Index (Broadleaf Security Resource OAuth2 Common 2.0.5-GA API)

A C D E G H I J K L M O P R S T U V
All Classes and Interfaces|All Packages|Constant Field Values

A

a - Variable in class com.broadleafcommerce.oauth2.resource.security.token.converter.RestrictedAuthorityCompression.CompressedAuthorities: The dictionary of action names (e.g., "READ", "UPDATE").
accessDeniedExceptionAdvisor() - Method in class com.broadleafcommerce.oauth2.resource.security.autoconfiguration.OAuth2ResourceWebSecurityConfiguration.EnableGlobalMethodSecurityConfiguration
AccessDeniedExceptionAdvisor - Class in com.broadleafcommerce.oauth2.resource.security.exception: There is an open issue in Spring where methods annotated with @PreAuthorize correctly throw an AccessDeniedException, but it is not passed through ExceptionTranslationFilter and thus results in a 500 response rather than a 403.
AccessDeniedExceptionAdvisor() - Constructor for class com.broadleafcommerce.oauth2.resource.security.exception.AccessDeniedExceptionAdvisor
asRequestMatchers(String...) - Method in class com.broadleafcommerce.oauth2.resource.security.autoconfiguration.OAuth2ResourceWebSecurityConfiguration: By default, this forces interpretation of the given string patterns as ant patterns, matching via AntPathRequestMatcher semantics rather than the default MvcRequestMatcher.
authenticationAttributesConverter() - Method in class com.broadleafcommerce.oauth2.resource.security.autoconfiguration.OAuth2ResourceSecurityConfiguration
AUTHORITIES_CLAIM - Static variable in class com.broadleafcommerce.oauth2.resource.security.token.converter.DefaultJwtBearerTokenAuthenticationConverter

C

canEqual(Object) - Method in class com.broadleafcommerce.oauth2.resource.security.environment.OAuth2ResourceSecurityProperties
canEqual(Object) - Method in class com.broadleafcommerce.oauth2.resource.security.selectors.MultiKeyJWSKeySelector
canEqual(Object) - Method in class com.broadleafcommerce.oauth2.resource.security.token.converter.TokenCompressionProperties
com.broadleafcommerce.oauth2.resource.security.autoconfiguration - package com.broadleafcommerce.oauth2.resource.security.autoconfiguration
com.broadleafcommerce.oauth2.resource.security.configurers - package com.broadleafcommerce.oauth2.resource.security.configurers
com.broadleafcommerce.oauth2.resource.security.environment - package com.broadleafcommerce.oauth2.resource.security.environment
com.broadleafcommerce.oauth2.resource.security.exception - package com.broadleafcommerce.oauth2.resource.security.exception
com.broadleafcommerce.oauth2.resource.security.selectors - package com.broadleafcommerce.oauth2.resource.security.selectors
com.broadleafcommerce.oauth2.resource.security.token.converter - package com.broadleafcommerce.oauth2.resource.security.token.converter
com.broadleafcommerce.oauth2.resource.security.token.validator - package com.broadleafcommerce.oauth2.resource.security.token.validator
com.broadleafcommerce.oauth2.resource.security.util - package com.broadleafcommerce.oauth2.resource.security.util
compress(Map<String, Map<String, Set<String>>>) - Static method in class com.broadleafcommerce.oauth2.resource.security.token.converter.RestrictedAuthorityCompression: Compresses a standard, verbose authority map into a compact, indexed structure.
CompressedAuthorities() - Constructor for class com.broadleafcommerce.oauth2.resource.security.token.converter.RestrictedAuthorityCompression.CompressedAuthorities
configureDispatcherTypeAuthorization(HttpSecurity) - Method in class com.broadleafcommerce.oauth2.resource.security.autoconfiguration.OAuth2ResourceWebSecurityConfiguration
convert(Authentication) - Method in class com.broadleafcommerce.oauth2.resource.security.token.converter.DefaultAuthenticationAttributesConverter
convert(Jwt) - Method in class com.broadleafcommerce.oauth2.resource.security.token.converter.DefaultJwtBearerTokenAuthenticationConverter

