Package dev.getelements.elements.service.auth.oidc
package dev.getelements.elements.service.auth.oidc
-
ClassDescriptionAnonymous implementation of
OidcLinkService.A purely in-memory, TTL-based cache of OIDC discovery documents, keyed by discovery URL.The subset of an OIDC provider's discovery document (normally served at/.well-known/openid-configuration) needed to drive the authorization code flow.Orchestrates the provider-agnostic, browser-redirect OIDC login flow: starting a pending attempt, polling for completion, and handling the provider's callback.Always anonymous, mirroringOidcAuthServiceProvider— a caller has no Elements session yet when starting or polling a browser-redirect login attempt, by definition, so there is no per-user-level dispatch.Resolves anOidcProviderConfiguration's discovery document and finds-or-creates the matchingOidcAuthSchemeby issuer, so that registering a single provider configuration is enough to fully activate a provider — no separate manual auth scheme setup step is required.The subset of an OIDC/OAuth2 token endpoint response needed by the browser-redirect login flow.