[java-idp-oidc] branch main updated: JCOMOIDC-6 Move common crypto/security code from the OIDC plugin

Henri Mikkonen henri.mikkonen at iki.fi
Fri Dec 18 12:41:40 UTC 2020


This is an automated email from the git hooks/post-receive script.

hjmikkon pushed a commit to branch main
in repository java-idp-oidc.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-oidc.git;a=commit;h=fe95f3c49799fce11c0014682444e5d29a825a6c

The following commit(s) were added to refs/heads/main by this push:
       new  fe95f3c4  JCOMOIDC-6 Move common crypto/security code from the OIDC plugin
fe95f3c4 is described below

commit fe95f3c49799fce11c0014682444e5d29a825a6c
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Fri Dec 18 14:40:10 2020 +0200

    JCOMOIDC-6 Move common crypto/security code from the OIDC plugin
    
    https://issues.shibboleth.net/jira/browse/JCOMOIDC-6
    
    Moved JWTSignatureValidationUtil and its dependencies to java-oidc-common.
---
 .../oidc/profile/impl/DecryptRequestObject.java    |   2 +-
 .../impl/ValidateEndpointAuthentication.java       |   5 +-
 .../oidc/profile/impl/ValidateRequestObject.java   |   4 +-
 .../security/impl/JWTSignatureValidationUtil.java  | 138 ---------------------
 ...entInformationEncryptionParametersResolver.java |   1 +
 ...ationSignatureValidationParametersResolver.java |   1 +
 .../security/impl/OIDCDecryptionParameters.java    |  39 ------
 .../impl/OIDCSignatureValidationParameters.java    |  47 -------
 .../profile/impl/DecryptRequestObjectTest.java     |   2 +-
 .../impl/ValidateEndpointAuthenticationTest.java   |   2 +-
 .../profile/impl/ValidateRequestObjectTest.java    |   2 +-
 ...nformationEncryptionParametersResolverTest.java |   1 +
 ...tionSignatureSigningParametersResolverTest.java |   1 +
 ...nSignatureValidationParametersResolverTest.java |   1 +
 14 files changed, 14 insertions(+), 232 deletions(-)

diff --git a/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/profile/impl/DecryptRequestObject.java b/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/profile/impl/DecryptRequestObject.java
index 7a5895ed..a0ff69d9 100644
--- a/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/profile/impl/DecryptRequestObject.java
+++ b/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/profile/impl/DecryptRequestObject.java
@@ -27,7 +27,6 @@ import javax.annotation.Nullable;
 import javax.crypto.SecretKey;
 
 import org.geant.idpextension.oidc.profile.OidcEventIds;
-import org.geant.idpextension.oidc.security.impl.OIDCDecryptionParameters;
 import org.opensaml.messaging.context.navigate.ChildContextLookup;
 import org.opensaml.profile.action.ActionSupport;
 import org.opensaml.profile.action.EventIds;
@@ -48,6 +47,7 @@ import com.nimbusds.jwt.JWT;
 import com.nimbusds.jwt.JWTParser;
 
 import net.shibboleth.idp.profile.context.RelyingPartyContext;
+import net.shibboleth.oidc.security.impl.OIDCDecryptionParameters;
 import net.shibboleth.utilities.java.support.component.ComponentSupport;
 import net.shibboleth.utilities.java.support.logic.Constraint;
 
diff --git a/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/profile/impl/ValidateEndpointAuthentication.java b/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/profile/impl/ValidateEndpointAuthentication.java
index bae4a5fb..8298090f 100644
--- a/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/profile/impl/ValidateEndpointAuthentication.java
+++ b/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/profile/impl/ValidateEndpointAuthentication.java
@@ -24,8 +24,6 @@ import javax.annotation.Nullable;
 
