[java-idp-oidc] branch main updated: JCOMOIDC-6 Move common crypto/security code from the OIDC plugin
Henri Mikkonen
henri.mikkonen at iki.fi
Fri Dec 18 12:41:40 UTC 2020
This is an automated email from the git hooks/post-receive script.
hjmikkon pushed a commit to branch main
in repository java-idp-oidc.
View the commit online:
http://git.shibboleth.net/view/?p=java-idp-oidc.git;a=commit;h=fe95f3c49799fce11c0014682444e5d29a825a6c
The following commit(s) were added to refs/heads/main by this push:
new fe95f3c4 JCOMOIDC-6 Move common crypto/security code from the OIDC plugin
fe95f3c4 is described below
commit fe95f3c49799fce11c0014682444e5d29a825a6c
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Fri Dec 18 14:40:10 2020 +0200
JCOMOIDC-6 Move common crypto/security code from the OIDC plugin
https://issues.shibboleth.net/jira/browse/JCOMOIDC-6
Moved JWTSignatureValidationUtil and its dependencies to java-oidc-common.
---
.../oidc/profile/impl/DecryptRequestObject.java | 2 +-
.../impl/ValidateEndpointAuthentication.java | 5 +-
.../oidc/profile/impl/ValidateRequestObject.java | 4 +-
.../security/impl/JWTSignatureValidationUtil.java | 138 ---------------------
...entInformationEncryptionParametersResolver.java | 1 +
...ationSignatureValidationParametersResolver.java | 1 +
.../security/impl/OIDCDecryptionParameters.java | 39 ------
.../impl/OIDCSignatureValidationParameters.java | 47 -------
.../profile/impl/DecryptRequestObjectTest.java | 2 +-
.../impl/ValidateEndpointAuthenticationTest.java | 2 +-
.../profile/impl/ValidateRequestObjectTest.java | 2 +-
...nformationEncryptionParametersResolverTest.java | 1 +
...tionSignatureSigningParametersResolverTest.java | 1 +
...nSignatureValidationParametersResolverTest.java | 1 +
14 files changed, 14 insertions(+), 232 deletions(-)
diff --git a/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/profile/impl/DecryptRequestObject.java b/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/profile/impl/DecryptRequestObject.java
index 7a5895ed..a0ff69d9 100644
--- a/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/profile/impl/DecryptRequestObject.java
+++ b/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/profile/impl/DecryptRequestObject.java
@@ -27,7 +27,6 @@ import javax.annotation.Nullable;
import javax.crypto.SecretKey;
import org.geant.idpextension.oidc.profile.OidcEventIds;
-import org.geant.idpextension.oidc.security.impl.OIDCDecryptionParameters;
import org.opensaml.messaging.context.navigate.ChildContextLookup;
import org.opensaml.profile.action.ActionSupport;
import org.opensaml.profile.action.EventIds;
@@ -48,6 +47,7 @@ import com.nimbusds.jwt.JWT;
import com.nimbusds.jwt.JWTParser;
import net.shibboleth.idp.profile.context.RelyingPartyContext;
+import net.shibboleth.oidc.security.impl.OIDCDecryptionParameters;
import net.shibboleth.utilities.java.support.component.ComponentSupport;
import net.shibboleth.utilities.java.support.logic.Constraint;
diff --git a/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/profile/impl/ValidateEndpointAuthentication.java b/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/profile/impl/ValidateEndpointAuthentication.java
index bae4a5fb..8298090f 100644
--- a/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/profile/impl/ValidateEndpointAuthentication.java
+++ b/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/profile/impl/ValidateEndpointAuthentication.java
@@ -24,8 +24,6 @@ import javax.annotation.Nullable;
import org.geant.idpextension.oidc.config.navigate.TokenEndpointAuthMethodLookupFunction;
import org.geant.idpextension.oidc.messaging.context.OIDCMetadataContext;
-import org.geant.idpextension.oidc.security.impl.JWTSignatureValidationUtil;
-import org.geant.idpextension.oidc.security.impl.OIDCSignatureValidationParameters;
