Package org.apache.juneau.rest.auth.oauth.oidc

Class OidcDiscoveryClient

java.lang.Object

org.apache.juneau.rest.auth.oauth.oidc.OidcDiscoveryClient

public class OidcDiscoveryClient
extends Object

Fetches a Juneau-native OidcMetadata record describing an authorization server, supporting both the RFC 8414 OAuth Authorization Server Metadata endpoint (/.well-known/oauth-authorization-server) and the OpenID Connect Discovery endpoint (/.well-known/openid-configuration).

discover() tries AuthorizationServerMetadata.resolve(...) (RFC 8414) first and falls back to OIDCProviderMetadata.resolve(...) (OIDC Discovery); both perform the RFC 8414 / OIDC Discovery issuer identity check (the returned document's issuer must exactly equal the requested issuer). The metadata is fetched on each call to discover(); the result is not cached internally — callers cache themselves if needed.

Usage

var oidc = OidcDiscoveryClient.create() .issuer(URI.create("https://login.example.com/realms/api")) .build() .discover();

Since:

10.0.0

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	OidcDiscoveryClient.Builder	Builder.

Constructor Summary

Constructors

Modifier	Constructor	Description
protected	OidcDiscoveryClient(OidcDiscoveryClient.Builder b)	Constructor.

Method Summary

Modifier and Type	Method	Description
static OidcDiscoveryClient.Builder	create()	Static creator.
OidcMetadata	discover()	Fetches the authorization server's metadata, trying RFC 8414 first then OIDC Discovery.
URI	getIssuer()	Returns the configured issuer URL.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

OidcDiscoveryClient

protected OidcDiscoveryClient(OidcDiscoveryClient.Builder b)

Constructor.

Parameters:

b - The builder.

Method Details

create

public static OidcDiscoveryClient.Builder create()

Static creator.

Returns:

A new builder.

getIssuer

public URI getIssuer()

Returns the configured issuer URL.

Returns:

The issuer URL.

discover

public OidcMetadata discover()
                      throws IOException,
OidcDiscoveryException

Fetches the authorization server's metadata, trying RFC 8414 first then OIDC Discovery.

Returns:

The parsed metadata record.

Throws:

IOException - If both discovery HTTP fetches fail.

OidcDiscoveryException - If the metadata cannot be parsed or the issuer identity check fails.