All Classes

Class	Description
AbstractAuthenticationRequestAuditExtractor<T>	A base class for audit extractors that lookup the OIDCAuthenticationRequest.
AbstractAuthenticationResponseAuditExtractor<T>	A base class for audit extractors that lookup the AuthenticationResponse.
AbstractBackingStore<I,T>	A base backing store implementation.
AbstractBuildErrorResponseFromEvent<T extends com.nimbusds.oauth2.sdk.ErrorResponse>	This action is extended by error response actions.
AbstractClaimsSetAuditExtractor<T>	An abstract audit extractor function to extract claims from the located claims set.
AbstractClaimsValidator	Base class for claims validators.
AbstractClientSecretValueResolver	Base class for ClientSecretValueResolvers.
AbstractDynamicHTTPFetchingStrategy<MetadataType>	Abstract strategy for fetching metadata dynamically over HTTP.
AbstractEncryptionAlgorithmsLookupStrategy	A base class for lookup strategies that return encryption algorithms and make use of the AlgorithmRegistry.
AbstractEvaluableMetadataCriterion<T>	Base class for all metadata criterion classes.
AbstractFileOIDCEntityResolver<Key extends com.nimbusds.oauth2.sdk.id.Identifier,Value>	Based on FilesystemMetadataResolver.
AbstractMetadataCache<IdentifierType,MetadataType>	A base MetadataCache implementation.
AbstractMetadataValueMarshaller<T extends MetadataValueSAMLObject>	Abstract thread safe Marshaller for MetadataValueSAMLObject objects.
AbstractMetadataValueSAMLObject	Base implementation for all simple metadata objects containing String value inside the element.
AbstractMetadataValueUnmarshaller<T extends MetadataValueSAMLObject>	Abstract thread-safe Unmarshaller for MetadataValueSAMLObject objects.
AbstractOAuth2ClientAuthenticableProfileConfiguration	Base class for OAuth profile configurations that support OAuth-defined client authentication methods.
AbstractOAuth2FlowAwareProfileConfiguration	Base class for OIDC protocol configuration, containing configuration bits shared by all flow aware OIDC protocol configurations.
AbstractOAuth2TokenValidatingConfiguration	Base class for profile configurations that validate previously issued OAuth2 tokens.
AbstractOIDCAttributeTranscoder	Abstract class for OIDC attribute encoders.
AbstractOIDCAttributeTranscoder.NamingFunction	A function to produce a "canonical" name for an OIDC claim for transcoding rules.
AbstractOIDCEntityContext	Abstract base class for subcontexts that carry information about a OIDC entity.
AbstractOIDCEntityResolver<Key extends com.nimbusds.oauth2.sdk.id.Identifier,Value>	A base class for Resolvers used for resolving entities containing identifiers based on Identifier.
AbstractOIDCMessageEncoder	Base class for OIDC message encoders.
AbstractOIDCMetadataResolver<MetadataIdentifier,MetadataType>	An abstract metadata resolver which supports any type of metadata.
AbstractOIDCSSOConfiguration	Base class for profiles that support OIDC's concept of SSO, which spans multiple endpoints.
AbstractReloadingOIDCEntityResolver<Key extends com.nimbusds.oauth2.sdk.id.Identifier,Value>	Base class for metadata providers that cache and periodically refresh their entities.
AccessTokenClaimsSetManipulationStrategyLookupFunction	A function that returns (ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
AccessTokenHashValidator	A validator that checks the access_token value matches its encoded at_hash representation in the id_token.
AccessTokenLifetimeLookupFunction	A function that returns OAuth2AccessTokenProducingProfileConfiguration.getAccessTokenLifetime(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
AccessTokenTypeLookupFunction	A function that returns OAuth2AccessTokenProducingProfileConfiguration.getAccessTokenType(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
AcrClaimAlwaysEssentialLookupFunction	A predicate that returns OIDCAuthorizationConfiguration.isAcrRequestAlwaysEssential(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
ACRClaimsValidator	Check the ACR values requested were received.
AllowPKCEPlainPredicate	A predicate implementation that forwards to OIDCSSOProfileConfiguration.isAllowPKCEPlain(ProfileRequestContext).
AlwaysIncludedAttributesLookupFunction	A function that obtains OIDCIDTokenProducingProfileConfiguration.getAlwaysIncludedAttributes(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
AttributeConsentFlowEnabledPredicate	A predicate implementation that checks if attribute-release is included in the list of post authentication flows returned by PostAuthenticationFlowsLookupFunction.
AttributeEncoderNamespaceHandler	Namespace handler for the oidc attribute resolver.
AudienceClaimsValidator	Verifies the Audience (aud) claim contains the appropriate value.
AudienceRestrictionsLookupFunction	A function that returns the effective audience restrictions to include in ID tokens, based on combining a relying party's entityID with the result of OIDCIDTokenProducingProfileConfiguration.getAdditionalAudiencesForIdToken(ProfileRequestContext), if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
AuditFields	Constants to use for audit logging fields stored in an AuditContext.
AuthenticationAudienceClaimsValidator	Verifies the Audience (aud) claim contains the appropriate value in JWT authentication.
AuthenticationContextClassReferencePrincipal	Principal based on a OIDC Authentication Context Class Reference.
AuthenticationContextClassReferencesAuditExtractor	Function that extracts the ACRs from the OIDCAuthenticationRequest.
AuthenticationContextClassReferenceSupport	Support class for ACR operations.
AuthenticationRequestMessageEncoderFactory	Message encoder factory function that returns the first encoder suitable for the given request method found in the profile configuration.
AuthenticationResponseStatusAuditExtractor	Function that extracts the status of an authentication response i.e.
AuthenticationTimeClaimsValidator	Verifies the auth_time (when the End-User authentication took place): If the authnLifetimeLookup returns 0 seconds (e.g.
AuthorizationCodeClaimsSetManipulationStrategyLookupFunction	A function that returns (ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
AuthorizationCodeFlowEnabledPredicate	A predicate implementation that forwards to OAuth2FlowAwareProfileConfiguration.isAuthorizationCodeFlowEnabled(ProfileRequestContext).
AuthorizationEndpointAuditExtractor	Function that extracts the authorization endpoint from the OIDCAuthenticationRequest.
AuthTimeRequestedActivationCondition	Has the auth_time claim been requested?
AuthzCodeLifetimeLookupFunction	A function that returns OAuth2AuthorizationCodeProducingProfileConfiguration.getAuthorizeCodeLifetime(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
BackingStore<I,T>	A backing store that holds cached objects.
BaseJWTSignatureSecurityHandler	Base class for security message handlers which evaluate a JWT signature with a signature trust engine.
