All Classes Interface Summary Class Summary Enum Summary Exception Summary Annotation Types Summary
Class |
Description |
AbstractAsynchronousConnection |
An abstract connection whose synchronous methods are implemented in terms of
asynchronous methods.
|
AbstractAuditEvents |
Abstract AuditEvents base class providing audit events lookup support.
|
AbstractConditionAdviceFilter |
Abstract Filter base class providing policy condition advice support.
|
AbstractConnectionWrapper<C extends Connection> |
An abstract base class from which connection wrappers may be easily
implemented.
|
AbstractContext |
A base implementation of the Context interface.
|
AbstractDecorator |
This class provides a logger for decorators, according to the pattern:
<decoratorClassname>.<decoratorName>.<decoratedObjectName>.
|
AbstractEncryptionHandler |
Deprecated.
|
AbstractHandlerAndFilterDecorator |
Deprecated.
|
AbstractJwtBuilder |
A base implementation for all JwtBuilders that provides the basis of the JWT builder methods.
|
AbstractRequestHandler |
Deprecated.
|
AbstractRouter<T extends AbstractRouter<T,R,H,D>,R,H,D> |
An abstract base class for implementing routers.
|
AbstractSamlFederationHeaplet |
The base class for both the filter and handler heaplet implementations.
|
AbstractScriptableHeapObject<V> |
A scriptable heap object acts as a simple wrapper around the scripting engine.
|
AbstractScriptableHeapObject.AbstractScriptableHeaplet<V> |
Creates and initializes a scriptable heap object in a heap environment.
|
AbstractSetCookieHeader |
An abstract SetCookieHeader class for SetCookieHeader and SetCookie2Header .
|
AcceptApiVersionHeader |
Processes the Accept-API-Version message header.
|
AcceptLanguageHeader |
A header class representing the Accept-Language HTTP header.
|
AccessAuditEventBuilder<T extends AccessAuditEventBuilder<T>> |
Builder for audit access events.
|
AccessAuditEventBuilder.ResponseStatus |
The status of the access request.
|
AccessTokenException |
Represents an exception whilst retrieving an OAuth2 access token.
|
AccessTokenInfo |
|
AccessTokenResolver |
Resolves a given token against a dedicated OAuth2 Identity Provider (OpenAM, Google, Facebook, ...).
|
AccessTokenSecretStore |
A secret store that can obtain access tokens from an OAuth 2 provider.
|
AccessTokenSecretStore.Builder |
Builder object for the access token secret store.
|
Action<E extends Exception> |
An Runnable functional interface which can throw a checked Exception.
|
ActionRequest |
An implementation specific action, or operation, upon a JSON resource.
|
ActionResponse |
Response object for JSON responses.
|
ActivityAuditEventBuilder<T extends ActivityAuditEventBuilder<T>> |
Builder for audit activity events.
|
AdminHttpApplication |
Configuration class for the Identity Gateway Administration.
|
AdviceContext |
A Context containing information which should be returned to the user in some
appropriate form to the user.
|
AdviceWarning |
WarningHeader implements RFC 2616 section 14.46 - Warning.
|
AESKeyWrapEncryptionHandler |
Provides JWE key encapsulation using the AES KeyWrap algorithm.
|
Algorithm |
The interface for each possible algorithm that can be used to sign and/or encrypt a JWT.
|
AllowOnlyFilter |
This filter authorizes a request to continue processing if any of the declared rules is satisfied (logical or).
|
AllowOnlyFilter.Heaplet |
|
AmLink |
Represents a link to AM notification service.
|
AmLink.AmLinkSupplier |
A supplier of AM Link.
|
AmLink.ResilientAmLinkSupplier |
A supplier of Resilient AM Link.
|
AmLinkListener |
Represent a listener willing to be notified upon AmLink events.
|
AmLinkListener.ResilientAmLinkListener |
Represent a listener capable of handling reopening signals.
|
AmService |
Creates a configuration class for AM.
|
AmService.Builder |
|
AmService.Discovery |
A pre-builder class used to discover AM details such as its version and expected cookie name.
|
AmServiceHeaplet |
|
AmServiceTypeProvider |
|
AmSessionIdleTimeoutFilter |
This filter will track the AM sessions (stateless or stateful) and will revoke them if their idle timeout goes
over a defined limit.
|
AmSessionIdleTimeoutFilter.Heaplet |
|
AmSessionIdleTimeoutFilterTypeProvider |
|
AmVersion |
Normalized AM version.
|
ApiProducer<D> |
A producer of API Descriptions.
|
ApiVersionProtocolHeaderFilter |
This filter overrides the protocol version in Accept-Api-Version header.
|
ApiVersionRouterContext |
A Context which is created when a request is and has been routed
based on resource API version.
|
Applications |
Utility methods to work with CHF Applications.
|
Applications |
|
ArrayResolver |
Resolves native arrays of objects.
|
AssignmentFilter |
Conditionally assigns values to expressions before and after the request is handled.
|
AssignmentFilter.Heaplet |
Creates and initializes an assignment filter in a heap environment.
|
AsyncFunction<VIN,VOUT,E extends Exception> |
An asynchronous Function which returns a result at some point in the
future.
|
AsyncFunctions |
|
AsynchronousTextWriter |
A Text Writer which writes log records asynchronously to character-based stream.
|
AsyncRefreshableSupplier<V,E extends Exception> |
This utility class supports a lock-downgrading strategy to make sure that 2 concurrent calls to compute
the "cached" value will result in a single computation.
|
AsyncSessionManager |
A session manager is responsible to create/save a new type of Session .
|
AttributesContext |
An AttributesContext is a mechanism for transferring transient state between components when processing a
single request.
|
Audit |
Denotes audit dependencies.
|
AuditEvent |
Represents an audit event.
|
AuditEventBuilder<T extends AuditEventBuilder<T>> |
Root builder for all audit events.
|
AuditEventHandler |
The interface for an AuditEventHandler.
|
AuditEventHandlerBase |
Abstract AuditEventHandler class.
|
AuditEventHandlerFactory |
|
AuditEventHelper |
Helper methods for AuditEvents.
|
AuditEvents |
Audit events interface.
|
AuditEventTopicState |
|
AuditException |
Root class of all exceptions in the Commons Audit Framework.
|
AuditingContext |
A Context used when auditing over the router.
|
AuditJsonConfig |
Utility class to facilitate creation and configuration of audit service and audit event handlers
through JSON.
|
AuditService |
CREST RequestHandler responsible for storing and retrieving audit events.
|
AuditServiceBuilder |
Builder for AuditService.
|
AuditServiceConfiguration |
Configuration of the audit service.
|
AuditServiceObjectHeaplet |
Creates and initializes an AuditService in a heap environment.
|
AuditServiceProxy |
AuditService proxy that allows products to implement threadsafe hot-swappable configuration updates.
|
AuditUtils |
General utilities for commons audit.
|
AuthenticationAuditEventBuilder<T extends AuthenticationAuditEventBuilder<T>> |
Builder for audit authentication events.
|
AuthenticationAuditEventBuilder.Status |
Defines a fixed set of authentication statuses that can be logged.
|
AuthenticationException |
Represents an authentication error or failure.
|
AuthenticationService |
Asynchronous AM authentication service delivering SsoToken .
|
AuthenticatorAuthenticationService |
|
AuthorizationCodeGrantTypeHandler |
A handler that can send an authorization code and optional PKCE verifier to the token endpoint to receive an
access token.
|
AuthorizationHeader |
A header class representing the Authorization HTTP header.
|
AuthorizationHeader.Factory |
|
AuthRedirectContext |
|
AutoReconnectAmLink |
Restart an AmLink automatically upon disconnection.
|
AutoReconnectAmLink.AmLinkSupplierFromTopics |
A helper class to ease readability.
|
BadRequestException |
An exception that is thrown during a operation on a resource when the
requested operation is malformed.
|
Base64 |
Provides RFC 4648 / RFC 2045 compatible Base64 encoding and decoding.
|
Base64EncodedSecretStore |
A Base64EncodedSecretStore stores secret values (such as password or
simple shared secrets) in a base64-encoded form in memory.
|
Base64EncodedSecretStore.Heaplet |
Creates and initializes a Base64EncodedSecretStore in a heap environment.
|
Base64EncodedSecretStoreTypeProvider |
|
Base64PropertyFormat |
|
Base64url |
Makes use of the Base64 class to encode and decode to and from URL-safe Base64.
|
BaseQueryFilterVisitor<R,P,F> |
|
BaseUriDecorator |
The baseURI decorator can decorate both Filter and Handler instances.
|
BaseUriDecorator.Heaplet |
Creates and initializes a baseUri in a heap environment.
|
BaseUriFactory<T> |
|
BaseUriUtil |
Utility to help with baseUri expressions.
|
BasicCredentials |
A rich representation of basic credentials.
|
BatchConsumer |
Implementation is responsible for being able to build up a batch payload and to publish that payload.
|
BatchException |
Indicates failure during a batch operation.
|
BatchPublisher |
Implementations of BatchPublisher are able to consume multiple audit events
and build batches out of them.
|
BatchPublisherFactory |
|
BatchPublisherFactoryImpl |
Basic batch publisher factory implementation.
|
BeanResolver |
Resolves Java Beans objects.
|
BearerToken |
A rich representation of bearer credentials.
|
BiFunction<T,U,R,E extends Exception> |
A BiFunction functional interface which can throw a checked Exception.
|
BigIntegerUtils |
Utils to complement bit operations not covered by the BigInteger functions.
|
Bindings |
Bindings represents the Expression bindings used during evaluation and assignation.
|
BlackAndWhitelistFilter |
This class can be used for filtering string elements by using blacklists and/or whitelists.
|
BranchingInputStream |
An input stream that can branch into separate input streams to perform
divergent reads.
|
Buffer |
A dynamically growing data buffer.
|
BufferedBatchPublisher |
Buffers audit events to a bounded queue, periodically flushing the queue to a provided BatchConsumer .
|
BufferedBatchPublisher.Builder |
|
CacheAccessTokenResolverTypeProvider |
Provide a TypeDefinitionProvider for
CacheAccessTokenResolver.
|
CachePolicyDecisionFilter |
A CREST Filter that caches policy decisions.
|
CacheSessionService |
Create a CacheSessionService which is responsible to manage the cache for the SessionInfo .
|
CacheUserProfileService |
Create a CacheUserProfileService which is responsible for managing the UserProfile cache.
|
CachingAccessTokenResolver |
|
CaffeineCacheAccessTokenResolver |
|
CaffeineCacheAccessTokenResolver.Builder |
|
CaffeineCacheAccessTokenResolver.Heaplet |
|
CaffeineUtils |
Utility class for Caffeine-related workarounds.
|
CaptureDecorator |
The capture decorator can decorates both Filter and Handler instances.
|
CaptureDecorator.Heaplet |
Creates and initializes a CaptureDecorator in a heap environment.
|
CapturedUserPasswordContext |
A CapturedUserPasswordContext to store the user's decrypted password.
|
CapturedUserPasswordFilter |
The CapturedUserPasswordFilter is responsible for retrieving the user password from
AM and to decrypt it.
|
CapturedUserPasswordFilter.Heaplet |
Creates and initializes the filter in a heap environment.
|
CaptureFactory<T> |
|
CapturePoint |
Specify where the message capture takes place.
|
CaseInsensitiveMap<V> |
An implementation of a map whose keys are case-insensitive strings.
|
CaseInsensitiveSet |
An implementation of a set whose values are case-insensitive strings.
|
CdSsoConditionAdviceFilter |
This filter handles any condition advices returned from AM during a policy evaluation, which one will depend on
the policy.
|
CdSsoContext |
Context implementation to maintain cross-domain SSO properties.
|
CdSsoFailureContext |
Context implementation to hold error details, should an error occur during cross-domain SSO authentication.
|
CertificateThumbprintFilter |
A filter that evaluates a required EL expression to establish the client certificate from both context and
request, then calculates the thumbprint for that certificate (sha-256 hash and base64 url encoding) before
storing it in the attributes context for later retrieval in downstream components.
