OAuth2SessionFlow
Typed OAuth 2.0 flow with session-backed route authentication.
Created by oauth2Session and installed with Route.install or Application.install. The OAuth callback stores session values produced by OAuth2SessionsConfig.sessionCreator and resolves the route principal with OAuth2SessionsConfig.validate. Application routes are protected with authenticateWith using session.
Unauthenticated requests to the callback path or OAuthFlowConfigBase.loginPath redirect to the OAuth provider. Routes protected with session require an existing session and respond with 401 Unauthorized when it is missing.
Type Parameters
S
the session type stored by the Sessions plugin.
P
the principal type available in protected route handlers.