Package net.shibboleth.idp.plugin.oidc.op.profile.impl

Class InitializeAuthenticationContext

java.lang.Object

net.shibboleth.shared.component.AbstractInitializableComponent

org.opensaml.profile.action.AbstractProfileAction

org.opensaml.profile.action.AbstractConditionalProfileAction

net.shibboleth.idp.profile.AbstractProfileAction

net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCRequestAction<com.nimbusds.openid.connect.sdk.AuthenticationRequest>

net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCAuthenticationRequestAction

net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeAuthenticationContext

All Implemented Interfaces:

Component, DestructableComponent, InitializableComponent, ProfileAction, Aware, MessageSource, MessageSourceAware, Action

public class InitializeAuthenticationContext
extends AbstractOIDCAuthenticationRequestAction

An action that creates an AuthenticationContext and attaches it to the current ProfileRequestContext.

As the incoming message is a OIDC AuthenticationRequest, the basic authentication policy (IsPassive, ForceAuthn) is interpreted from the request prompt parameter. If the incoming message has login_hint parameter the value of it is placed to hinted name.

Field Summary

Fields

Modifier and Type	Field	Description
private Predicate<ProfileRequestContext>	forceAuthnPredicate	Extracts forceAuthn property from profile config.
private final org.slf4j.Logger	log	Class logger.
private Function<ProfileRequestContext,String>	loginHintLookupStrategy	Strategy used to obtain the request login hint value.
private Function<ProfileRequestContext,Duration>	maxAgeLookupStrategy	Strategy used to obtain the request max_age value.
private Function<ProfileRequestContext,com.nimbusds.openid.connect.sdk.Prompt>	promptLookupStrategy	Strategy used to obtain the requested prompt value.

Constructor Summary

Constructors

Constructor	Description
InitializeAuthenticationContext()	Constructor.

Method Summary

Modifier and Type	Method	Description
protected void	doExecute(ProfileRequestContext profileRequestContext)
void	setForceAuthnPredicate(Predicate<ProfileRequestContext> condition)	Set the predicate to apply to derive the message-independent forced authn default.
void	setLoginHintLookupStrategy(Function<ProfileRequestContext,String> strategy)	Set the strategy used to locate the request login hint.
void	setMaxAgeLookupStrategy(Function<ProfileRequestContext,Duration> strategy)	Set the strategy used to locate the request max age.
void	setPromptLookupStrategy(Function<ProfileRequestContext,com.nimbusds.openid.connect.sdk.Prompt> strategy)	Set the strategy used to locate the requested prompt.

Methods inherited from class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCAuthenticationRequestAction

getAuthenticationRequest

Methods inherited from class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCRequestAction

doPreExecute, getRequest

Methods inherited from class net.shibboleth.idp.profile.AbstractProfileAction

doExecute, execute, getBean, getBean, getMessage, getMessage, getMessage, getParameter, getParameter, getProfileContextLookupStrategy, getRequestContext, getResult, setMessageSource, setProfileContextLookupStrategy

Methods inherited from class org.opensaml.profile.action.AbstractConditionalProfileAction

getActivationCondition, setActivationCondition

Methods inherited from class org.opensaml.profile.action.AbstractProfileAction

doPostExecute, doPostExecute, ensureHttpServletRequest, ensureHttpServletResponse, execute, getHttpServletRequest, getHttpServletRequestSupplier, getHttpServletResponse, getHttpServletResponseSupplier, getLogPrefix, isPreExecuteCalled, setHttpServletRequestSupplier, setHttpServletResponseSupplier

Methods inherited from class net.shibboleth.shared.component.AbstractInitializableComponent

checkComponentActive, checkSetterPreconditions, destroy, doDestroy, doInitialize, ifDestroyedThrowDestroyedComponentException, ifInitializedThrowUnmodifiabledComponentException, ifNotInitializedThrowUninitializedComponentException, initialize, isDestroyed, isInitialized

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface net.shibboleth.shared.component.InitializableComponent

initialize, isInitialized

Field Details

log

@Nonnull
private final org.slf4j.Logger log

Class logger.

promptLookupStrategy

@Nonnull
private Function<ProfileRequestContext,com.nimbusds.openid.connect.sdk.Prompt> promptLookupStrategy

Strategy used to obtain the requested prompt value.

loginHintLookupStrategy

@Nonnull
private Function<ProfileRequestContext,String> loginHintLookupStrategy

Strategy used to obtain the request login hint value.

maxAgeLookupStrategy

@Nonnull
private Function<ProfileRequestContext,Duration> maxAgeLookupStrategy

Strategy used to obtain the request max_age value.

forceAuthnPredicate

@Nonnull
private Predicate<ProfileRequestContext> forceAuthnPredicate

Extracts forceAuthn property from profile config.

Constructor Details

InitializeAuthenticationContext

public InitializeAuthenticationContext()

Constructor.

Method Details

setPromptLookupStrategy

public void setPromptLookupStrategy(@Nonnull
 Function<ProfileRequestContext,com.nimbusds.openid.connect.sdk.Prompt> strategy)

Set the strategy used to locate the requested prompt.

Parameters:

strategy - lookup strategy

setLoginHintLookupStrategy

public void setLoginHintLookupStrategy(@Nonnull
 Function<ProfileRequestContext,String> strategy)

Set the strategy used to locate the request login hint.

Parameters:

strategy - lookup strategy

setMaxAgeLookupStrategy

public void setMaxAgeLookupStrategy(@Nonnull
 Function<ProfileRequestContext,Duration> strategy)

Set the strategy used to locate the request max age.

Parameters:

strategy - lookup strategy

setForceAuthnPredicate

public void setForceAuthnPredicate(@Nonnull
 Predicate<ProfileRequestContext> condition)

Set the predicate to apply to derive the message-independent forced authn default.

Parameters:

condition - condition to set

Since:

3.1.0

doExecute

protected void doExecute(@Nonnull
 ProfileRequestContext profileRequestContext)

Overrides:

doExecute in class AbstractProfileAction