javalin-security-opaque-token/io.github.mzlnk.javalin.security.opaquetoken

Package-level declarations

Types

BearerChallengeUnauthorizedHandler

class BearerChallengeUnauthorizedHandler(realm: String = "API") : UnauthorizedHandler

An UnauthorizedHandler that includes a WWW-Authenticate: Bearer challenge on 401 responses.

OpaqueTokenAuthenticator

class OpaqueTokenAuthenticator : Authenticator

Implements opaque bearer-token authentication.

OpaqueTokenConfig

class OpaqueTokenConfig

Configuration for the opaqueToken strategy factory.

OpaqueTokenDetails

data class OpaqueTokenDetails @JvmOverloads constructor(val identity: Identity, val expiresAt: Instant? = null, val roles: Set<RouteRole> = emptySet())

The stored record behind an opaque token: the caller's own identity, optional expiresAt the extension checks before authenticating, and the roles granted on success.

OpaqueTokenLookup

fun interface OpaqueTokenLookup

Resolves a raw opaque token to its stored OpaqueTokenDetails, carrying the caller's own identity.

Functions

opaqueToken

fun opaqueToken(configure: Consumer<OpaqueTokenConfig>): AuthenticationStrategy.Sync

Builds an AuthenticationStrategy.Sync for opaque bearer-token authentication.