|
CertificateThumbprintFilter.Heaplet |
Creates and initializes a certificate thumbprint filter in a heap environment.
|
CertificateVerificationKey |
A key used for verifying certificate signatures.
|
ChainFilterHeaplet |
Allow to build a chain of filters as one filter.
|
ChainHandlerHeaplet |
A chain of zero or more filters and one handler.
|
ChainHandlerTypeProvider |
Provide the HTTP Filter's Chain TypeDefinition .
|
CharBufferToLineFlowableTransformer |
Transforms a Flowable of CharBuffer into a Flowable of String , by splitting on EOL chars
('\r' and '\n').
|
CharsetDecoderFlowableTransformer |
|
ChfHttpServletRequestAdapter |
Just enough of a HttpServletRequest wrapper around a CHF Request to keep the
AM SAML2 components happy.
|
ChfHttpServletResponseAdapter |
Just enough of a HttpServletResponse wrapper around a CHF Response to keep the
AM SAML2 components happy.
|
CircuitBreakerFilter |
Filter implementing the Circuit Breaker pattern to avoid cascading failures.
|
CircuitBreakerFilter.Heaplet |
|
CircuitBreakerFilterTypeProvider |
|
ClassAliasResolver |
This interface has to be implemented by each Identity Gateway module that wants to register new class aliases.
|
Client |
An HTTP client which forwards requests to a wrapped Handler .
|
ClientAuthenticationException |
Represents a ClientAuthenticationException when the client fails to authenticate.
|
ClientContext |
Client context gives easy access to client-related information that are available into the request.
|
ClientContext.Builder |
Builder for creating ClientContext instances.
|
ClientContextCertificateThumbprintVerifier |
Verifies a certificate thumbprint by computing a digest of the client certificate (found in ClientContext )
and comparing the result with the base64-url-encoded value provided within the confirmation key node.
|
ClientCredentialsGrantTypeHandler |
A grant type handler that can retrieve an access token using the client_credentials grant type.
|
ClientCredentialsOAuth2ClientFilterHeaplet |
Creates and initializes a Filter supporting the transformation of client credentials to an access_token.
|
ClientCredentialsOAuth2ClientFilterTypeProvider |
|
ClientHandlerHeaplet |
Creates and initializes a ClientHandler in a heap environment.
|
ClientHandlerTypeProvider |
Provide ClientHandler 's TypeDefinition .
|
ClientRegistration |
A configuration for an OpenID Connect Provider.
|
ClientRegistration.Heaplet |
Creates and initializes a Client Registration object in a heap environment.
|
ClientRegistrationFilter |
The client registration filter is the way to dynamically register an OpenID
Connect Relying Party with the End-User's OpenID Provider.
|
ClientRegistrationStrategy |
Strategy supporting different client registration mechanisms.
|
ClientSecretBasicAuthenticationFilter |
Deprecated.
|
ClientSecretBasicAuthenticationFilterHeaplet |
Heaplet supporting creation of a client-secret-basic authentication Filter .
|
ClientSecretPostAuthenticationFilter |
|
ClientSecretPostAuthenticationFilterHeaplet |
Heaplet supporting creation of a client-secret-post authentication Filter .
|
ClientTlsOptions |
Extension to TlsOptions to support changing the behaviour of how hostname verification is enforced.
|
ClientTlsOptionsHeaplet |
Creates and initializes client-side TLS options in a heap environment.
|
ClientTlsOptionsTypeProvider |
|
Closeables |
Common utility methods for Closeables.
|
CloseSilentlyAsyncFunction<VIN extends Closeable,VOUT,E extends Exception> |
|
CloseSilentlyFunction<VIN extends Closeable,VOUT,E extends Exception> |
|
CollectionResourceProvider |
An implementation interface for resource providers which exposes a collection
of resource instances.
|
CommonAuditBatchConfiguration |
This class stores the common audit logging batch process configurations.
|
CompressionAlgorithm |
An Enum of the possible compression algorithms that can be applied to the JWE payload plaintext.
|
CompressionHandler |
The interface for CompressionHandlers for all the different compression algorithms.
|
CompressionManager |
A service to get the appropriate CompressionHandler for a specified Compression algorithm.
|
ConditionalFilter |
This filter conditionally executes a delegate Filter given the result of a 'condition' function.
|
ConditionalFilterHeaplet |
|
ConditionEnforcementFilter |
|
ConditionEnforcementFilter.Heaplet |
Creates and initializes an ConditionEnforcementFilter in a heap environment.
|
ConfigAuditEventBuilder<T extends ConfigAuditEventBuilder<T>> |
Builder for audit config events.
|
ConfirmationKeyVerifier |
A ConfirmationKeyVerifier is responsible to verify a confirmation key node.
|
ConfirmationKeyVerifierAccessTokenResolver |
A ConfirmationKeyVerifierAccessTokenResolver is responsible of validating
confirmation keys bound to the access_token (such as certificate thumbprint).
|
ConfirmationKeyVerifierAccessTokenResolver.Heaplet |
Creates and initializes a Confirmation Key Verifier access_token resolver in the heap environment.
|
ConflictException |
An exception that is thrown during a operation on a resource when such an
operation would result in a conflict.
|
Connection |
A client connection to a JSON resource provider over which read and update
requests may be performed.
|
ConnectionEvent |
Describes if the event is a connection event or a disconnection event.
|
ConnectionFactory |
A connection factory provides an interface for obtaining a connection to a
JSON resource provider.
|
ConnectionHeader |
Processes the Connection message header.
|
Constraints |
Constraints defined for JWT validation.
|
Consumer<T,E extends Exception> |
A Consumer functional interface which can throw a checked Exception.
|
ContentApiVersionHeader |
Processes the Content-API-Version message header.
|
ContentEncodingHeader |
Processes the Content-Encoding message header.
|
ContentLengthHeader |
Processes the Content-Length message header.
|
ContentTypeHeader |
Processes the Content-Type message header.
|
Context |
A decoration Context is a way to provide the decorator(s) all of the available
information about the instance to decorate.
|
Context |
Type-safe contextual information associated with the processing of a request in an application.
|
ContextAndRequest |
This a value class to hold a Context and a Request during the processing of a request.
|
Cookie |
An HTTP cookie.
|
Cookie.SameSite |
Indicates the SameSite
value of the cookie.
|
CookieBasedSessionManager |
|
CookieFilter |
Suppresses, relays and manages cookies.
|
CookieFilter.Action |
Action to be performed for a cookie.
|
CookieFilter.Heaplet |
Creates and initializes a cookie filter in a heap environment.
|
CookieHeader |
Processes the Cookie request message header.
|
CoreClassAliasResolver |
Register all the aliases supported by the openig-core module.
|
CorsFilter |
This filters implements the resource processing of the CORS protocol.
|
CorsFilterHeaplet |
A CorsFilterHeaplet configures a CorsFilter in a heap environment.
|
CorsPolicy |
The CORS policy is responsible to handle both actual and preflight CORS requests
and set the appropriate set of response headers based on its own configuration.
|
CorsPolicy.Builder |
|
CorsPolicyProvider |
|
CountPolicy |
An enum of count policy types.
|
CreateNotSupportedException |
A specific exception for when Create is not supported, but Upsert might be being attempted so distinguish from
other BadRequestException s.
|
CreateRequest |
A request to create a new JSON resource.
|
CredentialsParser<C> |
This interface is used to parse the credentials component of an Authorization HTTP header.
|
CrestApplication |
Declare a CREST Application.
|
CrestHttp |
A CREST HTTP utility class which creates instances of the HttpAdapter
to handle CREST HTTP requests.
|
CrestSessionService |
The CrestSessionService is responsible for performing interactions with the AM sessions endpoint.
|
CrestSessionService.Builder |
|
CrestUserProfileService |
The CrestUserProfileService is responsible for interactions with AM users endpoint
using resource version 3.0; since AM v13.
|
CrestUtil |
CREST utility class.
|
CrossDomainSingleSignOnFilter |
This filter verifies the presence of a JWT authentication token in the configured cookie name:
If the JWT is present then its validity is checked and the request is forwarded to the next handler.
If the JWT is not present, then the user-agent is redirected to Access Management via its OAuth2
authorization endpoint, to obtain user authentication.
|
CrossDomainSingleSignOnFilter.Heaplet |
Creates and initialises an authentication filter in a heap environment.
|
CryptoConstants |
Constants for Crypto Algorithms and Json Crypto Json pointer keys.
|
CryptoHeaderFilter |
Deprecated.
|
CryptoHeaderFilter.Heaplet |
Creates and initializes a header filter in a heap environment.
|
CryptoHeaderFilter.Operation |
Should the filter encrypt or decrypt the given headers ?
|
CryptoKey |
Base class for all secrets that are used as keys for cryptographic operations.
|
CsrfFilter |
A generic filter for preventing cross-site request forgery (CSRF) attacks when using cookie-based authentication.
|
CsrfFilter.Builder |
Builder class for the CSRF filter.
|
CsrfFilterHeaplet |
Creates and initializes a CsrfFilter supporting the injection and validation of an anti-CSRF token
in the request header.
|
CsvAuditEventHandler |
Handles AuditEvents by writing them to a CSV file.
|
CsvAuditEventHandlerConfiguration |
A configuration for CSV audit event handler.
|
CsvAuditEventHandlerConfiguration.CsvFormatting |
Contains the csv writer configuration parameters.
|
CsvAuditEventHandlerConfiguration.CsvSecurity |
Contains the configuration parameters to configure tamper evident logging.
|
CsvAuditEventHandlerConfiguration.EventBufferingConfiguration |
Configuration of event buffering.
|
CsvSecureArchiveVerifierCli |
Command line interface for verifying an archived set of tamper evident CSV audit log files for a particular topic.
|
CustomProxyOptions |
|
CustomProxyOptions.Heaplet |
|
CustomProxyOptionsTypeProvider |
|
DataDecryptionKey |
A key that is used for decrypting confidential data.
|
DataEncryptionKey |
A key that is used for encrypting confidential data.
|
DataPreservationFilter |
The DataPreservationFilter supports preserving POSTed data from a request that triggers a login redirect.
|
DataPreservationFilter.Heaplet |
|
DataPreservationFilterTypeProvider |
|
DateHeaderFilter |
This filter inserts a Date header into the response if it is not present.
|
DateHeaderFilter.Heaplet |
Creates and initializes a DateHeaderFilter in a heap environment.
|
Decoder |
Decodes an HTTP message entity input stream.
|
DecorationHandle |
A DecorationHandle is handle to get the decorated object and being able to notify the decoration to stop.
|
Decorator |
A Decorator is responsible for decorating existing object's instances.
|
DecoratorHeaplet |
A base class for decorator heaplets.
|
DecryptionKey<T extends CryptoKey> |
Marker interface for all key types that can be used for decryption.
|
DefaultDeclarations |
Configurations used as defaults in the Heap.
|
DefaultEnvironment |
Reify the normal environment structure with pre-configured shortcuts.
|
DefaultKeyStoreHandlerProvider |
|
DefaultLocalHostNameProvider |
|
DefaultRateThrottlingPolicy |
|
DefaultRateThrottlingPolicyHeaplet |
|
DefaultScriptFactoryManager |
|
DefaultSecretsService |
Deprecated.
|
DefaultSecretsService.Builder |
|
DefaultSecureStorageProvider |
|
DefaultVersionBehaviour |
The default routing behaviour to use when no Accept-API-Version
is set on the request.
|
DeflateCompressionHandler |
An implementation of the CompressionHandler for DEFLATE Compressed Data Format Specification.
|
DelegateHeaplet |
This heaplet aims to be be a placeholder so you can decorate the delegate object with any decorators.
|
DelegateTypeProvider |
Provide the Delegate's TypeDefinition .
|
DelegatingRouteMatcher<R> |
A route matcher that delegates to a provided route matcher.
|
DeleteRequest |
A request to delete a JSON resource.
|
DeliveryModeConfig |
Configuration wrapper for JMS DeliveryMode persistence constants.
