Class DefaultRevokeConsentPredicate

java.lang.Object
net.shibboleth.shared.component.AbstractInitializableComponent
net.shibboleth.idp.plugin.oidc.op.profile.logic.DefaultRevokeConsentPredicate
All Implemented Interfaces:
Predicate<ProfileRequestContext>, Component, DestructableComponent, InitializableComponent

public class DefaultRevokeConsentPredicate extends AbstractInitializableComponent implements Predicate<ProfileRequestContext>
Default predicate to decide if the pre-existing consent should be revoked. By default the revocation is done if the scope offline_access was requested (and granted) or if prompt contained consent value.
Since:
4.1.0
  • Field Details

    • log

      @Nonnull private final org.slf4j.Logger log
      Class logger.
    • scopeLookupStrategy

      @Nonnull private Function<ProfileRequestContext,Scope> scopeLookupStrategy
      Strategy used to obtain the validated scope value.
    • promptLookupStrategy

      @NonnullAfterInit private Function<ProfileRequestContext,Prompt> promptLookupStrategy
      Strategy used to obtain the requested prompt value.
    • revokeWithOfflineAccessScopePredicate

      @Nonnull private Predicate<ProfileRequestContext> revokeWithOfflineAccessScopePredicate
      Predicate used to determine if consent should be revoked with offline_access scope.
    • revokeWithConsentPromptPredicate

      @Nonnull private Predicate<ProfileRequestContext> revokeWithConsentPromptPredicate
      Predicate used to determine if consent should be revoked with consent prompt.
  • Constructor Details

    • DefaultRevokeConsentPredicate

      public DefaultRevokeConsentPredicate()
      Constructor.
  • Method Details