 import org.geant.idpextension.oidc.config.navigate.TokenEndpointAuthMethodLookupFunction;
 import org.geant.idpextension.oidc.messaging.context.OIDCMetadataContext;
-import org.geant.idpextension.oidc.security.impl.JWTSignatureValidationUtil;
-import org.geant.idpextension.oidc.security.impl.OIDCSignatureValidationParameters;
 import org.opensaml.messaging.context.navigate.ChildContextLookup;
 import org.opensaml.profile.action.ActionSupport;
 import org.opensaml.profile.action.EventIds;
@@ -47,6 +45,9 @@ import com.nimbusds.oauth2.sdk.auth.PlainClientSecret;
 import com.nimbusds.oauth2.sdk.auth.Secret;
 import com.nimbusds.openid.connect.sdk.rp.OIDCClientInformation;
 import com.nimbusds.openid.connect.sdk.rp.OIDCClientMetadata;
+
+import net.shibboleth.oidc.security.impl.JWTSignatureValidationUtil;
+import net.shibboleth.oidc.security.impl.OIDCSignatureValidationParameters;
 import net.shibboleth.utilities.java.support.annotation.constraint.NonnullAfterInit;
 import net.shibboleth.utilities.java.support.component.ComponentInitializationException;
 import net.shibboleth.utilities.java.support.component.ComponentSupport;
diff --git a/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/profile/impl/ValidateRequestObject.java b/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/profile/impl/ValidateRequestObject.java
index eb1ff0a6..fd6e0e5d 100644
--- a/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/profile/impl/ValidateRequestObject.java
+++ b/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/profile/impl/ValidateRequestObject.java
@@ -23,8 +23,6 @@ import javax.annotation.Nonnull;
 import javax.annotation.Nullable;
 
 import org.geant.idpextension.oidc.profile.OidcEventIds;
-import org.geant.idpextension.oidc.security.impl.JWTSignatureValidationUtil;
-import org.geant.idpextension.oidc.security.impl.OIDCSignatureValidationParameters;
 import org.opensaml.messaging.context.navigate.ChildContextLookup;
 import org.opensaml.profile.action.ActionSupport;
 import org.opensaml.profile.context.ProfileRequestContext;
@@ -38,6 +36,8 @@ import com.nimbusds.jwt.SignedJWT;
 import com.nimbusds.oauth2.sdk.ResponseType;
 import com.nimbusds.oauth2.sdk.id.ClientID;
 
+import net.shibboleth.oidc.security.impl.JWTSignatureValidationUtil;
+import net.shibboleth.oidc.security.impl.OIDCSignatureValidationParameters;
 import net.shibboleth.utilities.java.support.component.ComponentSupport;
 import net.shibboleth.utilities.java.support.logic.Constraint;
 
