Package net.shibboleth.idp.plugin.oidc.op.profile.impl

Class AddRequestObjectSecurityConfigurationToClientMetadata

java.lang.Object

net.shibboleth.shared.component.AbstractInitializableComponent

org.opensaml.profile.action.AbstractProfileAction

org.opensaml.profile.action.AbstractConditionalProfileAction

net.shibboleth.idp.profile.AbstractProfileAction

net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCClientMetadataPopulationAction

net.shibboleth.idp.plugin.oidc.op.profile.impl.AddRequestObjectSecurityConfigurationToClientMetadata

All Implemented Interfaces:

Component, DestructableComponent, InitializableComponent, ProfileAction, org.springframework.beans.factory.Aware, org.springframework.context.MessageSource, org.springframework.context.MessageSourceAware, org.springframework.webflow.execution.Action

public class AddRequestObjectSecurityConfigurationToClientMetadata
extends AbstractOIDCClientMetadataPopulationAction

Verifies and adds the request object configuration details (request_object_signing_alg, request_object_encryption_alg and request_object_encryption_enc) to the client metadata.

Field Summary

Fields

Modifier and Type	Field	Description
private boolean	allowSignatureNone	Whether signature algorithm none is allowed regardless of what list of Signature Validation Algs has.
private Function<ProfileRequestContext,List<String>>	dataEncryptionAlgorithmsLookupStrategy	Strategy to obtain list of supported data encryption algorithms.
private Function<ProfileRequestContext,List<String>>	keyTransportEncryptionAlgorithmsLookupStrategy	Strategy to obtain list of supported key transport encryption algorithms.
private final org.slf4j.Logger	log	Class logger.
private Function<ProfileRequestContext,List<String>>	signatureAlgorithmsLookupStrategy	Strategy to obtain list of supported signature algorithms.
private List<String>	supportedDecryptionAlgs	List of supported key transport algorithms obtained from the security configuration.
private List<String>	supportedDecryptionEncs	List of supported data decryption algorithms obtained from the security configuration.
private List<String>	supportedSignatureValidationAlgs	List of supported signature validation algorithms obtained from the security configuration.

Constructor Summary

Constructors

Constructor	Description
AddRequestObjectSecurityConfigurationToClientMetadata()	Constructor.

Method Summary

Modifier and Type	Method	Description
protected void	doExecute(ProfileRequestContext profileRequestContext)
protected boolean	doPreExecute(ProfileRequestContext profileRequestContext)
void	setAllowSignatureNone(boolean allow)	Set whether signature algorithm none is allowed regardless of what list of Signature Validation Algs has.
void	setDataEncryptionAlgorithmsLookupStrategy(Function<ProfileRequestContext,List<String>> strategy)	Set the strategy used to obtain list of supported signature algorithms.
void	setKeyTransportAlgorithmsLookupStrategy(Function<ProfileRequestContext,List<String>> strategy)	Set the strategy used to obtain list of supported signature algorithms.
void	setSignatureAlgorithmsLookupStrategy(Function<ProfileRequestContext,List<String>> strategy)	Set the strategy used to obtain list of supported signature algorithms.

Methods inherited from class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCClientMetadataPopulationAction

getInputMetadata, getOutputMetadata, setOidcInputMetadataLookupStrategy, setOidcOutputMetadataLookupStrategy

Methods inherited from class net.shibboleth.idp.profile.AbstractProfileAction

doExecute, execute, getBean, getBean, getMessage, getMessage, getMessage, getParameter, getParameter, getProfileContextLookupStrategy, getRequestContext, getResult, setMessageSource, setProfileContextLookupStrategy

Methods inherited from class org.opensaml.profile.action.AbstractConditionalProfileAction

getActivationCondition, setActivationCondition

Methods inherited from class org.opensaml.profile.action.AbstractProfileAction

doPostExecute, doPostExecute, ensureHttpServletRequest, ensureHttpServletResponse, execute, getHttpServletRequest, getHttpServletRequestSupplier, getHttpServletResponse, getHttpServletResponseSupplier, getLogPrefix, isPreExecuteCalled, setHttpServletRequestSupplier, setHttpServletResponseSupplier

Methods inherited from class net.shibboleth.shared.component.AbstractInitializableComponent

checkComponentActive, checkSetterPreconditions, destroy, doDestroy, doInitialize, ifDestroyedThrowDestroyedComponentException, ifInitializedThrowUnmodifiabledComponentException, ifNotInitializedThrowUninitializedComponentException, initialize, isDestroyed, isInitialized

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface net.shibboleth.shared.component.InitializableComponent

initialize, isInitialized

Field Details

log

@Nonnull
private final org.slf4j.Logger log

Class logger.

signatureAlgorithmsLookupStrategy

@Nonnull
private Function<ProfileRequestContext,List<String>> signatureAlgorithmsLookupStrategy

Strategy to obtain list of supported signature algorithms.

dataEncryptionAlgorithmsLookupStrategy

@Nonnull
private Function<ProfileRequestContext,List<String>> dataEncryptionAlgorithmsLookupStrategy

Strategy to obtain list of supported data encryption algorithms.

keyTransportEncryptionAlgorithmsLookupStrategy

@Nonnull
private Function<ProfileRequestContext,List<String>> keyTransportEncryptionAlgorithmsLookupStrategy

Strategy to obtain list of supported key transport encryption algorithms.

allowSignatureNone

private boolean allowSignatureNone

Whether signature algorithm none is allowed regardless of what list of Signature Validation Algs has.

supportedSignatureValidationAlgs

@Nullable
private List<String> supportedSignatureValidationAlgs

List of supported signature validation algorithms obtained from the security configuration.

supportedDecryptionEncs

@Nullable
private List<String> supportedDecryptionEncs

List of supported data decryption algorithms obtained from the security configuration.

supportedDecryptionAlgs

@Nullable
private List<String> supportedDecryptionAlgs

List of supported key transport algorithms obtained from the security configuration.

Constructor Details

AddRequestObjectSecurityConfigurationToClientMetadata

public AddRequestObjectSecurityConfigurationToClientMetadata()

Constructor.

Method Details

setAllowSignatureNone

public void setAllowSignatureNone(boolean allow)

Set whether signature algorithm none is allowed regardless of what list of Signature Validation Algs has.

Parameters:

allow - Whether signature algorithm none is allowed regardless of what list of Signature Validation Algs has

setSignatureAlgorithmsLookupStrategy

public void setSignatureAlgorithmsLookupStrategy(@Nonnull
 Function<ProfileRequestContext,List<String>> strategy)

Set the strategy used to obtain list of supported signature algorithms.

Parameters:

strategy - What to set.

setDataEncryptionAlgorithmsLookupStrategy

public void setDataEncryptionAlgorithmsLookupStrategy(@Nonnull
 Function<ProfileRequestContext,List<String>> strategy)

Set the strategy used to obtain list of supported signature algorithms.

Parameters:

strategy - What to set.

setKeyTransportAlgorithmsLookupStrategy

public void setKeyTransportAlgorithmsLookupStrategy(@Nonnull
 Function<ProfileRequestContext,List<String>> strategy)

Set the strategy used to obtain list of supported signature algorithms.

Parameters:

strategy - What to set.

doPreExecute

protected boolean doPreExecute(@Nonnull
 ProfileRequestContext profileRequestContext)

Overrides:

doPreExecute in class AbstractOIDCClientMetadataPopulationAction

doExecute

protected void doExecute(@Nonnull
 ProfileRequestContext profileRequestContext)

Overrides:

doExecute in class AbstractProfileAction