Package net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl

Class StoreDPoPProofKeyThumbprint

java.lang.Object

net.shibboleth.shared.component.AbstractInitializableComponent

org.opensaml.profile.action.AbstractProfileAction

org.opensaml.profile.action.AbstractConditionalProfileAction

net.shibboleth.idp.profile.AbstractProfileAction

net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCRequestAction<AuthorizationRequest>

net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.AbstractOAuthAuthorizationRequestAction

net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.AbstractOAuthAuthorizationResponseAction

net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.StoreDPoPProofKeyThumbprint

All Implemented Interfaces:

Component, DestructableComponent, InitializableComponent, ProfileAction, Aware, MessageSource, MessageSourceAware, Action

public class StoreDPoPProofKeyThumbprint
extends AbstractOAuthAuthorizationResponseAction

Stores the dpop_jkt parameter from the incoming authorization request. It's optional by the spec, but it may be required via profile configuration settings.

Field Summary

Fields

Modifier and Type	Field	Description
private Function<ProfileRequestContext,String>	dpopProofThumbprintLookupStrategy	Strategy used to locate thumbprint of validated DPoP Proof JWT.
private Function<ProfileRequestContext,String>	jktLookupStrategy	Strategy used to locate the dpop_jkt value.
private String	jwkThumbprint	The JWK thumbprint.
private org.slf4j.Logger	log	Class logger.
private Predicate<ProfileRequestContext>	requireDpopJktCondition	Strategy used to determine whether to require dpop_jkt parameter.
private boolean	requireJkt	Whether dpop_jkt parameter is mandatory.

Constructor Summary

Constructors

Constructor	Description
StoreDPoPProofKeyThumbprint()	Constructor.

Method Summary

Modifier and Type	Method	Description
protected void	doExecute(ProfileRequestContext profileRequestContext)
protected void	doInitialize()
protected boolean	doPreExecute(ProfileRequestContext profileRequestContext)
void	setDpopJktLookupStrategy(Function<ProfileRequestContext,String> strategy)	Set the strategy used to locate the dpop_jkt value.
void	setDpopProofThumbprintLookupStrategy(Function<ProfileRequestContext,String> strategy)	Set the strategy used to locate the thumbprint of validated DPoP Proof JWT.
void	setRequireDpopJktCondition(Predicate<ProfileRequestContext> condition)	Set the condition used to determine whether to require dpop_jkt parameter.

Methods inherited from class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.AbstractOAuthAuthorizationResponseAction

getMetadataContext, getOidcResponseContext

Methods inherited from class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.AbstractOAuthAuthorizationRequestAction

getAuthorizationRequest

Methods inherited from class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCRequestAction

getRequest

Methods inherited from class net.shibboleth.idp.profile.AbstractProfileAction

doExecute, execute, getBean, getBean, getMessage, getMessage, getMessage, getParameter, getParameter, getProfileContextLookupStrategy, getRequestContext, getResult, setMessageSource, setProfileContextLookupStrategy

Methods inherited from class org.opensaml.profile.action.AbstractConditionalProfileAction

getActivationCondition, setActivationCondition

Methods inherited from class org.opensaml.profile.action.AbstractProfileAction

doPostExecute, doPostExecute, ensureHttpServletRequest, ensureHttpServletResponse, execute, getHttpServletRequest, getHttpServletRequestSupplier, getHttpServletResponse, getHttpServletResponseSupplier, getLogPrefix, isPreExecuteCalled, setHttpServletRequestSupplier, setHttpServletResponseSupplier

Methods inherited from class net.shibboleth.shared.component.AbstractInitializableComponent

checkComponentActive, checkSetterPreconditions, destroy, doDestroy, ifDestroyedThrowDestroyedComponentException, ifInitializedThrowUnmodifiabledComponentException, ifNotInitializedThrowUninitializedComponentException, initialize, isDestroyed, isInitialized

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface net.shibboleth.shared.component.InitializableComponent

initialize, isInitialized

Field Details

log

@Nonnull
private org.slf4j.Logger log

Class logger.

requireDpopJktCondition

@Nonnull
private Predicate<ProfileRequestContext> requireDpopJktCondition

Strategy used to determine whether to require dpop_jkt parameter.

jktLookupStrategy

@NonnullAfterInit
private Function<ProfileRequestContext,String> jktLookupStrategy

Strategy used to locate the dpop_jkt value.

dpopProofThumbprintLookupStrategy

@Nonnull
private Function<ProfileRequestContext,String> dpopProofThumbprintLookupStrategy

Strategy used to locate thumbprint of validated DPoP Proof JWT.

requireJkt

private boolean requireJkt

Whether dpop_jkt parameter is mandatory.

jwkThumbprint

@Nullable
private String jwkThumbprint

The JWK thumbprint.

Constructor Details

StoreDPoPProofKeyThumbprint

public StoreDPoPProofKeyThumbprint()

Constructor.

Method Details

setRequireDpopJktCondition

public void setRequireDpopJktCondition(@Nonnull
 Predicate<ProfileRequestContext> condition)

Set the condition used to determine whether to require dpop_jkt parameter.

Parameters:

condition - condition to apply

setDpopJktLookupStrategy

public void setDpopJktLookupStrategy(@Nonnull
 Function<ProfileRequestContext,String> strategy)

Set the strategy used to locate the dpop_jkt value.

Parameters:

strategy - lookup strategy

setDpopProofThumbprintLookupStrategy

public void setDpopProofThumbprintLookupStrategy(@Nonnull
 Function<ProfileRequestContext,String> strategy)

Set the strategy used to locate the thumbprint of validated DPoP Proof JWT.

Parameters:

strategy - lookup strategy

doInitialize

protected void doInitialize()
                     throws ComponentInitializationException

Overrides:

doInitialize in class AbstractInitializableComponent

Throws:

ComponentInitializationException

doPreExecute

protected boolean doPreExecute(@Nonnull
 ProfileRequestContext profileRequestContext)

Overrides:

doPreExecute in class AbstractOAuthAuthorizationResponseAction

doExecute

protected void doExecute(@Nonnull
 ProfileRequestContext profileRequestContext)

Overrides:

doExecute in class AbstractProfileAction