Uses of Package
org.apache.juneau.rest.server.auth

Packages that use org.apache.juneau.rest.server.auth

Package	Description
org.apache.juneau.petstore.auth	Petstore auth helpers — stub validators and other glue used by the deployment-side AuthFilterChain configurations.
org.apache.juneau.petstore.console.dev	Petstore console Developer pages: custom cards, themes, rendering flavors and the secure API demo.
org.apache.juneau.rest.server	REST Server API
org.apache.juneau.rest.server.auth	Authentication (AuthN) guards, servlet-layer filters, SPIs, and request-time helpers for juneau-rest-server.
org.apache.juneau.rest.server.auth.jwt	JWT bearer-token validation backed by com.nimbusds:nimbus-jose-jwt.
org.apache.juneau.rest.server.auth.oauth	OAuth 2.0 / OIDC integration for the Juneau REST server.
org.apache.juneau.rest.server.auth.oidc.rp	OpenID Connect Relying Party (RP) login support for Juneau REST servers.
org.apache.juneau.rest.server.auth.saml	SAML 2.0 assertion validation for the Juneau REST server, layered on the AuthFilter framework.
org.apache.juneau.rest.server.mcp.v20260728	MCP 2026-07-28 binding for juneau-rest-server-mcp.
org.apache.juneau.rest.server.servlet	REST Servlets

Classes in org.apache.juneau.rest.server.auth used by org.apache.juneau.petstore.auth

Class	Description
AuthenticationException	Specialization of Unauthorized thrown by BearerTokenGuard, ApiKeyGuard, and user-supplied TokenValidator / ApiKeyStore implementations to signal AuthN failure.
TokenValidator	SPI for verifying an opaque bearer token and producing the associated Principal.

Classes in org.apache.juneau.rest.server.auth used by org.apache.juneau.petstore.console.dev

Class	Description
Auth	Marks a @RestOp-method parameter as the authenticated Principal for the current request.

Classes in org.apache.juneau.rest.server.auth used by org.apache.juneau.rest.server

Class	Description
AuthenticationException	Specialization of Unauthorized thrown by BearerTokenGuard, ApiKeyGuard, and user-supplied TokenValidator / ApiKeyStore implementations to signal AuthN failure.
AuthResult	Immutable value type returned by Authenticator.authenticate(jakarta.servlet.http.HttpServletRequest) on success.
RestAuthenticator	Resource-level authentication SPI for @Rest resources.

Classes in org.apache.juneau.rest.server.auth used by org.apache.juneau.rest.server.auth

Class	Description
ApiKeyAuthFilter	AuthFilter that authenticates requests via a raw API-key string.
ApiKeyAuthFilter.Builder	Builder class.
ApiKeyAuthFilter.Source	Source of the API-key string.
ApiKeyGuard	AuthN RestGuard that authenticates requests via a raw API-key string.
ApiKeyGuard.Builder	Builder class.
ApiKeyGuard.Source	Source of the API-key string.
ApiKeyStore	SPI for resolving a raw API key string to its associated Principal.
AuthArg	Resolves @RestOp-method parameters that represent the authenticated Principal.
AuthenticationException	Specialization of Unauthorized thrown by BearerTokenGuard, ApiKeyGuard, and user-supplied TokenValidator / ApiKeyStore implementations to signal AuthN failure.
Authenticator	Lowest-level authentication contract shared by the servlet-filter layer (AuthFilter, AuthFilterChain) and the resource layer (RestAuthenticator).
AuthFilter	Abstract base class for Juneau authentication servlet filters.
AuthFilterChain	Orchestrates multiple AuthFilter instances with first-success principal resolution, role aggregation, and all-failure aggregation semantics.
AuthFilterChain.Builder	Builder class.
AuthResult	Immutable value type returned by Authenticator.authenticate(jakarta.servlet.http.HttpServletRequest) on success.
AuthResult.MergeMode	Controls how an AuthResult merges with results accumulated earlier in an authenticator chain.
AuthResultAccumulator	Mutable helper that folds a sequence of AuthResults into a single result, honoring AuthResult.MergeMode.
BearerTokenAuthFilter	AuthFilter that authenticates requests via the RFC 6750 Bearer Token scheme.
BearerTokenAuthFilter.Builder	Builder class.
BearerTokenGuard	AuthN RestGuard that authenticates requests via the RFC 6750 Bearer Token scheme.
BearerTokenGuard.Builder	Builder class.
RestAuthenticator	Resource-level authentication SPI for @Rest resources.
TokenValidator	SPI for verifying an opaque bearer token and producing the associated Principal.

Classes in org.apache.juneau.rest.server.auth used by org.apache.juneau.rest.server.auth.jwt

Class	Description
AuthenticationException	Specialization of Unauthorized thrown by BearerTokenGuard, ApiKeyGuard, and user-supplied TokenValidator / ApiKeyStore implementations to signal AuthN failure.
TokenValidator	SPI for verifying an opaque bearer token and producing the associated Principal.

Classes in org.apache.juneau.rest.server.auth used by org.apache.juneau.rest.server.auth.oauth

Class	Description
AuthenticationException	Specialization of Unauthorized thrown by BearerTokenGuard, ApiKeyGuard, and user-supplied TokenValidator / ApiKeyStore implementations to signal AuthN failure.
Authenticator	Lowest-level authentication contract shared by the servlet-filter layer (AuthFilter, AuthFilterChain) and the resource layer (RestAuthenticator).
AuthFilter	Abstract base class for Juneau authentication servlet filters.
AuthResult	Immutable value type returned by Authenticator.authenticate(jakarta.servlet.http.HttpServletRequest) on success.
TokenValidator	SPI for verifying an opaque bearer token and producing the associated Principal.

Classes in org.apache.juneau.rest.server.auth used by org.apache.juneau.rest.server.auth.oidc.rp

Class	Description
AuthenticationException	Specialization of Unauthorized thrown by BearerTokenGuard, ApiKeyGuard, and user-supplied TokenValidator / ApiKeyStore implementations to signal AuthN failure.
Authenticator	Lowest-level authentication contract shared by the servlet-filter layer (AuthFilter, AuthFilterChain) and the resource layer (RestAuthenticator).
AuthFilter	Abstract base class for Juneau authentication servlet filters.
AuthResult	Immutable value type returned by Authenticator.authenticate(jakarta.servlet.http.HttpServletRequest) on success.
ClaimsPrincipal	A Principal that exposes typed read-only access to a map of claims.

Classes in org.apache.juneau.rest.server.auth used by org.apache.juneau.rest.server.auth.saml

Class	Description
AuthenticationException	Specialization of Unauthorized thrown by BearerTokenGuard, ApiKeyGuard, and user-supplied TokenValidator / ApiKeyStore implementations to signal AuthN failure.
Authenticator	Lowest-level authentication contract shared by the servlet-filter layer (AuthFilter, AuthFilterChain) and the resource layer (RestAuthenticator).
AuthFilter	Abstract base class for Juneau authentication servlet filters.
AuthResult	Immutable value type returned by Authenticator.authenticate(jakarta.servlet.http.HttpServletRequest) on success.

Classes in org.apache.juneau.rest.server.auth used by org.apache.juneau.rest.server.mcp.v20260728

Class	Description
TokenValidator	SPI for verifying an opaque bearer token and producing the associated Principal.

Classes in org.apache.juneau.rest.server.auth used by org.apache.juneau.rest.server.servlet

Class	Description
RestAuthenticator	Resource-level authentication SPI for @Rest resources.