Classes

The OAuthContext implements the Resource Owner Password Credentials (ROPC) Grant and Authorization Code Grant as the calling client to an OAuth authorization server. The resource owner is suitable in cases where the resource owner has a trust relationship with the client. The authorization code grant flow is suitable when the authorization code has been generated using an alternate factor, such as a desktop browser.

Holds the result of the authentication request.

The OAuthToken is a object that stores the access token and optional refresh token for requests to protected resources.

The ChallengeContext is a container of challenge mechanisms that get invoked when an authorization challenge is returned from a request to a protected resource.

Holds the result of the challenge verification.

HMAC Algorithm (HOTP) challenge accepts a value that an algorithm has computed to produce a one-time password from a shared secret key.

A class of Generator used to generate a counter based one-time password (HOTP).

A class of Generator used to generate the one-time password.

A class of Generator used to generate a time based one-time password (TOTP).

Holds the result of the pending transactions.

Time-based One-time Password Algorithm (TOTP) challenge accepts a value that an algorithm has computed to produce a one-time password from a shared secret key and the current time.

The fingerprint challenge mechanism is an Apple Touch ID LocalAuthentication prompt for validation of an enrolled fingerprint.

The simple user presence challenge prompts the user to acknowledge.

The Username Password challenge prompts the user to re-enter their username and password registered with Access Manager.

The voice biometric challenge prompts the user to verify a phrase. The challenge will record for 10 seconds unless stop is explicily invoked.

The enrollment of a biometric sample.

Holds the result of the challenge enrollment.

The enrollment for coumter based one-time password.

The enrollment for Time based one-time password.

The enrollment for TouchID.

Holds the result of unenrolling an authentication mechanism.

The enrollment for simple user-presence.

The enrollment for voice biometrics.

The MfaQRScanResult handles registration data scanned from a QR code.

The MfaRegistrationContext enables mobile applications to register a users device to IBM Security Access Manager. The registration process requires the mobile application to support QR code scanning.

Holds the result of the user registration.

Holds the result of unregistrating a device.

The OtpQRScanResult handles one-time password data scanned from a QR code.

The SigninQRScanResult handles a password-less signin from a QR code.

The UIRegistrationQRView enables mobile application to scan a QR code for device registration.

A collection of helper functions.

The KeychainHelper class performs RSA export operations to DER and PEM formats that can be used outside iOS for data signing.