Class OidcException


public class OidcException extends IOException
Thrown for failures during an OpenID Connect / OAuth 2.0 flow driven by OidcClient. The getError() code mirrors the error field from RFC 6749 for authorization-server responses (e.g. "access_denied", "invalid_grant") and uses Codename One-specific values for transport or client-side problems ("transport_error", "state_mismatch", "nonce_mismatch", "user_cancelled", "discovery_failed", "invalid_id_token").
Since:
8.0
  • Field Details

    • ACCESS_DENIED

      public static final String ACCESS_DENIED
      Authorization server returned error=access_denied.
      See Also:
    • USER_CANCELLED

      public static final String USER_CANCELLED
      User cancelled the system browser / native sign-in sheet.
      See Also:
    • STATE_MISMATCH

      public static final String STATE_MISMATCH
      state returned by the authorization server did not match the one we sent.
      See Also:
    • NONCE_MISMATCH

      public static final String NONCE_MISMATCH
      nonce claim on the returned ID token did not match the one we sent.
      See Also:
    • DISCOVERY_FAILED

      public static final String DISCOVERY_FAILED
      The discovery document could not be fetched or parsed.
      See Also:
    • INVALID_GRANT

      public static final String INVALID_GRANT
      Token-endpoint response was missing or malformed.
      See Also:
    • INVALID_ID_TOKEN

      public static final String INVALID_ID_TOKEN
      ID token failed structural validation (we do not currently verify the signature -- treat the issuer as a trust anchor and use TLS to the discovery URL).
      See Also:
    • TRANSPORT_ERROR

      public static final String TRANSPORT_ERROR
      Generic transport / network failure.
      See Also:
  • Constructor Details

  • Method Details

    • getError

      public String getError()
      The short error code (see the constants on this class).
    • getErrorDescription

      public String getErrorDescription()
      Human-readable description supplied by the server or the client.