All Classes and Interfaces

Class
Description
 
 
 
If applicable, the kid string will be converted to either uppercase or lowercase.
Defines which digest algorithm will be used on the source to generate the kid.
Defines the encoding of thd digest bytes into the kid string.
Defines if the kid will be generated from the certificate or the certificate's public key.
 
 
 
 
Enables or disables a AuthorizationCheck.
 
 
 
 
Configures cache control headers to prevent sensitive content from being cached.
Represents the authentication context for a user or client in Camunda, including (where appropriate) their username or client ID, group memberships, roles, tenants, mapping rules, and associated claims.
 
 
Associates a given CamundaAuthentication with the current execution thread processing the request.
Provides the current CamundaAuthentication representing the authentication context for a user, client, or anonymous principal.
 
 
 
 
 
 
 
 
 
 
 
 
 
Configures Content Security Policy (CSP) to prevent XSS and other content injection attacks.
Configures X-Content-Type-Options header to prevent MIME type sniffing attacks.
 
Configures Cross-Origin-Embedder-Policy (COEP) header for cross-origin isolation.
 
Configures Cross-Origin-Opener-Policy (COOP) header for window isolation.
 
Configures Cross-Origin-Resource-Policy (CORP) header for resource isolation.
 
 
Configures X-Frame-Options header to prevent clickjacking attacks.
 
Configures HTTP Strict Transport Security (HSTS) to enforce HTTPS connections.
 
 
 
Matches mapping rules against claims by evaluating JSONPath expressions for each mapping rule.
 
 
 
 
 
 
 
Configures Permissions-Policy header to control browser feature access.
 
 
Configures Referrer-Policy header to control referrer information leakage.
 
 
A ResourceAccessController enhances any get and search with additional ResourceAccessChecks to be applied executing them.
 
 
Will be populated with the configuration properties of 'camunda.security'
 
Represents the security context for the current operation, containing both authentication and authorization information.
 
 
 
Enables or disables a TenantCheck.