Package net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl
Profile action implementations related to OAuth2.
-
Class Summary Class Description AbstractOAuthAuthorizationRequestAction Abstract class for actions performing actions onAuthorizationRequestfound viaInOutOperationContext.getInboundMessageContext()andMessageContext.getMessage().AbstractOAuthAuthorizationResponseAction Abstract class for actions performing actions onOIDCAuthenticationResponseContextlocated underInOutOperationContext.getOutboundMessageContext().AbstractProcessTokenAction<T> Action that processes a token by validating it and populating the resultingJWTClaimsSetinto anOAuth2TokenMgmtResponseContextplaced beneath the outboundMessageContext.BuildAccessToken Action that creates an Access Token, and stores it to anAccessTokenContext.BuildIntrospectionErrorResponseFromEvent This action reads an event from the configuredEventContextlookup strategy, constructs an OAuth2 Token Introspection error response message and attaches it as the outbound message.BuildRevokeTokenErrorResponseFromEvent This action reads an event from the configuredEventContextlookup strategy, constructs an OAuth2 Token Revocation error response message and attaches it as the outbound message.FormOutboundIntrospectionResponseMessage Action that forms outbound token introspection success message.FormOutboundRevokeTokenResponseMessage Action that forms outbound token revocation success message.InitializeOutboundTokenMgmtResponseMessageContext Action that adds an outboundMessageContextand related contexts to theProfileRequestContext.ProcessTokenForIntrospection Action that processes a token for introspection.ProcessTokenForRevocation Action that processes a token for revocation.RevokeToken Action that revokes a single token or the full chain of tokens, depending on the result of the configured lookup strategy for the revocation method.SetAccessTokenToResponseContext Action that creates a Access Token, and sets it to work contextOIDCAuthenticationResponseContext.getAccessToken()located underInOutOperationContext.getOutboundMessageContext().SetAuthorizationCodeToResponseContext Action that creates a Authorization Code, and sets it to work contextOIDCAuthenticationResponseContext.getAuthorizationCode()located underInOutOperationContext.getOutboundMessageContext().SetRequestObjectToResponseContext Action that stored request object toOIDCAuthenticationResponseContext.ValidateAudience Action that validates requested resource/audience values against a computed set of "allowed" values and populates the resulting set into theOIDCAuthenticationResponseContextand aProxiedRequesterContext.ValidateAuthorizationRequestType An action that validates the incoming OAuth2 authorization request via configurable strategy.ValidateCodeChallenge Validates the presence of PKCE code challenge parameter from the incoming authentication request.ValidateRedirectURI Action that validates redirect uri is expected.ValidateRequestObject Action validates request object in response context.ValidateResponseType An action that validates the requested response_type is (1) registered to the requesting RP and (2) valid for the protocol used for request.ValidateScope Action that validates requested and previously granted scopes are also registered in client metadata and stores the resulting set in the response context.