Package net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl

Class ValidatePushedAuthorizationClientIDMatch

java.lang.Object

net.shibboleth.shared.component.AbstractInitializableComponent

org.opensaml.profile.action.AbstractProfileAction

org.opensaml.profile.action.AbstractConditionalProfileAction

net.shibboleth.idp.profile.AbstractProfileAction

net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCRequestAction<AuthorizationRequest>

net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.AbstractOAuthAuthorizationRequestAction

net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.ValidatePushedAuthorizationClientIDMatch

All Implemented Interfaces:

Component, DestructableComponent, InitializableComponent, ProfileAction, Aware, MessageSource, MessageSourceAware, Action

public class ValidatePushedAuthorizationClientIDMatch
extends AbstractOAuthAuthorizationRequestAction

Validates the client ID in the incoming authorization request matches with the one used in endpoint authentication.

Field Summary

Fields

Modifier and Type	Field	Description
private Function<MessageContext,ClientID>	clientIDLookupStrategy	Strategy used to obtain the client id value used in endpoint authentication.
private org.slf4j.Logger	log	Class logger.

Constructor Summary

Constructors

Constructor	Description
ValidatePushedAuthorizationClientIDMatch()	Constructor.

Method Summary

Modifier and Type	Method	Description
protected void	doExecute(ProfileRequestContext profileRequestContext)
void	setClientIDLookupStrategy(Function<MessageContext,ClientID> strategy)	Set the strategy used to locate the client id value used in endpoint authentication.

Methods inherited from class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.AbstractOAuthAuthorizationRequestAction

doPreExecute, getAuthorizationRequest

Methods inherited from class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCRequestAction

getRequest

Methods inherited from class net.shibboleth.idp.profile.AbstractProfileAction

doExecute, execute, getBean, getBean, getMessage, getMessage, getMessage, getParameter, getParameter, getProfileContextLookupStrategy, getRequestContext, getResult, setMessageSource, setProfileContextLookupStrategy

Methods inherited from class org.opensaml.profile.action.AbstractConditionalProfileAction

getActivationCondition, setActivationCondition

Methods inherited from class org.opensaml.profile.action.AbstractProfileAction

doPostExecute, doPostExecute, ensureHttpServletRequest, ensureHttpServletResponse, execute, getHttpServletRequest, getHttpServletRequestSupplier, getHttpServletResponse, getHttpServletResponseSupplier, getLogPrefix, isPreExecuteCalled, setHttpServletRequestSupplier, setHttpServletResponseSupplier

Methods inherited from class net.shibboleth.shared.component.AbstractInitializableComponent

checkComponentActive, checkSetterPreconditions, destroy, doDestroy, doInitialize, ifDestroyedThrowDestroyedComponentException, ifInitializedThrowUnmodifiabledComponentException, ifNotInitializedThrowUninitializedComponentException, initialize, isDestroyed, isInitialized

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface net.shibboleth.shared.component.InitializableComponent

initialize, isInitialized

Field Details

log

@Nonnull
private org.slf4j.Logger log

Class logger.

clientIDLookupStrategy

@Nonnull
private Function<MessageContext,ClientID> clientIDLookupStrategy

Strategy used to obtain the client id value used in endpoint authentication.

Constructor Details

ValidatePushedAuthorizationClientIDMatch

public ValidatePushedAuthorizationClientIDMatch()

Constructor.

Method Details

setClientIDLookupStrategy

public void setClientIDLookupStrategy(@Nonnull
 Function<MessageContext,ClientID> strategy)

Set the strategy used to locate the client id value used in endpoint authentication.

Parameters:

strategy - lookup strategy

doExecute

protected void doExecute(@Nonnull
 ProfileRequestContext profileRequestContext)

Overrides:

doExecute in class AbstractProfileAction