Package org.springframework.security.oauth2.server.authorization.web.authentication

@NullMarked package org.springframework.security.oauth2.server.authorization.web.authentication

AuthenticationConverter implementations for OAuth2 Authorization Server endpoints.

Related Packages

Package	Description
org.springframework.security.oauth2.server.authorization.web	Servlet filters and web support for OAuth2 Authorization Server endpoints.

Classes

Class	Description
ClientSecretBasicAuthenticationConverter	Attempts to extract HTTP Basic credentials from HttpServletRequest and then converts to an OAuth2ClientAuthenticationToken used for authenticating the client.
ClientSecretPostAuthenticationConverter	Attempts to extract client credentials from POST parameters of HttpServletRequest and then converts to an OAuth2ClientAuthenticationToken used for authenticating the client.
JwtClientAssertionAuthenticationConverter	Attempts to extract a JWT client assertion credential from HttpServletRequest and then converts to an OAuth2ClientAuthenticationToken used for authenticating the client.
OAuth2AccessTokenResponseAuthenticationSuccessHandler	An implementation of an AuthenticationSuccessHandler used for handling an OAuth2AccessTokenAuthenticationToken and returning the Access Token Response.
OAuth2AuthorizationCodeAuthenticationConverter	Attempts to extract an Access Token Request from HttpServletRequest for the OAuth 2.0 Authorization Code Grant and then converts it to an OAuth2AuthorizationCodeAuthenticationToken used for authenticating the authorization grant.
OAuth2AuthorizationCodeRequestAuthenticationConverter	Attempts to extract an Authorization Request from HttpServletRequest for the OAuth 2.0 Authorization Code Grant and then converts it to an OAuth2AuthorizationCodeRequestAuthenticationToken OR OAuth2PushedAuthorizationRequestAuthenticationToken used for authenticating the request.
OAuth2AuthorizationConsentAuthenticationConverter	Attempts to extract an Authorization Consent from HttpServletRequest for the OAuth 2.0 Authorization Code Grant and then converts it to an OAuth2AuthorizationConsentAuthenticationToken used for authenticating the request.
OAuth2ClientCredentialsAuthenticationConverter	Attempts to extract an Access Token Request from HttpServletRequest for the OAuth 2.0 Client Credentials Grant and then converts it to an OAuth2ClientCredentialsAuthenticationToken used for authenticating the authorization grant.
OAuth2ClientRegistrationAuthenticationConverter	Attempts to extract an OAuth 2.0 Dynamic Client Registration Request from HttpServletRequest and then converts to an OAuth2ClientRegistrationAuthenticationToken used for authenticating the request.
OAuth2DeviceAuthorizationConsentAuthenticationConverter	Attempts to extract a Device Authorization Consent from HttpServletRequest for the OAuth 2.0 Device Authorization Grant and then converts it to an OAuth2DeviceAuthorizationConsentAuthenticationToken used for authenticating the request.
OAuth2DeviceAuthorizationRequestAuthenticationConverter	Attempts to extract a Device Authorization Request from HttpServletRequest for the OAuth 2.0 Device Authorization Grant and then converts it to an OAuth2DeviceAuthorizationRequestAuthenticationToken used for authenticating the request.
OAuth2DeviceCodeAuthenticationConverter	Attempts to extract a Device Access Token Request from HttpServletRequest for the OAuth 2.0 Device Authorization Grant and then converts it to an OAuth2DeviceCodeAuthenticationToken used for authenticating the authorization grant.
OAuth2DeviceVerificationAuthenticationConverter	Attempts to extract a user code from HttpServletRequest for the OAuth 2.0 Device Authorization Grant and then converts it to an OAuth2DeviceVerificationAuthenticationToken used for authenticating the request.
OAuth2ErrorAuthenticationFailureHandler	An implementation of an AuthenticationFailureHandler used for handling an OAuth2AuthenticationException and returning the OAuth 2.0 Error Response.
OAuth2RefreshTokenAuthenticationConverter	Attempts to extract an Access Token Request from HttpServletRequest for the OAuth 2.0 Refresh Token Grant and then converts it to an OAuth2RefreshTokenAuthenticationToken used for authenticating the authorization grant.
OAuth2TokenExchangeAuthenticationConverter	Attempts to extract an Access Token Request from HttpServletRequest for the OAuth 2.0 Token Exchange Grant and then converts it to an OAuth2TokenExchangeAuthenticationToken used for authenticating the authorization grant.
OAuth2TokenIntrospectionAuthenticationConverter	Attempts to extract an Introspection Request from HttpServletRequest and then converts it to an OAuth2TokenIntrospectionAuthenticationToken used for authenticating the request.
OAuth2TokenRevocationAuthenticationConverter	Attempts to extract a Revoke Token Request from HttpServletRequest and then converts it to an OAuth2TokenRevocationAuthenticationToken used for authenticating the request.
PublicClientAuthenticationConverter	Attempts to extract the parameters from HttpServletRequest used for authenticating public clients using Proof Key for Code Exchange (PKCE).
X509ClientCertificateAuthenticationConverter	Attempts to extract a client X509Certificate chain from HttpServletRequest and then converts to an OAuth2ClientAuthenticationToken used for authenticating the client using the tls_client_auth or self_signed_tls_client_auth method.