import org.opensaml.messaging.context.navigate.ChildContextLookup;
import org.opensaml.profile.action.ActionSupport;
import org.opensaml.profile.action.EventIds;
@@ -47,6 +45,9 @@ import com.nimbusds.oauth2.sdk.auth.PlainClientSecret;
import com.nimbusds.oauth2.sdk.auth.Secret;
import com.nimbusds.openid.connect.sdk.rp.OIDCClientInformation;
import com.nimbusds.openid.connect.sdk.rp.OIDCClientMetadata;
+
+import net.shibboleth.oidc.security.impl.JWTSignatureValidationUtil;
+import net.shibboleth.oidc.security.impl.OIDCSignatureValidationParameters;
import net.shibboleth.utilities.java.support.annotation.constraint.NonnullAfterInit;
import net.shibboleth.utilities.java.support.component.ComponentInitializationException;
import net.shibboleth.utilities.java.support.component.ComponentSupport;
diff --git a/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/profile/impl/ValidateRequestObject.java b/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/profile/impl/ValidateRequestObject.java
index eb1ff0a6..fd6e0e5d 100644
--- a/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/profile/impl/ValidateRequestObject.java
+++ b/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/profile/impl/ValidateRequestObject.java
@@ -23,8 +23,6 @@ import javax.annotation.Nonnull;
import javax.annotation.Nullable;
import org.geant.idpextension.oidc.profile.OidcEventIds;
-import org.geant.idpextension.oidc.security.impl.JWTSignatureValidationUtil;
-import org.geant.idpextension.oidc.security.impl.OIDCSignatureValidationParameters;
import org.opensaml.messaging.context.navigate.ChildContextLookup;
import org.opensaml.profile.action.ActionSupport;
import org.opensaml.profile.context.ProfileRequestContext;
@@ -38,6 +36,8 @@ import com.nimbusds.jwt.SignedJWT;
import com.nimbusds.oauth2.sdk.ResponseType;
import com.nimbusds.oauth2.sdk.id.ClientID;
+import net.shibboleth.oidc.security.impl.JWTSignatureValidationUtil;
+import net.shibboleth.oidc.security.impl.OIDCSignatureValidationParameters;
import net.shibboleth.utilities.java.support.component.ComponentSupport;
import net.shibboleth.utilities.java.support.logic.Constraint;
diff --git a/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/security/impl/JWTSignatureValidationUtil.java b/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/security/impl/JWTSignatureValidationUtil.java
deleted file mode 100644
index 1a57acfe..00000000
--- a/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/security/impl/JWTSignatureValidationUtil.java
+++ /dev/null
@@ -1,138 +0,0 @@
-/*
- * Copyright (c) 2017 - 2020, GÉANT
- *
- * Licensed under the Apache License, Version 2.0 (the “License”); you may not
- * use this file except in compliance with the License. You may obtain a copy
- * of the License at
- *
- * http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an “AS IS” BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-
-package org.geant.idpextension.oidc.security.impl;
-
-import java.security.interfaces.ECPublicKey;
-import java.security.interfaces.RSAPublicKey;
-import java.util.Iterator;
-
-import javax.annotation.Nonnull;
-
-import org.opensaml.profile.action.EventIds;
-import org.opensaml.xmlsec.context.SecurityParametersContext;
-import org.slf4j.Logger;
-import org.slf4j.LoggerFactory;
-
-import com.nimbusds.jose.Algorithm;
-import com.nimbusds.jose.JOSEException;
-import com.nimbusds.jose.JWSAlgorithm;
-import com.nimbusds.jose.JWSVerifier;
-import com.nimbusds.jose.crypto.ECDSAVerifier;
-import com.nimbusds.jose.crypto.MACVerifier;
-import com.nimbusds.jose.crypto.RSASSAVerifier;
-import com.nimbusds.jwt.SignedJWT;
-
-import net.shibboleth.oidc.security.credential.JWKCredential;
-
-/**
- * Generic utility class for helping JWT signature validation.
