Package net.shibboleth.idp.plugin.oidc.op.profile.logic
package net.shibboleth.idp.plugin.oidc.op.profile.logic
Functions and predicates supporting common oidc profile behavior.
-
ClassesClassDescriptionA predicate implementation that checks if attribute consent flag is enabled.A function that returns subject identifier from filtered claims.Default function for looking up the allowed scope.Validation strategy for the inbound message.Default lookup function for fetching the chain revocation lifetime.Default implementation for deserializing an incoming JWT refresh token into the refresh token claims set.Default implementation for serializing the refresh token claims set into a JWT refresh token.Default validation strategy for logout hints.A function returning a
CriteriaSetwhich contains the metadata policy document location asResourceLocationCriterion.A function that merges two maps of metadata policies according to the rules specified in the OIDC federation spec (draft 17), section 5.1.3.1:Default validation strategy for post logout redirection URIs.Default predicate to decide if the pre-existing consent should be revoked.Default lookup function for fetching the root token identifier from the given claims set.Function to decide on subject type.Default lookup function for fetching the token revocation lifetime from the given claims set.Default lookup function for fetching the allowed scope from the unregistered client policy.Default validator for the unregistered client policies.Deprecated, for removal: This API element is subject to removal in a future version.The response type validation is handled against the policy in the SWF actionActivation condition returning true if validated scope contains 'openid' scope.A predicate for matching if the OIDC metadata value with a configurable key is equal to a configurable value.A predicate returning true if validated scope contains 'offline_access' value.Activation condition returning true if pairwise subject is requested.Activation condition returning true if public subject is requested.Activation condition returning true if subject cannot be located from oidc response context.