|
DependencyProvider |
An interface for a simple dependency provider.
|
DependencyProviderAuditEventHandlerFactory |
AuditEventFactory capable of performing construction injection by resolving dependencies using a DependencyProvider.
|
DependencyProviderBase |
Base DependencyProvider that has provides no dependencies.
|
DerUtils |
Utility methods for reading and writing DER-encoded values.
|
Describable<D,R> |
A routing component (a CHF Handler or CREST RequestHandler ) can describe its API
by implementing this interface.
|
Describable.Listener |
Interface for listener instances.
|
DescribableHandler |
A handler that both handles Request s, and also supports querying for API Descriptors.
|
DescribedHttpApplication |
|
DescribedSyncRequestHandlerAdapter |
Version of SynchronousRequestHandlerAdapter that exposes a described handler.
|
DesKeyGenHandler |
Deprecated.
|
DesKeyGenHandler.Heaplet |
Creates and initializes a DES key generator handler in a heap environment.
|
DirectAmLink |
|
DirectEncryptionHandler |
Supports direct encryption using a shared symmetric key.
|
Directive |
Represents the name/value pair of a HTTP header directives.
|
DirectoryWatcher |
High-level interface to the WatchService API for detecting filesystem change events.
|
DirtyCollection<E> |
|
DirtyIterator<E> |
|
DirtyListener |
Enable observers to be notified when one or more element are removed from a Map.
|
DirtySet<E> |
A Set decorator that notifies the provided DirtyListener when one ore more elements are removed.
|
DisconnectionStrategy |
The different behaviours that can be applied in case of notifications disconnections.
|
DiscoveryException |
Represents an exception whilst performing OpenID discovery.
|
DiscoveryFilter |
In order for an OpenID Connect Relying Party to utilize OpenID Connect
services for an End-User, the RP needs to know where the OpenID Provider is.
|
DiskSpaceUsedRetentionPolicy |
A RetentionPolicy that will retain/delete log files based off the total disk space used.
|
DispatchHandler |
Dispatches to one of a list of handlers.
|
DispatchHandler.Heaplet |
Creates and initializes a dispatch handler in a heap environment.
|
DispatchHandlerTypeProvider |
|
Duration |
Represents a duration in english.
|
ECDHEncryptionHandler |
Implements Elliptic Curve Diffie-Hellman (ECDH) key agreement in ephemeral-static (ECDH-ES) mode.
|
ECDSASigningHandler |
Deprecated.
|
EcJWK |
This class implements an Elliptical Curve Json Web Key storage and manipulation class.
|
EcJWK.Builder |
EC JWK builder.
|
EdDSASigningHandler |
Deprecated.
|
ElasticsearchAuditEventHandler |
|
ElasticsearchAuditEventHandlerConfiguration |
A configuration for Elasticsearch audit event handler.
|
ElasticsearchAuditEventHandlerConfiguration.ConnectionConfiguration |
Configuration of connection to Elasticsearch.
|
ElasticsearchAuditEventHandlerConfiguration.EventBufferingConfiguration |
Configuration of event buffering.
|
ElasticsearchAuditEventHandlerConfiguration.IndexMappingConfiguration |
Configuration of index mapping.
|
ElasticsearchUtil |
Utilities for working with Elasticsearch.
|
EllipticCurveJwk |
Encapsulates common functionality for JWKs that represent elliptic curve keys: EcJWK and OkpJWK.
|
EncryptedJwt |
A JWE implementation of the Jwt interface.
|
EncryptedJwtBuilder |
An implementation of a JwtBuilder that can build a JWT and encrypt it, resulting in an EncryptedJwt object.
|
EncryptedJwtFactory |
Support for JWT encryption, both asymmetric and symmetric (authenticated encryption) are supported.
|
EncryptedPrivateKeyJwtClientAuthenticationFilter |
|
EncryptedPrivateKeyJwtClientAuthenticationFilter.Builder |
Builder class for creating the Encrypted PrivateKey Jwt ClientAuthentication Filter.
|
EncryptedPrivateKeyJwtClientAuthenticationFilterHeaplet |
Heaplet supporting creation of an encrypted private-key-jwt authentication Filter .
|
EncryptedThenSignedJwt |
An implementation of a JWS with a nested JWE as its payload.
|
EncryptedThenSignedJwtBuilder |
An implementation of a JwtBuilder that can build a JWT and encrypt it and nest it within another signed JWT,
resulting in an SignedEncryptedJwt object.
|
EncryptedThenSignedJwtHeaderBuilder |
An implementation of a JWS Header builder that provides a fluent builder pattern to create JWS headers for
signed encrypted JWTs.
|
EncryptionHandler |
The interface for EncryptionHandlers for all the different encryption algorithms.
|
EncryptionKey<T extends CryptoKey> |
Marker interface for all key types that can be used for encryption.
|
EncryptionManager |
A service to get the appropriate EncryptionHandler for a specified Java Cryptographic encryption algorithm.
|
EncryptionMethod |
An Enum of the possible encryption methods that can be used when encrypting a JWT.
|
EndpointRegistry |
Registry for Identity Gateway REST API endpoints.
|
EndpointRegistry.Registration |
Handle for un-registering an endpoint.
|
Entity |
Message content.
|
EntityExtractFilter |
Extracts regular expression patterns from a message entity.
|
EntityExtractFilter.Heaplet |
Creates and initializes an entity extract handler in a heap environment.
|
EnumUtil |
Utility class for accessing Java enum types.
|
EnumValueOfHelper<E extends Enum<E>> |
Provides a EnumValueOfHelper.valueOf(String) method as a replacement for the implicitly declared enum function
valueOf(String) , which has the advantage of not throwing exceptions when the name argument
is null or cannot be found in the enum's values.
|
Environment |
Encapsulate logic to access configuration files and other directories of the IG base directory.
|
EnvironmentHeap |
The root Heap that includes access to the environment additional information.
|
EnvironmentVariablesPlugin |
An ELContext node plugin that provides read-only access to environment variables.
|
EventHandlerConfiguration |
Base class for audit event handler configuration.
|
EventTopicsMetaData |
Encapsulates meta-data for event topics.
|
EventTopicsMetaDataBuilder |
|
ExceptionHandler<E> |
A completion handler for consuming exceptions which occur during the execution of
asynchronous tasks.
|
ExecutorFilter |
This Filter executes all CREST operations in an executor, effectively running the rest of the chain in
another thread.
|
ExecutorServiceFactory |
Responsible for generating ExecutorService instances which are automatically
wired up to shutdown when the ShutdownListener event triggers.
|
ExpiredTokenException |
An exception generated by a TokenHandler on extraction when the token is expired.
|
Expression<T> |
An Unified Expression Language expression.
|
ExpressionException |
An exception that is thrown during expression operations.
|
ExpressionInstant |
A wrapper of the Instant plus/minus functions for use in expressions.
|
ExpressionPlugin |
A plugin that contributes a node to the Expression context tree.
|
ExpressionPropertyResolver |
Resolves Bindings -based tokens using COMMONS Config PropertyResolver .
|
ExpressionRequestAsyncFunction<V> |
|
Expressions |
Utility class for evaluating expression in some collections.
|
Facility |
Defines the standard Syslog message facilities.
|
Factory<T> |
A factory interface.
|
FailableInputStream |
Wraps an existing InputStream , supporting a failed state that is checked before and after each operation.
|
FailedToLoadJWKException |
Unable to load the JWK/x5u location points.
|
FapiInteractionIdFilter |
|
FapiInteractionIdFilter.Heaplet |
Creates and initializes a fapi interaction-id filter in a heap environment.
|
FileAttributesFilter |
Retrieves and exposes a record from a delimiter-separated file.
|
FileAttributesFilter.Heaplet |
Creates and initializes a separated values file attribute provider in a heap environment.
|
FileBasedEventHandlerConfiguration |
Configures time based or size based log file rotation.
|
FileBasedEventHandlerConfiguration.FileRetention |
Groups the file retention config parameters.
|
FileBasedEventHandlerConfiguration.FileRotation |
Groups the file rotation config parameters.
|
FileBranchingStream |
|
FilenameUtils |
Utility class for filename related methods.
|
FileNamingPolicy |
An interface to declare the names of audit log files.
|
FileResourceSet |
A FileResourceSet is able to give access to file-based content
within the scope of the root directory.
|
FileSystemSecretStore |
|
FileSystemSecretStore.FileSystemSecretStoreBuilder |
A builder for more fluently creating a FileSystemSecretStore.
|
FileSystemSecretStoreHeaplet |
|
FileSystemSecretStoreTypeProvider |
|
Filter |
Interface that represents an audit filter.
|
Filter |
Filters the request and/or response of an HTTP exchange.
|
Filter |
An interface for implementing request handler filters.
|
FilterBuilder |
|
FilterChain |
A chain of filters terminated by a target request handler.
|
FilterCondition |
A condition which controls whether or not a filter will be invoked or not.
|
FilterPolicy |
Represents a FilterPolicy which contains the includeIf and excludeIf values for the filter.
|
Filters |
Utility methods for creating common types of filters.
|
Filters |
This class contains methods for creating various kinds of Filter and
FilterCondition s.
|
FixedRateThrottlingPolicy |
An implementation of the ThrottlingPolicy that always returns the same throtlling rate.
|
FixedTimeRotationPolicy |
Rotates audit files at fixed times throughout the day.
|
FlowableDecoder |
Decodes an HTTP message entity flow.
|
ForbiddenException |
An exception that is thrown when access to a resource is forbidden during an
operation on an resource.
|
Form |
Form fields, a case-sensitive multi-string-valued map.
|
ForwardedHeader |
A Header representation of the Forwarded HTTP header.
|
ForwardedHeader.Hop |
This class represents a request's hop detail.
|
ForwardedRequestFilter |
Rebase the UriRouterContext 's Original URI with a computed scheme, host name and port.
|
ForwardedRequestFilter.Heaplet |
|
FragmentFilter |
The FragmentFilter supports URIs that contain fragments, keeping track of the fragment part when a request
triggers a login redirect.
|
FragmentFilter.Heaplet |
|
FreeDiskSpaceRetentionPolicy |
A RetentionPolicy that will retain/delete log files given a minimum amount of disk space the file system
must contain.
|
Function<VIN,VOUT,E extends Exception> |
A synchronous function which returns a result immediately.
|
Functions |
Methods exposed for EL usage.
|
FutureUtils |
|
GatewayHttpApplication |
Configuration class for configuring the Identity Gateway.
|
GenericHeader |
An undecoded HTTP message header.
|
GenericHeaplet |
A generic base class for heaplets with automatically injected fields.
|
GenericSecret |
A generic secret represented as an opaque blob of bytes, such as a password or API key.
|
GlobalDecorator |
A GlobalDecorator stores decorators configuration in order to re-apply them when requested
to decorate a given heap object instance.
|
GracefulShutdownAmLink |
Unsubscribe from every subscribed topics on closure.
|
GrantSwapJwtAssertionOAuth2ClientFilter |
Creates and initializes a Filter supporting the transformation of a request - e.g.
|
GrantSwapJwtAssertionOAuth2ClientFilter.Heaplet |
|
GrantTypeHandler |
Abstract base class for OAuth 2 grant type handlers for calling the token endpoint.
|
GroovyScriptFactory |
Provide support for scripts written in the Groovy language.
|
Handler |
Asynchronously handles an HTTP Request by producing an associated Response .
|
Handlers |
Utility methods for creating common types of handlers.
|
Handlers |
Provides commonly used handler implementations.
|
Header |
An HTTP message header.
|
HeaderFactory<H extends Header> |
Creates instances of Header classes from String representation.
|
HeaderFilter |
Removes headers from and adds headers to a message.
|
HeaderFilter.Heaplet |
Creates and initializes a header filter in a heap environment.
|
HeaderFilterTypeProvider |
|
Headers |
Message headers, a case-insensitive multiple-value map.
|
HeadersResolver |
|
HeaderUtil |
Utility class for processing values in HTTP header fields.
|
HeadlessAuthenticationFilter |
Provides an OpenAM SSO Token in the given header name for downstream components.
