Package net.shibboleth.idp.plugin.oidc.op.audit.impl

Class AuthenticationRequestClaimsAuditExtractor

java.lang.Object

net.shibboleth.shared.component.AbstractInitializableComponent

net.shibboleth.idp.plugin.oidc.op.messaging.context.navigate.AbstractAuthorizationRequestLookupFunction<T>

net.shibboleth.idp.plugin.oidc.op.messaging.context.navigate.AbstractAuthenticationRequestLookupFunction<String>

net.shibboleth.idp.plugin.oidc.op.audit.impl.AuthenticationRequestClaimsAuditExtractor

All Implemented Interfaces:

Function<ProfileRequestContext,String>, Component, DestructableComponent, InitializableComponent, ContextDataLookupFunction<ProfileRequestContext,String>

public class AuthenticationRequestClaimsAuditExtractor
extends AbstractAuthenticationRequestLookupFunction<String>
implements Function<ProfileRequestContext,String>

A function that resolves a claim value from the authentication request. If request object was involved and contains a value for the claim, it will be returned. Otherwise it's fetched from the authentication request parameters.

Field Summary

Fields

Modifier and Type	Field	Description
private final String	key	The claim whose value is to be extracted.
private org.slf4j.Logger	log	Class logger.

Constructor Summary

Constructors

Constructor	Description
AuthenticationRequestClaimsAuditExtractor(String claim)	Constructor.

Method Summary

Modifier and Type	Method	Description
protected String	doLookup(com.nimbusds.openid.connect.sdk.AuthenticationRequest request, com.nimbusds.oauth2.sdk.PushedAuthorizationRequest parRequest, com.nimbusds.jwt.JWT requestObject, boolean isRequestObjectFromPar)	Implemented to perform the actual lookup.

Methods inherited from class net.shibboleth.idp.plugin.oidc.op.messaging.context.navigate.AbstractAuthenticationRequestLookupFunction

doLookup

Methods inherited from class net.shibboleth.idp.plugin.oidc.op.messaging.context.navigate.AbstractAuthorizationRequestLookupFunction

apply, checkRequestObject, setUseOnlyRequestObjectPredicate

Methods inherited from class net.shibboleth.shared.component.AbstractInitializableComponent

checkComponentActive, checkSetterPreconditions, destroy, doDestroy, doInitialize, ifDestroyedThrowDestroyedComponentException, ifInitializedThrowUnmodifiabledComponentException, ifNotInitializedThrowUninitializedComponentException, initialize, isDestroyed, isInitialized

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface java.util.function.Function

andThen, apply, compose

Field Details

log

@Nonnull
private org.slf4j.Logger log

Class logger.

key

@Nonnull
@NotEmpty
private final String key

The claim whose value is to be extracted.

Constructor Details

AuthenticationRequestClaimsAuditExtractor

public AuthenticationRequestClaimsAuditExtractor(@Nonnull @NotEmpty
 String claim)

Constructor.

Parameters:

claim - The claim whose value is to be resolved from the id_token claims set.

Method Details

doLookup

@Nullable
protected String doLookup(@Nonnull
 com.nimbusds.openid.connect.sdk.AuthenticationRequest request,
 @Nullable
 com.nimbusds.oauth2.sdk.PushedAuthorizationRequest parRequest,
 @Nullable
 com.nimbusds.jwt.JWT requestObject,
 boolean isRequestObjectFromPar)

Implemented to perform the actual lookup.

Specified by:

doLookup in class AbstractAuthenticationRequestLookupFunction<String>

Parameters:

request - authorization request to perform the lookup from.

parRequest - pushed authorization request if authorization request was pushed.

requestObject - request object if it was part of the request.

isRequestObjectFromPar - flag to indicate that the request object is built by the PAR endpoint.

Returns:

lookup value.