- */
-public final class JWTSignatureValidationUtil {
-
- /** Class logger. */
- @Nonnull private static Logger log = LoggerFactory.getLogger(JWTSignatureValidationUtil.class);
-
- /** Private constructor. */
- private JWTSignatureValidationUtil() {
-
- }
-
- /**
- * Validates the signature of the given JWT using the given security parameters context. If the validation fails for
- * any reason, including insufficient prequisities in the context, an event identifier is returned. Successful
- * validation produces null result.
- *
- * @param secParamCtx The {@link SecurityParametersContext} to use for signature validation.
- * @param signedJwt The signed JWT to be validated.
- * @param invalidJwtEventId The event identifier describing the invalid JWT.
- * @return an event ID
- */
- public static String validateSignature(final SecurityParametersContext secParamCtx, final SignedJWT signedJwt,
- final String invalidJwtEventId) {
- if (secParamCtx == null) {
- log.error("No security parameters context is available");
- return EventIds.INVALID_SEC_CFG;
- }
- if (secParamCtx.getSignatureSigningParameters() == null
- || !(secParamCtx.getSignatureSigningParameters() instanceof OIDCSignatureValidationParameters)) {
- log.error("No signature validation credentials available");
- return EventIds.INVALID_SEC_CFG;
- }
- final OIDCSignatureValidationParameters signatureValidationParameters =
- (OIDCSignatureValidationParameters) secParamCtx.getSignatureSigningParameters();
- final Algorithm algorithm = signedJwt.getHeader().getAlgorithm();
- final Iterator<?> it = signatureValidationParameters.getValidationCredentials().iterator();
- boolean verified = false;
- while (it.hasNext()) {
- final JWKCredential credential = (JWKCredential) it.next();
- if (!algorithm.equals(credential.getAlgorithm())) {
- log.debug("Credential alg {} not matching jwt header alg {}", credential.getAlgorithm().getName(),
- algorithm.getName());
- if (it.hasNext()) {
- log.debug("Unable to validate given JWT with credential, picking next key");
- continue;
- } else {
- log.error("Unable to validate given JWT with any of the credentials");
- return invalidJwtEventId;
- }
- }
- JWSVerifier verifier = null;
- try {
- if (JWSAlgorithm.Family.HMAC_SHA.contains(algorithm)) {
- verifier = new MACVerifier(credential.getSecretKey());
- }
- if (JWSAlgorithm.Family.RSA.contains(algorithm)) {
- verifier = new RSASSAVerifier((RSAPublicKey) credential.getPublicKey());
- }
- if (JWSAlgorithm.Family.EC.contains(algorithm)) {
- verifier = new ECDSAVerifier((ECPublicKey) credential.getPublicKey());
- }
- if (verifier == null) {
- log.error("No verifier for given JWT for alg {}", algorithm.getName());
- return EventIds.INVALID_SEC_CFG;
- }
- if (!signedJwt.verify(verifier)) {
- if (it.hasNext()) {
- log.debug("Unable to validate given JWT with credential, picking next key");
- continue;
- } else {
- log.error("Unable to validate given JWT with any of the credentials");
- return invalidJwtEventId;
- }
- }
- verified = true;
- log.debug("JWT {} verified using algorithm {} and key {}", signedJwt.serialize(), algorithm.getName(),
- credential.getKid());
- break;
- } catch (final JOSEException e) {
- if (it.hasNext()) {
- log.debug("Unable to validate given JWT with credential, {}, picking next key", e.getMessage());
- } else {
- log.error("Unable to validate given JWT with any of the credentials, {}", e.getMessage());
- return invalidJwtEventId;
- }
- }
- }
- if (!verified) {
- // This is executed only if there was no credentials (which should not happen).
