1) Main concepts and components

2) Authentication mechanisms:

▸ Clients: OpenID Connect - SAML - CAS - OAuth - HTTP - Kerberos (SPNEGO) - OpenID4VP (EUDI wallet, eIDAS 2.0)

▸ Authenticators: LDAP - SQL - JWT - MongoDB - IP address - REST API

3) Authorization mechanisms: Authorizers

▸ On the user profile: roles, anonymous/remember-me/(fully) authenticated, etc.

▸ On the web context: CSRF, IP address, HTTP method, etc.

4) HTTP request matching mechanisms: Matchers

▸ CORS, securityHeaders, etc.

5) Advanced mechanisms:

▸ OpenID Federation

▸ OpenID for Verifiable Presentations (EUDI wallet, eIDAS 2.0)

6) Security configuration

7) Web components:

▸ Security filter - Callback endpoint - Logout endpoint

8) User profile - Profile manager

9) WebContext - HttpActionAdapter

10) SessionStore - Store

11) Release notes - Backward compatibility

12) Authentication flows

13) Customizations

14) Javadoc