BaseMetadataCacheBuilderSpec<IdentifierType,MetadataType>	A based metadata cache builder specification.
BaseOIDCAttributeEncoderParser	Base class for Spring bean definition parser for OIDC attribute encoders.
BaseSignedJWTTrustEngine<TrustBasisType>	A TrustEngine implementation for Signed JSON Web Tokens.
BaseStorageServiceClientInformationComponent	A base class for ClientInformationManager and ClientInformationResolver implementations exploiting StorageService for storing the OIDC client information.
BasicClientSecretCredentialFactoryBean	Factory to generate a ClientSecretCredential from a client_secret string.
BasicDecryptionConfiguration	Basic implementation of DecryptionConfiguration for handling JWEs.
BasicEncryptionConfiguration	Basic implementation of EncryptionConfiguration for handling JWE encryption.
BasicExpiringJWKCredential	Basic implementation of an ExpiringJWKCredential.
BasicExpiringJWTSharedSecretCredentialFactoryBean	A factory bean for creating a BasicExpiringJWKCredential from an injected secret.
BasicJOSEObjectCredentialResolver	A basic implementation of JOSEObjectCredentialResolver.
BasicJWKCredential	A basic implementation of JWKCredential.
BasicJWKCredentialFactoryBean	Factory bean for Basic JSON Web Keys (JWK).
BasicJWKReferenceCredential	A basic implementation of JWKReferenceCredential.
BasicNimbusSecretCredential	Deprecated, for removal: This API element is subject to removal in a future version. use ClientSecretCredential
BasicSignatureSigningConfiguration	The configuration information to use when generating an signed JWT.
BasicSignatureSigningParametersResolver	Basic implementation of an SignatureSigningParametersResolver.
BasicSignatureValidationConfiguration	Basic implementation of SignatureValidationConfiguration for signed JWTs.
BasicSignatureValidationParametersResolver	Basic implementation of SignatureValidationParametersResolver.
BatchBackingStore<I,T>	A specialisation of a BackingStore that deals with batch metadata.
BatchMetadataCache<IdentifierType,MetadataType>	A metadata cache implementation that supports 'refresh-ahead' semantics for batch cache updates.
BatchMetadataCacheBuilderSpec<IdentifierType,MetadataType>	A specification for building a batch read-ahead metadata cache.
BuildJSONErrorResponseFromEvent	This action reads an event from the configured EventContext lookup strategy, constructs a json error response message and attaches it as the outbound message.
CacheLoadingContext	Context to hold information pertaining to a cache loading event.
CacheLoadingException	Exception to catch cache loading errors.
ChainingClientInformationResolver	A client information provider that uses registered resolvers, in turn, to answer queries.
ChainingJOSEObjectCredentialResolver	A concrete implementation of AbstractChainingCredentialResolver which is scoped to the simple JOSEObjectCredentialResolver type.
ChainingJWTClaimsValidator	A ClaimsValidator implementation that validates a JWT claims set from a chain of configured validators.
ChainingProviderMetadataResolver	A provider metadata provider that uses registered resolvers, in turn, to answer queries.
CheckClientJWTDecryptionConfiguration	An action that uses a OIDCClientInformation to verify the encryption parameters of an incoming encrypted JWT are compliant with configuration in the client metadata.
CheckClientJWTSignatureAlgorithmHandler	A MessageHandler that uses a OIDCClientInformation to verify the signature of a signed JWT uses expected algorithm.
ClaimExistsActivationCondition	Activation condition to check a claim exists in the claims set.
ClaimSetFromJWTLookupStrategy	Strategy to pull out a ClaimsSet from a located JWT.
ClaimsValidator	High-level API for validating a JWT's claims set.
ClaimsValidatorLookupFunction	A function that obtains OAuth2ClientAuthenticableProfileConfiguration.getClaimsValidator(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
ClientIDCriterion	A Criterion representing an OIDC client ID.
ClientIDFromOIDCMetadataContextLookupFunction	A function that returns client_id via client information stored in OIDCMetadataContext.
ClientInformationCredentialResolver	A JOSEObjectCredentialResolver that resolves credentials from the jwks or contents of jwks_uri of a ClientInformation.
ClientInformationCriterion	Client information criterion to make decisions based on client information.
ClientInformationDataEncryptionAlgorithmsLookupStrategy	A lookup strategy that finds data/content encryption algorithms from local configuration that are compatible with those advertised by the RP/client information.
ClientInformationJWTTrustEngine	An implementation of SignatureTrustEngine which evaluates the validity and trustworthiness of JWT signatures.
ClientInformationKeyTransportEncryptionAlgorithmsLookupStrategy	A lookup strategy that finds key transport algorithms from local configuration that are compatible with those configured to RP.
ClientInformationManager	A manager that is capable of managing ClientInformation instances.
ClientInformationManagerException	Exception indicating a problem managing client information.
ClientInformationNodeProcessor	An implementation of MetadataNodeProcessor which supports adding an instance of OIDCClientInformation to the object metadata of SPSSODescriptor.
ClientInformationParser	Parser for a <ClientInformation> node processor.
ClientInformationResolver	A resolver that is capable of resolving ClientInformation instances which meet certain supplied criteria.
ClientInformationResolverServiceStrategy	Strategy for summoning up a ClientInformationResolver from a populated ApplicationContext.
ClientInformationSignatureSigningParametersResolver	An implementation of an SignatureSigningParametersResolver that extends the BasicSignatureSigningParametersResolver functionality by adding a configurable lookup strategy for fetching the desired algorithm value from OIDCClientInformation.
ClientInformationStringValueLookupFunction	Fetches the value for the configured key as String.
ClientSecret	SAML2 OIDC metadata extension 'ClientSecret'.
ClientSecretBuilder	Builder of ClientSecretImpl.
ClientSecretCredential	Credential wrapping a client_secret.
ClientSecretCredentialCriterion	A Criterion that holds a single, fixed, client_secret credential.
ClientSecretCriterionCredentialResolver	Extracts a credential held inside the ClientSecretCredentialCriterion from the given criteria set.
ClientSecretImpl	Concrete implementation of ClientSecret.
ClientSecretKeyReference	SAML2 OIDC metadata extension 'ClientSecretReferenceKey'.
ClientSecretKeyReferenceBuilder	Builder of ClientSecretKeyReferenceImpl.
ClientSecretKeyReferenceImpl	Concrete implementation of ClientSecretKeyReference.
ClientSecretKeyReferenceMarshaller	A thread safe Marshaller for ClientSecretKeyReference objects.
ClientSecretKeyReferenceUnmarshaller	A thread-safe Unmarshaller for ClientSecretKeyReference objects.
