Uses of Class
org.gcube.common.iam.D4ScienceIAMClientException

Uses of D4ScienceIAMClientException in org.gcube.common.iam

Methods in org.gcube.common.iam that throw D4ScienceIAMClientException

Modifier and Type	Method	Description
D4ScienceIAMClientAuthn	D4ScienceIAMClient.authenticate(String clientId, String clientSecret)	Authenticates the client with provided id and secret
D4ScienceIAMClientAuthn	D4ScienceIAMClient.authenticate(String clientId, String clientSecret, String context)	Authenticates the client with provided credentials, reducing the token audience to the requested `context`
D4ScienceIAMClientAuthn	D4ScienceIAMClient.authenticateUser(String username, String password)	Deprecated. this authn method is deprecated in the oauth2 specifications (see https://oauth.net/2/grant-types/password/)
D4ScienceIAMClientAuthn	D4ScienceIAMClient.authenticateUser(String username, String password, String context)	Deprecated. this authn method is deprecated in the oauth2 specifications (see https://oauth.net/2/grant-types/password/)
D4ScienceIAMClientAuthn	D4ScienceIAMClient.authenticateUser(String clientId, String clientSecret, String username, String password)	Deprecated. this authn method is deprecated in the oauth2 specifications (see https://oauth.net/2/grant-types/password/)
D4ScienceIAMClientAuthn	D4ScienceIAMClient.authenticateUser(String clientId, String clientSecret, String username, String password, String context)	Deprecated. this authn method is deprecated in the oauth2 specifications (see https://oauth.net/2/grant-types/password/)
D4ScienceIAMClientAuthn	D4ScienceIAMClient.authenticateWithCode(String clientId, String clientSecret, String code, String redirectUri, String codeVerifier)	Authenticates with the code received on the redirect URI of the authorization code flow.
AuthorizationURLBuilder	D4ScienceIAMClient.authorizationURL(String clientId, String redirectUri)	Starts the URL of the authorization endpoint the browser has to be redirected to (authorization code flow).
D4ScienceIAMClientAuthz	D4ScienceIAMClient.authorize(String clientId, String clientSecret, String context)	Directly authorizes the client by using the provided credentials, for the specific context audience and with no optional permissions
D4ScienceIAMClientAuthz	D4ScienceIAMClient.authorize(String clientId, String clientSecret, String context, List<String> permissions)	Directly authorizes the client by using the provided credentials, for the specific context audience and with optional permissions
D4ScienceIAMClientAuthz	D4ScienceIAMClientAuthn.authorize(String context)	Authorizes the client or the user by using the authn already obtained, for the specific context audience and no optional permissions.
D4ScienceIAMClientAuthz	D4ScienceIAMClientAuthn.authorize(String context, List<String> permissions)	Authorizes the client or the user by using the authn already obtained, for the specific context audience and with optional permissions.
boolean	AbstractIAMResponse.canBeRefreshed()
boolean	IAMResponse.canBeRefreshed()	Check if the current response can be refreshed
void	AbstractIAMResponse.exchange(String clientId, String clientSecret, String audience, String scope)
void	IAMResponse.exchange(String clientId, String clientSecret, String audience, String scope)	Exchanges and updates the current response with new one obtained with parameters provided.
void	AbstractIAMResponse.exchangeForRefreshToken(String clientId, String clientSecret, String audience, String scope)	Same as AbstractIAMResponse.exchange(String, String, String, String) but asks the IAM also for a refresh token (requested_token_type=refresh_token): afterwards AbstractIAMResponse.getRefreshTokenString() gives it, and AbstractIAMResponse.getRefreshExpiresIn() its lifetime.
org.gcube.common.keycloak.model.AccessToken	AbstractIAMResponse.getAccessToken()
org.gcube.common.keycloak.model.AccessToken	IAMResponse.getAccessToken()	Returns the access token in the response.
String[]	AbstractIAMResponse.getAudience()
default String[]	IAMResponse.getAudience()	Returns the aud claim of the access token, as in the token (the contexts are URL-encoded)
String	AbstractIAMResponse.getAuthorizedParty()
default String	IAMResponse.getAuthorizedParty()	Returns the azp claim of the access token: the client the token was issued to
String	AbstractIAMResponse.getContactOrganization()
String	IAMResponse.getContactOrganization()	Returns the client's contact organization from the token
String	AbstractIAMResponse.getContactPerson()
String	IAMResponse.getContactPerson()	Returns the client's contact person from the token
String	AbstractIAMResponse.getContext()
String	IAMResponse.getContext()	Returns the token context is issued for This is done by checking in the order: If the token contains the d4s_context claim, as specified also in KeycloakClient.D4S_DYNAMIC_SCOPE_NAME_TOKEN_CLAIM The value of the aud claim if contains a single value (for retro-compatibility) It returns null if none of the options are satisfied and the context cannot be determined.
Set<String>	AbstractIAMResponse.getContextRoles()
Set<String>	IAMResponse.getContextRoles()	Returns the resource roles for the resource specified in the token context
String	AbstractIAMResponse.getEmail()
default String	IAMResponse.getEmail()	Returns the email claim of the access token