|
Heap |
Manages a collection of associated objects created and initialized by Heaplet
objects.
|
HeapException |
An exception that is thrown during heap operations.
|
HeapImpl |
The concrete implementation of a heap.
|
Heaplet |
Creates and initializes an object that is stored in a Heap .
|
HeapletFactory |
|
Heaplets |
Loads Heaplet classes based on the class of object they create.
|
HeapResolver |
|
Hex |
Routines for encoding and decoding binary data in hexadecimal format.
|
HideKeyValueProcessor |
For every key that starts with the keyToHide, return an empty value.
|
HKDFKeyGenerator |
Implements the HKDF key deriviation function to allow a
single input key to be expanded into multiple component keys.
|
HKDFKeyGenerator.HKDFMasterKey |
A secret key designed to be used as the master key for HKDF key generation.
|
HmacSigningHandler |
Deprecated.
|
HsmKeyStoreLoader |
A loader for the KeyStoreSecretStore that knows how to load standard PKCS#11 Hardware Security Module
(HSM) providers on our supported platforms.
|
HsmSecretStoreHeaplet |
|
HttpAccessAuditFilter |
This filter aims to send some access audit events to the AuditService managed as a CREST handler.
|
HttpApplication |
Configuration class to configure the HttpApplication instance.
|
HttpApplicationException |
An exception that is thrown during a Http Application start up when the start up of the application fails.
|
HttpBasicAuthenticationClientFilterHeaplet |
Creates and initializes a Filter supporting the injection of a Basic Authorization
header in the request for the configured credentials.
|
HttpBasicAuthFilter |
Performs authentication through the HTTP Basic authentication scheme.
|
HttpBasicAuthFilter.Heaplet |
Creates and initializes an HTTP basic authentication filter in a heap environment.
|
HttpClient |
An SPI interface for HTTP Client implementations.
|
HttpClientHandler |
An HTTP client for sending requests to remote servers.
|
HttpClientHandler.HostnameVerifier |
SSL host name verification policies.
|
HttpClientHandler.ProxyInfo |
Encapsulates the details of the proxy if one is required when making outgoing requests.
|
HttpClientHandlerHeaplet |
Abstract Heaplet to create HTTP clients with different behaviors.
|
HttpClientProvider |
A provider interface for obtaining HttpClient instances.
|
HttpContext |
A Context containing information relating to the originating HTTP request.
|
HttpContextFactory |
A factory which is responsible for creating new request Context s for
each JSON request.
|
HttpFrameworkServlet |
An HTTP servlet implementation which provides integration between the Servlet
API and the common HTTP Framework.
|
HttpFrameworkServletContextListener |
A ServletContextListener that sets String keyed
HttpApplication instances as attributes on the
ServletContext .
|
HttpUtils |
HTTP utility methods and constants.
|
HttpWebSocketClient |
HTTP WebSocket client interface.
|
IdentifierQueryResourceHandler |
|
IdentityAssertionClaims |
|
IdentityAssertionException |
An exception specific to issues within the assertion package.
|
IdentityAssertionHandlerTechPreview |
Provides support to locally process a user and generate a JWT assertion that represents the user back to the
calling party.
|
IdentityAssertionHandlerTechPreview.Builder |
|
IdentityAssertionHandlerTechPreview.Heaplet |
Creates and initializes a LocalAuthenticationHandler in a heap environment.
|
IdentityAssertionPluginTechPreview |
Implementations of this interface carry out some user processing and returns the
claims that should be included in the Assertion JWT in the IdentityAssertionClaims .
|
IdGenerator |
Defines the contract to generate global unique identifiers.
|
IdGenerator.SequenceUuidIdGenerator |
Default implementation of the IdGenerator that will output some ids based on the following pattern :
<uuid> + '-' + an incrementing sequence .
|
IdTokenValidationFilterHeaplet |
An IdTokenValidationFilterHeaplet creates a filter that can be used to validate the given
idToken according to the provided configuration by leveraging the JwtValidationFilter .
|
IgInstanceDirFinder |
This class is responsible for locating the IG instance directory.
|
IgTicker |
A time source; returns a time value representing the number of nanoseconds elapsed since some fixed but arbitrary
point in time.
|
IncomparableRouteMatchException |
An exception which is thrown when two incompatible RouteMatch
instances are attempted to be compared.
|
Indexed<T> |
Interface of an object that can be indexed with a unique key.
|
InetAddressMask |
Matches IPs (v4 or v6) with a CIDR pattern RFC4632.
|
InitializedAmLink |
Subscribe to a set of initial topics while starting.
|
InsertSsoTokenHeaderFilter |
This filter is responsible to check that an @ InternalSsoTokenContext was defined in the context's chain and
to propagate the SSO token (potentially not valid) into the request as a header.
|
IntDate |
This class provides utility methods for converting Java Date objects into and from IntDates.
|
InternalServerErrorException |
An exception that is thrown during an operation on a resource when the server
encountered an unexpected condition which prevented it from fulfilling the
request.
|
InternalSsoTokenContext |
An InternalSsoTokenContext used to store an SSO token.
|
InvalidCallerTokenDetectionFilter |
An InvalidCallerTokenDetectionFilter provides a mechanism that allows IG to detect an incorrect response
and trigger a token refresh before making the request again with the updated token.
|
InvalidJwtException |
Represents an exception that occurs when a JWT is determined as invalid.
|
InvalidTokenException |
An exception generated by a TokenHandler on validation or extraction when the token is invalid.
|
IO |
Utility class that can stream to and from streams.
|
Issuer |
A configuration for an OpenID Connect Issuer.
|
Issuer.Heaplet |
Creates and initializes an Issuer object in a heap environment.
|
IssuerRepository |
A repository to store and create all the OAuth2 issuers.
|
IssuerRepository.Heaplet |
|
JcaKeyStoreHandler |
Default implementation of a Keystore handler.
|
JdbcAuditEventHandler |
|
JdbcAuditEventHandlerConfiguration |
Configures the JDBC mapping and connection pool.
|
JdbcAuditEventHandlerConfiguration.ConnectionPool |
Configuration for a connection pool.
|
JdbcAuditEventHandlerConfiguration.EventBufferingConfiguration |
Configuration of event buffering.
|
JdbcDataSourceHeaplet |
Creates and initializes a JDBC data source in a heap environment.
|
JmsAuditEventHandler |
Publishes Audit events on a JMS Topic.
|
JmsAuditEventHandlerConfiguration |
|
JmsAuditEventHandlerConfiguration.BatchConfiguration |
This class holds the configuration properties that are used by the {#link BatchPublisher} to control the
batch queue and worker threads that process the items in the queue.
|
JmsAuditEventHandlerConfiguration.JndiConfiguration |
Stores the JNDI context properties and lookup names.
|
JmsContextManager |
Interface for retrieving a JMS topic and a JMS connection factory .
|
JoseSecretConstraints |
|
Json |
Provides read and write JSON capabilities.
|
Json.JsonValueModule |
Jackson Module that uses a mixin to make sure that a JsonValue instance is
serialized using its #getObject() value only.
|
Json.LocalizableStringModule |
|
JsonAuditEventHandler |
|
JsonAuditEventHandlerConfiguration |
|
JsonAuditEventHandlerConfiguration.EventBufferingConfiguration |
Configuration of event buffering.
|
JsonException |
An exception that is thrown during JSON operations.
|
JsonPatch |
Processes partial modifications to JSON values.
|
JsonPatchValueTransformer |
RFC6902 expects the patch value to be a predetermined, static value to be used in the
patch operation's execution.
|
JsonPointer |
Identifies a specific value within a JSON structure.
|
JsonSchemaUtils |
Contains Utility methods for dealing with JsonSchema data.
|
JsonStdoutAuditEventHandler |
|
JsonStdoutAuditEventHandlerConfiguration |
|
JsonValue |
Represents a value in a JSON object model structure.
|
JsonValueException |
An exception that is thrown during JSON value operations.
|
JsonValueFilterVisitor |
A QueryFilterVisitor that returns true if the provide JsonValue meets the criteria of
the QueryFilter assertions and false if it does not.
|
JsonValueFunctions |
This class contains the utility functions to convert a JsonValue to another type.
|
JsonValueFunctions |
This class contains the utility functions to convert a JsonValue to CREST (json-resource) types.
|
JsonValues |
Provides additional functionality to JsonValue .
|
JsonValueTraverseFunction |
An implementation of Function that recursively traverses the JsonValue and applies some
transformation if needed.
|
JsonValueUtils |
Contains some JsonValue Utility methods.
|
JweAlgorithm |
An Enum of the possible encryption algorithms that can be used to encrypt a JWT.
|
JweAlgorithmType |
An Enum of the possible types of JWE algorithms that can be used to encrypt a JWT.
|
JweCompressionException |
Represents an exception for when compression/decompression of the plaintext fails.
|
JweDecryptionCheckedException |
|
JweDecryptionConstraint |
|
JweDecryptionException |
Represents an exception for when decryption of the JWE fails.
|
JweEncryption |
This class represents the result from the encryption process of the JWT plaintext.
|
JweEncryptionException |
Represents an exception for when encryption of the JWE fails.
|
JweException |
Represents a generic exception for JWE operations.
|
JweHeader |
An implementation for the JWE Header parameters.
|
JweHeaderBuilder<B extends EncryptedJwtBuilder> |
An implementation of a JWE Header builder that provides a fluent builder pattern to create JWE headers.
|
JweHeaderKey |
An Enum for the additional JWE Header parameter names.
|
JWK |
The abstract base class for the 3 implementations of JWK.
|
JWK.Builder<B extends JWK.Builder> |
JWK builder.
|
JwkKeyFormat |
Exports keys in JSON Web Key (JWK) format.
|
JWKLookup |
Helper class to look up and return the keys from specific JWK implementation
algorithm types.
|
JwkPropertyFormat |
Decodes a JSON Web Key (JWK) as a secret.
|
JwkPropertyFormatHeaplet |
|
JwkPropertyFormatTypeProvider |
|
JWKSet |
Holds a Set of JWKs.
|
JwkSetHandler |
Creates a JwkSetHandler to store the cryptographic keys.
|
JwkSetHandler.Heaplet |
Creates and initializes a JwkSetHandler in a heap environment.
|
JWKSetParser |
Provides methods to gather a JWKSet from a URL and return
a map of key ids to keys as dictated by that JWKS.
|
JwkSetSecretStore |
A secret store that loads cryptographic keys from a local or remote JWKSet .
|
JwkSetSecretStoreHeaplet |
This heaplet represents an instance of a JwkSetSecretStore resolving secrets from an URL of a JSON Web Key
Set( JWKSet ).
|
JwksStore |
Store JWKs into a jwkSet from a JWKs_URI and refresh the jwkSet when necessary.
|
JwksStoreService |
Manage the jwks store, to avoid having more than one jwks store for the same JWKs_URI unnecessary.
|
JWObject |
A base implementation class for a JSON Web object.
|
JwsAlgorithm |
An Enum of the possible signing algorithms that can be used to sign a JWT.
|
JwsAlgorithmType |
An Enum of the possible types of JWS algorithms that can be used to sign a JWT.
|
JwsException |
Represents a generic exception for JWS operations.
|
JwsHeader |
An implementation for the JWS Header parameters.
|
JwsHeaderBuilder |
An implementation of a JWS Header builder that provides a fluent builder pattern to create JWS headers.
|
JwsHeaderKey |
An Enum for the JWS Header parameter names.
|
JwsSignatureVerifier |
Class supporting Jwt signature verification with a verification Purpose
and a SigningManager responsible for the verification.
|
JwsSigningException |
Represents an exception for when signing of the JWS fails.
|
JwsVerifyingException |
Represents an exception for when verification of the JWS signature fails.
|
Jwt |
The interface for all types of JSON Web Tokens (JWTs).
|
JwtBearerGrantTypeHandler |
|
JwtBuilder |
The base interface for all JwtBuilders for each type of JWT (plaintext, signed or encrypted).
