Index

A C D E F G H I J L N O P R S T U V 
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form

A

addCookie(HttpServletResponse, String, String, int) - Method in class tech.riemann.nif.oidc.OpenIDConnectController
添加安全的 HTTP Cookie 到响应中

C

CacheableOpenIDConnectionAuthService - Class in tech.riemann.nif.oidc.service
基于OpenID Connect的可缓存认证服务
CacheableOpenIDConnectionAuthService() - Constructor for class tech.riemann.nif.oidc.service.CacheableOpenIDConnectionAuthService
 
callback(HttpServletRequest, HttpServletResponse) - Method in class tech.riemann.nif.oidc.OpenIDConnectController
处理 OpenID Connect 认证回调请求
CallbackHandler - Interface in tech.riemann.nif.oidc.callback
回调处理器接口
code(HttpServletRequest, HttpServletResponse) - Method in interface tech.riemann.nif.oidc.callback.CallbackHandler
从HTTP请求中获取授权码（code）参数
code2Token(URI, String, String, String, String, String, String) - Method in interface tech.riemann.nif.oidc.client.OpenIDConnectHttpRestClient
使用授权码 (Authorization Code) 换取访问令牌 (Access Token)。
CookieCallbackHandler - Class in tech.riemann.nif.oidc.callback
基于Cookie的回调处理器
CookieCallbackHandler() - Constructor for class tech.riemann.nif.oidc.callback.CookieCallbackHandler
 
cookieSameSite() - Method in interface tech.riemann.nif.oidc.callback.CallbackHandler
OIDC 会话 Cookie 的 SameSite 策略(M14,默认 Lax)
cookieSameSite() - Method in class tech.riemann.nif.oidc.callback.CookieCallbackHandler
 
cookieSettings() - Method in class tech.riemann.nif.oidc.service.CacheableOpenIDConnectionAuthService
获取Cookie配置
currentUser() - Method in class tech.riemann.nif.oidc.OpenIDConnectController
获取当前登录用户信息

D

discovery(URI) - Method in interface tech.riemann.nif.oidc.client.OpenIDConnectHttpRestClient
获取 OIDC 发现文档 (OpenID Connect Discovery)。

E

enhance(AuthUser) - Method in interface tech.riemann.nif.oidc.service.UserInfoEnhancer
对用户信息进行增强处理

F

from(HttpServletRequest) - Method in class tech.riemann.nif.oidc.callback.CookieCallbackHandler
获取登录前的页面URL
FROM_COOKIE - Static variable in class tech.riemann.nif.oidc.OpenIDConnectController
登录前地址的Cookie名称（登录成功后回跳）

G

generateCodeChallenge(String) - Static method in class tech.riemann.nif.oidc.service.PKCEGenerator
根据code_verifier生成code_challenge
getAuthUser() - Method in class tech.riemann.nif.oidc.event.OpenIDConnectLoginSuccessEvent
 
getClient() - Method in class tech.riemann.nif.oidc.service.OpenIDConnectService
获取OIDC客户端配置信息
getClockSkewSeconds() - Method in class tech.riemann.nif.oidc.service.jwt.JwksJWTGenerator
返回令牌验证时钟容差（秒）
getRequest() - Method in class tech.riemann.nif.oidc.service.CacheableOpenIDConnectionAuthService
获取HttpServletRequest对象
getResponse() - Method in class tech.riemann.nif.oidc.service.CacheableOpenIDConnectionAuthService
获取HttpServletResponse对象

H

handle(HttpServletRequest, HttpServletResponse) - Method in interface tech.riemann.nif.oidc.callback.CallbackHandler
处理HTTP回调
handle(HttpServletRequest, HttpServletResponse) - Method in class tech.riemann.nif.oidc.callback.CookieCallbackHandler
处理OAuth回调
handle(HttpServletRequest, HttpServletResponse) - Method in class tech.riemann.nif.oidc.callback.RedirectToFrontCallbackHandler
处理OAuth回调并重定向到前端页面

