Class OidcIntrospectionCallback

java.lang.Object
org.mockserver.oidc.OidcIntrospectionCallback
All Implemented Interfaces:
ExpectationCallback<HttpResponse>, ExpectationResponseCallback

public class OidcIntrospectionCallback extends Object implements ExpectationResponseCallback
Mock OIDC/OAuth2 introspection endpoint (RFC 7662).

When the provider issues opaque access tokens (OidcProviderConfiguration.isOpaqueAccessToken()), the only way to validate them is introspection. This callback resolves the presented token form parameter against the opaque tokens recorded by OidcTokenMinter:

  • known, unexpired opaque token → {"active":true, ...claims};
  • unknown or expired opaque token → {"active":false};
  • no opaque token presented (or no opaque tokens issued) → the provider's static introspection result, with active driven by issueExpiredToken (preserving Wave-1 behaviour).
  • Constructor Details

    • OidcIntrospectionCallback

      public OidcIntrospectionCallback()
  • Method Details