[java-oidc-common] branch main updated (a1e3ff5 -> b652534)
Phil Smart
philip.smart at jisc.ac.uk
Wed Apr 19 14:01:00 UTC 2023
This is an automated email from the git hooks/post-receive script.
philsmart pushed a change to branch main
in repository java-oidc-common.
from a1e3ff5 JOIDC-144 - Improve token audience handling with JWT authentication
add 92136fc JCOMOIDC-66 - Review ProfileConfiguration interfaces and concrete classes
add b652534 Move credential factories to API
No new revisions were added by this update.
Summary of changes:
oidc-common-crypto-api/pom.xml | 6 +-
.../BasicClientSecretCredentialFactoryBean.java | 4 +-
.../credential}/BasicJWKCredentialFactoryBean.java | 3 +-
oidc-common-crypto-impl/pom.xml | 8 +-
.../impl/BasicJOSEObjectCredentialResolver.java | 1 +
.../impl/BaseJWTSignatureSecurityHandler.java | 11 +-
.../oidc/security/impl/AbstractHandlerTest.java | 32 +-
.../OIDCAuthenticationProfileConfiguration.java | 98 +++
...enticationRelyingPartyProfileConfiguration.java | 119 +++
.../config/OIDCAuthorizationConfiguration.java | 895 +--------------------
.../OIDCDynamicRegistrationConfiguration.java | 164 +---
...java => OIDCFlowAwareProfileConfiguration.java} | 26 +-
.../OIDCIDTokenProducingProfileConfiguration.java | 88 ++
.../profile/config/OIDCProfileConfiguration.java | 12 +-
.../OIDCProviderInformationConfiguration.java | 66 +-
.../config/OIDCPublishKeySetConfiguration.java | 30 +-
.../OIDCSSOProfileConfiguration.java} | 51 +-
.../config/OIDCSSOProviderConfiguration.java | 35 +
....java => OIDCSSORelyingPartyConfiguration.java} | 15 +-
.../profile/config/OIDCUserInfoConfiguration.java | 143 +---
.../config/logic/AllowPKCEPlainPredicate.java | 10 +-
.../AuthorizationCodeFlowEnabledPredicate.java | 9 +-
.../config/logic/EncodeConsentPredicate.java | 1 +
.../logic/EncryptRequestObjectPredicate.java | 6 +-
.../config/logic/EncryptionOptionalPredicate.java | 16 +-
.../EnforceRefreshTokenRotationPredicate.java | 1 +
.../profile/config/logic/ForcePKCEPredicate.java | 9 +-
.../config/logic/HybridFlowEnabledPredicate.java | 10 +-
.../config/logic/ImplicitFlowEnabledPredicate.java | 9 +-
...udeIssuerInAuthenticationResponsePredicate.java | 1 +
.../logic/RefreshTokensEnabledPredicate.java | 9 +-
.../config/logic/SignRequestObjectPredicate.java | 6 +-
...laimsSetManipulationStrategyLookupFunction.java | 11 +-
.../AccessTokenLifetimeLookupFunction.java | 12 +-
.../navigate/AccessTokenTypeLookupFunction.java | 12 +-
.../AcrClaimAlwaysEssentialLookupFunction.java | 5 +-
.../AlwaysIncludedAttributesLookupFunction.java | 9 +-
.../AudienceRestrictionsLookupFunction.java | 14 +-
...laimsSetManipulationStrategyLookupFunction.java | 11 +-
.../navigate/AuthzCodeLifetimeLookupFunction.java | 9 +-
.../navigate/ClaimsValidatorLookupFunction.java | 9 +-
...ClientInformationStringValueLookupFunction.java | 4 +-
.../DeniedUserInfoAttributesLookupFunction.java | 1 +
.../navigate/EncodedAttributesLookupFunction.java | 1 +
.../config/navigate/GrantTypesLookupFunction.java | 2 +
.../navigate/IDTokenLifetimeLookupFunction.java | 9 +-
.../IDTokenManipulationStrategyLookupFunction.java | 9 +-
.../IssuedClaimsValidatorLookupFunction.java | 9 +-
...laimsSetManipulationStrategyLookupFunction.java | 1 +
.../RefreshTokenLifetimeLookupFunction.java | 9 +-
.../RegistrationMetadataPolicyLookupFunction.java | 3 +-
.../RegistrationValidityPeriodLookupFunction.java | 1 +
.../navigate/RevocationLifetimeLookupFunction.java | 4 +-
.../navigate/RevocationMethodLookupFunction.java | 2 +
.../SecretExpirationPeriodLookupFunction.java | 1 +
.../TokenEndpointAuthMethodLookupFunction.java | 9 +-
.../oidc/profile/encoding/OIDCMessageEncoder.java | 4 +-
...h2AccessTokenProducingProfileConfiguration.java | 72 ++
...orizationCodeProducingProfileConfiguration.java | 62 ++
.../OAuth2AuthorizationProfileConfiguration.java | 93 +++
...entAuthenticableClientProfileConfiguration.java | 74 ++
...th2ClientAuthenticableProfileConfiguration.java | 59 ++
.../OAuth2FlowAwareProfileConfiguration.java | 58 ++
.../oauth2/config/OAuth2ProfileConfiguration.java | 10 +-
