A B C D E F G H I J K M N O P R S T U V W

A

AbstractRequestAuthenticationFilter - Class in com.atlassian.asap.core.server.filter

A servlet filter that accepts or rejects requests based on the authenticity and validity of the JWT access token.

AbstractRequestAuthenticationFilter() - Constructor for class com.atlassian.asap.core.server.filter.AbstractRequestAuthenticationFilter

AbstractRequestAuthorizationFilter - Class in com.atlassian.asap.core.server.filter

Filters requests that contain authentic JWT tokens based on an authorization policy.

AbstractRequestAuthorizationFilter() - Constructor for class com.atlassian.asap.core.server.filter.AbstractRequestAuthorizationFilter

AbstractTokenValidator - Class in com.atlassian.asap.service.core.impl

Implements the builder logic for a token validator.

AbstractTokenValidator(AsapConfiguration) - Constructor for class com.atlassian.asap.service.core.impl.AbstractTokenValidator

acceptableAudienceValues() - Method in class com.atlassian.asap.service.core.impl.AbstractTokenValidator

algorithm(SigningAlgorithm) - Method in class com.atlassian.asap.api.JwtBuilder

Sets the algorithm (alg) jws header.

algorithmName() - Method in enum com.atlassian.asap.api.AlgorithmType

AlgorithmType - Enum in com.atlassian.asap.api

apply(Asap) - Method in class com.atlassian.asap.core.server.jersey.AsapValidator.AsapAnnotationWhitelistProviderWithConfigSupport

apply(Asap) - Method in class com.atlassian.asap.core.server.jersey.AsapValidator.AsapWhitelistProvider

apply(Asap) - Method in class com.atlassian.asap.core.server.jersey.AsapValidator.EnvironmentVariablesWhitelistProvider

apply(RequestTemplate) - Method in class com.atlassian.asap.feign.AsapInterceptor

Asap - Annotation Type in com.atlassian.asap.core.server.jersey

Asap is an annotation that will allow Jersey resource packages, classes, or methods to opt into ASAP authorization.

AsapAnnotationWhitelistProviderWithConfigSupport(Set<String>, Set<String>) - Constructor for class com.atlassian.asap.core.server.jersey.AsapValidator.AsapAnnotationWhitelistProviderWithConfigSupport

AsapAuth - Annotation Type in com.atlassian.asap.service.api

An annotation that declares the intent for a resource to use ASAP-based authentication and authorization.

AsapAuthenticationFilter - Class in com.atlassian.asap.core.client.jersey

Use this class to authenticate Jersey client requests with ASAP.

AsapAuthenticationFilter(String, String, String, URI) - Constructor for class com.atlassian.asap.core.client.jersey.AsapAuthenticationFilter

Deprecated.

in 2.2 for removal in 3.0. Use AsapAuthenticationFilter.AsapAuthenticationFilter(Jwt, URI) instead

AsapAuthenticationFilter(String, String, String, AuthorizationHeaderGenerator) - Constructor for class com.atlassian.asap.core.client.jersey.AsapAuthenticationFilter

Deprecated.

in 2.2 for removal in 3.0. Use AsapAuthenticationFilter.AsapAuthenticationFilter(Jwt, AuthorizationHeaderGenerator) instead

AsapAuthenticationFilter(Jwt, URI) - Constructor for class com.atlassian.asap.core.client.jersey.AsapAuthenticationFilter

AsapAuthenticationFilter(Jwt, AuthorizationHeaderGenerator) - Constructor for class com.atlassian.asap.core.client.jersey.AsapAuthenticationFilter

AsapAuthenticationProvider - Class in com.atlassian.asap.core.server.springsecurity

An authentication provider that validates an UnverifiedBearerToken and if the token is valid, transforms it into an authenticated token which includes the granted authorities.

AsapAuthenticationProvider(JwtValidator, Collection<GrantedAuthority>) - Constructor for class com.atlassian.asap.core.server.springsecurity.AsapAuthenticationProvider

AsapAuthenticationProvider(JwtValidator) - Constructor for class com.atlassian.asap.core.server.springsecurity.AsapAuthenticationProvider

AsapClientConfiguration - Class in com.atlassian.asap.core.client

Client-side ASAP configuration.

AsapConfiguration - Interface in com.atlassian.asap.service.core.spi

Configuration for the ASAP library, which provides the ability to create and verify authentication tokens for service-to-service communication.

asapHttpClient() - Method in class com.atlassian.asap.core.server.AsapServerConfiguration

Definition of the HttpClient bean.

AsapInterceptor - Class in com.atlassian.asap.feign

Decorates a Feign request with ASAP credentials.

AsapInterceptor(AuthorizationHeaderGenerator, Jwt) - Constructor for class com.atlassian.asap.feign.AsapInterceptor

AsapServerConfiguration - Class in com.atlassian.asap.core.server

Server-side ASAP configuration.

AsapService - Interface in com.atlassian.asap.service.api

Point of contact of service-to-service authentication tools.

AsapValidator - Class in com.atlassian.asap.core.server.jersey

Validates a valid Jwt token against a whitelist of acceptable subjects and/or issuers.

AsapValidator(Function<Asap, AsapValidator.Whitelist>) - Constructor for class com.atlassian.asap.core.server.jersey.AsapValidator

AsapValidator.AsapAnnotationWhitelistProviderWithConfigSupport - Class in com.atlassian.asap.core.server.jersey

AsapValidator.AsapWhitelistProvider - Class in com.atlassian.asap.core.server.jersey

AsapValidator.EnvironmentVariablesWhitelistProvider - Class in com.atlassian.asap.core.server.jersey

Provides the whitelist from environment variables.

AsapValidator.Whitelist - Class in com.atlassian.asap.core.server.jersey

Provides whitelisted values.

AsapWhitelistProvider() - Constructor for class com.atlassian.asap.core.server.jersey.AsapValidator.AsapWhitelistProvider

attemptAuthentication(HttpServletRequest, HttpServletResponse) - Method in class com.atlassian.asap.core.server.springsecurity.BearerTokenAuthenticationProcessingFilter

audience(Iterable<String>) - Method in class com.atlassian.asap.api.JwtBuilder

Sets the audience (aud) claim.

audience(String...) - Method in class com.atlassian.asap.api.JwtBuilder

Sets the audience (aud) claim.

AUDIENCE - Static variable in class com.atlassian.asap.it.BaseIntegrationTest

audience(String...) - Method in interface com.atlassian.asap.service.api.AuthorizationBuilder

Specifies the intended audience(s) for the token.

audience(Iterable<String>) - Method in interface com.atlassian.asap.service.api.AuthorizationBuilder

Specifies the intended audience(s) for the token.

audience(String...) - Method in interface com.atlassian.asap.service.api.TokenValidator

Specifies the audience(s) that will be accepted.

audience(Iterable<String>) - Method in interface com.atlassian.asap.service.api.TokenValidator

As for TokenValidator.audience(String...).

audience(Iterable<String>) - Method in class com.atlassian.asap.service.core.impl.AbstractTokenValidator

audience(Iterable<String>) - Method in class com.atlassian.asap.service.core.impl.AuthorizationBuilderImpl

audience() - Method in class com.atlassian.asap.service.core.service.StringValuesAsapConfiguration

audience() - Method in interface com.atlassian.asap.service.core.spi.AsapConfiguration

The default audience value that we expect to find when validating an authentication token that was sent to by some other service.

AUDIENCE_SYSPROP - Static variable in class com.atlassian.asap.core.client.SimpleClientRunner

AUTHENTIC_JWT_REQUEST_ATTRIBUTE - Static variable in class com.atlassian.asap.core.server.filter.AbstractRequestAuthenticationFilter

Upon successful authentication, the authentic Jwt token is saved in the session under this key, so other filters down the chain can access it, e.g., AbstractRequestAuthorizationFilter.

authenticate(Authentication) - Method in class com.atlassian.asap.core.server.springsecurity.AsapAuthenticationProvider

authenticateRequest(String) - Method in interface com.atlassian.asap.api.server.http.RequestAuthenticator

Authenticates a request by validating the given authorizationHeader according to the conventions.

authenticateRequest(String) - Method in class com.atlassian.asap.core.server.http.RequestAuthenticatorImpl

AuthenticationContext - Class in com.atlassian.asap.core.server

Provides the contextual information needed to authenticate a JWT.

AuthenticationContext(String, String) - Constructor for class com.atlassian.asap.core.server.AuthenticationContext

Create a new AuthenticationContext encapsulating the required information to authenticate a JWT.

AuthenticationContext(Set<String>, String) - Constructor for class com.atlassian.asap.core.server.AuthenticationContext

Create a new AuthenticationContext encapsulating the required information to authenticate a JWT.

AuthenticationContext(String, KeyProvider<PublicKey>) - Constructor for class com.atlassian.asap.core.server.AuthenticationContext

Create a new AuthenticationContext encapsulating the required information to authenticate a JWT.

AuthenticationContext(Set<String>, KeyProvider<PublicKey>) - Constructor for class com.atlassian.asap.core.server.AuthenticationContext

Create a new AuthenticationContext encapsulating the required information to authenticate a JWT.

AuthenticationFailedException - Exception in com.atlassian.asap.api.exception

Thrown when an incoming HTTP request cannot be authenticated using ASAP.

AuthenticationFailedException(String, String) - Constructor for exception com.atlassian.asap.api.exception.AuthenticationFailedException

AuthenticationFailedException(String, ValidatedKeyId, URI, String) - Constructor for exception com.atlassian.asap.api.exception.AuthenticationFailedException

AuthenticationRequestFilter - Class in com.atlassian.asap.core.server.jersey

AuthenticationRequestFilter is a ContainerRequestFilter that authenticates resources with the ASAP protocol if opted-into by using the Asap annotation on either a resource package, class, or method.

AuthenticationRequestFilter(RequestAuthenticator, FailureHandler) - Constructor for class com.atlassian.asap.core.server.jersey.AuthenticationRequestFilter

authorizationBuilder() - Method in interface com.atlassian.asap.service.api.AsapService

Creates a builder for generating an HTTP Authorization header value containing an ASAP token.

