SalesforceSDK/com.salesforce.androidsdk.auth.dpop/DPoPRequestDecorator

DPoPRequestDecorator

object DPoPRequestDecorator

Public convenience API for app developers stamping DPoP/Bearer authorization headers on HTTP requests built outside the SDK's RestClient.

Gating is per-credential via DPoPKeyManager.shouldAttachDPoP, not the global com.salesforce.androidsdk.app.SalesforceSDKManager.useDPoP flag. A DPoP-bound credential carries proofs on every request regardless of that flag.

Properties

Link copied to clipboard
const val DPOP_HEADER: String
Link copied to clipboard

Functions

Link copied to clipboard
fun applyAuthHeaders(builder: Request.Builder, userAccount: UserAccount)

Stamps Authorization and, if the account is DPoP-bound, a DPoP proof header on builder. No-op when UserAccount.getAuthToken is null or empty.

Link copied to clipboard
fun isNonceChallenge(response: Response): Boolean

Returns true if response is a DPoP nonce challenge per RFC 9449 §8: