auth-foundation/com.okta.authfoundation.client.kmp

Package-level declarations

Types

Validates access tokens by comparing the at_hash claim in the ID token against the actual access token hash.

Default AccessTokenValidator that validates the at_hash claim in an ID token against the SHA-256 left-half hash of the access token, per OpenID Connect Core 1.0.

Default DeviceSecretValidator that validates the ds_hash claim in an ID token against the SHA-256 left-half hash of the device secret.

class DefaultIdTokenValidator(val issuedAtGracePeriodInSeconds: Int = 600) : IdTokenValidator

Validates device secrets by comparing the ds_hash claim in the ID token against the actual device secret hash.

Used for validating ID tokens minted by an Authorization Server.

value class MaxRetries(val value: Int)

A non-negative count of retry attempts, enforced at construction time.

value class MinDelaySeconds(val value: Long)

A non-negative minimum delay in seconds between retry attempts, enforced at construction time.

A cross-platform OAuth2 client for interacting with an Okta Authorization Server.

data class RateLimitRetryConfig(val maxRetries: MaxRetries, val minDelaySeconds: MinDelaySeconds)

Configuration returned by OAuth2ClientConfiguration.rateLimitRetryCallback to control retry behavior after an HTTP 429 rate-limit response.