Package su.onno.auth

Class OnnoAuthProperties.Oidc

java.lang.Object
su.onno.auth.OnnoAuthProperties.Oidc
Enclosing class:
OnnoAuthProperties
public static class OnnoAuthProperties.Oidc extends Object
OIDC configuration for the OnnoAuthProperties.Mode.OIDC and OnnoAuthProperties.Mode.RESOURCE_SERVER modes. The authentication plumbing is plain Spring Security OAuth2 — the only provider-specific concern is how token claims map onto Spring authorities, which differs per IdP (Keycloak puts roles under realm_access.roles; Zitadel under urn:zitadel:iam:org:project:roles, keyed by role name). A OnnoAuthProperties.Provider preset fills sensible defaults; everything can be overridden explicitly.

  • Constructor Details

    • Oidc

      public Oidc()

  • Method Details

    • getProvider

      public OnnoAuthProperties.Provider getProvider()

    • setProvider

      public void setProvider(OnnoAuthProperties.Provider provider)

    • getRegistrationId

      public String getRegistrationId()

    • setRegistrationId

      public void setRegistrationId(String registrationId)

    • getPrincipalClaim

      public String getPrincipalClaim()

    • setPrincipalClaim

      public void setPrincipalClaim(String principalClaim)

    • getLogoutPath

      public String getLogoutPath()

    • setLogoutPath

      public void setLogoutPath(String logoutPath)

    • getPostLogoutRedirectUri

      public String getPostLogoutRedirectUri()

    • setPostLogoutRedirectUri

      public void setPostLogoutRedirectUri(String postLogoutRedirectUri)

    • getRoles

      public OnnoAuthProperties.Roles getRoles()

    • setRoles

      public void setRoles(OnnoAuthProperties.Roles roles)

    • resolved

      public OnnoAuthProperties.ResolvedOidc resolved()
      Applies the OnnoAuthProperties.Provider preset to produce the effective, fully-populated settings the autoconfig and ClaimRoleConverter consume. Explicit values always win; preset defaults only fill what was left null/empty. Validates OIDC-client configuration (e.g. Keycloak client-roles without a client-id, or CUSTOM without a registration-id).

    • resolvedForResourceServer

      public OnnoAuthProperties.ResolvedOidc resolvedForResourceServer()
      Resolves principal/role claim settings for stateless JWT validation. A resource server has no OAuth client registration, so a CUSTOM provider does not require registration-id.