io.helidon.security.providers.oidc.common.BaseBuilder

Description

Base builder of the OIDC config components

Configuration options

Key	Type	Default	Description
oidc-metadata.resource	Resource		Resource configuration for OIDC Metadata containing endpoints to various identity services, as well as information about the identity server
identity-uri	URI		URI of the identity server, base used to retrieve OIDC metadata
audience	String		Audience of issued tokens
optional-audience	Boolean	false	Allow audience claim to be optional
introspect-endpoint-uri	URI		Endpoint to use to validate JWT
sign-jwk.resource	Resource		A resource pointing to JWK with public keys of signing certificates used to validate JWT
base-scopes	String	openid	Configure base scopes
decryption-keys.resource	Resource		A resource pointing to JWK with private keys used for JWE content key decryption
server-type	String	@default	Configure one of the supported types of identity servers
check-audience	Boolean	true	Configure audience claim check
client-timeout-millis	Duration	30000	Timeout of calls using web client
issuer	String		Issuer of issued tokens
authorization-endpoint-uri	URI		URI of an authorization endpoint used to redirect users to for logging-in
token-endpoint-uri	URI		URI of a token endpoint used to obtain a JWT based on the authentication code
validate-jwt-with-jwk	Boolean	true	Use JWK (a set of keys to validate signatures of JWT) to validate tokens
client-secret	String		Client secret as generated by OIDC server
oidc-metadata-well-known	Boolean	true	If set to true, metadata will be loaded from default (well known) location, unless it is explicitly defined using oidc-metadata-resource
scope-audience	String		Audience of the scope required by this application
client-id	String		Client ID as generated by OIDC server
token-endpoint-auth	ClientAuthentication	CLIENT_SECRET_BASIC	Type of authentication to use when invoking the token endpoint

Dependent Types

• io.helidon.security.providers.oidc.common.OidcConfig
• io.helidon.security.providers.oidc.common.TenantConfig

---

See the manifest for all available types.