ClientSecretMarshaller	A thread safe Marshaller for ClientSecret objects.
ClientSecretProvider	Implementation of KeyInfoProvider which provides basic support for extracting a NimbusSecretCredential child of KeyInfo.
ClientSecretReferenceCriterion	A Criterion representing a reference to a client secret.
ClientSecretReferenceProvider	Implementation of KeyInfoProvider which provides basic support for extracting a NimbusSecretCredential child of KeyInfo.
ClientSecretUnmarshaller	A thread-safe Unmarshaller for ClientSecret objects.
ClientSecretValueResolver	A resolver that is capable of resolving client secret values (as Strings) which meet certain supplied criteria.
CollectionJOSEObjectCredentialResolver	An implementation of BasicJOSEObjectCredentialResolver that uses a Collection as the underlying credential source.
Constants	Constants related to SAML 2.0 Metadata extension OAuthRPRoleDescriptorType.
CredentialConversionUtil	Generic tool methods related to converting Credential to JWK.
CredentialsListFactory	A factory that returns a list of credentials which does not contain any null elements.
DataEncryptionAlgorithmCriterion	An implementation of an Criterion which specifies content encryption algorithm criteria.
DataEncryptionAlgorithmsLookupFunction	Deprecated, for removal: This API element is subject to removal in a future version.
DateBasedJWTClaimAuditExtractor	A JWT claim extractor function that returns a formatted String representation of the JSON Date.
DecryptionConfiguration	The configuration information to use when decrypting JWEs.
DecryptionConfigurationCriterion	Criterion which holds one or more instances of a DecryptionConfiguration.
DecryptionParameters	Describes the decryption parameters the system is required to use to decrypt a JWE.
DecryptionParametersResolver	An interface for components which resolve DecryptionParameters based on a CriteriaSet.
DecryptJWE	Decrypt the located JWE using the decryption parameters stored in the security context.
DefaultAcrValue	SAML2 OIDC metadata extension 'DefaultAcrValue'.
DefaultAcrValueBuilder	Builder of DefaultAcrValueImpl.
DefaultAcrValueImpl	Concrete implementation of DefaultAcrValue.
DefaultAcrValueMarshaller	A thread safe Marshaller for DefaultAcrValue objects.
DefaultAcrValueUnmarshaller	A thread-safe Unmarshaller for DefaultAcrValue objects.
DefaultBatchBackingStore<I,T>	Default implementation of a BatchBackingStore.
DefaultClientSecretCredential	A basic implementation of ClientSecretCredential.
DefaultDataEncryptionAlgorithmsLookupStrategy	A BiFunction which pulls data encryption (content encryption) algorithms to use from the encryption configuration and filters them.
DefaultDecryptionParametersResolver	Basic implementation of DecryptionParametersResolver.
DefaultDynamicBackingStore<I,T>	Default implementation of a DynamicBackingStore.
DefaultEncryptionParametersResolver	Default implementation of an EncryptionParametersResolver.
DefaultFileLoadingStrategy	Default strategy for loading information from a file.
DefaultJSONMapParsingStrategy<V>	Deserializes a UTF-8 JSON string into a Map.
DefaultKeyTransportEncryptionAlgorithmsLookupStrategy	A BiFunction that retrieves and filters the key transport encryption algorithms from the EncryptionConfiguration inside the criteria set.
DefaultMetadataPolicyEnforcer	A function that applies the given MetadataPolicy to the given object.
DefaultMetadataPolicyResponseHandler	The response handler for parsing the metadata policy document into a map.
DefaultMetadataPolicyValidator	A function that verifies that the map of MetadataPolicy entries meets the restrictions defined in the OIDC federation specification 1.0 (draft 17 / September 2021):
DefaultOAuth2TokenAudienceConfiguration	Implementation of an OAuth 2.0 token "audience" profile configuration.
DefaultOAuth2TokenConfiguration	Implementation of an OIDC-aware OAuth 2 token endpoint profile configuration.
DefaultOAuth2TokenIntrospectionConfiguration	Implementation of a profile configuration for the OAuth2 Token Introspection.
DefaultOAuth2TokenRevocationConfiguration	Implementation of a profile configuration for OAuth2 Token Revocation.
DefaultOIDCAuthorizationConfiguration	Implementation of a profile configuration for the OpenID Connect authorization endpoint.
DefaultOIDCDynamicRegistrationConfiguration	Implemenation of a profile configuration for the OpenID Connect dynamic client registration.
DefaultOIDCProviderInformationConfiguration	Implementation of a profile configuration for the OpenID Connect Provider Configuration.
DefaultOIDCProviderMetadataCriteriaToIdentifierStrategy	Strategy for extracting the IssuerIDCriterion from a CriteriaSet.
DefaultOIDCProviderMetadataExpirationTimeStrategy	Strategy for computing an expiry time for OIDCProviderMetadata.
DefaultOIDCProviderMetadataIdentifierExtractionStrategy	Strategy for finding the Issuer of the given OIDCProviderMetadata.
DefaultOIDCProviderMetadataParsingStrategy	Parse a raw byte array into a *single* OIDCProviderMetadata object.
DefaultOIDCPublishKeySetConfiguration	Implementation of a profile configuration for publishing OP key set.
DefaultOIDCUserInfoConfiguration	Implementation of a profile configuration for the OpenID Connect core protocol userinfo endpoint.
DefaultSourceMetadataExpirationTimeStrategy	Simple strategy for computing an expiry time by adding an expiry duration to the current time.
DeniedUserInfoAttributesLookupFunction	A function that obtains OIDCAuthorizationConfiguration.getDeniedUserInfoAttributes(ProfileRequestContext) or OIDCUserInfoConfiguration.getDeniedUserInfoAttributes(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
DynamicBackingStore<I,T>	A dynamic version of a BackingStore.
DynamicMetadataCache<IdentifierType,MetadataType>	A metadata cache implementation that supports 'read-through' semantics.
DynamicMetadataCacheBuilderSpec<IdentifierType,MetadataType>	A specification for building a dynamic read-through metadata cache.
DynamicOIDCMetadataResolver<T>	Marker interface for OIDCMetadataResolver implementations which resolve metadata by dynamically querying for the requested data individually at the time of the resolution operation, for example by invoking a request to the well-known provider configuration endpoint.
EncodeConsentPredicate	A predicate implementation that forwards to OIDCAuthorizationConfiguration.isEncodeConsentInTokens(ProfileRequestContext).
EncodedAttributesLookupFunction	A function that obtains OIDCAuthorizationConfiguration.getEncodedAttributes(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
EncryptionA128CBCHS256	Algorithm descriptor for block encryption algorithm: A128CBC-HS256.