AuthorizationBuilder - Interface in com.atlassian.asap.service.api

A builder-style tool for generating an HTTP Authorization header value that contains an ASAP token.

authorizationBuilder() - Method in class com.atlassian.asap.service.core.service.DefaultAsapService

AuthorizationBuilderImpl - Class in com.atlassian.asap.service.core.impl

AuthorizationBuilderImpl(AsapConfiguration, AuthorizationHeaderGenerator) - Constructor for class com.atlassian.asap.service.core.impl.AuthorizationBuilderImpl

AuthorizationFailedException - Exception in com.atlassian.asap.api.exception

Thrown when an incoming HTTP request is authentic but is not authorized.

AuthorizationFailedException(String) - Constructor for exception com.atlassian.asap.api.exception.AuthorizationFailedException

AuthorizationHeaderGenerator - Interface in com.atlassian.asap.api.client.http

HTTP clients can use this service to generate the value of the Authorization header to be included in outgoing requests.

authorizationHeaderGenerator(JwtSerializer, KeyProvider<PrivateKey>) - Method in class com.atlassian.asap.core.client.AsapClientConfiguration

Definition of the AuthorizationHeaderGenerator bean.

AuthorizationHeaderGeneratorImpl - Class in com.atlassian.asap.core.client.http

AuthorizationHeaderGeneratorImpl(JwtSerializer, KeyProvider<PrivateKey>) - Constructor for class com.atlassian.asap.core.client.http.AuthorizationHeaderGeneratorImpl

Creates a new instance of AuthorizationHeaderGeneratorImpl.

AuthorizationRequestFilter - Class in com.atlassian.asap.core.server.jersey

AuthorizationRequestFilter is a ContainerRequestFilter that validates an authenticated jwt token.

AuthorizationRequestFilter(FailureHandler, AsapValidator) - Constructor for class com.atlassian.asap.core.server.jersey.AuthorizationRequestFilter

authorize(Jwt, HttpRequestContext) - Method in interface com.atlassian.asap.core.server.jersey.JerseyRequestAuthorizer

Tries to authorize an authentic JWT token to perform a request.

authorize(Jwt, HttpRequestContext) - Method in class com.atlassian.asap.core.server.jersey.WhitelistJerseyRequestAuthorizer

AUTHORIZED_ISSUER_SYSPROP - Static variable in class com.atlassian.asap.core.server.SimpleServerRunner

System property that specifies the authorized issuers for the resource.

AUTHORIZED_ISSUERS_KEY - Static variable in class com.atlassian.asap.core.server.jersey.AsapValidator.EnvironmentVariablesWhitelistProvider

AUTHORIZED_SUBJECT_SYSPROP - Static variable in class com.atlassian.asap.core.server.SimpleServerRunner

System property that specifies the authorized subjects for the resource.

AUTHORIZED_SUBJECTS_KEY - Static variable in class com.atlassian.asap.core.server.jersey.AsapValidator.EnvironmentVariablesWhitelistProvider

authorizedIssuers() - Method in class com.atlassian.asap.service.core.impl.AbstractTokenValidator

authorizedSubjects() - Method in class com.atlassian.asap.service.core.impl.AbstractTokenValidator

B

BaseIntegrationTest - Class in com.atlassian.asap.it

Performs integration testing by making HTTP requests.

BaseIntegrationTest() - Constructor for class com.atlassian.asap.it.BaseIntegrationTest

BEARER_AUTHENTICATION_SCHEME - Static variable in class com.atlassian.asap.core.JwtConstants

The WWW-Authenticate header value for the bearer authentication scheme.

BearerTokenAuthenticationProcessingFilter - Class in com.atlassian.asap.core.server.springsecurity

Authentication processing filter that extracts the bearer token from the HTTP Authorization header.

BearerTokenAuthenticationProcessingFilter(AuthenticationManager) - Constructor for class com.atlassian.asap.core.server.springsecurity.BearerTokenAuthenticationProcessingFilter

Benchmark - Class in com.atlassian.asap.performance

A main program that runs basic performance checking of the ASAP library, both the client side (signing and serialising tokens) and the server side (parsing and verifying signatures).

Benchmark() - Constructor for class com.atlassian.asap.performance.Benchmark

build() - Method in class com.atlassian.asap.api.JwtBuilder

build() - Method in interface com.atlassian.asap.service.api.AuthorizationBuilder

Generates a signed token and forms a value that is appropriate to use as an "Authorization" HTTP header.

build() - Method in class com.atlassian.asap.service.core.impl.AuthorizationBuilderImpl

buildVerifiableJwt(JWSObject, JWTClaimsSet, Provider) - Static method in class com.atlassian.asap.nimbus.parser.NimbusVerifiableJwt

Factory method to create a signature verifiable jwt.

C

CannotRetrieveKeyException - Exception in com.atlassian.asap.api.exception

Thrown when a cryptographic key is not available.

CannotRetrieveKeyException(String) - Constructor for exception com.atlassian.asap.api.exception.CannotRetrieveKeyException

CannotRetrieveKeyException(String, URI) - Constructor for exception com.atlassian.asap.api.exception.CannotRetrieveKeyException

CannotRetrieveKeyException(String, ValidatedKeyId, URI) - Constructor for exception com.atlassian.asap.api.exception.CannotRetrieveKeyException

CannotRetrieveKeyException(String, Throwable) - Constructor for exception com.atlassian.asap.api.exception.CannotRetrieveKeyException

CannotRetrieveKeyException(String, Throwable, URI) - Constructor for exception com.atlassian.asap.api.exception.CannotRetrieveKeyException

CannotRetrieveKeyException(String, Throwable, ValidatedKeyId, URI) - Constructor for exception com.atlassian.asap.api.exception.CannotRetrieveKeyException

ChainedKeyProvider - Class in com.atlassian.asap.core.keys.publickey

Looks up keys sequentially in a given list of key providers.

ClasspathPrivateKeyProvider - Class in com.atlassian.asap.core.keys.privatekey

Retrieves private keys from the classpath.

ClasspathPrivateKeyProvider(String, KeyReader) - Constructor for class com.atlassian.asap.core.keys.privatekey.ClasspathPrivateKeyProvider

Create instance of ClasspathPrivateKeyProvider that reads private keys under the given classpath base.

ClasspathPublicKeyProvider - Class in com.atlassian.asap.core.keys.publickey

Retrieves public keys from the classpath.

ClasspathPublicKeyProvider(String, KeyReader) - Constructor for class com.atlassian.asap.core.keys.publickey.ClasspathPublicKeyProvider

Create a provider that reads public keys under the given classpath base.

ClassPathUri - Class in com.atlassian.asap.core.keys

A class to create informative classpath URI.

ClassPathUri() - Constructor for class com.atlassian.asap.core.keys.ClassPathUri

classPathUri(String) - Static method in class com.atlassian.asap.core.keys.ClassPathUri

Creates a URI that denotes a classpath resource, using the classpath pseudo protocol.

com.atlassian.asap - package com.atlassian.asap

Library that is used to create and verify json web tokens (JWT) for service to service authentication purposes using the ASAP protocol.

com.atlassian.asap.annotation - package com.atlassian.asap.annotation

com.atlassian.asap.api - package com.atlassian.asap.api

com.atlassian.asap.api.client.http - package com.atlassian.asap.api.client.http

com.atlassian.asap.api.exception - package com.atlassian.asap.api.exception

com.atlassian.asap.api.server.http - package com.atlassian.asap.api.server.http

com.atlassian.asap.core - package com.atlassian.asap.core

com.atlassian.asap.core.client - package com.atlassian.asap.core.client

com.atlassian.asap.core.client.http - package com.atlassian.asap.core.client.http

com.atlassian.asap.core.client.jersey - package com.atlassian.asap.core.client.jersey

com.atlassian.asap.core.exception - package com.atlassian.asap.core.exception

com.atlassian.asap.core.keys - package com.atlassian.asap.core.keys

com.atlassian.asap.core.keys.privatekey - package com.atlassian.asap.core.keys.privatekey

com.atlassian.asap.core.keys.publickey - package com.atlassian.asap.core.keys.publickey

com.atlassian.asap.core.parser - package com.atlassian.asap.core.parser

com.atlassian.asap.core.serializer - package com.atlassian.asap.core.serializer

com.atlassian.asap.core.server - package com.atlassian.asap.core.server

com.atlassian.asap.core.server.filter - package com.atlassian.asap.core.server.filter

com.atlassian.asap.core.server.http - package com.atlassian.asap.core.server.http

com.atlassian.asap.core.server.jersey - package com.atlassian.asap.core.server.jersey

Jersey 2 adapter for ASAP

com.atlassian.asap.core.server.springsecurity - package com.atlassian.asap.core.server.springsecurity

com.atlassian.asap.core.validator - package com.atlassian.asap.core.validator

com.atlassian.asap.feign - package com.atlassian.asap.feign

com.atlassian.asap.it - package com.atlassian.asap.it

com.atlassian.asap.nimbus.parser - package com.atlassian.asap.nimbus.parser

com.atlassian.asap.nimbus.serializer - package com.atlassian.asap.nimbus.serializer

com.atlassian.asap.performance - package com.atlassian.asap.performance

com.atlassian.asap.service.api - package com.atlassian.asap.service.api

A service API that simplifies creating and verifying ASAP tokens within an application.

com.atlassian.asap.service.core.impl - package com.atlassian.asap.service.core.impl

Implementations for the token building and validation classes of the service API.

com.atlassian.asap.service.core.service - package com.atlassian.asap.service.core.service

Default implementations for the core services published by the service API.

com.atlassian.asap.service.core.spi - package com.atlassian.asap.service.core.spi

Supporting classes that the host application must supply in order to use the default implementation classes in the service API.

configure() - Method in class com.atlassian.asap.core.server.jersey.JwtParamBinder

copyJwt(Jwt) - Static method in class com.atlassian.asap.api.JwtBuilder

Returns a builder initialised to make an identical copy of the given original Jwt.

