Record Class ProtectedResourceMetadata

java.lang.Object
java.lang.Record
io.micronaut.security.oauth2.metadata.ProtectedResourceMetadata
Record Components:
resource - The protected resource's resource identifier, which is a URL that uses the https scheme and has no fragment component.
authorizationServers - JSON array containing a list of OAuth authorization server issuer identifiers.
jwksUri - URL of the protected resource's JSON Web Key (JWK) Set [JWK] document.
scopesSupported - JSON array containing a list of scope values.
bearerMethodsSupported - JSON array containing a list of the supported methods of sending an OAuth 2.0 bearer token.
resourceSigningAlgValuesSupported - JSON array containing a list of the JWS [JWS] signing algorithms (alg values).
resourceName - Human-readable name of the protected resource intended for display to the end user.
resourceDocumentation - URL of a page containing human-readable information that developers might want or need to know when using the protected resource.
resourcePolicyUri - URL of a page containing human-readable information about the protected resource's requirements on how the client can use the data provided by the protected resource.
resourceTosUri - URL of a page containing human-readable information about the protected resource's terms of service.
tlsClientCertificateBoundAccessTokens - Boolean value indicating protected resource support for mutual-TLS client certificate-bound access tokens.
authorizationDetailsTypesSupported - JSON array containing a list of the authorization details type values supported by the resource server when the authorization_details request parameter [RFC9396] is used.
dpopSigningAlgValuesSupported - SON array containing a list of the JWS alg values (from the "JSON Web Signature and Encryption Algorithms" registry [IANA.JOSE]) supported by the resource server for validating Demonstrating Proof of Possession (DPoP) proof JWTs [RFC9449].
dpopBoundAccessTokensRequired - Boolean value specifying whether the protected resource always requires the use of DPoP-bound access tokens [RFC9449].

public record ProtectedResourceMetadata(@NonNull String resource, @Nullable List<String> authorizationServers, @Nullable String jwksUri, @Nullable List<String> scopesSupported, @Nullable List<String> bearerMethodsSupported, @Nullable List<String> resourceSigningAlgValuesSupported, String resourceName, @Nullable String resourceDocumentation, @Nullable String resourcePolicyUri, @Nullable String resourceTosUri, @Nullable Boolean tlsClientCertificateBoundAccessTokens, @Nullable List<String> authorizationDetailsTypesSupported, @Nullable List<String> dpopSigningAlgValuesSupported, Boolean dpopBoundAccessTokensRequired) extends Record
Protected Resource Metadata as defined in RFC9728. Protected Resource Metadata Terminology