Package dev.relism.flash.ext.oidc
Class OidcConfig.Builder
java.lang.Object
dev.relism.flash.ext.oidc.OidcConfig.Builder
- Enclosing class:
OidcConfig
-
Method Summary
Modifier and TypeMethodDescriptionJWS algorithm (default:RS256).build()clientAuthMethod(ClientAuthMethod method) Token endpoint client authentication method (default:ClientAuthMethod.POST).https()Shorthand forselfScheme("https").Disables TLS certificate verification for all HTTP calls made by this extension.Where to redirect after logout (default:/).rolesClaimPath(String path) Dot-separated path to the roles array in JWT claims (default:realm_access.roles).routePrefix(String prefix) Route prefix for login/callback/logout (default:/auth).schemeName(String name) Override the OpenAPI security scheme name (default: derived from the issuer URI).scopeClaimPaths(String paths) Comma-separated claim paths used to resolve OAuth2 scopes (default:scope,scp).Override requested scopes (default:openid profile email).selfScheme(String scheme) Scheme used when resolving self-relative redirect URIs (default:http).sessionStore(OidcSessionStore store) Custom session store (default:InMemoryOidcSessionStore).
-
Method Details
-
scopes
Override requested scopes (default:openid profile email). -
routePrefix
Route prefix for login/callback/logout (default:/auth). -
selfScheme
Scheme used when resolving self-relative redirect URIs (default:http). -
https
Shorthand forselfScheme("https"). -
rolesClaimPath
Dot-separated path to the roles array in JWT claims (default:realm_access.roles). -
scopeClaimPaths
Comma-separated claim paths used to resolve OAuth2 scopes (default:scope,scp). -
algorithm
JWS algorithm (default:RS256). -
postLogoutRedirectUri
Where to redirect after logout (default:/). -
sessionStore
Custom session store (default:InMemoryOidcSessionStore). -
insecureTls
Disables TLS certificate verification for all HTTP calls made by this extension. Only use in development with self-signed certificates — never in production. -
clientAuthMethod
Token endpoint client authentication method (default:ClientAuthMethod.POST). -
schemeName
Override the OpenAPI security scheme name (default: derived from the issuer URI). -
build
-