package org.apereo.cas.oidc; /** * This is {@link OidcConstants}. * * @author Misagh Moayyed * @since 5.0.0 */ public interface OidcConstants { /** * Dnamic client registration mode. */ enum DynamicClientRegistrationMode { /** * Registration is open to all. */ OPEN, /** * registration is protected for all. */ PROTECTED } /** * ACR passed in the id token. */ String ACR = "acr"; /** * The `openid` scope. */ String OPENID = "openid"; /** * The `email` scope. */ String EMAIL = "email"; /** * The `address` scope. */ String ADDRESS = "address"; /** * The `profile` scope. */ String PROFILE = "profile"; /** * The `phone` scope. */ String PHONE = "phone"; /** * The `offline_accessw` scope. */ String OFFLINE_ACCESS = "offline_access"; /** * Authentication method reference passed in the id token. */ String AMR = "amr"; /** * The Authorization Server MUST NOT display any authentication or consent user interface pages. */ String PROMPT_NONE = "none"; /** * The Authorization Server SHOULD prompt the End-User for reauthentication. */ String PROMPT_LOGIN = "login"; /** * The Authorization Server SHOULD prompt the End-User consent. */ String PROMPT_CONSENT = "consent"; /** * The sub claim. */ String CLAIM_SUB = "sub"; /** * The preferred username claim. */ String CLAIM_PREFERRED_USERNAME = "preferred_username"; /** * The authentication time claim. */ String CLAIM_AUTH_TIME = "auth_time"; /** * The access token hash. */ String CLAIM_AT_HASH = "at_hash"; /** * The id token. */ String ID_TOKEN = "id_token"; /** * The max age. */ String MAX_AGE = "max_age"; /** * The prompt parameter. */ String PROMPT = "prompt"; /** * Base OIDC URL. */ String BASE_OIDC_URL = "oidc"; /** * JWKS Endpoint url. */ String JWKS_URL = "jwks"; /** * Registration endpoint URL. */ String REGISTRATION_URL = "register"; /** * Indicates authentication is required and could not be performed. */ String LOGIN_REQUIRED = "login_required"; /** * The confirm/consent view. */ String CONFIRM_VIEW = "oidcConfirmView"; }