client_auth authentication method is used.