Package net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl

Class ValidateRequestObject

java.lang.Object

net.shibboleth.shared.component.AbstractInitializableComponent

org.opensaml.profile.action.AbstractProfileAction

org.opensaml.profile.action.AbstractConditionalProfileAction

net.shibboleth.idp.profile.AbstractProfileAction

net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCRequestAction<AuthorizationRequest>

net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.AbstractOAuthAuthorizationRequestAction

net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.AbstractOAuthAuthorizationResponseAction

net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.ValidateRequestObject

All Implemented Interfaces:

Component, DestructableComponent, InitializableComponent, ProfileAction, org.springframework.beans.factory.Aware, org.springframework.context.MessageSource, org.springframework.context.MessageSourceAware, org.springframework.webflow.execution.Action

public class ValidateRequestObject
extends AbstractOAuthAuthorizationResponseAction

Action validates request object in response context.

Field Summary

Fields

Modifier and Type	Field	Description
private org.slf4j.Logger	log	Class logger.
private boolean	parEndpointLogic	The flag to control whether to use the PAR-endpoint logic for the validation.
private ClaimsValidator	plainClaimsValidator	The claims validator to be applied for validating the plain/unsigned request object.
private JWT	requestObject	Request Object.
private ClaimsValidator	signedClaimsValidator	The claims validator to be applied for validating the signed request object.

Constructor Summary

Constructors

Constructor	Description
ValidateRequestObject()	Constructor.

Method Summary

Modifier and Type	Method	Description
protected void	doExecute(ProfileRequestContext profileRequestContext)
protected void	doInitialize()
protected boolean	doPreExecute(ProfileRequestContext profileRequestContext)
void	setParEndpointLogic(boolean flag)	Set the flag to control whether to use the PAR-endpoint logic for the validation.
void	setPlainClaimsValidator(ClaimsValidator validator)	Set the claims validator used for validating the plain/unsigned request object.
void	setSignedClaimsValidator(ClaimsValidator validator)	Set the claims validator used for validating the signed request object.

Methods inherited from class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.AbstractOAuthAuthorizationResponseAction

getMetadataContext, getOidcResponseContext

Methods inherited from class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.AbstractOAuthAuthorizationRequestAction

getAuthorizationRequest

Methods inherited from class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCRequestAction

getRequest

Methods inherited from class net.shibboleth.idp.profile.AbstractProfileAction

doExecute, execute, getBean, getBean, getMessage, getMessage, getMessage, getParameter, getParameter, getProfileContextLookupStrategy, getRequestContext, getResult, setMessageSource, setProfileContextLookupStrategy

Methods inherited from class org.opensaml.profile.action.AbstractConditionalProfileAction

getActivationCondition, setActivationCondition

Methods inherited from class org.opensaml.profile.action.AbstractProfileAction

doPostExecute, doPostExecute, ensureHttpServletRequest, ensureHttpServletResponse, execute, getHttpServletRequest, getHttpServletRequestSupplier, getHttpServletResponse, getHttpServletResponseSupplier, getLogPrefix, isPreExecuteCalled, setHttpServletRequestSupplier, setHttpServletResponseSupplier

Methods inherited from class net.shibboleth.shared.component.AbstractInitializableComponent

checkComponentActive, checkSetterPreconditions, destroy, doDestroy, ifDestroyedThrowDestroyedComponentException, ifInitializedThrowUnmodifiabledComponentException, ifNotInitializedThrowUninitializedComponentException, initialize, isDestroyed, isInitialized

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface net.shibboleth.shared.component.InitializableComponent

initialize, isInitialized

Field Details

log

@Nonnull
private org.slf4j.Logger log

Class logger.

requestObject

@Nullable
private JWT requestObject

Request Object.

signedClaimsValidator

@NonnullAfterInit
private ClaimsValidator signedClaimsValidator

The claims validator to be applied for validating the signed request object.

plainClaimsValidator

@NonnullAfterInit
private ClaimsValidator plainClaimsValidator

The claims validator to be applied for validating the plain/unsigned request object.

parEndpointLogic

private boolean parEndpointLogic

The flag to control whether to use the PAR-endpoint logic for the validation.

Constructor Details

ValidateRequestObject

public ValidateRequestObject()

Constructor.

Method Details

setSignedClaimsValidator

public void setSignedClaimsValidator(@Nonnull
 ClaimsValidator validator)

Set the claims validator used for validating the signed request object.

Parameters:

validator - What to set

setPlainClaimsValidator

public void setPlainClaimsValidator(@Nonnull
 ClaimsValidator validator)

Set the claims validator used for validating the plain/unsigned request object.

Parameters:

validator - What to set

setParEndpointLogic

public void setParEndpointLogic(boolean flag)

Set the flag to control whether to use the PAR-endpoint logic for the validation.

Parameters:

flag - What to set

doInitialize

protected void doInitialize()
                     throws ComponentInitializationException

Overrides:

doInitialize in class AbstractInitializableComponent

Throws:

ComponentInitializationException

doPreExecute

protected boolean doPreExecute(@Nonnull
 ProfileRequestContext profileRequestContext)

Overrides:

doPreExecute in class AbstractOAuthAuthorizationResponseAction

doExecute

protected void doExecute(@Nonnull
 ProfileRequestContext profileRequestContext)

Overrides:

doExecute in class AbstractProfileAction