create(AuthenticationContext) - Method in class com.atlassian.asap.core.server.http.RequestAuthenticatorFactory

create(JwtAuth) - Method in class com.atlassian.asap.core.server.jersey.JerseyRequestAuthorizerFactory

Instantiates JerseyRequestAuthorizer from the JwtAuth annotation.

createChainedKeyProvider(List<KeyProvider<PublicKey>>) - Static method in class com.atlassian.asap.core.keys.publickey.ChainedKeyProvider

Create a chained key provider representing a given list of key repository providers.

createDefault(URI) - Static method in class com.atlassian.asap.core.client.http.AuthorizationHeaderGeneratorImpl

Constructs a default instance for the given private key path.

createDefault() - Static method in class com.atlassian.asap.core.keys.publickey.PublicKeyProviderFactory

createDefault(String, String) - Static method in class com.atlassian.asap.core.server.filter.RequestAuthenticationFilterBean

A factory to instantiate the filter with minimal configuration.

createDefault(AuthenticationContext) - Static method in class com.atlassian.asap.core.validator.JwtValidatorImpl

A factory method that returns an instance with a typical configuration.

createDefault(String, String) - Static method in class com.atlassian.asap.core.validator.JwtValidatorImpl

A factory method that returns an instance with a typical configuration.

createDefault(Set<String>, String) - Static method in class com.atlassian.asap.core.validator.JwtValidatorImpl

A factory method that returns an instance with a typical configuration.

createECDSASignerForKey(ECPrivateKey) - Method in class com.atlassian.asap.nimbus.serializer.NimbusJwtSerializer

createJwtValidator(KeyProvider<PublicKey>, JwtParser, JwtClaimsValidator, Set<String>) - Method in class com.atlassian.asap.service.core.impl.TokenValidatorImpl

Creates the validator that will enforce correctness of the token.

createMirroredKeyProvider(List<KeyProvider<PublicKey>>) - Static method in class com.atlassian.asap.core.keys.publickey.MirroredKeyProvider

Create a mirrored key provider representing a given set of mirrored key repository providers.

createPrivateKeyProvider(URI) - Static method in class com.atlassian.asap.core.keys.privatekey.PrivateKeyProviderFactory

Creates an instance of KeyProvider.

createPublicKeyProvider(String) - Method in class com.atlassian.asap.core.keys.publickey.PublicKeyProviderFactory

Creates an instance of KeyProvider for the given base URL.

createRSASSASignerForKey(RSAPrivateKey) - Method in class com.atlassian.asap.nimbus.serializer.NimbusJwtSerializer

customClaims(JsonObject) - Method in class com.atlassian.asap.api.JwtBuilder

Sets the custom claims for this jwt.

customClaims(Optional<JsonObject>) - Method in interface com.atlassian.asap.service.api.AuthorizationBuilder

Permits the inclusion of additional parameters that are not covered by any of the standard JWT claims.

customClaims(Optional<JsonObject>) - Method in class com.atlassian.asap.service.core.impl.AuthorizationBuilderImpl

D

DATA_URI_PEM_HEADER - Static variable in class com.atlassian.asap.core.keys.DataUriKeyReader

DATA_URI_PKCS8_HEADER - Static variable in class com.atlassian.asap.core.keys.DataUriKeyReader

DataUriKeyProvider - Class in com.atlassian.asap.core.keys.privatekey

Key provider for keys embedded in data uri.

DataUriKeyProvider(URI, DataUriKeyReader) - Constructor for class com.atlassian.asap.core.keys.privatekey.DataUriKeyProvider

DataUriKeyReader - Class in com.atlassian.asap.core.keys

Reads keys encoded in a data uri.

DataUriKeyReader() - Constructor for class com.atlassian.asap.core.keys.DataUriKeyReader

DataUriKeyReader(Provider) - Constructor for class com.atlassian.asap.core.keys.DataUriKeyReader

DataUriUtil - Class in com.atlassian.asap.core.keys

DataUriUtil() - Constructor for class com.atlassian.asap.core.keys.DataUriUtil

decision() - Method in interface com.atlassian.asap.service.api.ValidationResult

The overall decision as to whether or not the Authorization header has satisfied the validator's requirements.

DEFAULT_LIFETIME - Static variable in class com.atlassian.asap.api.JwtBuilder

Token lifetime, unless a specific lifetime is explicitly set.

DEFAULT_MAX_LIFETIME - Static variable in class com.atlassian.asap.core.validator.JwtClaimsValidator

No matter what the claims say, the server should reject tokens that are too long-lived.

DefaultAsapService - Class in com.atlassian.asap.service.core.service

A default implementation for AsapService that takes its settings from an AsapConfiguration.

DefaultAsapService(AsapConfiguration, JwtClaimsValidator, PublicKeyProviderFactory, AuthorizationHeaderGenerator) - Constructor for class com.atlassian.asap.service.core.service.DefaultAsapService

DefaultAsapService(AsapConfiguration, JwtClaimsValidator, KeyProvider<PublicKey>, AuthorizationHeaderGenerator) - Constructor for class com.atlassian.asap.service.core.service.DefaultAsapService

DefaultAuthorizationHeaderGenerator - Class in com.atlassian.asap.service.core.service

An authorization header generator that is suitable for use as a globally configured component in a container.

DefaultAuthorizationHeaderGenerator(AsapConfiguration) - Constructor for class com.atlassian.asap.service.core.service.DefaultAuthorizationHeaderGenerator

Constructs a new authorization header generator.

defaultHttpClient() - Static method in class com.atlassian.asap.core.keys.publickey.HttpPublicKeyProvider

Constructs the HTTP client used by the provider if no other HttpClient is provided.

defaultHttpClientBuilder() - Static method in class com.atlassian.asap.core.keys.publickey.HttpPublicKeyProvider

Configures the HTTP client used by the provider with the necessary connection manager and request/cache config.

destroy() - Method in class com.atlassian.asap.core.server.filter.AbstractRequestAuthenticationFilter

destroy() - Method in class com.atlassian.asap.core.server.filter.AbstractRequestAuthorizationFilter

determineUnverifiedIssuer(String) - Method in interface com.atlassian.asap.core.parser.JwtParser

Extracts the issuer, if at all possible, from the claims section of the given serialized JWT.

determineUnverifiedIssuer(String) - Method in interface com.atlassian.asap.core.validator.JwtValidator

Extracts the issuer, if at all possible, from the claims section by parsing the given serialized JWT.

determineUnverifiedIssuer(String) - Method in class com.atlassian.asap.core.validator.JwtValidatorImpl

determineUnverifiedIssuer(String) - Method in class com.atlassian.asap.nimbus.parser.NimbusJwtParser

doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class com.atlassian.asap.core.server.filter.AbstractRequestAuthenticationFilter

doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class com.atlassian.asap.core.server.filter.AbstractRequestAuthorizationFilter

E

effectiveSubject(Jwt) - Static method in class com.atlassian.asap.core.server.springsecurity.AsapAuthenticationProvider

EmptyBodyFailureHandler - Class in com.atlassian.asap.core.server.jersey

Handles authentication and authorization failures by sending back empty-bodied responses with the correct codes.

EmptyBodyFailureHandler() - Constructor for class com.atlassian.asap.core.server.jersey.EmptyBodyFailureHandler

EnvironmentVariableKeyProvider - Class in com.atlassian.asap.core.keys.privatekey

Reads private keys specified as data uri from environment variables.

EnvironmentVariablesWhitelistProvider() - Constructor for class com.atlassian.asap.core.server.jersey.AsapValidator.EnvironmentVariablesWhitelistProvider

EnvironmentVariablesWhitelistProvider(String, String, Map<String, String>) - Constructor for class com.atlassian.asap.core.server.jersey.AsapValidator.EnvironmentVariablesWhitelistProvider

EnvVarAsapConfiguration - Class in com.atlassian.asap.service.core.service

EnvVarAsapConfiguration(String, String, String) - Constructor for class com.atlassian.asap.service.core.service.EnvVarAsapConfiguration

equals(Object) - Method in class com.atlassian.asap.core.validator.ValidatedKeyId

execute(URI) - Method in class com.atlassian.asap.core.client.SimpleClient

Makes an authenticated request to get a resource.

expiration(Optional<Duration>) - Method in interface com.atlassian.asap.service.api.AuthorizationBuilder

Specifies how long the token will remain valid.

expiration(Optional<Duration>) - Method in class com.atlassian.asap.service.core.impl.AuthorizationBuilderImpl

expirationTime(Instant) - Method in class com.atlassian.asap.api.JwtBuilder

Sets the expiration time (exp) claim.

F

FailureHandler - Interface in com.atlassian.asap.core.server.jersey

An extension point for customizing how the authentication and authorization failures are returned to the client.

FieldsAreNonNullByDefault - Annotation Type in com.atlassian.asap.annotation

FilePrivateKeyProvider - Class in com.atlassian.asap.core.keys.privatekey

Reads private keys from the filesystem.

FilePrivateKeyProvider(File, KeyReader) - Constructor for class com.atlassian.asap.core.keys.privatekey.FilePrivateKeyProvider

Creates a new instance of FilePrivateKeyProvider.

FilePublicKeyProvider - Class in com.atlassian.asap.core.keys.publickey

Reads public keys from the filesystem.

FilePublicKeyProvider(File, PemReader) - Constructor for class com.atlassian.asap.core.keys.publickey.FilePublicKeyProvider

filter(ContainerRequestContext) - Method in class com.atlassian.asap.core.server.jersey.AuthenticationRequestFilter

filter(ContainerRequestContext) - Method in class com.atlassian.asap.core.server.jersey.AuthorizationRequestFilter

fromUri(URI, DataUriKeyReader) - Static method in class com.atlassian.asap.core.keys.privatekey.EnvironmentVariableKeyProvider

Instantiates the class by parsing a URL with the following syntax: env:///[BASE_ENV_VARIABLE_NAME].

fromUri(URI, DataUriKeyReader) - Static method in class com.atlassian.asap.core.keys.privatekey.SystemPropertyKeyProvider

Instantiates the class by parsing a URL with the following syntax: sysprop:///[BASE_SYSTEM_PROPERTY_NAME].