String	AbstractIAMResponse.getFamilyName()
default String	IAMResponse.getFamilyName()	Returns the family_name claim of the access token
String	AbstractIAMResponse.getGivenName()
default String	IAMResponse.getGivenName()	Returns the given_name claim of the access token
Set<String>	AbstractIAMResponse.getGlobalRoles()
Set<String>	IAMResponse.getGlobalRoles()	Returns the realm roles in the token
String	AbstractIAMResponse.getName()
String	IAMResponse.getName()	Returns the client's name from the token
String	AbstractIAMResponse.getPreferredUsername()
default String	IAMResponse.getPreferredUsername()	Returns the preferred_username claim of the access token
Map<String,Set<String>>	AbstractIAMResponse.getResourceAccessRoles()
default Map<String,Set<String>>	IAMResponse.getResourceAccessRoles()	Returns the roles of the token per resource (client), as in the resource_access claim.
Set<String>	AbstractIAMResponse.getResourceRoles(String resource)
Set<String>	IAMResponse.getResourceRoles(String resource)	Returns the resource roles for the resource specified in the resource parameter
Set<String>	AbstractIAMResponse.getRoles()
Set<String>	IAMResponse.getRoles()	Returns all the roles, realm and from all the resources in the token in the same set
String	AbstractIAMResponse.getSubject()
default String	IAMResponse.getSubject()	Returns the sub claim of the access token
IntrospectionResult	D4ScienceIAMClient.introspect(String token, String clientId, String clientSecret)	Asks the IAM server of this client (never the issuer named in the token) whether the token is active and which claims it carries (token introspection, RFC 7662).
boolean	AbstractIAMResponse.isAccessTokenValid()
boolean	AbstractIAMResponse.isAccessTokenValid(boolean checkExpiration)
boolean	IAMResponse.isAccessTokenValid()	Quick way to check if the access token is valid by checking the digital signature and the token expiration
boolean	IAMResponse.isAccessTokenValid(boolean checkExpiration)	Quick way to check if the access token is valid by checking the digital signature and the token expiration if the checkExpiration parameter is true
boolean	AbstractIAMResponse.isExpired()
boolean	IAMResponse.isExpired()	Check if the current response is expired
boolean	AbstractIAMResponse.isRefreshTokenValid()
boolean	AbstractIAMResponse.isRefreshTokenValid(boolean checkExpiration)
boolean	IAMResponse.isRefreshTokenValid()	Quick way to check if the refresh token present in the current response and it is valid by checking the digital signature and the token expiration
boolean	IAMResponse.isRefreshTokenValid(boolean checkExpiration)	Quick way to check if the refresh token present in the current response and it is valid by checking the digital signature and the token expiration if the checkExpiration parameter is true
boolean	D4ScienceIAMClient.isTokenValid(String token)	Checks if the token is valid (signature and expiration).
boolean	D4ScienceIAMClient.isTokenValid(String token, boolean checkExpiration)	Checks if the token is valid and optionally checks for expiration.
void	AbstractIAMResponse.logout(String clientId, String clientSecret)	Ends the user session on the IAM (end session endpoint) using the refresh token.
static D4ScienceIAMClient	D4ScienceIAMClient.newInstance(String contextInfra)	Creates a new client for the specific context, in the default IAM realm.
static D4ScienceIAMClient	D4ScienceIAMClient.newInstance(String contextInfra, String realm)	Creates a new client for the specific context, in the default realm.
protected static final org.gcube.common.keycloak.model.TokenResponse	D4ScienceIAMClientAuthn4Client.performClientAuthn(D4ScienceIAMClient iamClient, String clientId, String clientSecret, String context)	Performs the actual client authentication using client credentials flow.
protected static final org.gcube.common.keycloak.model.TokenResponse	D4ScienceIAMClientAuthn4User.performUserAuthn(D4ScienceIAMClient iamClient, String clientId, String clientSecret, String username, String password, String context)	Performs user authentication using username and password credentials.
void	AbstractIAMResponse.refresh()
void	AbstractIAMResponse.refresh(String clientId, String clientSecret)	Refreshes the token using the specified client credentials.
void	IAMResponse.refresh()	Refreshes the current response, new data can be obtained again with accessors.
void	AbstractIAMResponse.verifyAccessToken()
void	AbstractIAMResponse.verifyAccessToken(boolean checkExpiration)
void	IAMResponse.verifyAccessToken()	Verifies the access token integrity and validity; token digital signature and expiration are reported via specific exceptions.
void	IAMResponse.verifyAccessToken(boolean checkExpiration)	Verifies the access token integrity and optionally for expiration; token digital signature and expiration are reported via specific exceptions.
void	AbstractIAMResponse.verifyRefreshToken()
void	AbstractIAMResponse.verifyRefreshToken(boolean checkExpiration)
void	IAMResponse.verifyRefreshToken()	Verifies the refresh token integrity and validity; token digital signature and expiration are reported via specific exceptions.
void	IAMResponse.verifyRefreshToken(boolean checkExpiration)	Verifies the refresh token integrity and validity; token digital signature and expiration are reported via specific exceptions.