I

IAMUserDetailService - Class in tech.riemann.nif.oidc.service
IAM用户详情服务实现
IAMUserDetailService() - Constructor for class tech.riemann.nif.oidc.service.IAMUserDetailService
 
init() - Method in class tech.riemann.nif.oidc.service.jwt.JwksJWTGenerator
初始化并定期更新 JWK Set
isJwksReady() - Method in class tech.riemann.nif.oidc.service.jwt.JwksJWTGenerator
JWK Set 是否已就绪（可用性状态）
isSafeRedirectUrl(String, String) - Static method in interface tech.riemann.nif.oidc.callback.CallbackHandler
校验回跳地址是否安全（防开放重定向）

J

JwksJWTGenerator - Class in tech.riemann.nif.oidc.service.jwt
基于JWKS的JWT生成器
JwksJWTGenerator() - Constructor for class tech.riemann.nif.oidc.service.jwt.JwksJWTGenerator
 
jwtDecoder() - Method in class tech.riemann.nif.oidc.service.CacheableOpenIDConnectionAuthService
获取JWT解码器
jwtEncoder() - Method in class tech.riemann.nif.oidc.service.CacheableOpenIDConnectionAuthService
获取JWT编码器
jwtGenerator() - Method in class tech.riemann.nif.oidc.service.OpenIDConnectService
 
jwtGenerator(long) - Method in class tech.riemann.nif.oidc.service.OpenIDConnectService
构建 JwksJWTGenerator（懒获取 jwks uri，时钟容差由外部配置经构造传入）

L

login(String, HttpServletRequest, HttpServletResponse) - Method in class tech.riemann.nif.oidc.OpenIDConnectController
处理用户登录请求，使用 OpenID Connect 授权码进行认证
login(String, String, String) - Method in class tech.riemann.nif.oidc.service.OpenIDConnectService
使用授权码进行登录，并按全局配置校验 ID Token（验签 + 有效期 + nonce）
login(String, String, String, String, HttpServletResponse, HttpServletRequest) - Method in class tech.riemann.nif.oidc.OpenIDConnectController
 
loginUrl(HttpServletRequest, HttpServletResponse, String, String, String, String) - Method in class tech.riemann.nif.oidc.OpenIDConnectController
 
loginUrl(String, String, String) - Method in class tech.riemann.nif.oidc.service.OpenIDConnectService
登录地址
logout(HttpServletResponse) - Method in class tech.riemann.nif.oidc.OpenIDConnectController
处理用户退出登录请求，重定向到 OpenID Connect 登出页面
logoutUrl() - Method in class tech.riemann.nif.oidc.OpenIDConnectController
获取 OpenID Connect 登出地址
logoutUrl() - Method in class tech.riemann.nif.oidc.service.OpenIDConnectService
登出地址

N

NONCE_COOKIE - Static variable in class tech.riemann.nif.oidc.OpenIDConnectController
nonce的Cookie名称（防ID Token重放）

O

OpenIDConnectClient - Class in tech.riemann.nif.oidc.domain
OpenID Connect客户端配置信息
OpenIDConnectClient() - Constructor for class tech.riemann.nif.oidc.domain.OpenIDConnectClient
 
OpenIDConnectController - Class in tech.riemann.nif.oidc
OpenID Connect控制器
OpenIDConnectController() - Constructor for class tech.riemann.nif.oidc.OpenIDConnectController
 
OpenIDConnectHttpRestClient - Interface in tech.riemann.nif.oidc.client
OIDC (OpenID Connect) 声明式 HTTP 客户端接口。
OpenIDConnectLoginSuccessEvent - Class in tech.riemann.nif.oidc.event
 
OpenIDConnectLoginSuccessEvent(AuthUser) - Constructor for class tech.riemann.nif.oidc.event.OpenIDConnectLoginSuccessEvent
 
OpenIDConnectService - Class in tech.riemann.nif.oidc.service
OpenID Connect服务类
OpenIDConnectService() - Constructor for class tech.riemann.nif.oidc.service.OpenIDConnectService
 

