io.helidon.security.providers.oidc.common.BaseBuilder

Description

Base builder of the OIDC config components

Configuration options

Key	Type	Default	Description
`oidc-metadata.resource`	`Resource`		Resource configuration for OIDC Metadata containing endpoints to various identity services, as well as information about the identity server
`identity-uri`	`URI`		URI of the identity server, base used to retrieve OIDC metadata
`audience`	`String`		Audience of issued tokens
`optional-audience`	`Boolean`	`false`	Allow audience claim to be optional
`introspect-endpoint-uri`	`URI`		Endpoint to use to validate JWT
`sign-jwk.resource`	`Resource`		A resource pointing to JWK with public keys of signing certificates used to validate JWT
`base-scopes`	`String`	`openid`	Configure base scopes
`decryption-keys.resource`	`Resource`		A resource pointing to JWK with private keys used for JWE content key decryption
`server-type`	`String`	`@default`	Configure one of the supported types of identity servers
`check-audience`	`Boolean`	`true`	Configure audience claim check
`client-timeout-millis`	`Duration`	`30000`	Timeout of calls using web client
`issuer`	`String`		Issuer of issued tokens
`authorization-endpoint-uri`	`URI`		URI of an authorization endpoint used to redirect users to for logging-in
`token-endpoint-uri`	`URI`		URI of a token endpoint used to obtain a JWT based on the authentication code
`validate-jwt-with-jwk`	`Boolean`	`true`	Use JWK (a set of keys to validate signatures of JWT) to validate tokens
`client-secret`	`String`		Client secret as generated by OIDC server
`oidc-metadata-well-known`	`Boolean`	`true`	If set to true, metadata will be loaded from default (well known) location, unless it is explicitly defined using oidc-metadata-resource
`scope-audience`	`String`		Audience of the scope required by this application
`client-id`	`String`		Client ID as generated by OIDC server
`token-endpoint-auth`	`ClientAuthentication`	`CLIENT_SECRET_BASIC`	Type of authentication to use when invoking the token endpoint

Dependent Types

See the manifest for all available types.

Edit this page or Report an issue