Java SDK
JVM server SDK for Partner 2FA and OAuth Verify. Secret credentials stay on the server.
On this page
Installation
Package ie.keyra:keyra-java-sdk · version 0.1.0 (from package metadata).
Maven
<dependency>
<groupId>ie.keyra</groupId>
<artifactId>keyra-java-sdk</artifactId>
<version>0.1.0</version>
</dependency>Gradle
implementation("ie.keyra:keyra-java-sdk:0.1.0")Runtime
SERVER
Products supported
Method groups
Client Setup
createKeyraServer()— OAuth Verify facade (KeyraOAuthServer). Publishable client id is bound at construction for exchange/validate.createKeyraPartner2FA()— Factory matching TypeScript createKeyraPartner2FA.
Authorization
createVerification()— POST /verify/start via VerificationStartRequest.
Token Exchange
exchangeAuthorizationCode()— Exchange code + verifier; publishable client id injected from KeyraOAuthServer construction.
PKCE
generatePkce()— Synchronous PKCE S256 helper (KeyraSdk.generatePkce → Pkce.s256()).
User Information
getOAuthUserInfo()— GET /oauth/userinfo.
Validation
validateVerification()— One-shot validate; publishable client id injected from construction.
Verification
consumeChallenge()— Consume one-time verification token, then create your app session.
Management
disable2FA()— Disable/revoke identity for the external user.
Enrollment
enable2FA()— Start enrollment (overloads with optional returnUrl).get2FAStatus()— Enrollment status for an external user id.pollEnrollment()— Single enrollment poll.waitForEnrollment()— Poll until enrollment terminal state or timeout.
Recovery
generateRecoveryCodes()— Generate/rotate recovery codes.recoverIdentity()— Initiate recovery session.
Authentication
pollChallenge()— Single challenge poll. verificationToken is one-shot when approved.startAuthentication()— Create login challenge (overloads for nonce / returnUrl).waitForChallengeApproval()— Poll until approved with verificationToken, or denied/expired/timeout.