- log.error("Unable to validate given JWT signature");
- return EventIds.INVALID_SEC_CFG;
- }
- return null;
- }
-
-}
diff --git a/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/security/impl/OIDCClientInformationEncryptionParametersResolver.java b/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/security/impl/OIDCClientInformationEncryptionParametersResolver.java
index 7454c509..06627225 100644
--- a/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/security/impl/OIDCClientInformationEncryptionParametersResolver.java
+++ b/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/security/impl/OIDCClientInformationEncryptionParametersResolver.java
@@ -29,6 +29,7 @@ import javax.crypto.SecretKey;
import javax.crypto.spec.SecretKeySpec;
import net.shibboleth.oidc.security.credential.BasicJWKCredential;
+import net.shibboleth.oidc.security.impl.OIDCDecryptionParameters;
import net.shibboleth.utilities.java.support.logic.Constraint;
import net.shibboleth.utilities.java.support.resolver.CriteriaSet;
import net.shibboleth.utilities.java.support.resolver.ResolverException;
diff --git a/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/security/impl/OIDCClientInformationSignatureValidationParametersResolver.java b/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/security/impl/OIDCClientInformationSignatureValidationParametersResolver.java
index bb340b9c..40a3121b 100644
--- a/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/security/impl/OIDCClientInformationSignatureValidationParametersResolver.java
+++ b/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/security/impl/OIDCClientInformationSignatureValidationParametersResolver.java
@@ -26,6 +26,7 @@ import javax.annotation.Nullable;
import javax.crypto.spec.SecretKeySpec;
import net.shibboleth.oidc.security.credential.BasicJWKCredential;
+import net.shibboleth.oidc.security.impl.OIDCSignatureValidationParameters;
import net.shibboleth.utilities.java.support.logic.Constraint;
import net.shibboleth.utilities.java.support.resolver.CriteriaSet;
import net.shibboleth.utilities.java.support.resolver.ResolverException;
diff --git a/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/security/impl/OIDCDecryptionParameters.java b/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/security/impl/OIDCDecryptionParameters.java
deleted file mode 100644
index 2bda3a11..00000000
--- a/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/security/impl/OIDCDecryptionParameters.java
+++ /dev/null
@@ -1,39 +0,0 @@
-/*
- * Copyright (c) 2017 - 2020, GÉANT
- *
- * Licensed under the Apache License, Version 2.0 (the “License”); you may not
- * use this file except in compliance with the License. You may obtain a copy
- * of the License at
- *
- * http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an “AS IS” BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-
-package org.geant.idpextension.oidc.security.impl;
-
-import java.util.ArrayList;
-import java.util.List;
-
-import org.opensaml.security.credential.Credential;
-import org.opensaml.xmlsec.EncryptionParameters;
-
-/** OIDC Decryption Parameters. Steals a bit EncryptionParameters as extending it for decryption purposes. */
-public class OIDCDecryptionParameters extends EncryptionParameters {
-
- /** The list of decryption credentials. */
- private List<Credential> keyTransportDecryptionCredentials = new ArrayList<Credential>();
-
- /**
- * Get the list of decryption credentials.
- *
- * @return he list of decryption credentials
- */
- public List<Credential> getKeyTransportDecryptionCredentials() {
- return keyTransportDecryptionCredentials;
- }
-}
diff --git a/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/security/impl/OIDCSignatureValidationParameters.java b/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/security/impl/OIDCSignatureValidationParameters.java
deleted file mode 100644
index 7328e85d..00000000
--- a/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/security/impl/OIDCSignatureValidationParameters.java
+++ /dev/null
@@ -1,47 +0,0 @@
-/*
- * Copyright (c) 2017 - 2020, GÉANT
- *
- * Licensed under the Apache License, Version 2.0 (the “License”); you may not
- * use this file except in compliance with the License. You may obtain a copy
- * of the License at
- *
- * http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an “AS IS” BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-
-package org.geant.idpextension.oidc.security.impl;
-
-import java.util.ArrayList;
-import java.util.List;
-
-import javax.annotation.Nonnull;
-
-import org.opensaml.xmlsec.SignatureSigningParameters;
-
-import net.shibboleth.oidc.security.credential.JWKCredential;
-
-/**
- * OIDC Signature Validation Parameters. Steals a bit SignatureSigningParameters as extending it also for validation
- * purposes.
