[java-oidc-common] branch main updated: JCOMOIDC-21 - Move net.shibboleth.idp.plugin.oidc.op.config from oidc-op-impl into commons

[Phil Smart]

This is an automated email from the git hooks/post-receive script.

philsmart pushed a commit to branch main
in repository java-oidc-common.

View the commit online:
http://git.shibboleth.net/view/?p=java-oidc-common.git;a=commit;h=0ef2986fe8a69f126f41efc6f10242ac4660f408

The following commit(s) were added to refs/heads/main by this push:
     new 0ef2986  JCOMOIDC-21 - Move net.shibboleth.idp.plugin.oidc.op.config from oidc-op-impl into commons
0ef2986 is described below

commit 0ef2986fe8a69f126f41efc6f10242ac4660f408
Author: Phil Smart <philip.smart at jisc.ac.uk>
AuthorDate: Fri Nov 26 14:55:04 2021 +0000

    JCOMOIDC-21 - Move net.shibboleth.idp.plugin.oidc.op.config from
    oidc-op-impl into commons
    
     - Add OIDC Security configuration class
    
    
    https://shibboleth.atlassian.net/browse/JCOMOIDC-21
---
 .../profile/config/OIDCSecurityConfiguration.java  | 102 +++++++++++++++++++++
 1 file changed, 102 insertions(+)

diff --git a/oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/config/OIDCSecurityConfiguration.java b/oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/config/OIDCSecurityConfiguration.java
new file mode 100644
index 0000000..950df20
--- /dev/null
+++ b/oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/config/OIDCSecurityConfiguration.java
@@ -0,0 +1,102 @@
+/*
+ * Licensed to the University Corporation for Advanced Internet Development,
+ * Inc. (UCAID) under one or more contributor license agreements.  See the
+ * NOTICE file distributed with this work for additional information regarding
+ * copyright ownership. The UCAID licenses this file to You under the Apache
+ * License, Version 2.0 (the "License"); you may not use this file except in
+ * compliance with the License.  You may obtain a copy of the License at
+ *
+ *    http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package net.shibboleth.oidc.profile.config;
+
+import javax.annotation.Nullable;
+import org.opensaml.xmlsec.EncryptionConfiguration;
+import org.opensaml.xmlsec.SignatureSigningConfiguration;
+
+import net.shibboleth.idp.profile.config.SecurityConfiguration;
+
+/**
+ * Class extends SecurityConfiguration to support separate configuration for request object decryption and signature
+ * validation.
+ */
+public class OIDCSecurityConfiguration extends SecurityConfiguration {
+
+    /** Configuration used when decrypting request object information. */
+    @Nullable
+    private EncryptionConfiguration requestObjectDecryptConfig;
+
+    /** Configuration used when validating request object information. */
+    @Nullable
+    private SignatureSigningConfiguration requestObjectSignatureValidationConfig;
+
+    /** Configuration used when validating token endpoint authentication JWT signatures. */
+    @Nullable
+    private SignatureSigningConfiguration tokenEndpointJwtSignatureValidationConfig;
+
+    /**
+     * Get the configuration used when decrypting request object information.
+     * 
+     * @return configuration used when decrypting request object information, or null
+     */
+    @Nullable
+    public EncryptionConfiguration getRequestObjectDecryptionConfiguration() {
+        return requestObjectDecryptConfig;
+    }
+
+    /**
+     * Set the configuration used when decrypting request object information.
+     * 
+     * @param config configuration used when decrypting request object information, or null
+     */
+    public void setRequestObjectDecryptionConfiguration(@Nullable final EncryptionConfiguration config) {
+        requestObjectDecryptConfig = config;
+    }
+
+    /**
+     * Get the configuration used when validating request object information.
+     * 
+     * @return configuration used when validating request object information, or null
+     */
+    @Nullable
+    public SignatureSigningConfiguration getRequestObjectSignatureValidationConfiguration() {
+        return requestObjectSignatureValidationConfig;
+    }
+
+    /**
+     * Set the configuration used when validating request object information.
+     * 
+     * @param config used when validating request object information, or null
+     */
+    public void setRequestObjectSignatureValidationConfiguration(@Nullable final SignatureSigningConfiguration config) {
+        requestObjectSignatureValidationConfig = config;
+    }
+
+    /**
+     * Get the configuration used when validating token endpoint authentication JWT signatures.
+     * 
+     * @return configuration used when validating token endpoint authentication JWT signatures, or null
+     */
+    @Nullable
+    public SignatureSigningConfiguration getTokenEndpointJwtSignatureValidationConfiguration() {
+        return tokenEndpointJwtSignatureValidationConfig;
+    }
+
+    /**
+     * Set the configuration used when validating token endpoint authentication JWT signatures.
+     * 
+     * @param config used when validating token endpoint authentication JWT signatures, or null
+     */
+    public void setTokenEndpointJwtSignatureValidationConfiguration(
+            @Nullable final SignatureSigningConfiguration config) {
+        tokenEndpointJwtSignatureValidationConfig = config;
+    }
+
+}

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.