io.helidon.security.providers.oidc.common.BaseBuilder

Description

Base builder of the OIDC config components

Configuration options

Key	Type	Default	Description
`oidc-metadata.resource`	`Resource`		Resource configuration for OIDC Metadata containing endpoints to various identity services, as well as information about the identity server
`identity-uri`	`URI`		URI of the identity server, base used to retrieve OIDC metadata
`audience`	`String`		Audience of issued tokens
`optional-audience`	`Boolean`	`false`	Allow audience claim to be optional
`introspect-endpoint-uri`	`URI`		Endpoint to use to validate JWT
`sign-jwk.resource`	`Resource`		A resource pointing to JWK with public keys of signing certificates used to validate JWT
`base-scopes`	`String`	`openid`	Configure base scopes
`decryption-keys.resource`	`Resource`		A resource pointing to JWK with private keys used for JWE content key decryption
`server-type`	`String`	`@default`	Configure one of the supported types of identity servers
`check-audience`	`Boolean`	`true`	Configure audience claim check
`client-timeout-millis`	`Duration`	`30000`	Timeout of calls using web client
`issuer`	`String`		Issuer of issued tokens
`authorization-endpoint-uri`	`URI`		URI of an authorization endpoint used to redirect users to for logging-in
`token-endpoint-uri`	`URI`		URI of a token endpoint used to obtain a JWT based on the authentication code
`validate-jwt-with-jwk`	`Boolean`	`true`	Use JWK (a set of keys to validate signatures of JWT) to validate tokens
`client-secret`	`String`		Client secret as generated by OIDC server
`oidc-metadata-well-known`	`Boolean`	`true`	If set to true, metadata will be loaded from default (well known) location, unless it is explicitly defined using oidc-metadata-resource
`scope-audience`	`String`		Audience of the scope required by this application
`client-id`	`String`		Client ID as generated by OIDC server
`token-endpoint-auth`	`ClientAuthentication`	`CLIENT_SECRET_BASIC`	Type of authentication to use when invoking the token endpoint. With CLIENT_SECRET_BASIC, credentials are sent only to POST requests on the resolved token endpoint scheme, host, and path and, when JWT introspection is used, to POST requests on the resolved introspection endpoint scheme, host, and path

Dependent Types

See the manifest for all available types.

Edit this page or Report an issue