Package net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl
package net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl
Profile action implementations related to OAuth2.
-
ClassesClassDescriptionAbstract class for actions performing actions on
AuthorizationRequestfound viaInOutOperationContext.getInboundMessageContext()andMessageContext.getMessage().Abstract class for actions performing actions onOIDCAuthenticationResponseContextlocated underInOutOperationContext.getOutboundMessageContext().Action that processes a token by validating it and populating the resultingJWTClaimsSetinto anOAuth2TokenMgmtResponseContextplaced beneath the outboundMessageContext.Action that creates an Access Token, and stores it to anAccessTokenContext.This action reads an event from the configuredEventContextlookup strategy, constructs an OAuth2 Token Introspection error response message and attaches it as the outbound message.This action reads an event from the configuredEventContextlookup strategy, constructs an OAuth2 Token PAR error response message and attaches it as the outbound message.This action reads an event from the configuredEventContextlookup strategy, constructs an OAuth2 Token Revocation error response message and attaches it as the outbound message.Action that forms outbound token introspection success message.Action that forms outbound token revocation success message.Action that forms outbound pushed authorization response message.Action that stores DPoP proof JWT toOAuth2DPoPProofContext.Action that adds an outboundMessageContextand related contexts to theProfileRequestContext.Action that processes a token for introspection.Action that processes a token for revocation.Action that revokes a single token or the full chain of tokens, depending on the result of the configured lookup strategy for the revocation method.Action that creates a Access Token, and sets it to work contextOIDCAuthenticationResponseContext.getAccessToken()located underInOutOperationContext.getOutboundMessageContext().Action that creates a Authorization Code, and sets it to work contextOIDCAuthenticationResponseContext.getAuthorizationCode()located underInOutOperationContext.getOutboundMessageContext().Action that stored request object toOIDCAuthenticationResponseContext.Stores the dpop_jkt parameter from the incoming authorization request.Action that validates requested resource/audience values against a computed set of "allowed" values and populates the resulting set into theOIDCAuthenticationResponseContextand aProxiedRequesterContext.An action that validates the incoming OAuth2 authorization request via configurable strategy.Validates a client ID against unregistered client policy via configurable policy enforcer.Validates the presence of PKCE code challenge parameter from the incoming authentication request.Action validates DPoP Proof JWT if already stored to the context.Validates the client ID in the incoming authorization request matches with the one used in endpoint authentication.Action that validates redirect uri is expected.Action validates request object in response context.An action that validates the requested response_mode is compliant with the profile configuration.An action that validates the requested response_type is (1) registered to the requesting RP (or accepted in the policy for unregistered clients) and (2) valid for the protocol used for request.Action that validates requested and previously granted scopes are also registered in client metadata and stores the resulting set in the response context.