All Classes

Class	Description
AbstractDuoAuditExtractor<T>	An abstract audit extractor function to extract values directly from the Duo context.
AbstractDuoAuthenticationAction	A base class for Duo 2FA authentication related actions.
AbstractDuoOIDCClient	Abstract base class for DuoOIDCClient implementations.
AbstractDuoTokenClaimsAuditExtractor<T>	An extension of the AbstractDuoAuditExtractor that allows extraction of claims inside the Duo authentication token.
AttemptedAuthenticationFlowIdAuditExtractor	An audit extractor to pull out the attempted authentication flow ID from the current authentication context.
AuditFields	Constants to use for Duo audit logging fields stored in an AuditContext.
DefaultDuoOIDCClientRegistry	The default Duo Client registry for mapping a DuoOIDCIntegration to either a new or existing DuoOIDCClient (assumed thread-safe) singleton instance.
DefaultDuoOIDCIntegration	Data wrapper for use with Duo OIDC integrations.
DefaultRedirectURICreationStrategy	Constructive, pure, function that returns a redirect_uri from one of (ordered): A pre-registered redirect_uri on the Duo integration, DynamicDuoOIDCIntegration.getRegisteredRedirectURI().
DuoAudienceClaimLookupStrategy	Looks up the audience from the clientID in the DuoOIDCIntegration inside the context.
DuoAuthnDeviceIdAuditExtractor	An audit extractor to extract the Duo 2FA device ID (Key) from the auth_device inside the Duo token response.
DuoAuthnDeviceNameAuditExtractor	An audit extractor to extract the Duo 2FA device name from the auth_device in the Duo token response.
DuoClientException	An exception to signal an error condition during execution of a Duo client.
DuoClientIdAuditExtractor	An audit extractor to extract the Duo Client ID from the Duo integration.
DuoClientInitializationException	Indicates an error during registry processing.
DuoException	An exception to signal a general Duo error.
DuoFactorAuditExtractor	An audit extractor to extract the Duo authentication factor from the Duo token response.
DuoHealthCheck	Represents a health check response from Duo's 2FA endpoint.
DuoHealthCheck.Builder	Builder to build DuoHealthCheck.
DuoHealthCheck.IBuildStage	Required fields builder.
DuoHealthCheck.IStatusStage	Status builder.
DuoHealthCheckResponse	Represents part of the DuoHealthCheck response.
DuoHttpClientFactoryBean	Factory bean customization for the Duo plugin.
DuoIssuerClaimLookupStrategy	Find the issuer from the DuoOIDCIntegration.
DuoNonceClaimLookupStrategy	Find the nonce from the DuoAuthenticationContext.
DuoOIDCAuthAPI	Constants defined in the Duo OIDC Auth API.
DuoOIDCAuthenticationContext	Mutable Context that carries the Duo integration, request-response state, authorization code, and Duo authentication result token.
DuoOIDCAuthnController	MVC controller for managing Duo 2FA exchanges implemented as an ExternalAuthentication mechanism.
DuoOIDCClient	A client for handling Duo OIDC 2FA interactions.
DuoOIDCClientCapabilities	Exposes capabilities of a DuoOIDCClient.
DuoOIDCClientFactory	Abstract factory for creating singleton DuoOIDCClient instances.
DuoOIDCClientRegistry	A registry of DuoOIDCClients for DuoOIDCIntegrations.
DuoOIDCIntegration	Interface to a particular Duo OIDC integration point.
DuoOIDCNimbusModule	PluginIdPModule implementation using only Nimbus OIDC/JWT handling.
DuoOIDCNimbusPlugin	Details about the Duo OIDC 2FA plugin using only Nimbus OIDC/JWT handling.
DuoOIDCWebSDKModule	PluginIdPModule implementation based on the Duo Web SDK v4.
DuoOIDCWebSDKPlugin	Details about the Duo OIDC 2FA plugin based on the Duo Web SDK v4.
DuoReasonAuditExtractor	An audit extractor to extract the Duo authentication reason from the Duo token response.
DuoRedirectUriAuditExtractor	An audit extractor to extract the Duo redirect URI from the Duo context.
DuoRegistryException	Indicates an error during registry processing.
DuoRequestStateAuditExtractor	An audit extractor to extract the Duo request state OAuth 2.0 parameter from the Duo context.
DuoResponseStateAuditExtractor	An audit extractor to extract the Duo response state OAuth 2.0 parameter from the Duo context.
DuoSDKClientAdaptor	An Object Adaptor class for bridging between the Duo SDK implementation and the internal DuoOIDCClient interface.
DuoSDKClientFactory	Abstract factory implementation for the DuoSDKClientAdaptor.
DuoSupport	Helper methods for Duo 2FA.
DuoTransactionIdAuditExtractor	An audit extractor to extract the Duo transaction ID from the Duo token response.
DuoUsernameAuditExtractor	An audit extractor to extract the Duo username from the Duo context.
DuoUsernameClaimLookupStrategy	Find the authenticating principals username from the DuoAuthenticationContext.
DynamicDuoOIDCIntegration	Specialised DuoOIDCIntegration that allows redirectURIs to be pre-registered or computed dynamically against a list of allowed origins.
ExchangeCodeForDuoToken	Action to exchange the authorization code in the Duo 2FA response for a Duo id_token that describes the result of 2FA.
FixedStringAuditExtractor	A simple audit extractor that allows a fixed string to be logged.
HealthCheckDuoOIDCAuthAPI	An action that checks the health of the Duo 2FA endpoint for the established Duo integration.
NimbusClient	A Duo client using the Nimbus OIDC library.
NimbusClientFactory	Abstract factory implementation for creating new NimbusClients.
NimbusClientSupport	Helper methods for working with Duo using Nimbus.
PopulateDuoAuthenticationContext	An action to create (or lookup) and populate the DuoOIDCAuthenticationContext with the username, chosen DuoOIDCIntegration, and DuoOIDCClient appropriate for this request.
SimpleDuoOIDCIntegration	A data wrapper for use with Duo OIDC integrations which does not support redirectURI generation.
TokenResponse	A token response, see RFC6749 section 5.1.
TokenResponse.Builder	Builder to build TokenResponse.
TokenResponse.IAccessTokenStage	Access token stage interface.
TokenResponse.IBuildStage	Build stage interface.
TokenResponse.IIdTokenStage	Token stage interface.
TokenResponse.ITokenTypeStage	Token type stage interface.
URISupport	URL support class.
ValidateDuoResponseState	Authentication action that validates the Duo response state parameter (which is required in the Duo flow) matches that in the 2FA request.
ValidateDuoTokenAuthenticationResult	A validation action that checks for a valid Duo authentication token and directly produces an AuthenticationResult based on the identity described by the token.
ValidateDuoTokenAuthenticationResult.DuoOIDCCleanupHook	A default cleanup hook that removes the DuoOIDCAuthenticationContext from the tree.
ValidateExternalAuthenticationContext	An action that checks for an ExternalAuthenticationContext for a signaled event via the ExternalAuthenticationContext.getAuthnError() method.
ValidateTokenClaims	Action that validates the claims of the Duo id_token using the supplied ClaimsValidator.
ValidateTokenClaims.DuoOIDAuthenticationContextCleanupHook	A cleanup hook that removes the 'nonce' parameter from the DuoOIDCAuthenticationContext so it could not be reused.
ValidateTokenSignature	Action to validate the JWT signature.
Version	Class for getting and printing the version of the plugin.