EncryptionA128GCM	Algorithm descriptor for block encryption algorithm: 128GCM.
EncryptionA192CBCHS384	Algorithm descriptor for block encryption algorithm: A192CBC-HS384.
EncryptionA192GCM	Algorithm descriptor for block encryption algorithm: 192GCM.
EncryptionA256CBCHS512	Algorithm descriptor for block encryption algorithm: A256CBC-HS512.
EncryptionA256GCM	Algorithm descriptor for block encryption algorithm: 256GCM.
EncryptionConfiguration	The configuration information to use when generating a JWE.
EncryptionConfigurationCriterion	Criterion which holds one or more instances of EncryptionConfigurationCriterion.
EncryptionConstants	Algorithm Header Parameter 'enc' Values for JWE as defined by RFC 7518.
EncryptionOptionalPredicate	A predicate implementation that forwards to OAuth2TokenEncryptionProfileConfiguration.isEncryptionOptional(ProfileRequestContext).
EncryptionParameters	The effective parameters to use when generating encrypted JWTs.
EncryptionParametersResolver	An interface for components which resolve EncryptionParameters based on a CriteriaSet.
EncryptJWTHandler	A MessageHandler that encrypts a JWT using the EncryptionParameters found in the SecurityParametersContext.
EncryptRequestObjectPredicate	A predicate that determines if the RequestObject JWT should be encrypted based on the profile configuration.
EnforceRefreshTokenRotationPredicate	A predicate implementation that forwards to OAuth2TokenConfiguration.isEnforceRefreshTokenRotation(ProfileRequestContext).
EvaluableKeyIDCredentialCriterion	Instance of evaluable credential criteria for evaluating credential key IDs.
EvaluableMACKeyLengthCredentialCriterion	Instance of evaluable credential criteria for evaluating if the key length of the secret key inside the credential is compatible with the MAC algorithm given.
ExactMatchClaimsValidator	Validator that checks a JWT claim exactly matches (by Object equality) a value returned by a lookup strategy.
ExpirationTimeContext<T>	Context to hold information pertaining to the computation of a metadata's expiration time.
ExpiringJWKCredential	A credential that expires at some duration in seconds after 1970-01-01T0:0:0Z.
ExpiryClaimsValidator	Iff an expiration time (exp) claim is present, verifies that it is ahead of the current time, else the JWT claims set is rejected.
ExplicitKeySignedJWTTrustEngine	An implementation of SignatureTrustEngine which evaluates the validity and trustworthiness of JWT signatures.
ExplicitKeyTrustEvaluator	Auxillary trust evaluator for evaluating an untrusted key or credential against a trusted key or credential.
FetchThroughMetadataCache<IdentifierType,MetadataType>	A metadata cache implementation that does not support reading and writing to a backing store.
FetchThroughMetadataCacheBuilderSpec<IdentifierType,MetadataType>	A specification for building a fetch-through metadata cache.
FilesystemClientInformationResolver	An OIDC metadata provider that pulls client metadata from a file on the local filesystem.
FilesystemProviderMetadataResolver	An OIDC metadata provider that pulls provider metadata from a file on the local filesystem.
FilterException	An exception thrown during the evaluation of a MetadataFilter.
ForceAuthnAuditExtractor	Function that returns true if the OIDC prompt is set as 'login' in the authentication request.
ForcedAuthenticationActivationCondition	Has forced authentication been requested?
ForcePKCEPredicate	A predicate implementation that forwards to OIDCSSOProfileConfiguration.isForcePKCE(ProfileRequestContext).
FormOutboundKeySetResponseMessage	Action that forms outbound message containing keyset.
FunctionClaimsValidator	A ClaimsValidator that relies on an injected BiFunction.
GrantTypesLookupFunction	A function that obtains OAuth2TokenConfiguration.getGrantTypes(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
HTTPPostAuthnRequestEncoder	A message encoder that encodes an OpenID authentication request by HTTP Form POST Serialization.
HTTPPostAuthnResponseDecoder	A message decoder that decodes an incoming AuthenticationResponse when using a form_post response_type.
HTTPProviderConfigurationFetchingStrategy	A dynamic strategy for fetching OpenID Connect Provider Configuration Metadata from its well-known location (OpenID Connect Discovery 1.0, section 4).
HTTPProviderConfigurationFetchingStrategy.DefaultWellKnownPathCompositionStrategy	Default strategy for composing a well-known URL to fetch a provider's configuration document from.
HTTPProviderConfigurationFetchingStrategy.OIDCProviderMetadataResponseHandler	The response handler for parsing the providers's configuration information into OIDCProviderMetadata.
HTTPRedirectAuthnRequestEncoder	A message encoder that encodes an OpenID authentication request by Query String Serialization and sends a HTTP redirect response.
HTTPRedirectAuthnResponseDecoder	A message decoder that decodes an incoming AuthenticationResponse when using a query response_mode.
HybridFlowEnabledPredicate	A predicate implementation that forwards to OIDCFlowAwareProfileConfiguration.isHybridFlowEnabled(ProfileRequestContext).
IDTokenClaims	Enum of those OIDC ID token claims that are not part of the standard JWT claims set.
IDTokenLifetimeLookupFunction	A function that returns OIDCIDTokenProducingProfileConfiguration.getIDTokenLifetime(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
IDTokenManipulationStrategyLookupFunction	A function that returns OIDCIDTokenProducingProfileConfiguration.getIDTokenManipulationStrategy(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
ImplicitFlowEnabledPredicate	A predicate implementation that forwards to OAuth2FlowAwareProfileConfiguration.isImplicitFlowEnabled(ProfileRequestContext).
InboundMessageClassLookupFunction	Looks up the value of the simple class name from the inbound message context's message object.
IncludeIssuerInAuthenticationResponsePredicate	A predicate implementation that forwards to OIDCAuthorizationConfiguration.isIncludeIssuerInResponse(ProfileRequestContext).
InlineJwksProvider	Implementation of KeyInfoProvider which provides basic support for extracting a JWKCredential child of KeyInfo.
IssuedAtClaimsValidator	If the 'iat' claim is present in the JWT, verifies it is not to far away from the current time.
IssuedClaimsValidatorLookupFunction	A function that obtains OAuth2TokenValidatingProfileConfiguration.getIssuedClaimsValidator(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
IssueIdTokenViaRefreshTokenPredicate	A predicate implementation that forwards to OAuth2TokenConfiguration.isIssueIdTokenViaRefreshToken(ProfileRequestContext).
IssuerIDCriterion	A Criterion representing an OIDC issuer ID.
IssuerIDFromOIDCProviderMetadataContextLookupFunction	A function that returns the issuer id via the provider information stored in OIDCProviderMetadataContext.