G

generateAuthorizationHeader(Jwt) - Method in interface com.atlassian.asap.api.client.http.AuthorizationHeaderGenerator

Generates an HTTP Authorization header that includes a signed JWT.

generateAuthorizationHeader(Jwt) - Method in class com.atlassian.asap.core.client.http.AuthorizationHeaderGeneratorImpl

getAlgorithm() - Method in interface com.atlassian.asap.api.JwsHeader

getAudience() - Method in interface com.atlassian.asap.api.JwtClaims

getAudience() - Method in class com.atlassian.asap.core.server.AsapServerConfiguration

getClaim() - Method in exception com.atlassian.asap.core.exception.InvalidClaimException

getClaim() - Method in exception com.atlassian.asap.core.exception.MissingRequiredClaimException

getClaims() - Method in interface com.atlassian.asap.api.Jwt

getClaims() - Method in class com.atlassian.asap.nimbus.parser.NimbusVerifiableJwt

getDefaultAuthorities() - Method in class com.atlassian.asap.core.server.springsecurity.AsapAuthenticationProvider

getExpiry() - Method in interface com.atlassian.asap.api.JwtClaims

getGrantedAuthorities(Jwt) - Method in class com.atlassian.asap.core.server.springsecurity.AsapAuthenticationProvider

Subclasses should implement the strategy to grant authorities to valid JWT tokens with the given combination of issuer and effective subject.

getGrantedAuthorities(Jwt) - Method in class com.atlassian.asap.core.server.springsecurity.IssuerAndSubjectWhitelistAsapAuthenticationProvider

getHeader() - Method in interface com.atlassian.asap.api.Jwt

getHeader() - Method in exception com.atlassian.asap.core.exception.MissingRequiredHeaderException

getHeader() - Method in class com.atlassian.asap.nimbus.parser.NimbusVerifiableJwt

getInjectable(ComponentContext, JwtAuth, Type) - Method in class com.atlassian.asap.core.server.jersey.JwtAuthProvider

getIssuedAt() - Method in interface com.atlassian.asap.api.JwtClaims

getIssuer() - Method in interface com.atlassian.asap.api.JwtClaims

getIssuer() - Method in class com.atlassian.asap.core.client.AsapClientConfiguration

getJerseyRequestAuthorizer() - Method in class com.atlassian.asap.core.server.jersey.JwtInjectable

getJson() - Method in interface com.atlassian.asap.api.JwtClaims

getJwtId() - Method in interface com.atlassian.asap.api.JwtClaims

getKey(ValidatedKeyId) - Method in interface com.atlassian.asap.core.keys.KeyProvider

Provides a Key for a validated key identifier.

getKey(ValidatedKeyId) - Method in class com.atlassian.asap.core.keys.privatekey.ClasspathPrivateKeyProvider

getKey(ValidatedKeyId) - Method in class com.atlassian.asap.core.keys.privatekey.DataUriKeyProvider

getKey(ValidatedKeyId) - Method in class com.atlassian.asap.core.keys.privatekey.FilePrivateKeyProvider

getKey(ValidatedKeyId) - Method in class com.atlassian.asap.core.keys.privatekey.NullKeyProvider

getKey(ValidatedKeyId) - Method in class com.atlassian.asap.core.keys.privatekey.StringPrivateKeyProvider

getKey(ValidatedKeyId) - Method in class com.atlassian.asap.core.keys.publickey.ChainedKeyProvider

getKey(ValidatedKeyId) - Method in class com.atlassian.asap.core.keys.publickey.ClasspathPublicKeyProvider

getKey(ValidatedKeyId) - Method in class com.atlassian.asap.core.keys.publickey.FilePublicKeyProvider

getKey(ValidatedKeyId) - Method in class com.atlassian.asap.core.keys.publickey.HttpPublicKeyProvider

getKey(ValidatedKeyId) - Method in class com.atlassian.asap.core.keys.publickey.MirroredKeyProvider

getKeyData(String) - Static method in class com.atlassian.asap.core.keys.DataUriUtil

Extract the key data from the given data uri.

getKeyId() - Method in exception com.atlassian.asap.api.exception.AuthenticationFailedException

getKeyId() - Method in exception com.atlassian.asap.api.exception.CannotRetrieveKeyException

getKeyId() - Method in interface com.atlassian.asap.api.JwsHeader

getKeyId() - Method in class com.atlassian.asap.core.client.AsapClientConfiguration

getKeyId(String) - Static method in class com.atlassian.asap.core.keys.DataUriUtil

Extract the key identifier from the given data uri.

getKeyId() - Method in class com.atlassian.asap.core.validator.ValidatedKeyId

getKeyProviderChain() - Method in class com.atlassian.asap.core.keys.publickey.ChainedKeyProvider

getKeyUri() - Method in exception com.atlassian.asap.api.exception.AuthenticationFailedException

getKeyUri() - Method in exception com.atlassian.asap.api.exception.CannotRetrieveKeyException

getMirrors() - Method in class com.atlassian.asap.core.keys.publickey.MirroredKeyProvider

getNotBefore() - Method in interface com.atlassian.asap.api.JwtClaims

getProvider() - Static method in class com.atlassian.asap.core.SecurityProvider

Returns an instance of Provider.

getPublicKeyProvider() - Method in class com.atlassian.asap.core.server.AuthenticationContext

getRequestAuthenticator(FilterConfig) - Method in class com.atlassian.asap.core.server.filter.AbstractRequestAuthenticationFilter

Override this to supply your RequestAuthenticator.

getRequestAuthenticator(FilterConfig) - Method in class com.atlassian.asap.core.server.filter.RequestAuthenticationFilterBean

getRequestAuthenticator() - Method in class com.atlassian.asap.core.server.jersey.JwtInjectable

getResourceServerAudience() - Method in class com.atlassian.asap.core.server.AuthenticationContext

Deprecated.

since 2.12, use AuthenticationContext.getResourceServerAudiences() instead

getResourceServerAudiences() - Method in class com.atlassian.asap.core.server.AuthenticationContext

getRetryInterval() - Method in class com.atlassian.asap.core.keys.publickey.S3ServiceUnavailableRetryStrategy

getSafeDetails() - Method in exception com.atlassian.asap.api.exception.InvalidTokenException

Returns safe-to-propagate details about this exception, eg.

getSafeDetails() - Method in exception com.atlassian.asap.core.exception.InvalidClaimException

getSafeDetails() - Method in exception com.atlassian.asap.core.exception.MissingRequiredClaimException

getSafeDetails() - Method in exception com.atlassian.asap.core.exception.MissingRequiredHeaderException

getScope() - Method in class com.atlassian.asap.core.server.jersey.JwtAuthProvider

getSubject() - Method in interface com.atlassian.asap.api.JwtClaims

getUnverifiedIssuer() - Method in exception com.atlassian.asap.api.exception.AuthenticationFailedException

getUrl() - Method in class com.atlassian.asap.core.server.SimpleServer

getUrlForResourceName(String) - Method in class com.atlassian.asap.it.BaseIntegrationTest

getValue(HttpContext) - Method in class com.atlassian.asap.core.server.jersey.JwtInjectable

H

handle(ClientRequest) - Method in class com.atlassian.asap.core.client.jersey.AsapAuthenticationFilter

hashCode() - Method in class com.atlassian.asap.core.validator.ValidatedKeyId

hashSize() - Method in enum com.atlassian.asap.api.SigningAlgorithm

HTTP_AUTHORIZATION_HEADER_VALUE_PREFIX - Static variable in class com.atlassian.asap.core.JwtConstants

The Authorization HTTP header value prefix for the bearer authentication scheme.

HttpPublicKeyProvider - Class in com.atlassian.asap.core.keys.publickey

Reads public keys from web servers using the HTTPS protocol.

HttpPublicKeyProvider(URI, HttpClient, PemReader) - Constructor for class com.atlassian.asap.core.keys.publickey.HttpPublicKeyProvider

Create a new HttpPublicKeyProvider instance.

I

impersonationAuthorizedIssuers() - Method in class com.atlassian.asap.service.core.impl.AbstractTokenValidator

impersonationIssuer(String...) - Method in interface com.atlassian.asap.service.api.TokenValidator

Specifies the issuer(s) that are authorized to impersonate a user while using this resource.

impersonationIssuer(Iterable<String>) - Method in interface com.atlassian.asap.service.api.TokenValidator

As for TokenValidator.impersonationIssuer(String...).

impersonationIssuer(Iterable<String>) - Method in class com.atlassian.asap.service.core.impl.AbstractTokenValidator

init(FilterConfig) - Method in class com.atlassian.asap.core.server.filter.AbstractRequestAuthenticationFilter

init(FilterConfig) - Method in class com.atlassian.asap.core.server.filter.AbstractRequestAuthorizationFilter

InvalidClaimException - Exception in com.atlassian.asap.core.exception

Thrown if a JWT claim does not match its expected format.

InvalidClaimException(JwtClaims.RegisteredClaim, String) - Constructor for exception com.atlassian.asap.core.exception.InvalidClaimException

InvalidHeaderException - Exception in com.atlassian.asap.core.exception

Thrown if a JWT header does not match its expected format.

InvalidHeaderException(String) - Constructor for exception com.atlassian.asap.core.exception.InvalidHeaderException

InvalidHeaderException(String, Throwable) - Constructor for exception com.atlassian.asap.core.exception.InvalidHeaderException

InvalidTokenException - Exception in com.atlassian.asap.api.exception

Indicates a JWT was syntactically well formed (parses successfully), but failed to validate.