|
JwtBuilderContext |
|
JwtBuilderException |
Represents an exception that occurs when creating/rebuilding JWTs.
|
JwtBuilderFactory |
A factory for getting builders for plaintext, signed and encrypted JWTs and reconstructing JWT strings back into
their relevant JWT objects.
|
JwtBuilderFilter |
The JwtBuilderFilter collects data from template
and puts the name-value pairs into a JWT structure.
|
JwtBuilderFilter.Heaplet |
Creates and initializes a JwtBuilderFilter in a heap environment.
|
JwtClaimConstraint<T> |
A JwtClaimConstraint represents an individual check that can applied to test a claim from a JWT.
|
JwtClaimsSet |
An implementation that holds a JWT's Claims Set.
|
JwtClaimsSetBuilder |
An implementation of a JWT Claims Set builder that provides a fluent builder pattern to creating JWT Claims Sets.
|
JwtClaimsSetKey |
An Enum for the JWT Claims Set names.
|
JwtConstraint |
A JwtConstraint represents an individual check that can applied to test a JWT.
|
JwtFactory |
A JwtFactory encapsulates JWT production strategy into a re-usable and testable design.
|
JwtFactoryConfigUtils |
The JwtFactory supports securing of JWTs.
|
JwtHeader |
A base implementation class for JWT Headers.
|
JwtHeaderBuilder<T extends JwtBuilder,B extends JwtHeaderBuilder<T,B>> |
A base implementation of a JWT header builder that provides a fluent builder pattern to creating JWT headers.
|
JwtHeaderKey |
An Enum for the JWT Header parameter names.
|
JwtReconstruction |
|
JwtReconstructionException |
Represents an exception that occurs when reconstructing JWTs.
|
JwtRuntimeException |
Represents a generic exception for JWT operations.
|
JwtSecureHeader |
A base implementation for the common security header parameters shared by the JWS and JWE headers.
|
JwtSecureHeaderBuilder<T extends JwtBuilder,B extends JwtSecureHeaderBuilder<T,B>> |
A base implementation of a JWT header builder, for the common security header parameters shared by the JWS and JWE
headers, that provides a fluent builder pattern to creating JWT headers.
|
JwtSessionFilterHeaplet |
This Heaplet is responsible for configuring and creating a JwtSession .
|
JwtTokenHandler |
Deprecated.
|
JwtType |
An Enum for the possible types of JWTs.
|
JwtUtil |
Utility methods supporting JWTs.
|
JwtValidationContext |
|
JwtValidationErrorContext |
|
JwtValidationFilter |
|
JwtValidationFilter.Heaplet |
Creates and initializes a JwtValidationFilter in a heap environment.
|
JwtValidator |
The JwtValidator is responsible for the JWT validation.
|
JwtValidator.Builder |
Builder for the JwtValidator.
|
JwtValidatorCustomizer |
|
JwtValidatorResult |
A class that handles the results for the JWT validation.
|
KeyAgreementKey |
A key that is used in a key-agreement protocol (such as Diffie-Hellman) to agree another key.
|
KeyDecryptionKey |
A key that is used to decrypt (or "unwrap") other keys that have been encrypted with a KeyEncryptionKey .
|
KeyEncryptionKey |
A key that is used to encrypt ("wrap") other keys.
|
KeyFormat<T> |
A format that can be used for exporting key material.
|
KeyFormatPem |
Exports a key in the PEM (Privacy Enhanced Mail) format.
|
KeyFormatRaw |
Exports the raw key.
|
KeyManagerHeaplet |
Deprecated.
|
KeyOperation |
Represents the Possible key operations values.
|
Keys |
Define here the constants that can be used as Heap's keys.
|
KeyStoreHandler |
Handles the access to a KeyStore.
|
KeyStoreHandlerDecorator |
Decorate a KeyStoreHandler in order to add some commons utility methods to read or write keystore's entries.
|
KeyStoreHandlerProvider |
Strategy for obtaining a keystore handler.
|
KeyStoreHeaplet |
Deprecated.
|
KeyStoreSecretStore |
A secret store for cryptographic keys based on a standard Java KeyStore .
|
KeyStoreSecretStore.AliasSpec |
Specifies an alias with its validity for use in the store.
|
KeyStoreSecretStore.AliasSpecProvider |
Permits to retrieve the list of usable AliasSpecs of a specific KeyStore.
|
KeyStoreSecretStore.CompositeAliasSpecProvider |
Aggregates multiple AliasSpecProviders results to serve the list of AliasSpec for a KeyStore.
|
KeyStoreSecretStore.PredicateAliasSpecProvider |
Serves a matching subset of the aliases present in a KeyStore based on a predicate.
|
KeyStoreSecretStore.StableIdProvider |
An interface to allow the consuming application to provide the stable ID for the secret.
|
KeyStoreSecretStore.StaticAliasSpecProvider |
Serves a static list of AliasSpecs, without looking at the real content of a KeyStore.
|
KeyStoreSecretStoreHeaplet |
|
KeyStoreSecretStoreTypeProvider |
|
KeyStoreSecureStorage |
Implementation of a secure storage using a keystore.
|
KeyStoreUtil |
Utility class to retrieve private keys from KeyStore .
|
KeyType |
Enum representing the possible KeyTypes.
|
KeyType |
Indicates the type of key.
|
KeyUsage |
Indicates the allowed usages for a particular key.
|
KeyUseConstants |
Represents the supported KeyUse values.
|
KeyValueProcessor |
For a given key/value pair, return the processed value as an Optional.
|
KeyValueProcessor.Value |
Class representing a value to be processed.
|
LambdaExceptionUtils |
Utility methods for interacting with lambdas that throw exceptions.
|
LazyList<E> |
A list with lazy initialization.
|
LazyMap<K,V> |
A map with lazy initialization.
|
LazyReference<T> |
Lazily resolve a JsonValue reference node against a provided Heap instance.
|
LazySupplier<T,E extends Exception> |
A Supplier that lazily computes a value the first time it is accessed and then caches the result to return
on subsequent requests.
|
LdapClient |
This class acts as a simplified access point into the OpenDJ LDAP SDK.
|
LdapConnection |
Provides an adapted view of an OpenDJ LDAP connection exposing only the
synchronous methods and protecting against future evolution of the
Connection interface (e.g.
|
LeftValueExpression<T> |
A LeftValueExpression is a specialized Expression to which we can assign a value.
|
LifeCycle |
Manages Lifecycle on an object.
|
ListDecorator<E> |
Wraps another map.
|
ListResolver |
|
Lists |
Provides helper methods for List .
|
Loader |
An SPI interface for implementing alternative service loading strategies.
|
Loader |
Provides methods for dynamically loading classes.
|
LocalHostNameProvider |
Strategy for obtaining the server's local hostname.
|
LocalizableString |
Represents a String which could be localizable.
|
LocalSessionStore |
An implementation of an in-memory session store.
|
LocationHeader |
Processes the Location message header.
|
LocationHeaderFilter |
Rewrites Location headers on responses that generate a redirect that would
take the user directly to the application being proxied rather than taking
the user through the Identity Gateway.
|
LocationHeaderFilter.Heaplet |
Creates and initializes a LocationHeaderFilter in a heap environment.
|
LogAttachedExceptionFilter |
|
MalformedHeaderException |
Thrown when a header string cannot be parsed to a rich Header implementation.
|
MapDecorator<K,V> |
Wraps another map.
|
MapFilterVisitor<F> |
|
MappedThrottlingPolicy |
|
MappedThrottlingPolicyHeaplet |
|
MapResolver |
|
MdcAwareAction |
An implementation of Action that will preserve the SLF4J MDC .
|
MdcAwareConsumer<T> |
An implementation of Consumer that will preserve the SLF4J MDC.
|
MdcAwareSingleObserver<T> |
A SingleObserver wrapper that manages the MDC.
|
MdcAwareSubscriber<T> |
An implementation of Subscriber that will preserve the SLF4J MDC .
|
MdcExecutorServiceDelegate |
|
MdcRouteIdFilter |
A MdcRouteIdFilter aims to prepare the current thread with SLF4J MDC information about the current route.
|
MdcScheduledExecutorServiceDelegate |
|
MemoryBackend |
A simple in-memory collection resource provider which uses a Map to
store resources.
|
Message<M extends Message<M>> |
Elements common to requests and responses.
|
MessageImpl<T extends MessageImpl<T>> |
Abstract message base class.
|
MessageType |
Indicates a type of HTTP message.
|
MeteredStream |
A metered stream is a subclass of OutputStream that
(a) forwards all its output to a target stream
(b) keeps track of how many bytes have been written.
|
MetricsFilter |
Collect request processing metrics.
|
MultiValueMap<K,V> |
Wraps a map for which the values are lists, providing a set of convenience methods for
handling list values.
|
MutableUri |
A MutableUri is a modifiable URI substitute.
|
Name |
A Name uniquely identify an object within a hierarchy.
|
NeverThrowsException |
The NeverThrowsException class is an uninstantiable placeholder
exception which should be used for indicating that a Function or
AsyncFunction never throws an exception (i.e.
|
NonExpiringCache<K,V> |
Allows the Caching of an object.
|
NoOpAuditEventHandler |
An event handler that does nothing.
|
NoOpAuditService |
Used as a no-op placeholder for an AuditService which can be overridden via config.
|
NoOpAuditService.Heaplet |
Creates a NoOpAuditService in a heap environment.
|
NOPCompressionHandler |
A NOP implementation of the Compression Handler, which will be used when no compression is to be
applied.
|
NoProxyOptions |
|
NoProxyOptions.Heaplet |
|
NoProxyOptionsTypeProvider |
|
NOPSigningHandler |
Deprecated.
|
NoSuchSecretException |
Indicates that no secret was configured for the given purpose, or the named secret is not available.
|
NotFoundException |
An exception that is thrown when a specified resource cannot be found.
|
Notification |
A Notification is a special message that AM send to its "agents"
to notify the occurrence of an event.
|
NotificationListener |
Listen to topic notification.
|
NotificationsConfig |
|
NotificationsConfig.Builder |
|
NotificationsConstants |
Class providing constants used in AM notifications support.
|
NotificationService |
Represents a source of notifications.
|
NotificationService.Registration |
Represents the connection event listener registration.
|
NotificationServiceImpl |
|
NotSupportedException |
An exception that is thrown during an operation on a resource when the
resource does not implement/support the feature to fulfill the request.
|
NotSupportedFilter |
|
NullResponseFilter |
This class is used to filter null responses.
|
OAuth2 |
OAuth2 utility class.
|
OAuth2BearerWWWAuthenticateHeader |
Processes the OAuth 2.0 Bearer WWW-Authenticate
message header.
|
OAuth2ClassAliasResolver |
Register all the aliases supported by the openig-oauth2 module.
|
OAuth2ClientFilter |
A filter which is responsible for authenticating the end-user using OAuth 2.0
delegated authorization.
|
OAuth2ClientFilter.Heaplet |
Creates and initializes the filter in a heap environment.
|
OAuth2Context |
|
OAuth2Error |
Describes an error which occurred during an OAuth 2.0 authorization request
or when performing an authorized request.
|
OAuth2ErrorException |
An exception that is thrown when OAuth 2.0 request fails.
|
OAuth2FailureContext |
Context implementation to hold OAuth2 error details, should a failure occur during OAuth2 scenarios.
|
OAuth2ResourceServerFilterHeaplet |
Validates a Request that contains an OAuth 2.0 access token.
|
OAuth2ResourceServerFilterTypeProvider |
Provide a TypeDefinitionProvider for OAuth2ResourceServer.
|
OAuth2SessionContext |
|
OAuth2TokenExchangeContext |
Context supporting OAuth2 token exchange scenarios, this manages the resulting exchange token.
|
OAuth2TokenExchangeFilter |
Filter supporting OAuth2 token exchange scenarios.
|
OAuth2TokenExchangeFilter.Heaplet |
|
ObjectMapperKeyValueProcessor |
Attempt to deserialize the Object into its String representation.
|
Objects |
Common utility methods for Objects.
|
OctJWK |
Creates an Octet JWK.