D

decompress(Object) - Static method in class com.broadleafcommerce.oauth2.resource.security.token.converter.RestrictedAuthorityCompression: Decompresses an indexed structure back into the original, verbose authority map.
DefaultAuthenticationAttributesConverter - Class in com.broadleafcommerce.oauth2.resource.security.token.converter: Default implementation of Converter that is used for extracting the a map of attributes from an Authentication.
DefaultAuthenticationAttributesConverter() - Constructor for class com.broadleafcommerce.oauth2.resource.security.token.converter.DefaultAuthenticationAttributesConverter
DefaultJwtBearerTokenAuthenticationConverter - Class in com.broadleafcommerce.oauth2.resource.security.token.converter: A Converter that takes a Jwt and converts it into a BearerTokenAuthentication.
DefaultJwtBearerTokenAuthenticationConverter() - Constructor for class com.broadleafcommerce.oauth2.resource.security.token.converter.DefaultJwtBearerTokenAuthenticationConverter
DefaultJwtClaimsValidator - Class in com.broadleafcommerce.oauth2.resource.security.token.validator: A OAuth2TokenValidator implementation that validates the JWT access token includes a valid issuer, audiences, and timestamp.
DefaultJwtClaimsValidator(OAuth2ResourceSecurityProperties) - Constructor for class com.broadleafcommerce.oauth2.resource.security.token.validator.DefaultJwtClaimsValidator

E

EnableGlobalMethodSecurityConfiguration() - Constructor for class com.broadleafcommerce.oauth2.resource.security.autoconfiguration.OAuth2ResourceWebSecurityConfiguration.EnableGlobalMethodSecurityConfiguration
equals(Object) - Method in class com.broadleafcommerce.oauth2.resource.security.environment.OAuth2ResourceSecurityProperties
equals(Object) - Method in class com.broadleafcommerce.oauth2.resource.security.selectors.MultiKeyJWSKeySelector
equals(Object) - Method in class com.broadleafcommerce.oauth2.resource.security.token.converter.RestrictedAuthorityCompression.CompressedAuthorities
equals(Object) - Method in class com.broadleafcommerce.oauth2.resource.security.token.converter.TokenCompressionProperties
extractAuthorities(Jwt) - Method in class com.broadleafcommerce.oauth2.resource.security.token.converter.DefaultJwtBearerTokenAuthenticationConverter
extractName(Jwt) - Method in class com.broadleafcommerce.oauth2.resource.security.token.converter.DefaultJwtBearerTokenAuthenticationConverter: Extracts the principal name from the JWT.

G

getA() - Method in class com.broadleafcommerce.oauth2.resource.security.token.converter.RestrictedAuthorityCompression.CompressedAuthorities
getA() - Method in class com.broadleafcommerce.oauth2.resource.security.token.converter.RestrictedAuthorityCompression.CompressedAuthorities.PermissionRule
getClockSkew() - Method in class com.broadleafcommerce.oauth2.resource.security.token.validator.DefaultJwtClaimsValidator
getDispatcherTypeMatchersPermittedWithoutAuthorization() - Method in class com.broadleafcommerce.oauth2.resource.security.environment.OAuth2ResourceSecurityProperties: The dispatcher type matchers to permit without authorization.
getEncodedPublicKey() - Method in class com.broadleafcommerce.oauth2.resource.security.environment.OAuth2ResourceSecurityProperties: The encoded RSA public key used for verifying the signature of access tokens.
getExpectedJWSAlg() - Method in class com.broadleafcommerce.oauth2.resource.security.selectors.MultiKeyJWSKeySelector
getJwkSetUri() - Method in class com.broadleafcommerce.oauth2.resource.security.environment.OAuth2ResourceSecurityProperties: The URI to JwkSetEndpoint
getMatchers() - Method in class com.broadleafcommerce.oauth2.resource.security.environment.OAuth2ResourceSecurityProperties: The set of ant path matchers on which resource security should apply.
getP() - Method in class com.broadleafcommerce.oauth2.resource.security.token.converter.RestrictedAuthorityCompression.CompressedAuthorities
getProperties() - Method in class com.broadleafcommerce.oauth2.resource.security.token.validator.DefaultJwtClaimsValidator
getPublicKeys(Environment) - Static method in class com.broadleafcommerce.oauth2.resource.security.util.KeyUtil: Get all public keys declared in the spring environment.
getR() - Method in class com.broadleafcommerce.oauth2.resource.security.token.converter.RestrictedAuthorityCompression.CompressedAuthorities
getRsaPublicKey() - Method in class com.broadleafcommerce.oauth2.resource.security.environment.OAuth2ResourceSecurityProperties: Getter for the RSA public key.
getS() - Method in class com.broadleafcommerce.oauth2.resource.security.token.converter.RestrictedAuthorityCompression.CompressedAuthorities
getS() - Method in class com.broadleafcommerce.oauth2.resource.security.token.converter.RestrictedAuthorityCompression.CompressedAuthorities.PermissionRule
getSingletonKeyList() - Method in class com.broadleafcommerce.oauth2.resource.security.selectors.MultiKeyJWSKeySelector
getT() - Method in class com.broadleafcommerce.oauth2.resource.security.token.converter.RestrictedAuthorityCompression.CompressedAuthorities
getT() - Method in class com.broadleafcommerce.oauth2.resource.security.token.converter.RestrictedAuthorityCompression.CompressedAuthorities.SetRule
getV() - Method in class com.broadleafcommerce.oauth2.resource.security.token.converter.RestrictedAuthorityCompression.CompressedAuthorities.SetRule
getValidAudiences() - Method in class com.broadleafcommerce.oauth2.resource.security.environment.OAuth2ResourceSecurityProperties: Validation for the aud claim from the received JWT token.
getValidIssuers() - Method in class com.broadleafcommerce.oauth2.resource.security.environment.OAuth2ResourceSecurityProperties: Validation for the iss claim from the received JWT token

