AuthController

@RestController
@RequestMapping(value = "/api/auth")
@PermitAll
open class AuthController

Constructors

Link copied to clipboard
@Autowired
constructor(@NotNull authService: @NotNull AuthService, @NotNull productUserService: @NotNull ProductUserService, @NotNull authContextService: @NotNull AuthContextService, @NotNull jwtTokenService: @NotNull JwtTokenService, @NotNull refreshTokenService: @NotNull RefreshTokenService, @NotNull replayCache: @NotNull DpopReplayCache, @NotNull dpopVerifier: @NotNull DpopVerifierService, @NotNull securityProperties: @NotNull SecurityProperties)

Functions

Link copied to clipboard
@GetMapping(value = "/logged-in")
@NotNull
open fun isLoggedIn(): @NotNull ResponseEntity<AuthResponse>
Link copied to clipboard
@PostMapping(value = "/login")
@NotNull
open fun login(@NotNull @RequestBody loginRequest: @NotNull LoginRequest, @Nullable @RequestHeader(value = "DPoP", required = false) dpopProof: @Nullable String, @NotNull request: @NotNull HttpServletRequest): @NotNull ResponseEntity<AuthResponse>
Link copied to clipboard
@PostMapping(value = "/logout")
@NotNull
open fun logout(@RequestHeader(value = "DPoP", required = false) dpopProof: String, @NotNull request: @NotNull HttpServletRequest): @NotNull ResponseEntity<AuthResponse>
Terminates the current session and revokes tokens.
Link copied to clipboard
@GetMapping(value = "/logout")
open fun logoutGet(@RequestHeader(value = "DPoP", required = false) dpopProof: String, @NotNull request: @NotNull HttpServletRequest): ResponseEntity<AuthResponse>
Link copied to clipboard
@PostMapping(value = "/refresh")
@NotNull
open fun refresh(@Nullable @RequestHeader(value = "DPoP", required = false) dpopProof: @Nullable String, @NotNull request: @NotNull HttpServletRequest): @NotNull ResponseEntity<AuthResponse>
Rotates access and refresh tokens.
Link copied to clipboard
@PostMapping(value = "/signup")
@NotNull
open fun signup(@NotNull @RequestBody signupRequest: @NotNull SignupRequest, @Nullable @RequestHeader(value = "DPoP", required = false) dpopProof: @Nullable String, @NotNull request: @NotNull HttpServletRequest): @NotNull ResponseEntity<AuthResponse>