|
OctJWK.Builder |
The Octet JWK builder.
|
OkpJWK |
An Octet Key-Pair (OKP) JWK as defined in RFC 8037.
|
OkpJWK.Builder |
Builder object for Octet Key-Pair (OKP) JWKs.
|
OpenAmAccessTokenResolver |
Deprecated.
|
OpenAmAccessTokenResolverHeaplet |
Deprecated.
|
OpenAMClassAliasResolver |
Register all the aliases supported by the openig-openam module.
|
OpenApiRequestFilter |
This filter looks for the query parameter {code _api} : if present then it returns the API description of the
downstream handlers, otherwise the request is processed as expected.
|
Option<T> |
A configuration option whose value can be stored in a set of Options .
|
Options |
A set of options which can be used for customizing the behavior of HTTP
clients and servers.
|
OptionsFilter |
Filter which handles OPTION HTTP requests to CREST resources.
|
OverflowException |
An exception that is thrown if a buffer would overflow as a result of a write operation.
|
Pair<F,S> |
Ordered pair of arbitrary objects.
|
PasswordReplayFilterHeaplet |
Supports password replay feature in a composite filter.
|
PatchOperation |
An individual patch operation which is to be performed against a field within
a resource.
|
PatchRequest |
A request to update a JSON resource by applying a set of changes to its existing content.
|
Paths |
Utilities for manipulating paths.
|
PatternKeyValueProcessor |
If the key matches the expression, return a masked value otherwise return the original value.
|
PatternTemplate |
Expresses a transformation to be applied to a regular expression pattern match.
|
Payload |
The interface represents the body of a JWT.
|
PemPropertyFormat |
Supports decoding keys and certificates in PEM
format.
|
PemPropertyFormatHeaplet |
|
PemPropertyFormatTypeProvider |
|
PeriodicallyRenewedAmLink |
Renew the AmLink periodically without causing any disconnection.
|
PeriodicallyRenewedAmLink.AmLinkSupplierFromTopics |
|
PerItemEvictionStrategyCache<K,V> |
PerItemEvictionStrategyCache is a thread-safe write-through cache.
|
PermanentException |
An exception that indicates that a failure is permanent, i.e.
|
PipeBufferedStream |
|
PolicyDecisionContext |
A PolicyDecisionContext convey policy decision information to downstream filters and handlers.
|
PolicyEnforcementFilter |
This filter requests policy decisions from Access Management which evaluates the
original URI based on the context and the policies configured, and according
to the decisions, allows or denies the current request.
|
PolicyEnforcementFilter.Heaplet |
Creates and initializes a policy enforcement filter in a heap environment.
|
PreconditionFailedException |
An exception that is thrown to indicate that a resource's current version
does not match the version provided.
|
PreconditionRequiredException |
An exception that is thrown to indicate that a resource requires a version,
but no version was supplied in the request.
|
Predicate<T,E extends Exception> |
A Predicate functional interface which can thrown a checked Exception.
|
PredicateUtil |
|
PreferredLocales |
This class encapsulates an ordered list of preferred locales, and the logic
to use those to retrieve i18n ResourceBundle s.
|
PrincipalResolver |
|
PrivateKeyJwtClientAuthenticationFilter |
|
PrivateKeyJwtClientAuthenticationFilter.Builder<T extends PrivateKeyJwtClientAuthenticationFilter.Builder<T>> |
Builder class for creating the PrivateKey Jwt ClientAuthentication Filter.
|
PrivateKeyJwtClientAuthenticationFilterHeaplet |
Heaplet supporting creation of a private-key-jwt authentication Filter .
|
ProductInfo |
Utility class to retrieve product information.
|
ProductInfoProvider |
Strategy for obtaining the information relating to the product in which the AuditService is deployed.
|
Promise<V,E extends Exception> |
A Promise represents the result of an asynchronous task.
|
PromiseImpl<V,E extends Exception> |
An implementation of Promise which can be used as is, or as the basis
for more complex asynchronous behavior.
|
Promises |
Utility methods for creating and composing Promise s.
|
Promises.Results |
Ordered list of joined asynchronous results.
|
PromiseUtil |
Utility class for promises management.
|
PropertyFormatBase64 |
Decodes secrets in raw base64 format.
|
PropertyResolverSecretStore |
A SecretStore implementation that resolves secrets as base64-encoded strings from an underlying
PropertyResolver .
|
ProxyOptions |
Configure proxy settings.
|
Purpose<T extends Secret> |
A purpose encapsulates both a name for a function that requires access to secrets, together with a hint as
to the intended usage of those secrets.
|
QueryFilter<F> |
A filter which can be used to select resources, which is compatible with the CREST query filters.
|
QueryFilterOperators |
QueryFilter constants.
|
QueryFilterParser<F> |
A query string has the following string representation:
|
QueryFilters |
|
QueryFilterVisitor<R,P,F> |
A visitor of QueryFilter s, in the style of the visitor design
pattern.
|
QueryRequest |
A request to search for all JSON resources matching a user specified set of criteria.
|
QueryResourceHandler |
A completion handler for consuming the results of a query request.
|
QueryResponse |
The final result of a query request returned after all resources matching the
request have been returned.
|
Randoms |
The Randoms utility class offers methods to generate random values.
|
Randoms.UrlFriendlyRandomStringGenerator |
Generates a random value (cryptographically secure) that can be used in a query parameter value.
|
RangeSet |
Exposes a range of integer values as a set.
|
ReactiveUtils |
Utility class for ReactiveX operations.
|
ReadRequest |
A request to read a single identified JSON resource.
|
Realm |
This class defines a Realm as it is used in OpenAM.
|
RealmNormalizer |
A RealmNormalizer computes the path segment that includes the AM realm information
as it should be used in REST API call.
|
RecordProvider |
CREST collection service dedicated to persist JSON objects (other types are not supported: arrays,
primitives, and null).
|
RecordService |
File-based Record storage service.
|
ReferrerHeader |
A Header representation of the Referrer HTTP header.
|
RefreshTokenGrantTypeHandler |
A grant type handler that can obtain an access token using a previously obtained refresh token.
|
RegistrationException |
Represents an exception whilst performing OpenID registration.
|
Reject |
A input parameter-validating utility class using fluent invocation:
|
Request |
A request message.
|
Request |
Common attributes of all JSON resource requests.
|
RequestAuditContext |
A context for audit information for an incoming request.
|
RequestCookies |
Exposes incoming request cookies.
|
RequestFormResourceAccessTypeProvider |
Provide the RequestFormResourceAccess 's TypeDefinition .
|
RequestHandler |
Represents the contract with a set of resources.
|
RequestResolver |
|
RequestResourceUriProvider |
The RequestResourceUriProvider has the following configuration:
|
RequestResourceUriProvider.Heaplet |
Creates and initializes a RequestResourceUriProvider in a heap environment.
|
Requests |
A utility class containing various factory methods for creating and
manipulating requests.
|
RequestType |
An enumeration whose values represent the different types of request.
|
RequestVisitor<R,P> |
A visitor of Request s, in the style of the visitor design pattern.
|
Resolver |
Exposes an object's elements for access through dynamic expressions and
scripts.
|
Resolvers |
Performs object resolution by object type.
|
Resource |
|
ResourceAccess |
|
ResourceAccessConfigSupport |
|
ResourceAccessTypeDefinitions |
|
ResourceApiVersionBehaviourManager |
Implementations of this interface will be responsible for maintaining the
behaviour of API Version routing.
|
ResourceApiVersionRoutingFilter |
API Version routing filter which creates a ApiVersionRouterContext
which contains the default routing behaviour when the
Accept-API-Version header is set on the request.
|
ResourceApiVersionRoutingFilter |
API Version routing filter which creates a ApiVersionRouterContext
which contains the default routing behaviour when the
Accept-API-Version header is set on the request.
|
ResourceApiVersionSpecificationFilter |
A Filter supporting the specification of resource API version configuration to be
used when a request on a specific endpoint does not contain an Accept-API-Version
header.
|
ResourceApiVersionSpecificationFilter.NoApiVersionHandler |
Handler allowing products to extend behaviour when a request has no resource API version supplied.
|
ResourceApiVersionSpecificationFilter.ResourcePathAndVersion |
|
ResourceApiVersionSpecificationFilter.ResourcePathAndVersionSpecification |
|
ResourceApiVersionSpecificationFilter.VersionSpecification |
Mechanism supporting specification of a version on the request.
|
ResourceException |
An exception that is thrown during the processing of a JSON resource request.
|
ResourceExceptionsUtil |
Utility class to use on ResourceExceptions.
|
ResourceHandler |
A ResourceHandler is a handler that serves static content (content of a directory, or a zip).
|
ResourceHandler.Heaplet |
Creates and initializes a ResourceHandler in a heap environment.
|
ResourceOwnerOAuth2ClientFilterHeaplet |
Creates and initializes a Filter supporting the transformation of client and user credentials
to an access_token, using the grant type "password".
|
ResourceOwnerOAuth2ClientFilterTypeProvider |
|
ResourceOwnerPasswordGrantTypeHandler |
A grant type handler that can obtain an access token using the Resource Owner Password Credentials (ROPC) grant.
|
ResourcePath |
A relative path, or URL, to a resource.
|
ResourceResponse |
A resource, comprising of a resource ID, a revision (etag), and its JSON
content.
|
Resources |
This class contains methods for creating and manipulating connection
factories and connections.
|
ResourceServerFilter |
Validates a Request that contains an OAuth 2.0 access token.
|
ResourceSet |
|
ResourceUriProvider |
Used to obtain the resource URI to include in policy requests.
|
Response |
A response message.
|
Response |
Common response object of all resource responses.
|
ResponseCacheControl |
Indicates whether a response can be cached and under what conditions.
|
ResponseException |
An HTTP Framework Exception that can be used by filters/handlers to simplify
control-flow inside async call-backs.
|
Responses |
Provide out-of-the-box, pre-configured Response objects.
|
Responses |
A utility class containing various factory methods for creating and
manipulating responses.
|
Result |
A Result represents the result of a validation operation:
either a success or a failure (with an associated description).
|
Result |
A Result of a JWT validation.
|
ResultHandler<V> |
A completion handler for consuming the results of asynchronous tasks.
|
RetentionHooks |
Hook into the retention checking operations for a file.
|
RetentionHooks.NullRetentionHooks |
|
RetentionPolicy |
Defines the retention conditions and the files that need to be deleted.
|
RetryableAmLink |
Retry the AmLink start according to criterion.
|
RetryableAmLink.AmLinkSupplierFromToken |
|
RetryableException |
An exception that indicates that a failure may be temporary, and that
retrying the same request may be able to succeed in the future.
|
RetryFilter |
A RetryFilter is responsible for re-executing the incoming request should it fail with a runtime exception or
if an optional condition expression evaluates to true.
|
RetryFilter.Builder |
|
ReverseProxyHandlerHeaplet |
Creates a reverse proxy Handler in a heap environment.
|
ReverseProxyHandlerTypeProvider |
Provide ReverseProxyHandler's TypeDefinition .
|
RootContext |
A Context which has an a globally unique ID but no parent.
|
RotatableObject |
Interface defining methods a rotatable file needs.
|
RotatableWriter |
Supports file rotation and retention.
|
RotatableWriter.RolloverLifecycleHook |
Callback hooks to allow custom action to be taken before and after the checks for rotation and
retention is performed.
|
RotationContext |
This class holds some information while a file is being rotated.
|
RotationHooks |
Callback hooks to allow custom action to be taken before and after file rotation occurs.
|
RotationHooks.NoOpRotatationHooks |
|
RotationPolicy |
Interface to decide if a file should be rotated or not.
|
RouteImporter |
|
RouteInstance |
A RouteInstance describes a route with all of its internal components, all linked together.
|
RouteMatch |
Contains the result of routing to a particular route.
|
RouteMatcher<R> |
A matcher for evaluating whether a route matches the incoming request.
|
RouteMatchers |
A utility class that contains methods for creating route matchers.
|
RouteMatchers |
A utility class that contains methods for creating route matchers.