diff --git a/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/security/impl/JWTSignatureValidationUtil.java b/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/security/impl/JWTSignatureValidationUtil.java
deleted file mode 100644
index 1a57acfe..00000000
--- a/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/security/impl/JWTSignatureValidationUtil.java
+++ /dev/null
@@ -1,138 +0,0 @@
-/*
- * Copyright (c) 2017 - 2020, GÉANT
- *
- * Licensed under the Apache License, Version 2.0 (the “License”); you may not
- * use this file except in compliance with the License. You may obtain a copy
- * of the License at
- *
- *    http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an “AS IS” BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-
-package org.geant.idpextension.oidc.security.impl;
-
-import java.security.interfaces.ECPublicKey;
-import java.security.interfaces.RSAPublicKey;
-import java.util.Iterator;
-
-import javax.annotation.Nonnull;
-
-import org.opensaml.profile.action.EventIds;
-import org.opensaml.xmlsec.context.SecurityParametersContext;
-import org.slf4j.Logger;
-import org.slf4j.LoggerFactory;
-
-import com.nimbusds.jose.Algorithm;
-import com.nimbusds.jose.JOSEException;
-import com.nimbusds.jose.JWSAlgorithm;
-import com.nimbusds.jose.JWSVerifier;
-import com.nimbusds.jose.crypto.ECDSAVerifier;
-import com.nimbusds.jose.crypto.MACVerifier;
-import com.nimbusds.jose.crypto.RSASSAVerifier;
-import com.nimbusds.jwt.SignedJWT;
-
-import net.shibboleth.oidc.security.credential.JWKCredential;
-
-/**
- * Generic utility class for helping JWT signature validation.
- */
-public final class JWTSignatureValidationUtil {
-
-    /** Class logger. */
-    @Nonnull private static Logger log = LoggerFactory.getLogger(JWTSignatureValidationUtil.class);
-
-    /** Private constructor. */
-    private JWTSignatureValidationUtil() {
-
-    }
-
-    /**
-     * Validates the signature of the given JWT using the given security parameters context. If the validation fails for
-     * any reason, including insufficient prequisities in the context, an event identifier is returned. Successful
-     * validation produces null result.
-     * 
-     * @param secParamCtx The {@link SecurityParametersContext} to use for signature validation.
-     * @param signedJwt The signed JWT to be validated.
-     * @param invalidJwtEventId The event identifier describing the invalid JWT.
-     * @return an event ID
-     */
-    public static String validateSignature(final SecurityParametersContext secParamCtx, final SignedJWT signedJwt,
-            final String invalidJwtEventId) {
-        if (secParamCtx == null) {
-            log.error("No security parameters context is available");
-            return EventIds.INVALID_SEC_CFG;
-        }
-        if (secParamCtx.getSignatureSigningParameters() == null
-                || !(secParamCtx.getSignatureSigningParameters() instanceof OIDCSignatureValidationParameters)) {
-            log.error("No signature validation credentials available");
-            return EventIds.INVALID_SEC_CFG;
-        }
-        final OIDCSignatureValidationParameters signatureValidationParameters =
-                (OIDCSignatureValidationParameters) secParamCtx.getSignatureSigningParameters();
-        final Algorithm algorithm = signedJwt.getHeader().getAlgorithm();
-        final Iterator<?> it = signatureValidationParameters.getValidationCredentials().iterator();
-        boolean verified = false;
-        while (it.hasNext()) {
-            final JWKCredential credential = (JWKCredential) it.next();
-            if (!algorithm.equals(credential.getAlgorithm())) {
-                log.debug("Credential alg {} not matching jwt header alg {}", credential.getAlgorithm().getName(),
-                        algorithm.getName());
-                if (it.hasNext()) {
-                    log.debug("Unable to validate given JWT with credential, picking next key");
-                    continue;
-                } else {
-                    log.error("Unable to validate given JWT with any of the credentials");
-                    return invalidJwtEventId;
-                }
-            }
-            JWSVerifier verifier = null;
-            try {
-                if (JWSAlgorithm.Family.HMAC_SHA.contains(algorithm)) {
-                    verifier = new MACVerifier(credential.getSecretKey());
-                }
-                if (JWSAlgorithm.Family.RSA.contains(algorithm)) {
-                    verifier = new RSASSAVerifier((RSAPublicKey) credential.getPublicKey());
-                }
-                if (JWSAlgorithm.Family.EC.contains(algorithm)) {
-                    verifier = new ECDSAVerifier((ECPublicKey) credential.getPublicKey());
-                }
-                if (verifier == null) {
-                    log.error("No verifier for given JWT for alg {}", algorithm.getName());
-                    return EventIds.INVALID_SEC_CFG;
-                }
-                if (!signedJwt.verify(verifier)) {
-                    if (it.hasNext()) {
-                        log.debug("Unable to validate given JWT with credential, picking next key");
-                        continue;
-                    } else {
-                        log.error("Unable to validate given JWT with any of the credentials");
-                        return invalidJwtEventId;
-                    }
-                }
-                verified = true;
-                log.debug("JWT {} verified using algorithm {} and key {}", signedJwt.serialize(), algorithm.getName(),
-                        credential.getKid());
-                break;
-            } catch (final JOSEException e) {
-                if (it.hasNext()) {
-                    log.debug("Unable to validate given JWT with credential, {}, picking next key", e.getMessage());
-                } else {
-                    log.error("Unable to validate given JWT with any of the credentials, {}", e.getMessage());
-                    return invalidJwtEventId;
-                }
-            }
-        }
-        if (!verified) {
-            // This is executed only if there was no credentials (which should not happen).
-            log.error("Unable to validate given JWT signature");
-            return EventIds.INVALID_SEC_CFG;
-        }
-        return null;
-    }
-
-}
diff --git a/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/security/impl/OIDCClientInformationEncryptionParametersResolver.java b/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/security/impl/OIDCClientInformationEncryptionParametersResolver.java
index 7454c509..06627225 100644
--- a/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/security/impl/OIDCClientInformationEncryptionParametersResolver.java
+++ b/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/security/impl/OIDCClientInformationEncryptionParametersResolver.java
@@ -29,6 +29,7 @@ import javax.crypto.SecretKey;
 import javax.crypto.spec.SecretKeySpec;
 