H

handleAccessDeniedException(AccessDeniedException, WebRequest) - Method in class com.broadleafcommerce.oauth2.resource.security.exception.AccessDeniedExceptionAdvisor
hashCode() - Method in class com.broadleafcommerce.oauth2.resource.security.environment.OAuth2ResourceSecurityProperties
hashCode() - Method in class com.broadleafcommerce.oauth2.resource.security.selectors.MultiKeyJWSKeySelector
hashCode() - Method in class com.broadleafcommerce.oauth2.resource.security.token.converter.RestrictedAuthorityCompression.CompressedAuthorities
hashCode() - Method in class com.broadleafcommerce.oauth2.resource.security.token.converter.TokenCompressionProperties

I

init(HttpSecurity) - Method in class com.broadleafcommerce.oauth2.resource.security.configurers.ResourceSecurityDsl
isCompressed(Object) - Static method in class com.broadleafcommerce.oauth2.resource.security.token.converter.RestrictedAuthorityCompression: Detects if the given claim object represents a compressed authority structure.
isConfigureDispatcherTypeAuthorization() - Method in class com.broadleafcommerce.oauth2.resource.security.environment.OAuth2ResourceSecurityProperties: Whether dispatcher authorization should be configured.
isDefaultAllowAllAnonymous() - Method in class com.broadleafcommerce.oauth2.resource.security.environment.OAuth2ResourceSecurityProperties: Whether or not to allow anonymous access.
isEnabled() - Method in class com.broadleafcommerce.oauth2.resource.security.token.converter.TokenCompressionProperties: Whether to compress the restricted authorities claim in the JWT.

J

jwtDecoder(Environment, OAuth2TokenValidator<Jwt>, OAuth2ResourceSecurityProperties) - Method in class com.broadleafcommerce.oauth2.resource.security.autoconfiguration.OAuth2ResourceSecurityConfiguration

K

KeyUtil - Class in com.broadleafcommerce.oauth2.resource.security.util: Utilities related to token signing keys

L

logDebug(Exception, WebRequest) - Method in class com.broadleafcommerce.oauth2.resource.security.exception.AccessDeniedExceptionAdvisor

M

MultiKeyJWSKeySelector<C extends com.nimbusds.jose.proc.SecurityContext> - Class in com.broadleafcommerce.oauth2.resource.security.selectors: Selector that keeps a list of all registered public keys and will return all as candidates.
MultiKeyJWSKeySelector(List<Key>, JWSAlgorithm) - Constructor for class com.broadleafcommerce.oauth2.resource.security.selectors.MultiKeyJWSKeySelector