|
Router |
A router which routes requests based on route matchers.
|
Router |
A router which routes requests based on route predicates.
|
Router.UriTemplate |
Represents a URI template string that will be used to match and route
incoming requests.
|
RouterHandler |
|
RouterHandler.Heaplet |
Creates and initializes a routing handler in a heap environment.
|
RouterHandlerException |
Represents an exception whilst managing the routes in a @ RouterHandler .
|
RouterHandlerTypeProvider |
|
RoutingContext |
Context implementation to maintain a record of the route that accepted the request.
|
RoutingMode |
The algorithm which should be used when matching URI templates against
request resource names.
|
RSA15AES128CBCHS256EncryptionHandler |
Deprecated.
|
RSA15AES256CBCHS512EncryptionHandler |
Deprecated.
|
RSAEncryptionHandler |
Abstract base class for implementations of the RSAES-PKCS1-v1_5 and RSA-OAEP encryption schemes.
|
RsaJWK |
Implements a RsaJWK.
|
RsaJWK.Builder |
The RSA JWK builder.
|
RsaJWK.PrimesInfo |
Holds the other prime factors.
|
RSASigningHandler |
Deprecated.
|
RunMode |
Supported runtime modes.
|
RuntimeExceptionFilter |
This filter aims to guarantee the caller that it will always get a Response to process, even if the next
returns a promise completed with a RuntimeException , or even if a RuntimeException is thrown.
|
RuntimeExceptionHandler |
A completion handler for consuming runtime exceptions which occur during the
execution of asynchronous tasks.
|
SamlClassAliasResolver |
Register all the aliases supported by the openig-saml module.
|
SamlConfig |
A simple container for the key SAML configuration items.
|
SamlFailureContext |
Context implementation to hold error details, should an error occur during SAML processing.
|
SamlFederationFilterHeaplet |
The SAML federation filter works like other SSO type filters, a request that passes through the SAML federation
filter, that does not trigger the logout expression or matches one of the SAML endpoints, will be checked for a
valid session.
|
SamlFederationFilterTypeProvider |
|
SamlFederationHandlerHeaplet |
Deprecated.
|
SamlFederationHandlerTypeProvider |
|
ScheduledExecutorServiceHeaplet |
Heaplet for building ScheduledExecutorService instances.
|
Script |
Encapsulate an executable script.
|
ScriptableAccessTokenResolver |
A Scriptable access token resolver.
|
ScriptableAccessTokenResolver.Heaplet |
Creates and initializes a scriptable access token resolver in a heap environment.
|
ScriptableFilter |
A scriptable filter.
|
ScriptableFilter.Heaplet |
Creates and initializes a scriptable filter in a heap environment.
|
ScriptableHandler |
A scriptable handler.
|
ScriptableHandler.Heaplet |
Creates and initializes a scriptable handler in a heap environment.
|
ScriptableIdentityAssertionPluginTechPreview |
|
ScriptableIdentityAssertionPluginTechPreview.Heaplet |
Creates and initializes a ScriptableIdentityAssertionPlugin in a heap environment.
|
ScriptableJwtValidatorCustomizer |
A Scriptable JWT Validator customizer.
|
ScriptableJwtValidatorCustomizer.Heaplet |
Creates and initializes a scriptable Jwt Validator customizer in a heap environment.
|
ScriptableResourceAccess |
A scriptable resource access.
|
ScriptableResourceAccess.Heaplet |
Creates and initializes a scriptable object in a heap environment.
|
ScriptableResourceUriProvider |
A scriptable resource URI provider.
|
ScriptableResourceUriProvider.Heaplet |
Creates and initializes a scriptable resource url provider in a heap environment.
|
ScriptableThrottlingPolicy |
A scriptable throttling datasource.
|
ScriptableThrottlingPolicy.Heaplet |
Creates and initializes a scriptable object in a heap environment.
|
ScriptFactory |
|
ScriptFactoryManager |
A ScriptFactoryManager is the plug-in point where ScriptFactory implementations need to be registered
in order to be available to the runtime.
|
Secret |
A secret is any piece of data that should be kept confidential.
|
SecretBuilder |
Provides a uniform way for secrets providers to construct secrets and keys.
|
SecretConstraint<T extends Secret> |
Interface for constraints on a secret that must be satisfied for a given Purpose .
|
SecretDecoder |
Specifies how data retrieved from a SecretStore should be decoded into a secret object.
|
SecretECDSASigningHandler |
Elliptic Curve Digital Signature Algorithm (ECDSA) signing and verification.
|
SecretEdDSASigningHandler |
Signing handler for Edwards Curve DSA (EdDSA) as defined in RFC
8037.
|
SecretHmacSigningHandler |
An implementation of the SigningHandler which can sign and verify using algorithms from the HMAC family.
|
SecretKeyPropertyFormat |
Wraps a property format that decodes raw bytes and converts it into a property format for extracting secret keys
using some algorithm.
|
SecretKeyPropertyFormatHeaplet |
|
SecretKeyPropertyFormatTypeProvider |
|
SecretPropertyFormat |
Defines the format of secrets loaded from configuration properties.
|
SecretPropertyFormatTypeDefinitions |
|
SecretReference<T extends Secret> |
A long-lived reference to an active or named secret.
|
SecretRSASigningHandler |
An Secret -based implementation of the SigningHandler which
can sign and verify using algorithms from the RSA family.
|
SecretSigningHandler |
Provides Secret -based signing and verification code base.
|
SecretsJwtTokenHandler |
Token handler for creating tokens using a JWT as the store.
|
SecretsJwtTokenHandler.Builder |
|
SecretsKeyManager |
|
SecretsKeyManagerHeaplet |
|
SecretsKeyStoreProvider |
A Java security provider that exposes a KeyStore view of a secret store.
|
SecretsLoadStoreParameter |
Class used to initialise the keystore when it is initialised via the standard Java interfaces.
|
SecretsProvider |
The secrets provider is used to get hold of active, named or valid secret objects.
|
SecretsProviderHeaplet |
|
SecretsProviderTypeProvider |
|
SecretsSaml2CredentialResolver |
An implementation of Saml2CredentialResolver that provides support for resolving secrets configured in an
IG route/heap.
|
SecretsService |
|
SecretStore<T extends Secret> |
A backend storage mechanism for certain kinds of secrets.
|
SecretsTrustManager |
Provides an implementation of a standard Java TLS X509ExtendedTrustManager that will retrieve trusted
certificates from the Secrets API.
|
SecretsTrustManagerHeaplet |
|
SecretsUtils |
Utility class to use the Commons Secret API.
|
SecureStorage |
Represents a storage for secure keys, to be used for signing files.
|
SecureStorageException |
Exception that can be thrown by a SecureStorage implementation.
|
SecureStorageProvider |
Strategy for obtaining a secure storage, used by handlers providing tamper-evident feature.
|
SecurityContext |
A Context containing information about the client performing the
request which may be used when performing authorization decisions.
|
SecurityContextFactory |
Deprecated.
|
SeparatedValuesFile |
Allows records to be retrieved from a delimiter-separated file using key and value.
|
SeparatedValuesReader |
Reads records with delimiter-separated values from a character stream.
|
Separator |
A field separator specification, used to parse delimiter-separated values.
|
Separators |
Commonly used field separator specifications.
|
SequenceHandler |
Processes a request through a sequence of handlers.
|
SequenceHandler.Heaplet |
Creates and initializes a sequence handler in a heap environment.
|
SequenceHandlerTypeProvider |
|
ServerInfoSingletonProvider |
Provides server info (build-time defined values only at the moment) in a read-only fashion.
|
ServerTlsOptions |
Extension to TlsOptions supporting client authentication configuration used to drive the authentication
negotiation between the client and IG.
|
ServerTlsOptions.ClientAuthentication |
Enum representing the client authentication configuration options driving authentication negotiations between IG
and the client.
|
ServerTlsOptions.SniConfiguration |
A SNI (Server Name Indication) configuration holder.
|
ServerTlsOptionsHeaplet |
Creates and initializes server-side TLS options in a heap environment.
|
ServiceUnavailableException |
An exception that is thrown during an operation on a resource when the server
is temporarily unable to handle the request.
|
Session |
An interface for managing attributes across multiple requests from the same user agent.
|
SessionContext |
A SessionContext is a mechanism for maintaining state between components when processing a successive
requests from the same logical client or end-user.
|
SessionException |
Represents an exception whilst performing Session Service.
|
SessionInfo |
The SessionInfo class is responsible to store session info for a given SSO Token.
|
SessionInfoContext |
Context to store Access Management session info and properties.
|
SessionInfoFilter |
This filter requests user session info from Access Management and stores it
on the context for later use.
|
SessionInfoFilter.Heaplet |
Creates and initialises a session info filter in a heap environment.
|
SessionManager |
Deprecated. |
SessionModeConfig |
Configuration wrapper for JMS Session.getAcknowledgeMode() SessionMode setting.
|
SessionService |
The SessionService is responsible to perform interactions with AM sessions endpoint,
such as session info or logout, etc.
|
SetCookie2Header |
Deprecated, for removal: This API element is subject to removal in a future version.
|
SetCookieHeader |
Processes the Set-Cookie request message header.
|
SetCookieUpdateFilter |
This filter allows modification of response cookie attribute values for cookies found in the
Set-Cookies header.
|
SetCookieUpdateFilter.Heaplet |
Creates and initializes a SetCookieUpdateFilter in a heap environment.
|
SetDecorator<E> |
Contains another set, which is uses as its basic source of data, possibly transforming the
data along the way.
|
Severity |
Defines the standard Syslog message severities.
|
Sha256AttributeCertificateThumbprintVerifier |
Verifies a certificate thumbprint against a previously calculated thumbprint, stored in a specially named attribute
stored in the context's attributes.
|
ShutdownListener |
Any component which needs to be shut down should implement this interface
and use the function to shut down the component.
|
ShutdownManager |
Interface used by shutdown managers to allow for thread safe
adding and removing of shutdown listeners.
|
ShutdownPriority |
This class defines the shutdown priorities that are consumed by
com.sun.identity.common.ShutdownManager .
|
SignatureUtil |
Utility class for signing and verifying signatures.
|
SignedEncryptedJwsHeaderBuilder |
Deprecated.
|
SignedEncryptedJwt |
Deprecated.
|
SignedEncryptedJwtBuilder |
Deprecated.
|
SignedJwt |
A JWS implementation of the Jwt interface.
|
SignedJwtBuilder |
A base interface for both SignedJwtBuilder and SignedEncryptedJwtBuilder to create Signed JWTs and Signed and
Encrypted JWTs.
|
SignedJwtBuilderImpl |
An implementation of a JwtBuilder that can build a JWT and sign it, resulting in a SignedJwt object.
|
SignedJwtFactory |
|
SignedThenEncryptedJwt |
A nested signed-then-encrypted JWT.
|
SignedThenEncryptedJwtBuilder |
Builder for nested signed-then-encrypted JWT.
|
SignedThenEncryptedJwtFactory |
|
SigningHandler |
The interface for SigningHandlers for all the different signing algorithms.
|
SigningKey |
A key that is used for signing digital signatures.
|
SigningManager |
A service to get the appropriate SigningHandler for a specific Java Cryptographic signing algorithm.
|
SingleSignOnFilter |
This filter verifies the presence of a SSOToken in the given cookie name.
|
SingleSignOnFilter.Heaplet |
Creates and initialises an authentication filter in a heap environment.
|
SingleSignOnTypeProvider |
|
SingletonResourceProvider |
An implementation interface for resource providers which exposes a single
permanent resource instance.
|
SizeBasedRetentionPolicy |
Created a size based file retention policy.
|
SizeBasedRotationPolicy |
Creates a file size based rotation policy.
|
SlidingCounterResultRecorder |
An implementation of a ResultRecorder to count the number of failed requests in the last size
requests.
|
SortKey |
A sort key which can be used to specify the order in which JSON resources
should be included in the results of a query request.
|
SortKeyComparator |
This comparator iterates through the provided sortKeys and finds the first comparative difference between the left
and right side JsonValues.
