Package com.onec.auth

Class OnecAuthProperties.Oidc

java.lang.Object
com.onec.auth.OnecAuthProperties.Oidc
Enclosing class:
OnecAuthProperties
public static class OnecAuthProperties.Oidc extends Object
OIDC configuration for the OnecAuthProperties.Mode.OIDC and OnecAuthProperties.Mode.RESOURCE_SERVER modes. The authentication plumbing is plain Spring Security OAuth2 — the only provider-specific concern is how token claims map onto Spring authorities, which differs per IdP (Keycloak puts roles under realm_access.roles; Zitadel under urn:zitadel:iam:org:project:roles, keyed by role name). A OnecAuthProperties.Provider preset fills sensible defaults; everything can be overridden explicitly.

  • Constructor Details

    • Oidc

      public Oidc()

  • Method Details

    • getProvider

      public OnecAuthProperties.Provider getProvider()

    • setProvider

      public void setProvider(OnecAuthProperties.Provider provider)

    • getRegistrationId

      public String getRegistrationId()

    • setRegistrationId

      public void setRegistrationId(String registrationId)

    • getPrincipalClaim

      public String getPrincipalClaim()

    • setPrincipalClaim

      public void setPrincipalClaim(String principalClaim)

    • getLogoutPath

      public String getLogoutPath()

    • setLogoutPath

      public void setLogoutPath(String logoutPath)

    • getPostLogoutRedirectUri

      public String getPostLogoutRedirectUri()

    • setPostLogoutRedirectUri

      public void setPostLogoutRedirectUri(String postLogoutRedirectUri)

    • getRoles

      public OnecAuthProperties.Roles getRoles()

    • setRoles

      public void setRoles(OnecAuthProperties.Roles roles)

    • resolved

      public OnecAuthProperties.ResolvedOidc resolved()
      Applies the OnecAuthProperties.Provider preset to produce the effective, fully-populated settings the autoconfig and ClaimRoleConverter consume. Explicit values always win; preset defaults only fill what was left null/empty. Validates configuration (e.g. Keycloak client-roles without a client-id, or CUSTOM without a registration-id).