P

parse(String) - Method in class tech.riemann.nif.oidc.service.jwt.JwksJWTGenerator
解析并验证 JWT token
PKCE_CODE_VERIFIER - Static variable in class tech.riemann.nif.oidc.OpenIDConnectController
PKCE代码验证器的Cookie名称
PKCEGenerator - Class in tech.riemann.nif.oidc.service
PKCE（Proof Key for Code Exchange）代码验证器生成器
PKCEGenerator() - Constructor for class tech.riemann.nif.oidc.service.PKCEGenerator
 

R

RedirectToFrontCallbackHandler - Class in tech.riemann.nif.oidc.callback
重定向到前端的回调处理器
RedirectToFrontCallbackHandler() - Constructor for class tech.riemann.nif.oidc.callback.RedirectToFrontCallbackHandler
 

S

save(AuthUser) - Method in class tech.riemann.nif.oidc.service.IAMUserDetailService
 
setApplicationEventPublisher(ApplicationEventPublisher) - Method in class tech.riemann.nif.oidc.service.OpenIDConnectService
 
state(HttpServletRequest, HttpServletResponse) - Method in interface tech.riemann.nif.oidc.callback.CallbackHandler
从HTTP请求中获取state参数
STATE_COOKIE - Static variable in class tech.riemann.nif.oidc.OpenIDConnectController
state的Cookie名称（防登录CSRF）
subject(String) - Method in class tech.riemann.nif.oidc.service.jwt.JwksJWTGenerator
获取 JWT token 的主题（subject）

T

tech.riemann.nif.oidc - package tech.riemann.nif.oidc
 
tech.riemann.nif.oidc.callback - package tech.riemann.nif.oidc.callback
 
tech.riemann.nif.oidc.client - package tech.riemann.nif.oidc.client
 
tech.riemann.nif.oidc.domain - package tech.riemann.nif.oidc.domain
 
tech.riemann.nif.oidc.event - package tech.riemann.nif.oidc.event
 
tech.riemann.nif.oidc.service - package tech.riemann.nif.oidc.service
 
tech.riemann.nif.oidc.service.jwt - package tech.riemann.nif.oidc.service.jwt
 
token(String, String) - Method in class tech.riemann.nif.oidc.service.OpenIDConnectService
使用授权码换取 Token
Token - Class in tech.riemann.nif.oidc.domain
OIDC令牌响应类
Token() - Constructor for class tech.riemann.nif.oidc.domain.Token
 
token2User(URI, String) - Method in interface tech.riemann.nif.oidc.client.OpenIDConnectHttpRestClient
使用访问令牌 (Access Token) 获取用户信息 (Claims)。

U

user(String) - Method in class tech.riemann.nif.oidc.service.OpenIDConnectService
使用 Token 换取并构建用户信息
userByToken(String) - Method in class tech.riemann.nif.oidc.service.IAMUserDetailService
 
userDetail(URI, String, String) - Method in interface tech.riemann.nif.oidc.client.OpenIDConnectHttpRestClient
获取 OIDC 用户详情。
userDetailService() - Method in class tech.riemann.nif.oidc.service.CacheableOpenIDConnectionAuthService
获取用户详情服务
UserInfoEnhancer - Interface in tech.riemann.nif.oidc.service
用户信息增强接口 用户可自行实现此接口对从IAM获取的用户信息进行完善或修改 默认实现不做任何处理

V

validateState(HttpServletRequest, HttpServletResponse, boolean) - Method in interface tech.riemann.nif.oidc.callback.CallbackHandler
校验回调请求中的 state 是否与发起登录时写入 Cookie 的 state 一致（防登录 CSRF）
verifiedSubject(String) - Method in class tech.riemann.nif.oidc.service.jwt.JwksJWTGenerator
验证并获取 JWT token 的主题（subject）
verify(String) - Method in class tech.riemann.nif.oidc.service.jwt.JwksJWTGenerator
验证 JWT token 的有效性
A C D E F G H I J L N O P R S T U V 
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form