O

OAuth2ResourceSecurityConfiguration - Class in com.broadleafcommerce.oauth2.resource.security.autoconfiguration
OAuth2ResourceSecurityConfiguration() - Constructor for class com.broadleafcommerce.oauth2.resource.security.autoconfiguration.OAuth2ResourceSecurityConfiguration
OAuth2ResourceSecurityProperties - Class in com.broadleafcommerce.oauth2.resource.security.environment
OAuth2ResourceSecurityProperties() - Constructor for class com.broadleafcommerce.oauth2.resource.security.environment.OAuth2ResourceSecurityProperties
OAuth2ResourceWebSecurityConfiguration - Class in com.broadleafcommerce.oauth2.resource.security.autoconfiguration
OAuth2ResourceWebSecurityConfiguration(OAuth2ResourceSecurityProperties, List<SecurityEnhancer>) - Constructor for class com.broadleafcommerce.oauth2.resource.security.autoconfiguration.OAuth2ResourceWebSecurityConfiguration
OAuth2ResourceWebSecurityConfiguration.EnableGlobalMethodSecurityConfiguration - Class in com.broadleafcommerce.oauth2.resource.security.autoconfiguration
oauth2ResourceWebSecurityFilterChain(HttpSecurity) - Method in class com.broadleafcommerce.oauth2.resource.security.autoconfiguration.OAuth2ResourceWebSecurityConfiguration
OAuth2SecurityEnvironmentPostProcessor - Class in com.broadleafcommerce.oauth2.resource.security.autoconfiguration
OAuth2SecurityEnvironmentPostProcessor() - Constructor for class com.broadleafcommerce.oauth2.resource.security.autoconfiguration.OAuth2SecurityEnvironmentPostProcessor

P

p - Variable in class com.broadleafcommerce.oauth2.resource.security.token.converter.RestrictedAuthorityCompression.CompressedAuthorities: The main permissions structure.
PermissionRule() - Constructor for class com.broadleafcommerce.oauth2.resource.security.token.converter.RestrictedAuthorityCompression.CompressedAuthorities.PermissionRule
PermissionRule(int, List<Integer>) - Constructor for class com.broadleafcommerce.oauth2.resource.security.token.converter.RestrictedAuthorityCompression.CompressedAuthorities.PermissionRule
postProcessEnvironment(ConfigurableEnvironment, SpringApplication) - Method in class com.broadleafcommerce.oauth2.resource.security.autoconfiguration.OAuth2SecurityEnvironmentPostProcessor
PUBLIC_KEY_PROPERTY_MAIN - Static variable in class com.broadleafcommerce.oauth2.resource.security.util.KeyUtil
PUBLIC_KEY_PROPERTY_PATTERN - Static variable in class com.broadleafcommerce.oauth2.resource.security.util.KeyUtil

R

r - Variable in class com.broadleafcommerce.oauth2.resource.security.token.converter.RestrictedAuthorityCompression.CompressedAuthorities: The dictionary of resource names (e.g., "PRODUCT", "ORDER").
resourceSecurity() - Static method in class com.broadleafcommerce.oauth2.resource.security.configurers.ResourceSecurityDsl
ResourceSecurityDsl - Class in com.broadleafcommerce.oauth2.resource.security.configurers: Custom DSL used to initialize the Spring Security configuration with resource server security compatible with Broadleaf's Authorization Service.
RestrictedAuthorityCompression - Class in com.broadleafcommerce.oauth2.resource.security.token.converter: A utility class for compressing and decompressing fine-grained authority data, typically found within a JWT claim.
RestrictedAuthorityCompression.CompressedAuthorities - Class in com.broadleafcommerce.oauth2.resource.security.token.converter: Represents the root object of the compressed authority structure.
RestrictedAuthorityCompression.CompressedAuthorities.PermissionRule - Class in com.broadleafcommerce.oauth2.resource.security.token.converter: Defines a permission rule, linking a set of restrictions to a list of actions.
RestrictedAuthorityCompression.CompressedAuthorities.SetRule - Class in com.broadleafcommerce.oauth2.resource.security.token.converter: Defines a single rule within a restriction set, linking a restriction type to its values.