JCAConstantExtension	Additional constants to JCAConstants defined in and/or used with the Java Cryptography Architecture (JCA) specification.
JOSEObjectCredentialResolver	Specialized CredentialResolver marker interface for resolvers which resolve credentials from the headers of a JOSEObject instance.
JOSEObjectCriterion	An implementation of Criterion which specifies criteria based on the contents of a JOSEObject element.
JSONErrorResponse	Class for creating JSON Error response for requests expecting JSON response.
JSONMapMetadataResolver	Concrete metadata resolver for OIDC Provider configuration metadata resolution.
JSONMetadataResolver	A resolver that is capable of resolving Map instances which meet certain supplied criteria.
JSONSecurityConfiguration	Class extends SecurityConfiguration to support separate configuration for various encryption and signature validation operations.
JSONSuccessResponse	Class for creating JSON Success response.
JWACredentialSupport	Support class for JSON Web Algorithm credentials.
JWEDataEncryptionAlgorithmsLookupFunction	A function that returns EncryptionConfiguration.getDataEncryptionAlgorithms() if it is available in the OIDC security configuration of the profile configuration.
JWEKeyTransportEncryptionAlgorithmsLookupFunction	A function that returns EncryptionConfiguration.getKeyTransportEncryptionAlgorithms() if it is available in the OIDC security configuration of the profile configuration.
JWETokenDecrypter	Supports decryption of encrypted JSON Web Tokens using the JSON Web Encryption standard.
JWKCredential	Credential based on JSON Web Key (JWK).
JWKCredentialsToPublishLookupStrategy	Strategy to locate the set of JWK credentials to publish in a KeySet document.
JWKCredentialSupport	Provide JWK specific credential support.
JWKReferenceCredential	Credential based on a reference (URI) to a JSON Web Key (JWK).
JwksData	SAML2 OIDC metadata extension 'JwksData'.
JwksDataBuilder	Builder of JwksDataImpl.
JwksDataImpl	Concrete implementation of JwksData.
JwksDataMarshaller	A thread safe Marshaller for JwksData objects.
JwksDataUnmarshaller	A thread-safe Unmarshaller for JwksData objects.
JWKSetCriterion	An implementation of Criterion which specifies criteria based on the contents of a JWKSet element.
JWKSReferenceProvider	Implementation of KeyInfoProvider which provides basic support for extracting a JWKReferenceCredential child of KeyInfo.
JwksUri	SAML2 OIDC metadata extension 'JwksUri'.
JwksUriBuilder	Builder of JwksUriImpl.
JwksUriImpl	Concrete implementation of JwksUri.
JwksUriMarshaller	A thread safe Marshaller for JwksUri objects.
JwksUriUnmarshaller	A thread-safe Unmarshaller for JwksUri objects.
JWSAssemblyUtils	Generic utility class for helping with JWS assembly.
JWSSignatureAlgorithmsLookupFunction	A function that returns SignatureSigningConfiguration.getSignatureAlgorithms() if it is available in the OIDC security configuration of the profile configuration.
JWTClaims	Enum that represents the standard set of registered JWT claims.
JWTDecryptionConfigurationLookupFunction	A function that returns a DecryptionConfiguration list for JWE decrypting by way of various lookup strategies.
JWTEncryptionConfigurationLookupFunction	A function that returns an EncryptionConfiguration list for JWT encryption by way of various lookup strategies.
JWTIdentifierClaimsValidator	Verifies the identifier (jit) from the JWT against replay via configurable ReplayCache.
JWTIdentifierRevocationValidator	Verifies the identifier (jit) from the JWT against revocation via configurable RevocationCache.
JWTMessageSignatureSecurityHandler	A MessageHandler that uses a TrustEngine to evaluate the signature of a signed JWT.
JWTSignatureSigningConfigurationLookupFunction	A function that returns a SignatureSigningConfiguration list for JWT signing by way of various lookup strategies.
JWTSignatureValidationConfigurationLookupFunction	A function that returns a SignatureValidationConfiguration list for JWS validation by way of various lookup strategies.
JWTSignatureValidationUtil	Generic utility class for helping JWT signature validation.
JWTValidationException	JWT validation exception, to throw when validation fails.
KeyAgreementECDHES	Algorithm descriptor for JWE key management algorithm: ECDH-ES.
KeyAgreementECDHESA128KW	Algorithm descriptor for JWE key management algorithm: ECDH-ES+A128KW.
KeyAgreementECDHESA192KW	Algorithm descriptor for JWE key management algorithm: ECDH-ES+A192KW.
KeyAgreementECDHESA256KW	Algorithm descriptor for JWE key management algorithm: ECDH-ES+A256KW.
KeyIdCriterion	An implementation of Criterion which specifies key ID criteria.
KeyManagementConstants	Algorithm Header Parameter 'alg' Values for JWE as defined by RFC 7518.
KeyManagmentAlgorithmCriterion	An implementation of Criterion which specifies key management algorithm criteria.
KeyTransportEncryptionAlgorithmsLookupFunction	Deprecated, for removal: This API element is subject to removal in a future version.
KeyTransportRSA15	Algorithm descriptor for JWE key transport algorithm: RSA1_5.
KeyTransportRSAOAEP	Algorithm descriptor for JWE key transport algorithm: RSA-OAEP.
KeyTransportRSAOAEP256	Algorithm descriptor for JWE key transport algorithm: RSA-OAEP-256.
KeyTransportRSAOAEP384	Algorithm descriptor for JWE key transport algorithm: RSA-OAEP-384.
KeyTransportRSAOAEP512	Algorithm descriptor for JWE key transport algorithm: RSA-OAEP-512.
LoadingStrategy	A strategy that loads binary information from a configured source.
LocalJOSEObjectCredentialResolver	A simple specialization of BasicJOSEObjectCredentialResolver which is capable of resolving local credentials from a supplied CredentialResolver which manages local credentials.
MapBasedMetadataResolver	A resolver that is capable of resolving Maps which meet certain supplied criteria.
MessageContextLookupFunctionAdaptor<ResultType>	Adaptor function that allows a profile request context lookup function to work inside a message handler.
MetadataCache<U>	A cache for loading, storing, and retrieving metadata against against the supplied CriteriaSet.
MetadataCacheBuilder	A builder that creates, initializes, and safely publishes the correct metadata cache based on the supplied metadata cache builder specification.
MetadataCacheBuilder.Builder<IdentifierType,MetadataType>	A static builder for generating a batch metadata cache from a given specification.
MetadataCacheBuilderSpec<IdentifierType,MetadataType>	Marker interface for metadata cache builder specifications.
MetadataCacheException	Base exception for metadata cache related errors.
