JWT access token verification (Cognito, Entra ID, or any standards-based OIDC issuer) and OAuth2 Authorization Code + PKCE login, with ready-made HTTP filters for avaje-jex and Helidon SE.
| Module | Purpose |
|---|---|
| avaje-oauth2-core | JwtVerifier / MultiIssuerJwtVerifier, AccessToken, BearerChallenge, Pkce |
| avaje-oauth2-jex-jwtfilter | JwtAuthFilter for avaje-jex |
| avaje-oauth2-helidon-jwtfilter | JwtAuthFilter for Helidon SE |
| avaje-oauth2-oidc-cognito | CognitoOidc - Authorization Code + PKCE client for AWS Cognito |
| avaje-oauth2-oidc-entra | EntraOidc - Authorization Code + PKCE client for Microsoft Entra ID |
- Full Reference: See docs/LIBRARY.md for a comprehensive capability reference, use cases, and AI agent guidance
- Guides: Step-by-step guides for common tasks in docs/guides/README.md (getting started, OIDC login flow, role/scope authorization, multi-issuer migration, JWKS tuning, Entra vs Cognito claim differences)