|
SortKeyComparator.NullPosition |
Defines possible positions for JsonValue that wraps a null object.
|
SplitCookieFilter |
Split a target cookie when it is bigger than 4Kb (see RFC
6265) in smaller cookies.
|
SplunkAuditEventHandler |
Audit event handler that writes out to Splunk's HTTP event collector RAW endpoint.
|
SplunkAuditEventHandlerConfiguration |
Configuration for the splunk audit event handler.
|
SplunkAuditEventHandlerConfiguration.BufferingConfiguration |
Configuration of event buffering.
|
SplunkAuditEventHandlerConfiguration.ConnectionConfiguration |
Configuration of connection to Splunk.
|
SqlAttributesFilter |
Executes a SQL query through a prepared statement and exposes its first result.
|
SqlAttributesFilter.Heaplet |
Creates and initializes a static attribute provider in a heap environment.
|
SsoToken |
Represents the successful result of an authentication against the AM server.
|
SsoTokenContext |
The SsoTokenContext provides access to the token and user information related to this session.
|
StableAmLink |
Permits to use a AmLink even if not started or between disconnection and reconnection events.
|
StatelessAccessTokenResolver |
A StatelessAccessTokenResolver that locally resolves and validates stateless access_tokens issued by AM.
|
StatelessAccessTokenResolver.Heaplet |
Creates and initializes a stateless access token resolver in the heap environment.
|
StaticRequestFilter |
Creates a new request and send it down the next handler (effectively replacing the previous request).
|
StaticRequestFilter.Heaplet |
Creates and initializes a request filter in a heap environment.
|
StaticResponseHandler |
Creates a static HTTP response.
|
StaticResponseHandler.Heaplet |
Creates and initializes a static response handler in a heap environment.
|
StaticResponseHandlerTypeProvider |
|
Status |
The status-code element is a three-digit integer code giving the
result of the attempt to understand and satisfy the request.
|
Status.Family |
The first digit of the status-code defines the class of response.
|
Streams |
Utility methods for operating on IO streams.
|
StringOrURI |
This class provides an utility method for validating that a String is either an arbitrary string without any ":"
characters or if the String does contain a ":" character then the String is a valid URI.
|
Strings |
Common utility methods for Strings.
|
StringUtil |
Miscellaneous string utility methods.
|
StsContext |
A StsContext convey the token transformation results to downstream filters and handlers.
|
Subscription |
Represents a managed subscription to a given topic.
|
SubscriptionAck |
|
SubscriptionException |
Represents a subscription (or un-subscription) failure.
|
SubscriptionRequest |
A SubscriptionRequest is a message send to the notification server when subscribing to a topic.
|
SubscriptionRequest.Action |
The different kind of subscription requests.
|
Supplier<T,E extends Exception> |
A Supplier functional interface which can throw a checked Exception.
|
SupportedEllipticCurve |
Enumerates all supported elliptic curve parameters for ESXXX signature formats.
|
SwaggerApiProducer |
An API Producer for APIs that use the Swagger model implementation of the OpenAPI specification.
|
SwaggerExtended |
Extension of Swagger to override some of its behaviors.
|
SwaggerUtils |
Swagger utility.
|
SwitchFilter |
Conditionally diverts the request to another handler.
|
SwitchFilter.Heaplet |
Creates and initializes a switch filter in a heap environment.
|
SynchronousRequestHandler |
|
SyslogAuditEventHandler |
The handler publishes audit events formatted using SyslogFormatter to a syslog daemon using
the configured SyslogPublisher .
|
SyslogAuditEventHandlerConfiguration |
|
SyslogAuditEventHandlerConfiguration.EventBufferingConfiguration |
Configuration of event buffering.
|
SyslogAuditEventHandlerConfiguration.SeverityFieldMapping |
Encapsulates configuration for mapping audit event field values to Syslog severity values.
|
SystemAndEnvSecretStoreHeaplet |
|
SystemPropertiesPlugin |
An ELContext node plugin that provides read-only access to system properties.
|
SystemProxyOptions |
A ProxyOptions to use when the system defined proxy must be used.
|
SystemProxyOptions.Heaplet |
|
SystemProxyOptionsTypeProvider |
|
TableMapping |
Contains the necessary information to map an event to a database table, and the event fields to the columns
in that database table.
|
TemporaryStorageHeaplet |
|
TextWriter |
A TextWriter provides a character-based stream which can be queried for number of bytes written.
|
TextWriter.Stream |
A TextWriter implementation which writes to a given output stream.
|
TextWriterAdapter |
|
ThreadPoolSecretStore<T extends Secret> |
A secret store that wraps another secret store and performs all query operations in a background thread using a
thread pool.
|
Threads |
Common utility methods for Threads.
|
ThrottlingFilter |
This filter applies a rate limitation to incoming requests : over the limit requests will be rejected with a 429
(Too Many Requests) response, others will pass through.
|
ThrottlingFilterHeaplet |
Creates and initializes a throttling filter in a heap environment.
|
ThrottlingPolicy |
This interface defines the contract to lookup a ThrottlingRate that will be applied to the given
Request .
|
ThrottlingRate |
A value object to represent a throttling rate.
|
ThrottlingStrategy |
This interface defines the contract for any throttling strategy.
|
Throwables |
Throwable utilities class.
|
TimeLimitRotationPolicy |
Creates a rotation policy based on a time duration.
|
TimerDecorator |
The timer decorator can decorate both Filter and
Handler instances.
|
TimerDecorator.Heaplet |
Creates and initializes a TimerDecorator in a heap environment.
|
TimerDecoratorTypeProvider |
|
TimerFactory<T> |
|
TimestampFilenameFilter |
|
TimeStampFileNamingPolicy |
Creates a time stamp based file naming policy.
|
TlsOptions |
|
TokenBucketThrottlingStrategy |
The rate limiting is implemented as a token bucket strategy
that gives us the ability to handle rate limits through a sliding window.
|
TokenHandler |
Responsible for the validation, generation and parsing of tokens used for keying a JsonValue
representative of some state.
|
TokenHandlerException |
An exception generated by a TokenHandler on either creation, validation, or state extraction.
|
TokenIntrospectionAccessTokenResolver |
|
TokenIntrospectionAccessTokenResolverHeaplet |
|
TokenIntrospectionAccessTokenResolverTypeDefinitionProvider |
|
TokenResolver |
Offers a user-friendly API to the COMMONS config property resolvers.
|
TokenTransformationFilter |
A TokenTransformationFilter is responsible for transforming a token issued by Access Management
into a token of another type.
|
TokenTransformationFilter.Heaplet |
Creates and initializes a token transformation filter in a heap environment.
|
TopicMultiplexerAmLink |
Multiplex topic registration on top of a AmLink .
|
TrailerHeader |
A Header representation of the Trailer HTTP response header.
|
TransactionId |
TransactionId value should be unique per request coming from an external agent so that all events occurring in
response to the same external stimulus can be tied together.
|
TransactionIdContext |
|
TransactionIdHeader |
Processes the transactionId header used mainly for audit purpose.
|
TransactionIdInboundFilter |
|
TransactionIdOutboundFilter |
This filter aims to create a sub-transaction's id and inserts that value as a header of the request.
|
TransportProtocol |
Transport protocol over which Syslog messages should be published.
|
TrustAllManager |
Trust all certificates that this class is asked to check.
|
TrustAllManager.Heaplet |
Creates and initializes a trust-all manager in a heap environment.
|
TrustManagerHeaplet |
Deprecated.
|
TypeDefinitions |
Type definitions helpers for generic types.
|
UmaClassAliasResolver |
Register all the aliases supported by the openig-uma module.
|
UmaException |
UMA Resource Server specific exception thrown when unrecoverable errors are happening.
|
UmaResourceServerFilter |
An UmaResourceServerFilter implements a PEP (Policy Enforcement Point) and is responsible to ensure the
incoming requests (from requesting parties) all have a valid RPT (Request Party Token) with the required set of
scopes.
|
UmaResourceServerFilter.Heaplet |
Creates and initializes an UMA resource server filter in a heap environment.
|
UmaSharingService |
An UmaSharingService provides core UMA features to the Identity Gateway
when acting as an UMA Resource Server.
|
UmaSharingService.Heaplet |
Creates and initializes an UMA service in a heap environment.
|
UncategorizedException |
An exception that indicates that a failure is not directly known to the
system, and hence requires out-of-band knowledge or enhancements to determine
if a failure should be categorized as temporary or permanent.
|
UnmodifiableCollection |
An marker interface for tagging collection implementations as read-only.
|
UnrecognizedCriticalHeaderException |
|
UnrecoverableAuthenticationException |
Represents an unrecoverable authentication error or failure such as a missing authentication Tree or Service.
|
UnsignedJwtFactory |
Deprecated.
|
UnsupportedMediaTypeException |
Indicates a 415 Unsupported Media Type response that the Content-Type of the request was not acceptable.
|
UpdateRequest |
A request to update a JSON resource by replacing its existing content with new content.
|
UriPathRewriteFilter |
Filter supporting URL path rewriting.
|
UriPathRewriteFilter.Heaplet |
Create a UriPathRewriteFilter in a heap environment.
|
UriRouterContext |
A Context which is created when a request has been routed.
|
UriRouterContext.Builder |
|
Uris |
Utility class for performing operations on universal resource identifiers.
|
UriService |
Computes AM endpoint URIs, based on path normalizer, realm and a base Uri.
|
UriUtils |
URI convenience methods.
|
UserProfile |
Class containing user profile information.
|
UserProfileContext |
Used by the UserProfileFilter to make the user's profile attributes available in the context.
|
UserProfileException |
Represents an exception thrown whilst performing UserProfileService operations.
|
UserProfileFilter |
This filter requests user profile attributes from Access Management and stores them in the context for later use.
|
UserProfileFilterHeaplet |
|
UserProfileService |
The UserProfileService is responsible for requesting user profile attributes.
|
UserProfileServiceHeaplet |
|
Utils |
This class provides utility methods to share common behaviour.
|
Utils |
Utility class.
|
Utils |
Deprecated.
|
ValidatorConstraintContext |
The validation context that will be passed among the different JWT constraints validations.
|
Values |
Utility methods to create Value instances related to IG.
|
VerificationKey |
A key used for verifying digital signatures.
|
Version |
Represents some version in the form majorNumber.minorNumber,
for instance 2.4.
|
Version |
Supports version with the following format: major[.minor[.micro]].
|
Violation |
Describe a Violation, used for the JWT validation.
|
VisibleForTesting |
This annotation doesn't actually do anything, other than provide documentation of the fact that a function has
either been marked public, or package private in order for a test (somewhere physically distant in the system)
to compile.
|
Warning |
|
WarningHeader |
Processes the Warning message header.
|
WebSocketAdapter |
Basic websocket application interface facilitating different provider implementations.
|
WebSocketAdapterConfiguration |
|
WebSocketClientProvider |
Provider of a WebSocket clients.
|
WebSocketHandshakeContext |
Context signaling that the associated request is a WebSocket Handshake.
|
WebSocketHandshakeDetectorFilter |
|
WebSocketProxyFilterProvider |
A provider capable of providing a Filter to manage WebSocket upgrade requests and subsequently manage the
bi-directional communication from the client to the remote application.
|
WebSocketUtils |
WebSocket utility methods.
|
WelcomeHandler |
Creates a static response containing a simple HTML welcome page.
|
WelcomeHandler.Heaplet |
Creates and initializes a static response handler in a heap environment.
|
WwwAuthenticateHeader |
A Header representation of the WWW-Authenticate HTTP header.
|
WwwAuthenticateHeader.Challenge |
A single WWW-Authenticate challenge.
|
XECUtils |
Utilities for handling XEC keys for X25519 and X448 ECDH key agreement.
|
XForwardedForHeader |
Processes the X-Forwarded-For message header.
|
XMLHandler |
This is a custom XML handler to load the dtds from the classpath This should
be used by all the xml parsing document builders to set the default entity
resolvers.
|
XMLUtils |
Utility classes for handling XML.
|