Class OidcUserProvider

java.lang.Object

io.fluxzero.sdk.tracking.handling.authentication.AbstractUserProvider

io.fluxzero.sdk.tracking.handling.authentication.OidcUserProvider

All Implemented Interfaces:

UserProvider

public class OidcUserProvider
extends AbstractUserProvider

Reference UserProvider for Fluxzero-compatible OIDC providers.

The provider resolves incoming WebRequest bearer tokens by calling the configured OIDC userinfo_endpoint. This intentionally keeps the SDK implementation dependency-free while supporting both the real Fluxzero IDP and the local dev/test IDP, because both expose the same OIDC userinfo contract.

Typical application setup:

Fluxzero fluxzero = DefaultFluxzero.builder()
    .registerUserProvider(OidcUserProvider.fromProperties())
    .build();

Configuration is read from fluxzero.auth.oidc.issuer; optionally fluxzero.auth.oidc.userinfo-endpoint can override discovery.

Field Summary

Fields

Modifier and Type	Field	Description
static final Duration	DEFAULT_TIMEOUT
static final String	ISSUER_PROPERTY
static final String	USERINFO_ENDPOINT_PROPERTY

Fields inherited from class AbstractUserProvider

DEFAULT_USER_KEY

Fields inherited from interface UserProvider

defaultUserProvider

Constructor Summary

Constructors

Constructor	Description
OidcUserProvider(String issuer)
OidcUserProvider(String issuer, String userInfoEndpoint)
OidcUserProvider(String issuer, String userInfoEndpoint, Duration timeout)

Method Summary

Modifier and Type	Method	Description
User	fromMessage(HasMessage message)	Extracts a User from the metadata of a message.
static OidcUserProvider	fromProperties()	Creates a provider from application properties.
User	getSystemUser()	Returns the User representing the system (non-human) identity.
User	getUserById(Object userId)	Retrieves a User by their unique identifier.
protected OidcUser	resolveUser(String bearerToken)

Methods inherited from class AbstractUserProvider

addToMetadata, containsUser, removeFromMetadata

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface UserProvider

addToMetadata, andThen, getActiveUser, requiresMessageBasedLocalResolution

Field Details

ISSUER_PROPERTY

public static final String ISSUER_PROPERTY

See Also:

• Constant Field Values

USERINFO_ENDPOINT_PROPERTY

public static final String USERINFO_ENDPOINT_PROPERTY

See Also:

• Constant Field Values

DEFAULT_TIMEOUT

public static final Duration DEFAULT_TIMEOUT

Constructor Details

OidcUserProvider

public OidcUserProvider(String issuer)

OidcUserProvider

public OidcUserProvider(String issuer,
 String userInfoEndpoint)

OidcUserProvider

public OidcUserProvider(String issuer,
 String userInfoEndpoint,
 Duration timeout)

Method Details

fromProperties

public static OidcUserProvider fromProperties()

Creates a provider from application properties.

getUserById

public User getUserById(Object userId)

Description copied from interface: UserProvider

Retrieves a User by their unique identifier.

This method is primarily used in TestFixture-based access control tests, such as when using whenCommandByUser(...), to simulate requests by a specific user.

Implementations may return null if the user cannot be found, or alternatively return a new, unprivileged User instance. The latter approach allows tests to verify authorization behavior for unknown or default users without requiring explicit user creation.

Parameters:

userId - the unique identifier of the user (typically a String or number)

Returns:

the matching User, a default unprivileged User, or null if not found

getSystemUser

public User getSystemUser()

Description copied from interface: UserProvider

Returns the User representing the system (non-human) identity. Typically used for scheduled messages, internal services, etc.

fromMessage

public User fromMessage(HasMessage message)

Description copied from class: AbstractUserProvider

Extracts a User from the metadata of a message.

Uses the configured metadataKey to locate the user in the metadata of the given message.

Specified by:

fromMessage in interface UserProvider

Overrides:

fromMessage in class AbstractUserProvider

Parameters:

message - the message containing metadata

Returns:

the resolved User, or null if not found

resolveUser

protected OidcUser resolveUser(String bearerToken)