Package net.shibboleth.idp.plugin.oidc.op.authn.impl

Class OIDCClientInfoCredentialValidator

java.lang.Object

net.shibboleth.shared.component.AbstractInitializableComponent

net.shibboleth.shared.component.AbstractIdentifiedInitializableComponent

net.shibboleth.idp.authn.AbstractCredentialValidator

net.shibboleth.idp.authn.AbstractUsernamePasswordCredentialValidator

net.shibboleth.idp.plugin.oidc.op.authn.impl.OIDCClientInfoCredentialValidator

All Implemented Interfaces:

CredentialValidator, PrincipalSupportingComponent, Component, DestructableComponent, IdentifiableComponent, IdentifiedComponent, InitializableComponent

@ThreadSafeAfterInit
public class OIDCClientInfoCredentialValidator
extends AbstractUsernamePasswordCredentialValidator

A password validator that authenticates against OIDC client metadata (which may itself be emulated via SAML metadata).

Nested Class Summary

Nested classes/interfaces inherited from interface net.shibboleth.idp.authn.CredentialValidator

CredentialValidator.ErrorHandler, CredentialValidator.WarningHandler

Field Summary

Fields

Modifier and Type	Field	Description
private StringDigester	digester	Digester for SHA-1.
private final org.slf4j.Logger	log	Class logger.
private Function<ProfileRequestContext,OIDCMetadataContext>	oidcMetadataContextLookupStrategy	Strategy that will return OIDCMetadataContext.

Constructor Summary

Constructors

Constructor	Description
OIDCClientInfoCredentialValidator()	Constructor.

Method Summary

Modifier and Type	Method	Description
protected void	doInitialize()
protected Subject	doValidate(ProfileRequestContext profileRequestContext, AuthenticationContext authenticationContext, UsernamePasswordContext usernamePasswordContext, CredentialValidator.WarningHandler warningHandler, CredentialValidator.ErrorHandler errorHandler)
protected Subject	doValidate(ProfileRequestContext profileRequestContext, AuthenticationContext authenticationContext, CredentialValidator.WarningHandler warningHandler, CredentialValidator.ErrorHandler errorHandler)
void	setOidcMetadataContextLookupStrategy(Function<ProfileRequestContext,OIDCMetadataContext> strategy)	Set the strategy used to return the OIDCMetadataContext.

Methods inherited from class net.shibboleth.idp.authn.AbstractUsernamePasswordCredentialValidator

applyTransforms, populateSubject, savePasswordToCredentialSet, setLowercase, setMatchExpression, setSavePasswordToCredentialSet, setTransforms, setTrim, setUppercase, setUsernamePasswordContextLookupStrategy

Methods inherited from class net.shibboleth.idp.authn.AbstractCredentialValidator

getLogPrefix, getSupportedPrincipals, isAcceptable, populateSubject, setActivationCondition, setId, setSupportedPrincipals, validate

Methods inherited from class net.shibboleth.shared.component.AbstractIdentifiedInitializableComponent

ensureId, getId, ifDestroyedThrowDestroyedComponentException, ifInitializedThrowUnmodifiabledComponentException, ifNotInitializedThrowUninitializedComponentException

Methods inherited from class net.shibboleth.shared.component.AbstractInitializableComponent

checkComponentActive, checkSetterPreconditions, destroy, doDestroy, initialize, isDestroyed, isInitialized

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface net.shibboleth.shared.component.IdentifiedComponent

getId

Field Details

log

@Nonnull
private final org.slf4j.Logger log

Class logger.

oidcMetadataContextLookupStrategy

@Nonnull
private Function<ProfileRequestContext,OIDCMetadataContext> oidcMetadataContextLookupStrategy

Strategy that will return OIDCMetadataContext.

digester

@NonnullAfterInit
private StringDigester digester

Digester for SHA-1.

Constructor Details

OIDCClientInfoCredentialValidator

public OIDCClientInfoCredentialValidator()

Constructor.

Method Details

setOidcMetadataContextLookupStrategy

public void setOidcMetadataContextLookupStrategy(@Nonnull
 Function<ProfileRequestContext,OIDCMetadataContext> strategy)

Set the strategy used to return the OIDCMetadataContext.

Parameters:

strategy - The lookup strategy.

doInitialize

protected void doInitialize()
                     throws ComponentInitializationException

Overrides:

doInitialize in class AbstractIdentifiedInitializableComponent

Throws:

ComponentInitializationException

doValidate

protected Subject doValidate(@Nonnull
 ProfileRequestContext profileRequestContext,
 @Nonnull
 AuthenticationContext authenticationContext,
 @Nullable
 CredentialValidator.WarningHandler warningHandler,
 @Nullable
 CredentialValidator.ErrorHandler errorHandler)
                      throws Exception

Overrides:

doValidate in class AbstractUsernamePasswordCredentialValidator

Throws:

Exception

doValidate

@Nullable
protected Subject doValidate(@Nonnull
 ProfileRequestContext profileRequestContext,
 @Nonnull
 AuthenticationContext authenticationContext,
 @Nonnull
 UsernamePasswordContext usernamePasswordContext,
 @Nullable
 CredentialValidator.WarningHandler warningHandler,
 @Nullable
 CredentialValidator.ErrorHandler errorHandler)
                      throws Exception

Specified by:

doValidate in class AbstractUsernamePasswordCredentialValidator

Throws:

Exception