MetadataFilter<T>	A metadata filter is used to process a metadata document after it has been acquired from a metadata source.
MetadataFilterContext	Class used to provide contextual information at runtime to MetadataFilter implementations.
MetadataFilterContext.Data	Marker interface for data classes to be used with MetadataFilterContext.
MetadataManagementData<MetadataIdentifier>	Class that holds management data about an entities metadata.
MetadataNamespaceHandler	Namespace handler for urn:mace:shibboleth:2.0:metadata:oidc.
MetadataPolicy	The metadata policy for a single claim.
MetadataPolicy.Builder	Builder class for the MetadataPolicy objects.
MetadataPolicyHelper	Static utility methods related to metadata policies.
MetadataPolicyLookupStrategyFactory	A factory for building a function that resolves maps of metadata policies from the profile request context.
MetadataPolicyResolver	A resolver that is capable of resolving map of metadata policies (in the entry values as MetadataPolicy objects) which meet certain supplied criteria.
MetadataPolicyViaLocationFetchingStrategy	A fetching strategy that exploits ResourceLocationCriterion from the given CriteriaSet to resolve a location for metadata policy.
MetadataSource	Data object for MetadataFilterContext intended to hold information about the source of the metadata currently being processed.
MetadataValueSAMLObject	Abstract interface for SAML metadata objects containing single String value inside the element.
NimbusSecretCredential	Deprecated, for removal: This API element is subject to removal in a future version. use ClientSecretCredential
NonceAuditExtractor	Function that extracts nonce in the OIDCAuthenticationRequest.
NonceValidationActivationCondition	Determines if nonce validation should occur.
NotBeforeClaimsValidator	Iff a not-before-time (nbf) claim is present, makes sure it is before the current time.
NumberOfClaimValuesActivationCondition	Activation condition to check the number of values a claim has against a given predicate.
OAuth2AccessTokenProducingProfileConfiguration	Configuration common to OAuth 2.0 access token producing profiles.
OAuth2AuthorizationCodeProducingProfileConfiguration	Configuration common to authorizaton code producing profiles.
OAuth2AuthorizationProfileConfiguration	Configuration for a generic OAuth 2.0 authorization request.
OAuth2AuthorizationProfileConfiguration.HttpRequestMethod	Enumeration of the HTTP methods used in various OAuth requests.
OAuth2ClientAuthenticableClientProfileConfiguration	OAuth 2.0 profile configurations that support OAuth-defined client authentication methods.
OAuth2ClientAuthenticableProfileConfiguration	OAuth 2.0 profile configurations that support OAuth-defined client authentication methods.
OAuth2ClientAuthenticationContext	A context containing data about OAuth 2.0 client authentication.
OAuth2FlowAwareProfileConfiguration	Interface for profile configurations that understand OAuth 2.0 authorization grants corresponding to OIDC authentication flows.
OAuth2ProfileConfiguration	Common interface for OAuth 2.0 Profile Configurations.
OAuth2RefreshTokenProducingProfileConfiguration	Configuration common to OAuth 2.0 refresh token producing profiles.
OAuth2TokenAudienceConfiguration	Profile interface for OAuth 2 token "audience" profile configuration.
OAuth2TokenConfiguration	OIDC-aware OAuth 2.0 token endpoint profile configuration.
OAuth2TokenEncryptionProfileConfiguration	Profile configuration for token endpoints that deal with encryption.
OAuth2TokenIntrospectionConfiguration	Profile configuration for OAuth2 Token Introspection.
OAuth2TokenRevocationConfiguration	Configuration for the OAuth 2.0 Token Revocation profile.
OAuth2TokenRevocationConfiguration.OAuth2TokenRevocationMethod	Enumeration of the OAuth2 token revocation methods.
OAuth2TokenValidatingProfileConfiguration	Profile configuration for OIDC-aware OAuth 2.0 token endpoints.
OAuthAuthorizationRequest	An OAuth 2.0 authorization request.
OAuthRPExtensions	SAML 2.0 Metadata extension OAuthRPExtensions.
OAuthRPExtensionsBuilder	Builder of OAuthRPExtensions objects.
OAuthRPExtensionsImpl	Implementation for OAuthRPExtensions.
OAuthRPExtensionsMarshaller	Marshaller for OAuthRPExtensions objects.
OAuthRPExtensionsUnmarshaller	Unmarshaller for OAuthRPExtensions objects.
OIDCAttributeTranscoder	Marker interface for transcoders that operate on OIDC claims.
OIDCAuthenticationProfileConfiguration	Generic configuration for an OIDC 1.0 authentication request.
OIDCAuthenticationRelyingPartyProfileConfiguration	Configuration of an OIDC 1.0 authentication request.
OIDCAuthenticationRequest	OpenID Connect Authentication Request.
OIDCAuthorizationConfiguration	Configuration of an OIDC 1.0 authentication request.
OIDCByteAttributeTranscoder	Class encoding byte attributes to base64 encoded string json object.
OIDCByteEncoderParser	Spring bean definition parser for OIDCByteAttributeTranscoder.
OIDCCommonModule	OIDC Common module implementation.
OIDCCommonPlugin	OIDC Common plugin implementation.
OIDCDecryptionParameters	Deprecated, for removal: This API element is subject to removal in a future version.
OIDCDynamicRegistrationConfiguration	Configuration of OpenID Connect Dynamic Client Registration 1.0.
OidcError	Supplemental error objects for any missing values in the Nimbus library.
OidcEventIds	OpenID Connect -specific constants to use for ProfileAction EventContexts.
OIDCFlowAwareProfileConfiguration	Interface for profile configurations that understand OIDC specific authentication flows in addition to the OAuth 2.0 flows described by OAuth2FlowAwareProfileConfiguration.
OIDCIDTokenProducingProfileConfiguration	Configuration common to ID Token producing profiles.
OIDCMapBasedMetadataResolver	Concrete metadata resolver for OIDC Provider configuration metadata resolution.
OIDCMessageDecoder	Marker interface for OIDC Message Decoders.
OIDCMessageEncoder	An OIDC message encoder interface which requires implementations to test if the request method is supported by the encoder.
OIDCMetadataContext	Subcontext carrying information on metadata of the relying party.
OIDCMetadataPolicyResolver	Concrete resolver implementation for metadata policy resolution.
OIDCMetadataResolver<T>	Generic interface for OIDC Metadata resolvers which process specified criteria and produce some implementation-specific result information.
OIDCPeerEntityContext	Lightweight subcontext that carries information about a OIDC peer entity.
OIDCProfileConfiguration	Common interface for OpenID Connect 1.0 Profile Configurations.