 import net.shibboleth.oidc.security.credential.BasicJWKCredential;
+import net.shibboleth.oidc.security.impl.OIDCDecryptionParameters;
 import net.shibboleth.utilities.java.support.logic.Constraint;
 import net.shibboleth.utilities.java.support.resolver.CriteriaSet;
 import net.shibboleth.utilities.java.support.resolver.ResolverException;
diff --git a/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/security/impl/OIDCClientInformationSignatureValidationParametersResolver.java b/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/security/impl/OIDCClientInformationSignatureValidationParametersResolver.java
index bb340b9c..40a3121b 100644
--- a/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/security/impl/OIDCClientInformationSignatureValidationParametersResolver.java
+++ b/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/security/impl/OIDCClientInformationSignatureValidationParametersResolver.java
@@ -26,6 +26,7 @@ import javax.annotation.Nullable;
 import javax.crypto.spec.SecretKeySpec;
 
 import net.shibboleth.oidc.security.credential.BasicJWKCredential;
+import net.shibboleth.oidc.security.impl.OIDCSignatureValidationParameters;
 import net.shibboleth.utilities.java.support.logic.Constraint;
 import net.shibboleth.utilities.java.support.resolver.CriteriaSet;
 import net.shibboleth.utilities.java.support.resolver.ResolverException;
diff --git a/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/security/impl/OIDCDecryptionParameters.java b/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/security/impl/OIDCDecryptionParameters.java
deleted file mode 100644
index 2bda3a11..00000000
--- a/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/security/impl/OIDCDecryptionParameters.java
+++ /dev/null
@@ -1,39 +0,0 @@
-/*
- * Copyright (c) 2017 - 2020, GÉANT
- *
- * Licensed under the Apache License, Version 2.0 (the “License”); you may not
- * use this file except in compliance with the License. You may obtain a copy
- * of the License at
- *
- *    http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an “AS IS” BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-
-package org.geant.idpextension.oidc.security.impl;
-
-import java.util.ArrayList;
-import java.util.List;
-
-import org.opensaml.security.credential.Credential;
-import org.opensaml.xmlsec.EncryptionParameters;
-
-/** OIDC Decryption Parameters. Steals a bit EncryptionParameters as extending it for decryption purposes. */
-public class OIDCDecryptionParameters extends EncryptionParameters {
-
-    /** The list of decryption credentials. */
-    private List<Credential> keyTransportDecryptionCredentials = new ArrayList<Credential>();
-
-    /**
-     * Get the list of decryption credentials.
-     * 
-     * @return he list of decryption credentials
-     */
-    public List<Credential> getKeyTransportDecryptionCredentials() {
-        return keyTransportDecryptionCredentials;
-    }
-}
diff --git a/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/security/impl/OIDCSignatureValidationParameters.java b/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/security/impl/OIDCSignatureValidationParameters.java
deleted file mode 100644
index 7328e85d..00000000
--- a/idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/security/impl/OIDCSignatureValidationParameters.java
+++ /dev/null
@@ -1,47 +0,0 @@
-/*
- * Copyright (c) 2017 - 2020, GÉANT
- *
- * Licensed under the Apache License, Version 2.0 (the “License”); you may not
- * use this file except in compliance with the License. You may obtain a copy
- * of the License at
- *
- *    http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an “AS IS” BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-