InvalidTokenException(String) - Constructor for exception com.atlassian.asap.api.exception.InvalidTokenException

InvalidTokenException(String, Throwable) - Constructor for exception com.atlassian.asap.api.exception.InvalidTokenException

InvalidTokenException(Throwable) - Constructor for exception com.atlassian.asap.api.exception.InvalidTokenException

isAuthorized(HttpServletRequest, Jwt) - Method in class com.atlassian.asap.core.server.filter.AbstractRequestAuthorizationFilter

Decides if the token is authorized for the request.

isAuthorized(HttpServletRequest, Jwt) - Method in class com.atlassian.asap.core.server.filter.RulesAwareRequestAuthorizationFilter

isAuthorized(HttpServletRequest, Jwt) - Method in class com.atlassian.asap.core.server.filter.WhitelistRequestAuthorizationFilter

isOk() - Method in enum com.atlassian.asap.service.api.ValidationResult.Decision

If true, then the validation was successful (either an appropriate token was found or none was needed).

issuedAt(Instant) - Method in class com.atlassian.asap.api.JwtBuilder

Set the issued at (iat) claim.

issuer(String) - Method in class com.atlassian.asap.api.JwtBuilder

Set the issuer (iss) claim.

issuer(String...) - Method in interface com.atlassian.asap.service.api.TokenValidator

Specifies the issuer(s) that are authorized to use this resource.

issuer(Iterable<String>) - Method in interface com.atlassian.asap.service.api.TokenValidator

As for TokenValidator.issuer(String...).

issuer(Iterable<String>) - Method in class com.atlassian.asap.service.core.impl.AbstractTokenValidator

issuer() - Method in class com.atlassian.asap.service.core.service.StringValuesAsapConfiguration

issuer() - Method in interface com.atlassian.asap.service.core.spi.AsapConfiguration

The issuer that is used when signing tokens.

ISSUER1 - Static variable in class com.atlassian.asap.it.BaseIntegrationTest

ISSUER1_EC_KEY_ID - Static variable in class com.atlassian.asap.it.BaseIntegrationTest

ISSUER1_ONLY_PRIV_KEY_RSA_KEY_ID - Static variable in class com.atlassian.asap.it.BaseIntegrationTest

ISSUER1_RSA_KEY_ID - Static variable in class com.atlassian.asap.it.BaseIntegrationTest

ISSUER2 - Static variable in class com.atlassian.asap.it.BaseIntegrationTest

ISSUER2_RSA_KEY_ID - Static variable in class com.atlassian.asap.it.BaseIntegrationTest

ISSUER_SYSPROP - Static variable in class com.atlassian.asap.core.client.SimpleClientRunner

IssuerAndSubjectAwareRequestAuthorizationFilter - Class in com.atlassian.asap.core.server.filter

This filter takes a map of issuers and predicates that define which issuers should be allowed to make ASAP requests and what the subjects for those issuers should look like.

IssuerAndSubjectAwareRequestAuthorizationFilter(Map<String, Predicate<String>>) - Constructor for class com.atlassian.asap.core.server.filter.IssuerAndSubjectAwareRequestAuthorizationFilter

IssuerAndSubjectWhitelistAsapAuthenticationProvider - Class in com.atlassian.asap.core.server.springsecurity

ASAP authentication provider that grants static authorities based on whitelists of issuers and effective subjects.

IssuerAndSubjectWhitelistAsapAuthenticationProvider(JwtValidator, Iterable<String>, Iterable<String>, Iterable<GrantedAuthority>) - Constructor for class com.atlassian.asap.core.server.springsecurity.IssuerAndSubjectWhitelistAsapAuthenticationProvider

issuers(Set<String>) - Static method in class com.atlassian.asap.core.server.filter.IssuerAndSubjectAwareRequestAuthorizationFilter

A helper constructor to construct a filter from a list of issuers.

J

JerseyRequestAuthorizer - Interface in com.atlassian.asap.core.server.jersey

Authorization strategy for Jersey requests.

JerseyRequestAuthorizerFactory - Class in com.atlassian.asap.core.server.jersey

Factory for JerseyRequestAuthorizer.

JerseyRequestAuthorizerFactory() - Constructor for class com.atlassian.asap.core.server.jersey.JerseyRequestAuthorizerFactory

Json - Class in com.atlassian.asap.core.serializer

Json() - Constructor for class com.atlassian.asap.core.serializer.Json

JwsHeader - Interface in com.atlassian.asap.api

The header of an ASAP JSON Web Token.

JwsHeader.Header - Enum in com.atlassian.asap.api

The headers of a JWT message.

Jwt - Interface in com.atlassian.asap.api

An ASAP JSON Web Token.

JwtAuth - Annotation Type in com.atlassian.asap.core.server.jersey

JwtAuthProvider - Class in com.atlassian.asap.core.server.jersey

JwtAuthProvider(AuthenticationContext, RequestAuthenticatorFactory, JerseyRequestAuthorizerFactory) - Constructor for class com.atlassian.asap.core.server.jersey.JwtAuthProvider

JwtAuthProvider(AuthenticationContext) - Constructor for class com.atlassian.asap.core.server.jersey.JwtAuthProvider

JwtBuilder - Class in com.atlassian.asap.api

A fluent builder for constructing a Jwt object.

JwtClaims - Interface in com.atlassian.asap.api

Represents the claims of an ASAP JWT payload.

JwtClaims.RegisteredClaim - Enum in com.atlassian.asap.api

The registered claims of a JWT claims payload as per JWT spec.

jwtClaimsValidator() - Method in class com.atlassian.asap.core.server.AsapServerConfiguration

Definition of the JwtClaimsValidator bean.

JwtClaimsValidator - Class in com.atlassian.asap.core.validator

Validates the claims contained in a JWT.

JwtClaimsValidator(Clock) - Constructor for class com.atlassian.asap.core.validator.JwtClaimsValidator

JwtClaimsValidator(Clock, Duration) - Constructor for class com.atlassian.asap.core.validator.JwtClaimsValidator

JwtConstants - Class in com.atlassian.asap.core

Constants defined by the ASAP protocol.

jwtId(String) - Method in class com.atlassian.asap.api.JwtBuilder

Set the jwt id (jti) claim.

JwtInjectable - Class in com.atlassian.asap.core.server.jersey

JwtInjectable(RequestAuthenticator, JerseyRequestAuthorizer) - Constructor for class com.atlassian.asap.core.server.jersey.JwtInjectable

JwtParam - Annotation Type in com.atlassian.asap.core.server.jersey

The JwtParam annotation is used to inject the authentic Jwt token into the current resource handler method.

JwtParamBinder - Class in com.atlassian.asap.core.server.jersey

JwtParamBinder can be registered with Jersey to provide a JwtParam to Jwt token binding on resource methods.

JwtParamBinder() - Constructor for class com.atlassian.asap.core.server.jersey.JwtParamBinder

JwtParseException - Exception in com.atlassian.asap.core.exception

Indicates that the JWT was not well-formed.

JwtParseException(String, Throwable) - Constructor for exception com.atlassian.asap.core.exception.JwtParseException

JwtParseException(Throwable) - Constructor for exception com.atlassian.asap.core.exception.JwtParseException

JwtParseException(String) - Constructor for exception com.atlassian.asap.core.exception.JwtParseException

JwtParser - Interface in com.atlassian.asap.core.parser

Parses a JWT token without verifying its signature or checking the validity of its claims.

jwtParser() - Method in class com.atlassian.asap.core.server.AsapServerConfiguration

Definition of the JwtParser bean.

jwtSerializer() - Method in class com.atlassian.asap.core.client.AsapClientConfiguration

Definition of the JwtSerializer bean.

JwtSerializer - Interface in com.atlassian.asap.core.serializer

Signs and serialises JWT tokens.

jwtValidator(KeyProvider<PublicKey>, JwtParser, JwtClaimsValidator) - Method in class com.atlassian.asap.core.server.AsapServerConfiguration

Definition of the JwtValidator bean.

JwtValidator - Interface in com.atlassian.asap.core.validator

Interface for parsing, verifying and validating a Jwt token.

JwtValidatorImpl - Class in com.atlassian.asap.core.validator

Orchestrates the parsing of the JWT using the provided JwtParser, the verification of its signature using the provided KeyProvider and the validation of its claims using the provided JwtClaimsValidator.

JwtValidatorImpl(KeyProvider<PublicKey>, JwtParser, JwtClaimsValidator, Supplier<Set<String>>) - Constructor for class com.atlassian.asap.core.validator.JwtValidatorImpl

Create a new instance of JwtValidatorImpl.

JwtValidatorImpl(KeyProvider<PublicKey>, JwtParser, JwtClaimsValidator, Set<String>) - Constructor for class com.atlassian.asap.core.validator.JwtValidatorImpl

Create a new instance of JwtValidatorImpl.

JwtValidatorImpl(KeyProvider<PublicKey>, JwtParser, JwtClaimsValidator, String) - Constructor for class com.atlassian.asap.core.validator.JwtValidatorImpl

Create a new instance of JwtValidatorImpl.

K

key() - Method in enum com.atlassian.asap.api.JwsHeader.Header

key() - Method in enum com.atlassian.asap.api.JwtClaims.RegisteredClaim

keyId(String) - Method in class com.atlassian.asap.api.JwtBuilder

Sets the key id jws header.

keyId() - Method in class com.atlassian.asap.service.core.service.StringValuesAsapConfiguration

keyId() - Method in interface com.atlassian.asap.service.core.spi.AsapConfiguration

The key ID that is used when signing tokens.

KEYID_SYSPROP - Static variable in class com.atlassian.asap.core.client.SimpleClientRunner

KeyProvider<K extends Key> - Interface in com.atlassian.asap.core.keys

KeyReader - Interface in com.atlassian.asap.core.keys

Reads cryptographic keys from encoded key data.

M

main(String[]) - Static method in class com.atlassian.asap.core.client.SimpleClientRunner

Main function to run the client.

main(String[]) - Static method in class com.atlassian.asap.core.server.SimpleServerRunner

Main function to run the server.

main(String[]) - Static method in class com.atlassian.asap.performance.Benchmark

Main function to run the benchmark test.

