Class OidcSession

java.lang.Object
dev.relism.flash.ext.oidc.OidcSession

public final class OidcSession extends Object
An authenticated user's OIDC session — persisted in OidcSessionStore and looked up via the oidc_session cookie on every request.

Sessions are immutable; a refreshed access token produces a new instance that replaces the old one in the store (same id()).

  • Constructor Details

  • Method Details

    • isAccessTokenExpired

      public boolean isAccessTokenExpired()
      Returns true if the access token has expired or will expire within the next 30 seconds (eager refresh to avoid mid-request expiry).
    • id

      public String id()
    • accessToken

      public String accessToken()
    • idToken

      public String idToken()
    • refreshToken

      public String refreshToken()
    • accessTokenExpiresAt

      public Instant accessTokenExpiresAt()
    • claims

      public Map<String,Object> claims()