-package org.geant.idpextension.oidc.security.impl;
-
-import java.util.ArrayList;
-import java.util.List;
-
-import javax.annotation.Nonnull;
-
-import org.opensaml.xmlsec.SignatureSigningParameters;
-
-import net.shibboleth.oidc.security.credential.JWKCredential;
-
-/**
- * OIDC Signature Validation Parameters. Steals a bit SignatureSigningParameters as extending it also for validation
- * purposes.
- */
-public class OIDCSignatureValidationParameters extends SignatureSigningParameters {
-
-    /** The list of validation credentials. */
-    @Nonnull
-    private final List<JWKCredential> validationCredentials = new ArrayList<JWKCredential>();
-
-    /**
-     * Get the list of validation credentials.
-     * 
-     * @return the list of validation credentials
-     */
-    @Nonnull
-    public List<JWKCredential> getValidationCredentials() {
-        return validationCredentials;
-    }
-}
diff --git a/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/profile/impl/DecryptRequestObjectTest.java b/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/profile/impl/DecryptRequestObjectTest.java
index e5c5993b..e7888634 100644
--- a/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/profile/impl/DecryptRequestObjectTest.java
+++ b/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/profile/impl/DecryptRequestObjectTest.java
@@ -21,6 +21,7 @@ import net.shibboleth.idp.profile.context.navigate.WebflowRequestContextProfileR
 import net.shibboleth.idp.profile.testing.ActionTestingSupport;
 import net.shibboleth.idp.profile.testing.RequestContextBuilder;
 import net.shibboleth.oidc.security.credential.BasicJWKCredential;
+import net.shibboleth.oidc.security.impl.OIDCDecryptionParameters;
 import net.shibboleth.utilities.java.support.component.ComponentInitializationException;
 import java.net.URI;
 import java.net.URISyntaxException;
@@ -33,7 +34,6 @@ import java.text.ParseException;
 import org.geant.idpextension.oidc.messaging.context.OIDCAuthenticationResponseContext;
 import org.geant.idpextension.oidc.messaging.context.OIDCMetadataContext;
 import org.geant.idpextension.oidc.profile.OidcEventIds;
-import org.geant.idpextension.oidc.security.impl.OIDCDecryptionParameters;
 import org.opensaml.messaging.context.BaseContext;
 import org.opensaml.profile.action.EventIds;
 import org.opensaml.profile.context.ProfileRequestContext;
diff --git a/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/profile/impl/ValidateEndpointAuthenticationTest.java b/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/profile/impl/ValidateEndpointAuthenticationTest.java
index a311b75a..924975b5 100644
--- a/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/profile/impl/ValidateEndpointAuthenticationTest.java
+++ b/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/profile/impl/ValidateEndpointAuthenticationTest.java
@@ -31,7 +31,6 @@ import java.util.function.Function;
 import javax.crypto.spec.SecretKeySpec;
 
 import org.geant.idpextension.oidc.messaging.context.OIDCMetadataContext;
-import org.geant.idpextension.oidc.security.impl.OIDCSignatureValidationParameters;
 import org.opensaml.profile.action.EventIds;
 import org.opensaml.profile.context.ProfileRequestContext;
 import org.opensaml.storage.ReplayCache;
@@ -68,6 +67,7 @@ import net.shibboleth.idp.profile.context.navigate.WebflowRequestContextProfileR
 import net.shibboleth.idp.profile.testing.ActionTestingSupport;
 import net.shibboleth.idp.profile.testing.RequestContextBuilder;
 import net.shibboleth.oidc.security.credential.BasicJWKCredential;
+import net.shibboleth.oidc.security.impl.OIDCSignatureValidationParameters;
 import net.shibboleth.utilities.java.support.component.ComponentInitializationException;
 