MirroredKeyProvider - Class in com.atlassian.asap.core.keys.publickey

Represents a set of repositories that host identical set of keys - i.e.

MissingRequiredClaimException - Exception in com.atlassian.asap.core.exception

Thrown when a required claim is missing in the JWT claims payload.

MissingRequiredClaimException(JwtClaims.RegisteredClaim) - Constructor for exception com.atlassian.asap.core.exception.MissingRequiredClaimException

MissingRequiredHeaderException - Exception in com.atlassian.asap.core.exception

Thrown when a required header is missing in the JWT header.

MissingRequiredHeaderException(JwsHeader.Header) - Constructor for exception com.atlassian.asap.core.exception.MissingRequiredHeaderException

N

newAnnotationValidator() - Static method in class com.atlassian.asap.core.server.jersey.AsapValidator

newAnnotationWithConfigValidator(Set<String>, Set<String>) - Static method in class com.atlassian.asap.core.server.jersey.AsapValidator

This validator gives preferential treatment to the subjects and issuers present in the Asap annotation.

newEnvironmentVariablesValidator() - Static method in class com.atlassian.asap.core.server.jersey.AsapValidator

newFromPrototype(Jwt) - Static method in class com.atlassian.asap.api.JwtBuilder

Construct a JWT builder initialised from a prototype JWT.

newInstance(String, String) - Static method in class com.atlassian.asap.core.server.jersey.AuthenticationRequestFilter

Use this factory method to create a new AuthorizationRequestFilter instance with the specified audience and public key repository URL.

newInstance(String, KeyProvider<PublicKey>) - Static method in class com.atlassian.asap.core.server.jersey.AuthenticationRequestFilter

Use this factory method to create a new AuthorizationRequestFilter instance with the specified audience and public key repository provider.

newInstance(AuthenticationContext) - Static method in class com.atlassian.asap.core.server.jersey.AuthenticationRequestFilter

Use this factory method to create a new AuthorizationRequestFilter instance with the specified context.

newInstance() - Static method in class com.atlassian.asap.core.server.jersey.AuthorizationRequestFilter

Use this factory method to create a new AuthorizationRequestFilter instance with the specified audience, issuers list, and public key repository URL.

newJwt() - Static method in class com.atlassian.asap.api.JwtBuilder

Construct a simple jwt builder initialised with default claim values as follows: nbf, iat claim set to current system time exp claim set current time plus default expiry as defined in JwtBuilder.DEFAULT_LIFETIME jti claim set to a random UUID.

NimbusJwtParser - Class in com.atlassian.asap.nimbus.parser

A parser of JWT implemented using the Nimbus library.

NimbusJwtParser() - Constructor for class com.atlassian.asap.nimbus.parser.NimbusJwtParser

NimbusJwtParser(Provider) - Constructor for class com.atlassian.asap.nimbus.parser.NimbusJwtParser

NimbusJwtSerializer - Class in com.atlassian.asap.nimbus.serializer

A serializer of JWT implemented using the Nimbus library.

NimbusJwtSerializer() - Constructor for class com.atlassian.asap.nimbus.serializer.NimbusJwtSerializer

NimbusJwtSerializer(Provider) - Constructor for class com.atlassian.asap.nimbus.serializer.NimbusJwtSerializer

NimbusVerifiableJwt - Class in com.atlassian.asap.nimbus.parser

NimbusVerifiableJwt(Jwt, JWSObject, Provider) - Constructor for class com.atlassian.asap.nimbus.parser.NimbusVerifiableJwt

notBefore(Optional<Instant>) - Method in class com.atlassian.asap.api.JwtBuilder

Set the not before (nbf) claim.

NullKeyProvider - Class in com.atlassian.asap.core.keys.privatekey

A provider that provides no keys.

NullKeyProvider() - Constructor for class com.atlassian.asap.core.keys.privatekey.NullKeyProvider

O

onAuthenticationError(HttpServletRequest, HttpServletResponse, FilterChain, TransientAuthenticationFailedException) - Method in class com.atlassian.asap.core.server.filter.AbstractRequestAuthenticationFilter

Handles an unexpected error during request authentication (such as a failure when retrieving the required public key).

onAuthenticationFailure(HttpServletRequest, HttpServletResponse, FilterChain) - Method in class com.atlassian.asap.core.server.filter.AbstractRequestAuthenticationFilter

Handles the failure of request authentication (e.g., invalid token).

onAuthenticationFailure(ContainerRequestContext, AuthenticationFailedException) - Method in interface com.atlassian.asap.core.server.jersey.FailureHandler

Handles when the Jwt token cannot be parsed or validated.

onAuthenticationFailure(ContainerRequestContext, String) - Method in interface com.atlassian.asap.core.server.jersey.FailureHandler

Deprecated.

Use FailureHandler.onAuthenticationFailure(ContainerRequestContext, AuthenticationFailedException) instead.

onAuthenticationSuccess(Jwt, HttpServletRequest, HttpServletResponse, FilterChain) - Method in class com.atlassian.asap.core.server.filter.AbstractRequestAuthenticationFilter

Handles the acceptance of an authentic request.

onAuthorizationFailure(Jwt, HttpServletRequest, HttpServletResponse, FilterChain) - Method in class com.atlassian.asap.core.server.filter.AbstractRequestAuthorizationFilter

Override this method to define the behaviour of the filter when a valid token is found, but the request is not authorized.

onAuthorizationFailure(ContainerRequestContext, AuthorizationFailedException) - Method in interface com.atlassian.asap.core.server.jersey.FailureHandler

Handles when the Jwt token claims cannot be authorized.

onAuthorizationFailure(ContainerRequestContext, String) - Method in interface com.atlassian.asap.core.server.jersey.FailureHandler

Deprecated.

Use FailureHandler.onAuthorizationFailure(ContainerRequestContext, AuthorizationFailedException) instead.

onAuthorizationSuccess(Jwt, HttpServletRequest, HttpServletResponse, FilterChain) - Method in class com.atlassian.asap.core.server.filter.AbstractRequestAuthorizationFilter

Override this method to define the behaviour of the filter when a valid token is found and the request is authorized.

onPermanentAuthenticationFailure(ContainerRequestContext, PermanentAuthenticationFailedException) - Method in interface com.atlassian.asap.core.server.jersey.FailureHandler

Handles when the Jwt token cannot validated, because of a permanent error (such as wrong header value, incorrect signature, etc.).

onTokenNotFound(HttpServletRequest, HttpServletResponse, FilterChain) - Method in class com.atlassian.asap.core.server.filter.AbstractRequestAuthorizationFilter

Override this method to define the behaviour of the filter when a token is not found in the request.

onTransientAuthenticationFailure(ContainerRequestContext, TransientAuthenticationFailedException) - Method in interface com.atlassian.asap.core.server.jersey.FailureHandler

Handles when the Jwt token cannot validated, because of a possibly transient error (like a communication failure or 500 error response).

P

parse(String) - Method in interface com.atlassian.asap.core.parser.JwtParser

Parses the encoded JWT message from String, and returns a verifiable JWT object without verifying its signature or validating its claims.

parse(String) - Method in class com.atlassian.asap.nimbus.parser.NimbusJwtParser

PATH_PATTERN - Static variable in class com.atlassian.asap.core.validator.ValidatedKeyId

Subset of the valid characters for URI Paths derived from RFC3986.

PemReader - Class in com.atlassian.asap.core.keys

Functions for reading PEM keys.

PemReader() - Constructor for class com.atlassian.asap.core.keys.PemReader

PemReader(Provider) - Constructor for class com.atlassian.asap.core.keys.PemReader

PermanentAuthenticationFailedException - Exception in com.atlassian.asap.api.exception

Thrown when an incoming HTTP request cannot be authenticated using ASAP, due to a permanent failure in the incoming ASAP header (eg.

PermanentAuthenticationFailedException(String) - Constructor for exception com.atlassian.asap.api.exception.PermanentAuthenticationFailedException

PermanentAuthenticationFailedException(String, String) - Constructor for exception com.atlassian.asap.api.exception.PermanentAuthenticationFailedException

policy(TokenValidator.Policy) - Method in interface com.atlassian.asap.service.api.TokenValidator

Specifies the validation policy for this validator.

policy(TokenValidator.Policy) - Method in class com.atlassian.asap.service.core.impl.AbstractTokenValidator

policy() - Method in class com.atlassian.asap.service.core.impl.AbstractTokenValidator

PORT_SYSPROP - Static variable in class com.atlassian.asap.core.server.SimpleServerRunner

Port to listen on.

PRIVATE_KEY_SYSPROP - Static variable in class com.atlassian.asap.core.client.SimpleClientRunner

privateKeyProvider(String) - Method in class com.atlassian.asap.core.client.AsapClientConfiguration

Definition of the provider of private keys.

PrivateKeyProviderFactory - Class in com.atlassian.asap.core.keys.privatekey

PrivateKeyProviderFactory() - Constructor for class com.atlassian.asap.core.keys.privatekey.PrivateKeyProviderFactory

privateKeyUrl() - Method in class com.atlassian.asap.service.core.service.StringValuesAsapConfiguration

privateKeyUrl() - Method in interface com.atlassian.asap.service.core.spi.AsapConfiguration

Where private keys can be found.

provider() - Static method in class com.atlassian.asap.core.serializer.Json

PUBLIC_KEY_PROVIDER - Static variable in class com.atlassian.asap.it.BaseIntegrationTest

PUBLIC_KEY_SERVER_URL_SYSPROP - Static variable in class com.atlassian.asap.core.server.SimpleServerRunner

System property that specifies the base URL of the public key server repository to use.

PublicKeyNotFoundException - Exception in com.atlassian.asap.core.exception

Thrown when the public key is reported as absent from the key repository.

PublicKeyNotFoundException(String, ValidatedKeyId, URI) - Constructor for exception com.atlassian.asap.core.exception.PublicKeyNotFoundException

publicKeyProvider(String) - Method in class com.atlassian.asap.core.server.AsapServerConfiguration

Definition of the KeyProvider bean.

