Class OAuth2ResourceServerConfigurer.DPoPConfigurer

java.lang.Object
org.springframework.security.config.annotation.web.configurers.oauth2.server.resource.OAuth2ResourceServerConfigurer.DPoPConfigurer
Enclosing class:
OAuth2ResourceServerConfigurer<H extends HttpSecurityBuilder<H>>
public final class OAuth2ResourceServerConfigurer.DPoPConfigurer extends Object
A configurer for OAuth 2.0 Demonstrating Proof of Possession (DPoP) support.
Since:
7.1
See Also:

  • Constructor Details

    • DPoPConfigurer

      public DPoPConfigurer()

  • Method Details

    • requestMatcher

      public OAuth2ResourceServerConfigurer<H>.DPoPConfigurer requestMatcher(org.springframework.security.web.util.matcher.RequestMatcher requestMatcher)
      Sets the RequestMatcher used when matching the HttpServletRequest to a DPoP-protected resource request.
      Parameters:
      requestMatcher - the RequestMatcher used when matching the HttpServletRequest to a DPoP-protected resource request
      Returns:
      the OAuth2ResourceServerConfigurer<H extends HttpSecurityBuilder<H>>.DPoPConfigurer for further configuration

    • authenticationConverter

      public OAuth2ResourceServerConfigurer<H>.DPoPConfigurer authenticationConverter(org.springframework.security.web.authentication.AuthenticationConverter authenticationConverter)
      Sets the AuthenticationConverter used when attempting to extract a DPoP-bound access token from HttpServletRequest to an instance of DPoPAuthenticationToken used for authenticating the DPoP-protected resource request. The default is DPoPAuthenticationConverter.
      Parameters:
      authenticationConverter - the AuthenticationConverter used when attempting to extract a DPoP-bound access token from HttpServletRequest
      Returns:
      the OAuth2ResourceServerConfigurer<H extends HttpSecurityBuilder<H>>.DPoPConfigurer for further configuration

    • authenticationSuccessHandler

      public OAuth2ResourceServerConfigurer<H>.DPoPConfigurer authenticationSuccessHandler(org.springframework.security.web.authentication.AuthenticationSuccessHandler authenticationSuccessHandler)
      Sets the AuthenticationSuccessHandler used for handling an authenticated DPoP-protected resource request.
      Parameters:
      authenticationSuccessHandler - the AuthenticationSuccessHandler used for handling an authenticated DPoP-protected resource request
      Returns:
      the OAuth2ResourceServerConfigurer<H extends HttpSecurityBuilder<H>>.DPoPConfigurer for further configuration

    • authenticationFailureHandler

      public OAuth2ResourceServerConfigurer<H>.DPoPConfigurer authenticationFailureHandler(org.springframework.security.web.authentication.AuthenticationFailureHandler authenticationFailureHandler)
      Sets the AuthenticationFailureHandler used for handling a failed DPoP-protected resource request. The default is AuthenticationEntryPointFailureHandler with DPoPAuthenticationEntryPoint.
      Parameters:
      authenticationFailureHandler - the AuthenticationFailureHandler used for handling a failed DPoP-protected resource request
      Returns:
      the OAuth2ResourceServerConfigurer<H extends HttpSecurityBuilder<H>>.DPoPConfigurer for further configuration