S

s - Variable in class com.broadleafcommerce.oauth2.resource.security.token.converter.RestrictedAuthorityCompression.CompressedAuthorities: A list of unique restriction sets.
selectJWSKeys(JWSHeader, C) - Method in class com.broadleafcommerce.oauth2.resource.security.selectors.MultiKeyJWSKeySelector
setA(List<Integer>) - Method in class com.broadleafcommerce.oauth2.resource.security.token.converter.RestrictedAuthorityCompression.CompressedAuthorities.PermissionRule
setA(List<String>) - Method in class com.broadleafcommerce.oauth2.resource.security.token.converter.RestrictedAuthorityCompression.CompressedAuthorities
setClock(Clock) - Method in class com.broadleafcommerce.oauth2.resource.security.token.validator.DefaultJwtClaimsValidator
setClockSkew(Duration) - Method in class com.broadleafcommerce.oauth2.resource.security.token.validator.DefaultJwtClaimsValidator
setConfigureDispatcherTypeAuthorization(boolean) - Method in class com.broadleafcommerce.oauth2.resource.security.environment.OAuth2ResourceSecurityProperties: Whether dispatcher authorization should be configured.
setDefaultAllowAllAnonymous(boolean) - Method in class com.broadleafcommerce.oauth2.resource.security.environment.OAuth2ResourceSecurityProperties: Whether or not to allow anonymous access.
setDispatcherTypeMatchersPermittedWithoutAuthorization(DispatcherType[]) - Method in class com.broadleafcommerce.oauth2.resource.security.environment.OAuth2ResourceSecurityProperties: The dispatcher type matchers to permit without authorization.
setEnabled(boolean) - Method in class com.broadleafcommerce.oauth2.resource.security.token.converter.TokenCompressionProperties: Whether to compress the restricted authorities claim in the JWT.
setEncodedPublicKey(String) - Method in class com.broadleafcommerce.oauth2.resource.security.environment.OAuth2ResourceSecurityProperties: The encoded RSA public key used for verifying the signature of access tokens.
setJwkSetUri(String) - Method in class com.broadleafcommerce.oauth2.resource.security.environment.OAuth2ResourceSecurityProperties: The URI to JwkSetEndpoint
setMatchers(String[]) - Method in class com.broadleafcommerce.oauth2.resource.security.environment.OAuth2ResourceSecurityProperties: The set of ant path matchers on which resource security should apply.
setP(List<List<RestrictedAuthorityCompression.CompressedAuthorities.PermissionRule>>) - Method in class com.broadleafcommerce.oauth2.resource.security.token.converter.RestrictedAuthorityCompression.CompressedAuthorities
setR(List<String>) - Method in class com.broadleafcommerce.oauth2.resource.security.token.converter.RestrictedAuthorityCompression.CompressedAuthorities
SetRule() - Constructor for class com.broadleafcommerce.oauth2.resource.security.token.converter.RestrictedAuthorityCompression.CompressedAuthorities.SetRule
SetRule(int, List<String>) - Constructor for class com.broadleafcommerce.oauth2.resource.security.token.converter.RestrictedAuthorityCompression.CompressedAuthorities.SetRule
setS(int) - Method in class com.broadleafcommerce.oauth2.resource.security.token.converter.RestrictedAuthorityCompression.CompressedAuthorities.PermissionRule
setS(List<List<RestrictedAuthorityCompression.CompressedAuthorities.SetRule>>) - Method in class com.broadleafcommerce.oauth2.resource.security.token.converter.RestrictedAuthorityCompression.CompressedAuthorities
setT(int) - Method in class com.broadleafcommerce.oauth2.resource.security.token.converter.RestrictedAuthorityCompression.CompressedAuthorities.SetRule
setT(List<String>) - Method in class com.broadleafcommerce.oauth2.resource.security.token.converter.RestrictedAuthorityCompression.CompressedAuthorities
setV(List<String>) - Method in class com.broadleafcommerce.oauth2.resource.security.token.converter.RestrictedAuthorityCompression.CompressedAuthorities.SetRule
setValidAudiences(List<String>) - Method in class com.broadleafcommerce.oauth2.resource.security.environment.OAuth2ResourceSecurityProperties: Validation for the aud claim from the received JWT token.
setValidIssuers(List<String>) - Method in class com.broadleafcommerce.oauth2.resource.security.environment.OAuth2ResourceSecurityProperties: Validation for the iss claim from the received JWT token

T

t - Variable in class com.broadleafcommerce.oauth2.resource.security.token.converter.RestrictedAuthorityCompression.CompressedAuthorities: The dictionary of restriction type names (e.g., "ITEMS").
TokenCompressionProperties - Class in com.broadleafcommerce.oauth2.resource.security.token.converter
TokenCompressionProperties() - Constructor for class com.broadleafcommerce.oauth2.resource.security.token.converter.TokenCompressionProperties
toString() - Method in class com.broadleafcommerce.oauth2.resource.security.environment.OAuth2ResourceSecurityProperties
toString() - Method in class com.broadleafcommerce.oauth2.resource.security.selectors.MultiKeyJWSKeySelector
toString() - Method in class com.broadleafcommerce.oauth2.resource.security.token.converter.TokenCompressionProperties

U

USER_NAME - Static variable in class com.broadleafcommerce.oauth2.resource.security.token.converter.DefaultJwtBearerTokenAuthenticationConverter

V

validate(Jwt) - Method in class com.broadleafcommerce.oauth2.resource.security.token.validator.DefaultJwtClaimsValidator

A C D E G H I J K L M O P R S T U V
All Classes and Interfaces|All Packages|Constant Field Values