Constructors in org.gcube.common.iam that throw D4ScienceIAMClientException

Modifier	Constructor	Description
protected	D4ScienceIAMClientAuthn4Client(D4ScienceIAMClient iamClient, String clientId, String clientSecret)	Creates a new client authentication instance using client credentials.
protected	D4ScienceIAMClientAuthn4Client(D4ScienceIAMClient iamClient, String clientId, String clientSecret, String context)	Creates a new client authentication instance with specific context.
protected	D4ScienceIAMClientAuthn4Code(D4ScienceIAMClient iamClient, String clientId, String clientSecret, String code, String redirectUri, String codeVerifier)	Exchanges the authorization code for the tokens.
protected	D4ScienceIAMClientAuthn4User(D4ScienceIAMClient iamClient, String clientId, String clientSecret, String username, String password)	Creates a new user authentication instance without context.
protected	D4ScienceIAMClientAuthn4User(D4ScienceIAMClient iamClient, String clientId, String clientSecret, String username, String password, String context)	Creates a new user authentication instance with context.
protected	D4ScienceIAMClientAuthz(D4ScienceIAMClientAuthn authn, String context, List<String> permissions)	Creates a new authorization instance using an existing authentication.
protected	D4ScienceIAMClientAuthz(D4ScienceIAMClient iamClient, String clientId, String clientSecret, String context, List<String> permissions)	Creates a new authorization instance using client credentials.