...RefreshTokenProducingProfileConfiguration.java} | 45 +-
.../config/OAuth2TokenAudienceConfiguration.java | 209 +----
.../oauth2/config/OAuth2TokenConfiguration.java | 167 +---
.../OAuth2TokenEncryptionProfileConfiguration.java | 26 +-
.../OAuth2TokenIntrospectionConfiguration.java | 25 +-
.../config/OAuth2TokenRevocationConfiguration.java | 117 +--
...OAuth2TokenValidatingProfileConfiguration.java} | 27 +-
oidc-common-profile-impl/pom.xml | 5 -
.../config/impl}/AbstractOIDCSSOConfiguration.java | 171 +---
.../DefaultOIDCAuthorizationConfiguration.java | 332 +++-----
...efaultOIDCDynamicRegistrationConfiguration.java | 51 +-
...efaultOIDCProviderInformationConfiguration.java | 21 +-
.../DefaultOIDCPublishKeySetConfiguration.java | 13 +-
.../impl/DefaultOIDCUserInfoConfiguration.java | 44 +-
.../encoding/impl/HTTPPostAuthnRequestEncoder.java | 6 +-
.../impl/HTTPRedirectAuthnRequestEncoder.java | 6 +-
...AuthenticationRequestMessageEncoderFactory.java | 4 +-
.../impl/PopulateJWTDecryptionParameters.java | 10 +-
.../impl/PopulateJWTEncryptionParameters.java | 8 +-
...pulateJWTSignatureSigningParametersHandler.java | 7 +-
...th2ClientAuthenticableProfileConfiguration.java | 52 +-
...bstractOAuth2FlowAwareProfileConfiguration.java | 41 +-
...AbstractOAuth2TokenValidatingConfiguration.java | 7 +-
.../DefaultOAuth2TokenAudienceConfiguration.java | 76 +-
.../impl/DefaultOAuth2TokenConfiguration.java | 46 +-
...faultOAuth2TokenIntrospectionConfiguration.java | 18 +-
.../DefaultOAuth2TokenRevocationConfiguration.java | 51 +-
.../impl}/OIDCCoreProtocolConfigurationTest.java | 11 +-
...enticationRequestMessageEncoderFactoryTest.java | 30 +-
.../FormOutboundKeySetResponseMessageTest.java | 53 +-
.../OAuth2TokenRevocationConfigurationTest.java | 13 +-
95 files changed, 1488 insertions(+), 2687 deletions(-)
rename {oidc-common-crypto-impl/src/main/java/net/shibboleth/oidc/security/credential/impl => oidc-common-crypto-api/src/main/java/net/shibboleth/oidc/security/credential}/BasicClientSecretCredentialFactoryBean.java (91%)
rename {oidc-common-crypto-impl/src/main/java/net/shibboleth/oidc/security/credential/impl => oidc-common-crypto-api/src/main/java/net/shibboleth/oidc/security/credential}/BasicJWKCredentialFactoryBean.java (97%)
create mode 100644 oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/config/OIDCAuthenticationProfileConfiguration.java
create mode 100644 oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/config/OIDCAuthenticationRelyingPartyProfileConfiguration.java
copy oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/config/{logic/AttributeConsentFlowEnabledPredicate.java => OIDCFlowAwareProfileConfiguration.java} (54%)
create mode 100644 oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/config/OIDCIDTokenProducingProfileConfiguration.java
copy oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/{oauth2/config/OAuth2TokenIntrospectionConfiguration.java => config/OIDCSSOProfileConfiguration.java} (53%)
create mode 100644 oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/config/OIDCSSOProviderConfiguration.java
copy oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/config/{OIDCProfileConfiguration.java => OIDCSSORelyingPartyConfiguration.java} (59%)
create mode 100644 oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/oauth2/config/OAuth2AccessTokenProducingProfileConfiguration.java
create mode 100644 oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/oauth2/config/OAuth2AuthorizationCodeProducingProfileConfiguration.java
create mode 100644 oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/oauth2/config/OAuth2AuthorizationProfileConfiguration.java
create mode 100644 oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/oauth2/config/OAuth2ClientAuthenticableClientProfileConfiguration.java
create mode 100644 oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/oauth2/config/OAuth2ClientAuthenticableProfileConfiguration.java
create mode 100644 oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/oauth2/config/OAuth2FlowAwareProfileConfiguration.java