PublicKeyProviderFactory - Class in com.atlassian.asap.core.keys.publickey

Factory for creating KeyProvider<PublicKey> instances.

PublicKeyProviderFactory(HttpClient, PemReader) - Constructor for class com.atlassian.asap.core.keys.publickey.PublicKeyProviderFactory

publicKeyRepositoryUrl() - Method in class com.atlassian.asap.service.core.service.StringValuesAsapConfiguration

publicKeyRepositoryUrl() - Method in interface com.atlassian.asap.service.core.spi.AsapConfiguration

Where public keys can be found.

PublicKeyRetrievalException - Exception in com.atlassian.asap.core.exception

Thrown when there was an error communicating with a public key repository.

PublicKeyRetrievalException(String, ValidatedKeyId, URI) - Constructor for exception com.atlassian.asap.core.exception.PublicKeyRetrievalException

PublicKeyRetrievalException(String, Throwable, ValidatedKeyId, URI) - Constructor for exception com.atlassian.asap.core.exception.PublicKeyRetrievalException

R

readAndValidate(String) - Method in interface com.atlassian.asap.core.validator.JwtValidator

Parses the encoded JWT message from String, verifies its signature, validates its claims and on success returns the decoded Jwt.

readAndValidate(String) - Method in class com.atlassian.asap.core.validator.JwtValidatorImpl

readPrivateKey(Reader) - Method in class com.atlassian.asap.core.keys.DataUriKeyReader

readPrivateKey(Reader) - Method in interface com.atlassian.asap.core.keys.KeyReader

readPrivateKey(Reader) - Method in class com.atlassian.asap.core.keys.PemReader

Reads a private key from a PEM file.

readPublicKey(Reader) - Method in class com.atlassian.asap.core.keys.DataUriKeyReader

readPublicKey(Reader) - Method in interface com.atlassian.asap.core.keys.KeyReader

readPublicKey(Reader) - Method in class com.atlassian.asap.core.keys.PemReader

Reads a public key from a PEM file.

RequestAuthenticationFilterBean - Class in com.atlassian.asap.core.server.filter

Implements AbstractRequestAuthenticationFilter as a Java bean to make it easier to wire this filter using Spring.

RequestAuthenticationFilterBean() - Constructor for class com.atlassian.asap.core.server.filter.RequestAuthenticationFilterBean

Using this constructor will try to automatically fetch your configuration from Spring.

RequestAuthenticationFilterBean(RequestAuthenticator) - Constructor for class com.atlassian.asap.core.server.filter.RequestAuthenticationFilterBean

Using this constructor you must specify your own already configured RequestAuthenticator.

RequestAuthenticator - Interface in com.atlassian.asap.api.server.http

HTTP servers can use this service to authenticate incoming HTTP requests that include a JWT bearer token in the Authorization header, conforming to the specification of ASAP protocol.

requestAuthenticator(JwtValidator) - Method in class com.atlassian.asap.core.server.AsapServerConfiguration

Definition of the RequestAuthenticator bean.

RequestAuthenticatorFactory - Class in com.atlassian.asap.core.server.http

Default RequestAuthenticatorFactory which passes the auth context to JwtValidator as is.

RequestAuthenticatorFactory() - Constructor for class com.atlassian.asap.core.server.http.RequestAuthenticatorFactory

RequestAuthenticatorImpl - Class in com.atlassian.asap.core.server.http

RequestAuthenticatorImpl(JwtValidator) - Constructor for class com.atlassian.asap.core.server.http.RequestAuthenticatorImpl

RESOURCE - Static variable in class com.atlassian.asap.it.BaseIntegrationTest

RESOURCE_SERVER_AUDIENCE_SYSPROP - Static variable in class com.atlassian.asap.core.server.SimpleServerRunner

System property that specifies the resource server audience.

RESOURCE_SERVER_URL_SYSPROP - Static variable in class com.atlassian.asap.core.client.SimpleClientRunner

retryRequest(HttpResponse, int, HttpContext) - Method in class com.atlassian.asap.core.keys.publickey.S3ServiceUnavailableRetryStrategy

ReturnTypesAreNonNullByDefault - Annotation Type in com.atlassian.asap.annotation

RulesAwareRequestAuthorizationFilter - Class in com.atlassian.asap.core.server.filter

This class accepts a list of issuers and the authentication rules associated with each one.

RulesAwareRequestAuthorizationFilter(Map<String, Predicate<Jwt>>) - Constructor for class com.atlassian.asap.core.server.filter.RulesAwareRequestAuthorizationFilter

S

S3ServiceUnavailableRetryStrategy - Class in com.atlassian.asap.core.keys.publickey

A strategy that follows the best practices defined by Amazon for S3 buckets.

S3ServiceUnavailableRetryStrategy(int, long) - Constructor for class com.atlassian.asap.core.keys.publickey.S3ServiceUnavailableRetryStrategy

saveToken(ServletRequest, Jwt) - Method in class com.atlassian.asap.core.server.filter.AbstractRequestAuthenticationFilter

Save the authentic token in the request to make it available for other filters down the chain.

SecurityProvider - Class in com.atlassian.asap.core

SecurityProvider() - Constructor for class com.atlassian.asap.core.SecurityProvider

serialize(Jwt, PrivateKey) - Method in interface com.atlassian.asap.core.serializer.JwtSerializer

Write the JWT with an appropriate signature.

serialize(Jwt, PrivateKey) - Method in class com.atlassian.asap.nimbus.serializer.NimbusJwtSerializer

shouldAcceptRequestWithValidES256Token() - Method in class com.atlassian.asap.it.BaseIntegrationTest

Verifies that the server accepts requests with a valid token using ES256.

shouldAcceptRequestWithValidPS256Token() - Method in class com.atlassian.asap.it.BaseIntegrationTest

Verifies that the server accepts requests with a valid token using PS256.

shouldAcceptRequestWithValidRS256Token() - Method in class com.atlassian.asap.it.BaseIntegrationTest

Verifies that the server accepts requests with a valid token using RS256.

shouldRejectRequestIfPublicKeyCannotBeFound() - Method in class com.atlassian.asap.it.BaseIntegrationTest

Verifies that the server rejects requests if the public key cannot be found.

shouldRejectRequestWithBasicAuth() - Method in class com.atlassian.asap.it.BaseIntegrationTest

Verifies that the server rejects requests that do not have a bearer token.

shouldRejectRequestWithMalformedToken() - Method in class com.atlassian.asap.it.BaseIntegrationTest

Verifies that the server rejects requests which have an uparseable token.

shouldRejectRequestWithoutAuthenticationHeader() - Method in class com.atlassian.asap.it.BaseIntegrationTest

Verifies that the server rejects requests that lack the authentication header.

shouldRejectRequestWithUnauthorizedIssuer() - Method in class com.atlassian.asap.it.BaseIntegrationTest

Verifies that the server rejects requests if the issuer is not authorized.

shouldRejectRequestWithUnauthorizedSubject() - Method in class com.atlassian.asap.it.BaseIntegrationTest

Verifies that the server rejects requests if the subject is not authorized.

shutdownHttpClient() - Method in class com.atlassian.asap.it.BaseIntegrationTest

SignatureMismatchException - Exception in com.atlassian.asap.core.exception

Indicates that the token signature does not match its contents.

SignatureMismatchException(Throwable) - Constructor for exception com.atlassian.asap.core.exception.SignatureMismatchException

SignatureMismatchException(String) - Constructor for exception com.atlassian.asap.core.exception.SignatureMismatchException

SigningAlgorithm - Enum in com.atlassian.asap.api

An enumeration of asymmetric JWS algorithms.

SigningException - Exception in com.atlassian.asap.core.exception

Thrown if a problem was encountered while signing a token.

SigningException() - Constructor for exception com.atlassian.asap.core.exception.SigningException

SimpleClient - Class in com.atlassian.asap.core.client

A simple client for demonstration purposes.

SimpleClient(String, String, String, URI) - Constructor for class com.atlassian.asap.core.client.SimpleClient

SimpleClientRunner - Class in com.atlassian.asap.core.client

A command line interface for SimpleClient.

SimpleClientRunner() - Constructor for class com.atlassian.asap.core.client.SimpleClientRunner

SimpleServer - Class in com.atlassian.asap.core.server

A simple server for demonstration purposes.

SimpleServer(int, String, String, Set<String>, Set<String>) - Constructor for class com.atlassian.asap.core.server.SimpleServer

SimpleServerRunner - Class in com.atlassian.asap.core.server

A command line interface for SimpleServer.

SimpleServerRunner() - Constructor for class com.atlassian.asap.core.server.SimpleServerRunner

start() - Method in class com.atlassian.asap.core.server.SimpleServer

Start the server.

stop() - Method in class com.atlassian.asap.core.server.SimpleServer

Stop the server.

StringPrivateKeyProvider - Class in com.atlassian.asap.core.keys.privatekey

Reads a single private key from a String.

StringPrivateKeyProvider(KeyReader, String, String) - Constructor for class com.atlassian.asap.core.keys.privatekey.StringPrivateKeyProvider

Creates an instance that provides a single key read from a String.

