Package net.shibboleth.idp.plugin.oidc.op.profile.impl
package net.shibboleth.idp.plugin.oidc.op.profile.impl
Profile action implementations related to OIDC.
-
ClassesClassDescriptionAbstractBuildErrorResponseFromEvent<T extends ErrorResponse>This action is extended by error response actions.Deprecated, for removal: This API element is subject to removal in a future version.Abstract class for actions performing actions on
AuthenticationRequestfound viaInOutOperationContext.getInboundMessageContext()andMessageContext.getMessage().Abstract class for actions performing actions onOIDCAuthenticationResponseContextlocated underInOutOperationContext.getOutboundMessageContext().Abstract action for populating metadata from theClientRegistrationRequestmessage to the response message.Abstract class for actions performing actions on a oidc request found viaInOutOperationContext.getInboundMessageContext()andMessageContext.getMessage().Abstract class for actions performing actions onOIDCAuthenticationResponseContextlocated underInOutOperationContext.getOutboundMessageContext().Abstract action to be extended by oidc response actions requiring signing parameters.Abstract class for actions performing actions onTokenRequestfound viaInOutOperationContext.getInboundMessageContext()andMessageContext.getMessage().Abstract class for actions performing actions onOIDCAuthenticationResponseContextlocated underInOutOperationContext.getOutboundMessageContext().Action that adds access token hash claim to aIDTokenClaimsSet.Action that adds acr claim to aIDTokenClaimsSet.Adds the application_type to theOIDCClientRegistrationResponseContext.Action that adds claims to aClaimsSet.Action that adds authorization code hash claim to aIDTokenClaimsSet.Action that adds auth_time claim to aIDTokenClaimsSet.Adds client name from the input metadata to the outputOIDCClientMetadata.Adds the contents of the contacts attribute from the input metadata to the outputOIDCClientMetadata.An action that adds the grant_type to the client metadata.Action that creates aIDTokenClaimsSetobject shell, and sets it to work contextOIDCAuthenticationResponseContextlocated underInOutOperationContext.getOutboundMessageContext().An action that adds the jwks or jwks_uri to the client metadata, if one of those were defined in the request.This action adds the logo_uri(s) to the client metadata.Adds the parameters related to OIDC logout to the outputOIDCClientMetadata.An action that adds the trusted metadata_statement chain (containing OP's signed key) to the metadata_statement claim in the response metadata.Action that adds nonce claim to aIDTokenClaimsSet.This action adds the policy_uri(s) to the client metadata.Adds the (mandatory) redirect_uris to the outputOIDCClientMetadata.Adds the remaining recognized claims from the input metadata to the outputOIDCClientMetadata.Verifies and adds the request object configuration details (request_object_signing_alg, request_object_encryption_alg and request_object_encryption_enc) to the client metadata.Adds the pre-registered request_uri values to the outputOIDCClientMetadata.An action that adds response_types to the OIDC client metadata.Adds theScopefrom the input metadata to the outputOIDCClientMetadata.Verifies and adds the security configuration details (*_response_alg and *_response_enc) to the client metadata.An action that adds the subject_type to the client metadata.Action that adds claims to aClaimsSet.An action that adds the token_endpoint_auth_method to the client metadata.This action adds the tos_uri(s) to the client metadata.This action reads an event from the configuredEventContextlookup strategy, constructs an OIDC authentication error response message and attaches it as the outbound message.An action that uses the information fromOIDCClientRegistrationResponseContextattached to the message context for creating a newClientInformationResponse.This action reads an event from the configuredEventContextlookup strategy, constructs an OIDC client registration error response message and attaches it as the outbound message.This action reads an event from the configuredEventContextlookup strategy, constructs an OIDC token error response message and attaches it as the outbound message.The action that verifies the redirect_uris from the request.Action that forms outbound message based on request and response context.This action builds a response for the OP configuration discovery request.Action that forms outbound message based on token request and response context.Creates the client ID for the registration.Creates a new client secret with theIdentifierGenerationStrategyattached to this action.An action that creates anAuthenticationContextand attaches it to the currentProfileRequestContext.Action that adds an outboundMessageContextand related OIDC contexts to theProfileRequestContextbased on the identity of a relying party accessed via a lookup strategy, by default an immediate child of the profile request context.Action that adds an outboundMessageContextand related OIDC context to theProfileRequestContext.Deprecated, for removal: This API element is subject to removal in a future version.Initializes theOIDCClientRegistrationMetadataPolicyContextand attaches it as a subcontext for the incomingMessageContext.Action that adds aRelyingPartyContextto the currentProfileRequestContexttree via a creation function.An action that creates anSubjectContextand attaches it to the currentProfileRequestContext.Action that adds aRelyingPartyContextto the currentProfileRequestContexttree via a creation function.An action that can be used for manipulating id_token claims via configurable strategy (bi-function).Handler for inbound OIDC protocol messages that attempts to locate OIDC metadata for a rp, and attaches it with aOIDCMetadataContextas a child of a pre-existing instance ofMessageContext.An action that creates anRequestedPrincipalContextorPreferredPrincipalContextand attaches it to the currentAuthenticationContext.Action that revokes consent if the configurable predicate returns true.Action that sets authentication context class reference to work contextOIDCAuthenticationResponseContextlocated underInOutOperationContext.getOutboundMessageContext().Action that sets authentication context class reference to work contextOIDCAuthenticationResponseContextlocated underInOutOperationContext.getOutboundMessageContext().Action that sets authentication instant to work contextOIDCAuthenticationResponseContextlocated underInOutOperationContext.getOutboundMessageContext().Action that locates consent from authorization code / access token.Action that checks for adds the currently existing attributes fromAttributeContextfor token delivery.Action that creates a Refresh Token, and sets it to work contextOIDCAuthenticationResponseContext.getRefreshToken()located underInOutOperationContext.getOutboundMessageContext().Action that sets requested claims to response context.Action that sets requested sub value to response context.This action reads an event from the configuredEventContextlookup strategy and sets the status code forHttpServletResponseaccording to the attached configuration.An action that setsAttributeResolutionContext.setAttributeRecipientGroupID(java.lang.String)to sector identifier if pairwise subject is requested.Action that locates session id using configurable lookup strategy.Action that locates subject using strategy.Action that locates any token delivery claims from authorization code / access token.Action that checks for any released attributes marked for token delivery.An action that stores theClientInformationfrom theOIDCClientRegistrationResponseContextto the associatedClientInformationManager.Action that validates an authorization grant.An action that validates the grant type is registered to the requesting RP.Action performs PKCE (https://oauth.net/2/pkce/) validation.Action that validates registration access token is a valid one.Validates the incoming dynamic client registration request against the metadata policy stored in theOIDCClientRegistrationMetadataPolicyContext.Action verifies that produced subject equals to requested subject if such exists.