Interface OAuth2ScopeValidatingProfileConfiguration

All Superinterfaces:
Component, ConditionalProfileConfiguration, IdentifiedComponent, OAuth2ProfileConfiguration, ProfileConfiguration
All Known Subinterfaces:
OAuth2PushedAuthorizationRequestConfiguration, OAuth2TokenConfiguration, OIDCAuthorizationConfiguration, OIDCSSOProviderConfiguration
All Known Implementing Classes:
AbstractOIDCSSOConfiguration, DefaultOAuth2PushedAuthorizationRequestConfiguration, DefaultOAuth2TokenConfiguration, DefaultOIDCAuthorizationConfiguration

public interface OAuth2ScopeValidatingProfileConfiguration extends OAuth2ProfileConfiguration
Profile configuration for validating scope values.
Since:
3.2.0
  • Method Details

    • isStrictScopeValidation

      @ConfigurationSetting(name="strictScopeValidation") boolean isStrictScopeValidation(@Nullable ProfileRequestContext profileRequestContext)
      Get whether scope validation is strict, i.e. request for unallowed scopes is an error.
      Parameters:
      profileRequestContext - the profile request context
      Returns:
      whether scope validation is strict