OIDCProviderInformationConfiguration	Profile configuration for an OpenID Connect Provider Configuration.
OIDCProviderMetadataContext	Subcontext carrying information on metadata of the OpenID Connect Provider.
OIDCProviderMetadataResolver	Concrete metadata resolver for OIDC Provider configuration metadata resolution.
OIDCPublishKeySetConfiguration	Configuration of an OpenID published key set document.
OIDCResponseEncoderFactory	A source of encoders that first verifies a message being an instance of Nimbus Response and then returns the attached MessageEncoder.
OIDCScopedStringAttributeTranscoder	Class encoding scoped string attributes to string json object.
OIDCScopedStringEncoderParser	Spring bean definition parser for OIDCScopedStringAttributeTranscoder.
OIDCSecurityConfiguration	Deprecated, for removal: This API element is subject to removal in a future version. use JSONSecurityConfiguration
OIDCSignatureValidationParameters	Deprecated, for removal: This API element is subject to removal in a future version.
OIDCSSOProfileConfiguration	Profile configuration generic to all OIDC SSO profiles.
OIDCSSOProviderConfiguration	Profile configuration for an OIDC SSO Provider.
OIDCSSORelyingPartyConfiguration	Profile configuration for an OIDC SSO Client or Relying Party.
OIDCStringAttributeTranscoder	Class encoding string attributes to string json object.
OIDCStringEncoderParser	Spring bean definition parser for OIDCStringAttributeTranscoder.
OIDCUserInfoConfiguration	Configuration for an OpenID Connect core protocol UserInfo endpoint.
OutboundMessageClassLookupFunction	Looks up the value of the simple class name from the outbound message context's message object.
PopulateJWTDecryptionParameters	Action that resolves and populates DecryptionParameters on an SecurityParametersContext created/accessed via a lookup function, by default on a child of the outbound message context.
PopulateJWTEncryptionParameters	Action that resolves and populates EncryptionParameters on an SecurityParametersContext created/accessed via a lookup function, by default on a child of the outbound message context.
PopulateJWTSignatureSigningParameters	Action that resolves and populates SignatureSigningParameters on a SecurityParametersContext created/accessed via a lookup function, by default on the outbound message context.
PopulateJWTSignatureSigningParametersHandler	Handler that resolves and populates SignatureSigningParameters on a SecurityParametersContext created/accessed via a lookup function, by default as an immediate child context of the target MessageContext.
PopulateJWTSignatureValidationParameters	Action that resolves and populates SignatureValidationParameters on a SecurityParametersContext created/accessed via a lookup function, by default on the inbound message context.
PopulateJWTSignatureValidationParametersHandler	Handler that resolves and populates SignatureValidationParameters on a SecurityParametersContext created/accessed via a lookup function, by default as an immediate child context of the target MessageContext.
PostLogoutRedirectUri	SAML2 OIDC metadata extension 'PostLogoutRedirectUri'.
PostLogoutRedirectUriBuilder	Builder of PostLogoutRedirectUriImpl.
PostLogoutRedirectUriImpl	Concrete implementation of PostLogoutRedirectUri.
PostLogoutRedirectUriMarshaller	A thread safe Marshaller for PostLogoutRedirectUri objects.
PostLogoutRedirectUriUnmarshaller	A thread-safe Unmarshaller for PostLogoutRedirectUri objects.
ProhibitedClaimsValidator	Verify the claims set does not contain any of the described set of claims.
PropertiesClientSecretValueResolver	A client secret value resolver that fetches the values from the given Properties file.
ProviderMetadataCredentialResolver	A LocalJOSEObjectCredentialResolver that resolves credentials from the jwks_uri of an OpenID Provider.
ProviderMetadataCriterion	Provider metadata criterion to make decisions based on OpenID Provider information.
ProviderMetadataDataEncryptionAlgorithmsLookupStrategy	A lookup strategy that finds data/content encryption algorithms from local configuration that are compatible with those advertised by the OpenID Provider.
ProviderMetadataKeyTransportEncryptionAlgorithmsLookupStrategy	A lookup strategy that finds key transport algorithms from local configuration that are compatible with those advertised by the downstream OpenID Provider.
ProviderMetadataProviderContainer	This class is a sortable container of ProviderMetadataResolvers, wrapped into a serviceable component.
ProviderMetadataResolver	A resolver that is capable of resolving OIDCProviderMetadata instances which meet certain supplied criteria.
ProviderMetadataResolverServiceStrategy	Strategy for summoning up a ProviderMetadataResolver from a populated ApplicationContext.
ProviderMetadataStringValuesLookupFunction	Fetches the values for the configured key as String.
ProxyAwareDefaultOIDCAuthenticationContextClassRequestLookupFunction	Implements a set of default logic for determining the custom principals to derive the OIDC ACRs from.
ProxyAwareDefaultOIDCAuthenticationContextClassResponseLookupFunction	Implements a set of logic for determining the principals to use from OIDC 'amr' or 'acr' claims.
ProxyAwareDefaultOIDCAuthenticationContextClassResponseLookupFunction.LookupFunctionWrapper	A simple lookup function that returns a singleton function.
RedirectURIAuditExtractor	Function that extracts the redirect_uri from the OIDCAuthenticationRequest.
RefreshableClientInformationResolver	Specialization of ClientInformationResolver that supports on-demand refresh.
RefreshableProviderMetadataResolver	Specialization of ProviderMetadataResolver that supports on-demand refresh.
RefreshTokenChainLifetimeLookupFunction	A function that returns OAuth2RefreshTokenProducingProfileConfiguration.getRefreshTokenChainLifetime(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
RefreshTokenClaimsSetManipulationStrategyLookupFunction	A function that returns OAuth2TokenConfiguration.getRefreshTokenClaimsSetManipulationStrategy(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
RefreshTokenLifetimeLookupFunction	Deprecated, for removal: This API element is subject to removal in a future version. use RefreshTokenTimeoutLookupFunction
RefreshTokensEnabledPredicate	A predicate implementation that forwards to OAuth2FlowAwareProfileConfiguration.isRefreshTokensEnabled(ProfileRequestContext).
RefreshTokenTimeoutLookupFunction	A function that returns OAuth2RefreshTokenProducingProfileConfiguration.getRefreshTokenTimeout(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
RegistrationMetadataPolicyLookupFunction	A function that returns OIDCDynamicRegistrationConfiguration.getMetadataPolicy(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
RegistrationValidityPeriodLookupFunction	A function that returns OIDCDynamicRegistrationConfiguration.getRegistrationValidityPeriod(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
ReloadingProviderMetadataProvider	This class uses the service interface to implement ProviderMetadataResolver.