copy oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/oauth2/config/{OAuth2TokenIntrospectionConfiguration.java => OAuth2RefreshTokenProducingProfileConfiguration.java} (54%)
copy oidc-common-crypto-api/src/main/java/net/shibboleth/oidc/security/credential/ExpiringJWKCredential.java => oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/oauth2/config/OAuth2TokenEncryptionProfileConfiguration.java (58%)
copy oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/{config/logic/AttributeConsentFlowEnabledPredicate.java => oauth2/config/OAuth2TokenValidatingProfileConfiguration.java} (54%)
rename {oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/config => oidc-common-profile-impl/src/main/java/net/shibboleth/oidc/profile/config/impl}/AbstractOIDCSSOConfiguration.java (79%)
copy oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/config/OIDCAuthorizationConfiguration.java => oidc-common-profile-impl/src/main/java/net/shibboleth/oidc/profile/config/impl/DefaultOIDCAuthorizationConfiguration.java (81%)
copy oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/config/OIDCDynamicRegistrationConfiguration.java => oidc-common-profile-impl/src/main/java/net/shibboleth/oidc/profile/config/impl/DefaultOIDCDynamicRegistrationConfiguration.java (81%)
copy oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/config/OIDCProviderInformationConfiguration.java => oidc-common-profile-impl/src/main/java/net/shibboleth/oidc/profile/config/impl/DefaultOIDCProviderInformationConfiguration.java (75%)
copy oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/config/OIDCPublishKeySetConfiguration.java => oidc-common-profile-impl/src/main/java/net/shibboleth/oidc/profile/config/impl/DefaultOIDCPublishKeySetConfiguration.java (74%)
copy oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/config/OIDCUserInfoConfiguration.java => oidc-common-profile-impl/src/main/java/net/shibboleth/oidc/profile/config/impl/DefaultOIDCUserInfoConfiguration.java (79%)
rename {oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/oauth2/config => oidc-common-profile-impl/src/main/java/net/shibboleth/oidc/profile/oauth2/config/impl}/AbstractOAuth2ClientAuthenticableProfileConfiguration.java (92%)
rename {oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/oauth2/config => oidc-common-profile-impl/src/main/java/net/shibboleth/oidc/profile/oauth2/config/impl}/AbstractOAuth2FlowAwareProfileConfiguration.java (86%)
rename {oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/oauth2/config => oidc-common-profile-impl/src/main/java/net/shibboleth/oidc/profile/oauth2/config/impl}/AbstractOAuth2TokenValidatingConfiguration.java (95%)
copy oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/oauth2/config/OAuth2TokenAudienceConfiguration.java => oidc-common-profile-impl/src/main/java/net/shibboleth/oidc/profile/oauth2/config/impl/DefaultOAuth2TokenAudienceConfiguration.java (76%)
copy oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/oauth2/config/OAuth2TokenConfiguration.java => oidc-common-profile-impl/src/main/java/net/shibboleth/oidc/profile/oauth2/config/impl/DefaultOAuth2TokenConfiguration.java (83%)
copy oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/oauth2/config/OAuth2TokenIntrospectionConfiguration.java => oidc-common-profile-impl/src/main/java/net/shibboleth/oidc/profile/oauth2/config/impl/DefaultOAuth2TokenIntrospectionConfiguration.java (63%)
copy oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/oauth2/config/OAuth2TokenRevocationConfiguration.java => oidc-common-profile-impl/src/main/java/net/shibboleth/oidc/profile/oauth2/config/impl/DefaultOAuth2TokenRevocationConfiguration.java (76%)
rename {oidc-common-profile-api/src/test/java/net/shibboleth/oidc/profile/config => oidc-common-profile-impl/src/test/java/net/shibboleth/oidc/profile/config/impl}/OIDCCoreProtocolConfigurationTest.java (92%)
rename {oidc-common-profile-api/src/test/java/net/shibboleth/oidc/profile/oauth2/config => oidc-common-profile-impl/src/test/java/net/shibboleth/oidc/profile/oauth2/config/impl}/OAuth2TokenRevocationConfigurationTest.java (72%)
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the commits
mailing list