 /**
diff --git a/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/profile/impl/ValidateRequestObjectTest.java b/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/profile/impl/ValidateRequestObjectTest.java
index 289a5ee4..c3043740 100644
--- a/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/profile/impl/ValidateRequestObjectTest.java
+++ b/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/profile/impl/ValidateRequestObjectTest.java
@@ -20,6 +20,7 @@ import net.shibboleth.idp.profile.context.navigate.WebflowRequestContextProfileR
 import net.shibboleth.idp.profile.testing.ActionTestingSupport;
 import net.shibboleth.idp.profile.testing.RequestContextBuilder;
 import net.shibboleth.oidc.security.credential.BasicJWKCredential;
+import net.shibboleth.oidc.security.impl.OIDCSignatureValidationParameters;
 import net.shibboleth.utilities.java.support.component.ComponentInitializationException;
 import java.net.URI;
 import java.net.URISyntaxException;
@@ -31,7 +32,6 @@ import java.security.interfaces.ECPrivateKey;
 import org.geant.idpextension.oidc.messaging.context.OIDCAuthenticationResponseContext;
 import org.geant.idpextension.oidc.messaging.context.OIDCMetadataContext;
 import org.geant.idpextension.oidc.profile.OidcEventIds;
-import org.geant.idpextension.oidc.security.impl.OIDCSignatureValidationParameters;
 import org.opensaml.profile.action.EventIds;
 import org.opensaml.profile.context.ProfileRequestContext;
 import org.opensaml.xmlsec.context.SecurityParametersContext;
diff --git a/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/security/impl/OIDCClientInformationEncryptionParametersResolverTest.java b/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/security/impl/OIDCClientInformationEncryptionParametersResolverTest.java
index a8df8b3e..0acbca2e 100644
--- a/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/security/impl/OIDCClientInformationEncryptionParametersResolverTest.java
+++ b/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/security/impl/OIDCClientInformationEncryptionParametersResolverTest.java
@@ -43,6 +43,7 @@ import com.nimbusds.oauth2.sdk.id.ClientID;
 import com.nimbusds.openid.connect.sdk.rp.OIDCClientInformation;
 import com.nimbusds.openid.connect.sdk.rp.OIDCClientMetadata;
 
+import net.shibboleth.oidc.security.impl.OIDCDecryptionParameters;
 import net.shibboleth.utilities.java.support.resolver.CriteriaSet;
 import net.shibboleth.utilities.java.support.resolver.ResolverException;
 
diff --git a/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/security/impl/OIDCClientInformationSignatureSigningParametersResolverTest.java b/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/security/impl/OIDCClientInformationSignatureSigningParametersResolverTest.java
index 65f785a5..066653fe 100644
--- a/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/security/impl/OIDCClientInformationSignatureSigningParametersResolverTest.java
+++ b/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/security/impl/OIDCClientInformationSignatureSigningParametersResolverTest.java
@@ -45,6 +45,7 @@ import com.nimbusds.oauth2.sdk.id.ClientID;
 import com.nimbusds.openid.connect.sdk.rp.OIDCClientInformation;
 import com.nimbusds.openid.connect.sdk.rp.OIDCClientMetadata;
 
+import net.shibboleth.oidc.security.impl.OIDCSignatureValidationParameters;
 import net.shibboleth.utilities.java.support.resolver.CriteriaSet;
 import net.shibboleth.utilities.java.support.resolver.ResolverException;
 
diff --git a/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/security/impl/OIDCClientInformationSignatureValidationParametersResolverTest.java b/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/security/impl/OIDCClientInformationSignatureValidationParametersResolverTest.java
index 9998c33f..0981e4fb 100644
--- a/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/security/impl/OIDCClientInformationSignatureValidationParametersResolverTest.java
+++ b/idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/security/impl/OIDCClientInformationSignatureValidationParametersResolverTest.java
@@ -40,6 +40,7 @@ import com.nimbusds.oauth2.sdk.id.ClientID;
 import com.nimbusds.openid.connect.sdk.rp.OIDCClientInformation;
 import com.nimbusds.openid.connect.sdk.rp.OIDCClientMetadata;
 
+import net.shibboleth.oidc.security.impl.OIDCSignatureValidationParameters;
 import net.shibboleth.utilities.java.support.resolver.CriteriaSet;
 import net.shibboleth.utilities.java.support.resolver.ResolverException;
 

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list