- */
-public class OIDCSignatureValidationParameters extends SignatureSigningParameters {
-
- /** The list of validation credentials. */
- @Nonnull
- private final List<JWKCredential> validationCredentials = new ArrayList<JWKCredential>();
-
- /**
- * Get the list of validation credentials.
- *
- * @return the list of validation credentials
- */
- @Nonnull
- public List<JWKCredential> getValidationCredentials() {
- return validationCredentials;
- }
-}
diff --git a/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/profile/impl/DecryptRequestObjectTest.java b/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/profile/impl/DecryptRequestObjectTest.java
index e5c5993b..e7888634 100644
--- a/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/profile/impl/DecryptRequestObjectTest.java
+++ b/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/profile/impl/DecryptRequestObjectTest.java
@@ -21,6 +21,7 @@ import net.shibboleth.idp.profile.context.navigate.WebflowRequestContextProfileR
import net.shibboleth.idp.profile.testing.ActionTestingSupport;
import net.shibboleth.idp.profile.testing.RequestContextBuilder;
import net.shibboleth.oidc.security.credential.BasicJWKCredential;
+import net.shibboleth.oidc.security.impl.OIDCDecryptionParameters;
import net.shibboleth.utilities.java.support.component.ComponentInitializationException;
import java.net.URI;
import java.net.URISyntaxException;
@@ -33,7 +34,6 @@ import java.text.ParseException;
import org.geant.idpextension.oidc.messaging.context.OIDCAuthenticationResponseContext;
import org.geant.idpextension.oidc.messaging.context.OIDCMetadataContext;
import org.geant.idpextension.oidc.profile.OidcEventIds;
-import org.geant.idpextension.oidc.security.impl.OIDCDecryptionParameters;
import org.opensaml.messaging.context.BaseContext;
import org.opensaml.profile.action.EventIds;
import org.opensaml.profile.context.ProfileRequestContext;
diff --git a/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/profile/impl/ValidateEndpointAuthenticationTest.java b/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/profile/impl/ValidateEndpointAuthenticationTest.java
index a311b75a..924975b5 100644
--- a/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/profile/impl/ValidateEndpointAuthenticationTest.java
+++ b/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/profile/impl/ValidateEndpointAuthenticationTest.java
@@ -31,7 +31,6 @@ import java.util.function.Function;
import javax.crypto.spec.SecretKeySpec;
import org.geant.idpextension.oidc.messaging.context.OIDCMetadataContext;
-import org.geant.idpextension.oidc.security.impl.OIDCSignatureValidationParameters;
import org.opensaml.profile.action.EventIds;
import org.opensaml.profile.context.ProfileRequestContext;
import org.opensaml.storage.ReplayCache;
@@ -68,6 +67,7 @@ import net.shibboleth.idp.profile.context.navigate.WebflowRequestContextProfileR
import net.shibboleth.idp.profile.testing.ActionTestingSupport;
import net.shibboleth.idp.profile.testing.RequestContextBuilder;
import net.shibboleth.oidc.security.credential.BasicJWKCredential;
+import net.shibboleth.oidc.security.impl.OIDCSignatureValidationParameters;
import net.shibboleth.utilities.java.support.component.ComponentInitializationException;
/**
diff --git a/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/profile/impl/ValidateRequestObjectTest.java b/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/profile/impl/ValidateRequestObjectTest.java
index 289a5ee4..c3043740 100644
--- a/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/profile/impl/ValidateRequestObjectTest.java
+++ b/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/profile/impl/ValidateRequestObjectTest.java
@@ -20,6 +20,7 @@ import net.shibboleth.idp.profile.context.navigate.WebflowRequestContextProfileR
import net.shibboleth.idp.profile.testing.ActionTestingSupport;