StringValuesAsapConfiguration - Class in com.atlassian.asap.service.core.service

StringValuesAsapConfiguration(String, String, String, String, String) - Constructor for class com.atlassian.asap.service.core.service.StringValuesAsapConfiguration

subject(Optional<String>) - Method in class com.atlassian.asap.api.JwtBuilder

Sets the subject (sub) claim for this jwt.

subject(Optional<String>) - Method in interface com.atlassian.asap.service.api.AuthorizationBuilder

Specifies the subject of the token.

subject(String...) - Method in interface com.atlassian.asap.service.api.TokenValidator

Specifies the effective subject(s) that are authorized to use this resource.

subject(Iterable<String>) - Method in interface com.atlassian.asap.service.api.TokenValidator

As for TokenValidator.subject(String...).

subject(Iterable<String>) - Method in class com.atlassian.asap.service.core.impl.AbstractTokenValidator

subject(Optional<String>) - Method in class com.atlassian.asap.service.core.impl.AuthorizationBuilderImpl

subjectImpersonation(boolean) - Method in interface com.atlassian.asap.service.api.TokenValidator

Deprecated.

move/copy issuers that are allowed to impersonate users from the 'issuer' to the 'impersonationIssuer' list

subjectImpersonation(boolean) - Method in class com.atlassian.asap.service.core.impl.AbstractTokenValidator

Deprecated.

move/copy issuers that are allowed to impersonate users from the 'issuer' to the 'impersonationIssuer' list

subjectImpersonation() - Method in class com.atlassian.asap.service.core.impl.AbstractTokenValidator

successfulAuthentication(HttpServletRequest, HttpServletResponse, FilterChain, Authentication) - Method in class com.atlassian.asap.core.server.springsecurity.BearerTokenAuthenticationProcessingFilter

supports(Class<?>) - Method in class com.atlassian.asap.core.server.springsecurity.AsapAuthenticationProvider

SystemPropertyKeyProvider - Class in com.atlassian.asap.core.keys.privatekey

Reads private keys specified as data uri from system properties.

T

TIME_CLAIM_LEEWAY - Static variable in class com.atlassian.asap.core.validator.JwtClaimsValidator

The JWT spec says that implementers "MAY provide for some small leeway, usually no more than a few minutes, to account for clock skew".

token() - Method in interface com.atlassian.asap.service.api.ValidationResult

The token, if any, that was used to authorize this request.

TokenExpiredException - Exception in com.atlassian.asap.core.exception

Thrown if the token timestamps show that it has expired.

TokenExpiredException(Instant, Instant) - Constructor for exception com.atlassian.asap.core.exception.TokenExpiredException

TokenTooEarlyException - Exception in com.atlassian.asap.core.exception

Thrown when a token was received before the not-before date/time listed in the nbf claim.

TokenTooEarlyException(Instant, Instant) - Constructor for exception com.atlassian.asap.core.exception.TokenTooEarlyException

tokenValidator() - Method in interface com.atlassian.asap.service.api.AsapService

Create a validator for verifying the contents of an HTTP Authorization header value.

TokenValidator - Interface in com.atlassian.asap.service.api

A builder-style tool for specifying and enforcing ASAP authentication and authorization requirements.

tokenValidator() - Method in class com.atlassian.asap.service.core.service.DefaultAsapService

TokenValidator.Policy - Enum in com.atlassian.asap.service.api

Specifies the desired enforcement policy for ASAP authentication.

TokenValidatorImpl - Class in com.atlassian.asap.service.core.impl

TokenValidatorImpl(AsapConfiguration, KeyProvider<PublicKey>, JwtClaimsValidator) - Constructor for class com.atlassian.asap.service.core.impl.TokenValidatorImpl

toString() - Method in class com.atlassian.asap.core.keys.privatekey.ClasspathPrivateKeyProvider

toString() - Method in class com.atlassian.asap.core.keys.privatekey.DataUriKeyProvider

toString() - Method in class com.atlassian.asap.core.keys.privatekey.FilePrivateKeyProvider

toString() - Method in class com.atlassian.asap.core.keys.privatekey.NullKeyProvider

toString() - Method in class com.atlassian.asap.core.keys.publickey.ChainedKeyProvider

toString() - Method in class com.atlassian.asap.core.keys.publickey.ClasspathPublicKeyProvider

toString() - Method in class com.atlassian.asap.core.keys.publickey.FilePublicKeyProvider

toString() - Method in class com.atlassian.asap.core.keys.publickey.HttpPublicKeyProvider

toString() - Method in class com.atlassian.asap.core.keys.publickey.MirroredKeyProvider

toString() - Method in class com.atlassian.asap.core.validator.ValidatedKeyId

toString() - Method in class com.atlassian.asap.service.core.impl.AbstractTokenValidator

toString() - Method in class com.atlassian.asap.service.core.service.StringValuesAsapConfiguration

TransientAuthenticationFailedException - Exception in com.atlassian.asap.api.exception

Thrown when an incoming HTTP request cannot be authenticated using ASAP, and a retry of a request may succeed.

TransientAuthenticationFailedException(String, ValidatedKeyId, URI, String) - Constructor for exception com.atlassian.asap.api.exception.TransientAuthenticationFailedException

type() - Method in enum com.atlassian.asap.api.SigningAlgorithm

U

UNAUTHORIZED_SUBJECT - Static variable in class com.atlassian.asap.it.BaseIntegrationTest

UnsupportedAlgorithmException - Exception in com.atlassian.asap.core.exception

Thrown if an incoming token is signed using an unsupported algorithm.

UnsupportedAlgorithmException(String) - Constructor for exception com.atlassian.asap.core.exception.UnsupportedAlgorithmException

UnsupportedAlgorithmException(String, Throwable) - Constructor for exception com.atlassian.asap.core.exception.UnsupportedAlgorithmException

UnsupportedAlgorithmException(Throwable) - Constructor for exception com.atlassian.asap.core.exception.UnsupportedAlgorithmException

untrustedIssuer() - Method in interface com.atlassian.asap.service.api.ValidationResult

The issuer, if any, that provided a token to the request.

URL_SCHEME - Static variable in class com.atlassian.asap.core.keys.privatekey.NullKeyProvider

V

validate(Asap, Jwt) - Method in class com.atlassian.asap.core.server.jersey.AsapValidator

Validates a jwt token.

validate(Jwt, Set<String>) - Method in class com.atlassian.asap.core.validator.JwtClaimsValidator

Checks the validity of the claims contained in a JWT in a given authentication context.

validate(String) - Static method in class com.atlassian.asap.core.validator.ValidatedKeyId

Validates the given key id and upon successful validation returns a ValidatedKeyId instance.

validate(AsapAuth, Optional<String>) - Method in interface com.atlassian.asap.service.api.AsapService

Creates a validator and populates it with the provided annotation's settings, then applies it to the given Authorization header value.

validate(Optional<String>) - Method in interface com.atlassian.asap.service.api.TokenValidator

Perform the validation.

validate(Optional<String>) - Method in class com.atlassian.asap.service.core.impl.TokenValidatorImpl

ValidatedKeyId - Class in com.atlassian.asap.core.validator

Represents a validated key id of the JWT Header.

ValidationResult - Interface in com.atlassian.asap.service.api

The result from evaluating an Authorization header against a TokenValidator.

ValidationResult.Decision - Enum in com.atlassian.asap.service.api

The overall decision as to whether or not the request has satisfied the validator's requirements.

valueOf(String) - Static method in enum com.atlassian.asap.api.AlgorithmType

Returns the enum constant of this type with the specified name.

valueOf(String) - Static method in enum com.atlassian.asap.api.JwsHeader.Header

Returns the enum constant of this type with the specified name.

valueOf(String) - Static method in enum com.atlassian.asap.api.JwtClaims.RegisteredClaim

Returns the enum constant of this type with the specified name.

valueOf(String) - Static method in enum com.atlassian.asap.api.SigningAlgorithm

Returns the enum constant of this type with the specified name.

valueOf(String) - Static method in enum com.atlassian.asap.service.api.TokenValidator.Policy

Returns the enum constant of this type with the specified name.

valueOf(String) - Static method in enum com.atlassian.asap.service.api.ValidationResult.Decision

Returns the enum constant of this type with the specified name.

values() - Static method in enum com.atlassian.asap.api.AlgorithmType

Returns an array containing the constants of this enum type, in the order they are declared.

values() - Static method in enum com.atlassian.asap.api.JwsHeader.Header

Returns an array containing the constants of this enum type, in the order they are declared.

values() - Static method in enum com.atlassian.asap.api.JwtClaims.RegisteredClaim

Returns an array containing the constants of this enum type, in the order they are declared.

values() - Static method in enum com.atlassian.asap.api.SigningAlgorithm

Returns an array containing the constants of this enum type, in the order they are declared.

values() - Static method in enum com.atlassian.asap.service.api.TokenValidator.Policy

Returns an array containing the constants of this enum type, in the order they are declared.

values() - Static method in enum com.atlassian.asap.service.api.ValidationResult.Decision

Returns an array containing the constants of this enum type, in the order they are declared.

VerifiableJwt - Interface in com.atlassian.asap.core.parser

A signed JWT that can be verified using its signature and a public key.

verifySignature(PublicKey) - Method in interface com.atlassian.asap.core.parser.VerifiableJwt

Verify the signature of the given Signed Jwt.

verifySignature(PublicKey) - Method in class com.atlassian.asap.nimbus.parser.NimbusVerifiableJwt

W

Whitelist(Set<String>, Set<String>) - Constructor for class com.atlassian.asap.core.server.jersey.AsapValidator.Whitelist

WhitelistJerseyRequestAuthorizer - Class in com.atlassian.asap.core.server.jersey

Decides if a request is authorized based on whitelists for the issuer and effective subject.

WhitelistJerseyRequestAuthorizer(Iterable<String>, Iterable<String>) - Constructor for class com.atlassian.asap.core.server.jersey.WhitelistJerseyRequestAuthorizer

WhitelistRequestAuthorizationFilter - Class in com.atlassian.asap.core.server.filter

Implements AbstractRequestAuthorizationFilter by using two whitelists of authorized subjects and issuers.

WhitelistRequestAuthorizationFilter(Set<String>, Set<String>) - Constructor for class com.atlassian.asap.core.server.filter.WhitelistRequestAuthorizationFilter

Constructs an authorization filter that only accepts tokens where the effective subject and the issuer belong to the respective whitelists.

WhitelistRequestAuthorizationFilter(Set<String>) - Constructor for class com.atlassian.asap.core.server.filter.WhitelistRequestAuthorizationFilter

Deprecated.

This constructor has been deprecated because the behaviour is misleading. Please use IssuerAndSubjectAwareRequestAuthorizationFilter.issuers(Set) instead.

A B C D E F G H I J K M N O P R S T U V W