[java-oidc-common] branch main updated: Added EventIds and Error messages related to PKCE validation.

[Henri Mikkonen]

This is an automated email from the git hooks/post-receive script.

hjmikkon pushed a commit to branch main
in repository java-oidc-common.

View the commit online:
http://git.shibboleth.net/view/?p=java-oidc-common.git;a=commit;h=e6760f0e7b13ef60ef45d17b94c0188a740a7ccc

The following commit(s) were added to refs/heads/main by this push:
     new e6760f0  Added EventIds and Error messages related to PKCE validation.
e6760f0 is described below

commit e6760f0e7b13ef60ef45d17b94c0188a740a7ccc
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Tue Feb 22 17:55:15 2022 +0200

    Added EventIds and Error messages related to PKCE validation.
---
 .../java/net/shibboleth/oidc/profile/core/OidcError.java   | 14 ++++++++++++++
 .../net/shibboleth/oidc/profile/core/OidcEventIds.java     | 11 +++++++++++
 2 files changed, 25 insertions(+)

diff --git a/oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/core/OidcError.java b/oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/core/OidcError.java
index 0fb3876..31f8cee 100644
--- a/oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/core/OidcError.java
+++ b/oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/core/OidcError.java
@@ -20,6 +20,7 @@ package net.shibboleth.oidc.profile.core;
 import javax.annotation.Nonnull;
 
 import com.nimbusds.oauth2.sdk.ErrorObject;
+import com.nimbusds.oauth2.sdk.OAuth2Error;
 import com.nimbusds.oauth2.sdk.http.HTTPResponse;
 
 import net.shibboleth.utilities.java.support.annotation.constraint.NotEmpty;
@@ -39,6 +40,19 @@ public final class OidcError {
      */
     public static final ErrorObject INVALID_TARGET =
         new ErrorObject(INVALID_TARGET_CODE, "Improper or disallowed resource indicator", HTTPResponse.SC_FORBIDDEN);
+
+    /**
+     * The request is missing a required PKCE code challenge.
+     */
+    public static final ErrorObject MISSING_PKCE_CODE_CHALLENGE = 
+        new ErrorObject(OAuth2Error.INVALID_REQUEST_CODE, "PKCE code challenge required", HTTPResponse.SC_BAD_REQUEST);
+
+    /**
+     * The request contains an unsupported PKCE transform algorithm.
+     */
+    public static final ErrorObject INVALID_PKCE_TRANSFORMATION_METHOD =
+            new ErrorObject(OAuth2Error.INVALID_REQUEST_CODE, "PKCE transform algorithm not supported",
+                    HTTPResponse.SC_BAD_REQUEST);
     
     /**
      * Constructor.
diff --git a/oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/core/OidcEventIds.java b/oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/core/OidcEventIds.java
index f86ece8..4f8a10e 100644
--- a/oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/core/OidcEventIds.java
+++ b/oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/core/OidcEventIds.java
@@ -102,6 +102,17 @@ public final class OidcEventIds {
      */
     @Nonnull @NotEmpty public static final String INVALID_USERINFO_CLAIMS = "InvalidUserInfoClaims";
     
+    /**
+     * ID of event returned if the mandatory PKCE code challenge is missing.
+     */
+    @Nonnull @NotEmpty public static final String MISSING_PKCE_CODE_CHALLENGE = "PKCECodeChallengeRequired";
+
+    /**
+     * ID of event returned if the PKCE code verifier transformation method is invalid.
+     */
+    @Nonnull @NotEmpty public static final String INVALID_PKCE_TRANSFORMATION_METHOD =
+            "PKCEVerifierTransformAlgorithmNotSupported";
+    
     /**
      * Constructor.
      */

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.