import net.shibboleth.idp.profile.testing.RequestContextBuilder;
import net.shibboleth.oidc.security.credential.BasicJWKCredential;
+import net.shibboleth.oidc.security.impl.OIDCSignatureValidationParameters;
import net.shibboleth.utilities.java.support.component.ComponentInitializationException;
import java.net.URI;
import java.net.URISyntaxException;
@@ -31,7 +32,6 @@ import java.security.interfaces.ECPrivateKey;
import org.geant.idpextension.oidc.messaging.context.OIDCAuthenticationResponseContext;
import org.geant.idpextension.oidc.messaging.context.OIDCMetadataContext;
import org.geant.idpextension.oidc.profile.OidcEventIds;
-import org.geant.idpextension.oidc.security.impl.OIDCSignatureValidationParameters;
import org.opensaml.profile.action.EventIds;
import org.opensaml.profile.context.ProfileRequestContext;
import org.opensaml.xmlsec.context.SecurityParametersContext;
diff --git a/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/security/impl/OIDCClientInformationEncryptionParametersResolverTest.java b/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/security/impl/OIDCClientInformationEncryptionParametersResolverTest.java
index a8df8b3e..0acbca2e 100644
--- a/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/security/impl/OIDCClientInformationEncryptionParametersResolverTest.java
+++ b/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/security/impl/OIDCClientInformationEncryptionParametersResolverTest.java
@@ -43,6 +43,7 @@ import com.nimbusds.oauth2.sdk.id.ClientID;
import com.nimbusds.openid.connect.sdk.rp.OIDCClientInformation;
import com.nimbusds.openid.connect.sdk.rp.OIDCClientMetadata;
+import net.shibboleth.oidc.security.impl.OIDCDecryptionParameters;
import net.shibboleth.utilities.java.support.resolver.CriteriaSet;
import net.shibboleth.utilities.java.support.resolver.ResolverException;
diff --git a/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/security/impl/OIDCClientInformationSignatureSigningParametersResolverTest.java b/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/security/impl/OIDCClientInformationSignatureSigningParametersResolverTest.java
index 65f785a5..066653fe 100644
--- a/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/security/impl/OIDCClientInformationSignatureSigningParametersResolverTest.java
+++ b/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/security/impl/OIDCClientInformationSignatureSigningParametersResolverTest.java
@@ -45,6 +45,7 @@ import com.nimbusds.oauth2.sdk.id.ClientID;
import com.nimbusds.openid.connect.sdk.rp.OIDCClientInformation;
import com.nimbusds.openid.connect.sdk.rp.OIDCClientMetadata;
+import net.shibboleth.oidc.security.impl.OIDCSignatureValidationParameters;
import net.shibboleth.utilities.java.support.resolver.CriteriaSet;
import net.shibboleth.utilities.java.support.resolver.ResolverException;
diff --git a/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/security/impl/OIDCClientInformationSignatureValidationParametersResolverTest.java b/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/security/impl/OIDCClientInformationSignatureValidationParametersResolverTest.java
index 9998c33f..0981e4fb 100644
--- a/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/security/impl/OIDCClientInformationSignatureValidationParametersResolverTest.java
+++ b/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/security/impl/OIDCClientInformationSignatureValidationParametersResolverTest.java
@@ -40,6 +40,7 @@ import com.nimbusds.oauth2.sdk.id.ClientID;
import com.nimbusds.openid.connect.sdk.rp.OIDCClientInformation;
import com.nimbusds.openid.connect.sdk.rp.OIDCClientMetadata;
+import net.shibboleth.oidc.security.impl.OIDCSignatureValidationParameters;
import net.shibboleth.utilities.java.support.resolver.CriteriaSet;
import net.shibboleth.utilities.java.support.resolver.ResolverException;
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the commits
mailing list