ReloadingRelyingPartyClientInformationProvider	This class uses the service interface to implement ClientInformationResolver.
RelyingPartyClientInformationProvider	This class exists primarily to allow the parsing of relying-party.xml to create a serviceable implementation of ClientInformationResolver.
RelyingPartySigningParametersResolver	A specialization of BasicSignatureSigningParametersResolver which supports selecting signing credentials from client_secret credential criterion (e.g.
RemoteJwkSetCache	Stores fetched remote key set values for a desired period of time.
RemoteJwkUtils	Generic utility methods related to remote JWK sets.
RequestedEssentialACRClaimsLookupStrategy	Strategy that looks up any requested ACR claims from the requested claims object that have to be contained in the token's claims set.
RequestObjectDecryptionConfigurationLookupFunction	Deprecated, for removal: This API element is subject to removal in a future version.
RequestObjectSignatureValidationConfigurationLookupFunction	Deprecated, for removal: This API element is subject to removal in a future version.
RequestUri	SAML2 OIDC metadata extension 'RequestUri'.
RequestUriBuilder	Builder of RequestUriImpl.
RequestUriImpl	Concrete implementation of RequestUri.
RequestUriMarshaller	A thread safe Marshaller for RequestUri objects.
RequestUriUnmarshaller	A thread-safe Unmarshaller for RequestUri objects.
RequiredClaimsValidator	Verify the claims set contains the given set of required claims.
ResolverBasedRegistrationMetadataPolicyLookupFunction	A lookup function for the map of MetadataPolicy objects, resolved via configurable MetadataPolicyResolver and optionally configurable CriteriaSet.
ResolverHelper	Helper methods for (OIDC) metadata resolution classes.
ResolverServiceClientSecretValueResolver	A client secret value resolver that fetches the values from the given AttributeResolver service.
ResourceLocationCriterion	A Criterion representing a resource location.
ResponseModeAuditExtractor	Function that extracts response_mode in the OIDCAuthenticationRequest.
ResponseTypeAuditExtractor	Function that extracts response_type in the OIDCAuthenticationRequest.
ReturnAllCollectionJOSEObjectCredentialResolver	An implementation of JOSEObjectCredentialResolver that uses a Collection as the underlying credential source.
RevocationLifetimeLookupFunction	A function that returns OAuth2TokenRevocationConfiguration.getRevocationLifetime(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
RevocationMethodLookupFunction	A function that returns OAuth2TokenRevocationConfiguration.getRevocationMethod(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
ScopeAuditExtractor	Function that extracts scope in the OIDCAuthenticationRequest.
SecretExpirationPeriodLookupFunction	A function that returns OIDCDynamicRegistrationConfiguration.getSecretExpirationPeriod(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
SecurityParametersContext	A context implementation for storing parameter instances for JWS signature signing and validation, and JWE encryption and decryption.
SignatureAlgorithmsLookupFunction	Deprecated, for removal: This API element is subject to removal in a future version.
SignatureConstants	Algorithm Header Parameter Values for JWS.
SignatureES256	Algorithm descriptor for signature algorithm: ES256.
SignatureES384	Algorithm descriptor for signature algorithm: ES384.
SignatureES512	Algorithm descriptor for signature algorithm: ES512.
SignatureHS256	Algorithm descriptor for HMAC algorithm: HS256.
SignatureHS384	Algorithm descriptor for HMAC algorithm: HS384.
SignatureHS512	Algorithm descriptor for HMAC algorithm: HS512.
SignaturePS256	Algorithm descriptor for signature algorithm: PS256.
SignaturePS384	Algorithm descriptor for signature algorithm: PS384.
SignaturePS512	Algorithm descriptor for signature algorithm: PS512.
SignatureRS256	Algorithm descriptor for signature algorithm: RS256.
SignatureRS384	Algorithm descriptor for signature algorithm: RS384.
SignatureRS512	Algorithm descriptor for signature algorithm: RS512.
SignatureSigningConfiguration	The configuration information to use when generating a signed JWT.
SignatureSigningConfigurationCriterion	Criterion which holds one or more instances of SignatureSigningConfigurationCriterion.
SignatureSigningParameters	The effective parameters to use when generating a JWS.
SignatureSigningParametersResolver	An interface for components which resolve SignatureSigningParameters based on a CriteriaSet.
SignatureValidationConfiguration	The configuration information to use when validating a JWS.
SignatureValidationConfigurationCriterion	Criterion which holds one or more instances of SignatureValidationConfiguration for signed JWTs.
SignatureValidationParameters	The effective parameters to use when validating a JWS.
SignatureValidationParametersCriterion	Criterion which holds an instance of SignatureValidationParameters.
SignatureValidationParametersResolver	An interface for components which resolve SignatureValidationParameters based on a CriteriaSet.
SignJWTHandler	Message handler that signs a JWT and sets it back to the message context via an update consumer.
SignRequestObjectPredicate	A predicate that determines if the RequestObject JWT should be signed based on the profile configuration.
SimpleNimbusResponseEncoder	A message encodes that encodes the Nimbus a Response in the message context inside the attached HttpServletResponse by calling its Response.toHTTPResponse() method.
StorageServiceClientInformationManager	A ClientInformationManager exploiting StorageService for storing the data.
StorageServiceClientInformationResolver	A ClientInformationResolver exploiting StorageService for fetching the stored data.
StringBasedJWTClaimAuditExtractor	A JWT claim extractor function that returns String objects.
StringListBasedJWTClaimAuditExtractor	A JWT claim extractor function that returns lists of string objects.
SymmetricKeyWrapA128GCMKW	Algorithm descriptor for JWE key management algorithm: AES128GCMKW.
SymmetricKeyWrapA128KW	Algorithm descriptor for JWE key management algorithm: AES128KW.
SymmetricKeyWrapA192GCMKW	Algorithm descriptor for JWE key management algorithm: AES192GCMKW.
SymmetricKeyWrapA192KW	Algorithm descriptor for JWE key management algorithm: AES192KW.
SymmetricKeyWrapA256GCMKW	Algorithm descriptor for JWE key management algorithm: AES256GCMKW.
SymmetricKeyWrapA256KW	Algorithm descriptor for JWE key management algorithm: AES256KW.
TokenEndpointAuthMethodLookupFunction	A function that obtains OAuth2ClientAuthenticableProfileConfiguration.getTokenEndpointAuthMethods(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
TokenEndpointJwtSignatureValidationConfigurationLookupFunction	Deprecated, for removal: This API element is subject to removal in a future version.
UseRequestObjectPredicate	A predicate that determines if a RequestObject JWT should be used based on the profile configuration.
XMLObjectProviderInitializer	XMLObject provider initializer for the metadata extension.