Package net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl

package net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl

Profile action implementations related to OAuth2.

Classes

Class	Description
AbstractOAuthAuthorizationRequestAction	Abstract class for actions performing actions on AuthorizationRequest found via InOutOperationContext.getInboundMessageContext() and MessageContext.getMessage().
AbstractOAuthAuthorizationResponseAction	Abstract class for actions performing actions on OIDCAuthenticationResponseContext located under InOutOperationContext.getOutboundMessageContext().
AbstractProcessTokenAction<T>	Action that processes a token by validating it and populating the resulting JWTClaimsSet into an OAuth2TokenMgmtResponseContext placed beneath the outbound MessageContext.
BuildAccessToken	Action that creates an Access Token, and stores it to an AccessTokenContext.
BuildIntrospectionErrorResponseFromEvent	This action reads an event from the configured EventContext lookup strategy, constructs an OAuth2 Token Introspection error response message and attaches it as the outbound message.
BuildPushedAuthorizationErrorResponseFromEvent	This action reads an event from the configured EventContext lookup strategy, constructs an OAuth2 Token PAR error response message and attaches it as the outbound message.
BuildRevokeTokenErrorResponseFromEvent	This action reads an event from the configured EventContext lookup strategy, constructs an OAuth2 Token Revocation error response message and attaches it as the outbound message.
DeserializePushedRequest	Attempts to deserialize the possibly existing request_uri value from the authorization request via configurable list of pushed authorization deserializers.
FormOutboundIntrospectionResponseMessage	Action that forms outbound token introspection success message.
FormOutboundRevokeTokenResponseMessage	Action that forms outbound token revocation success message.
FormOutbounPushedAuthorizationResponseMessage	Action that forms outbound pushed authorization response message.
InitializeDPoPProofContext	Action that stores DPoP proof JWT to OAuth2DPoPProofContext.
InitializeOutboundTokenMgmtResponseMessageContext	Action that adds an outbound MessageContext and related contexts to the ProfileRequestContext.
ProcessTokenForIntrospection	Action that processes a token for introspection.
ProcessTokenForRevocation	Action that processes a token for revocation.
RevokeToken	Action that revokes a single token or the full chain of tokens, depending on the result of the configured lookup strategy for the revocation method.
SetAccessTokenToResponseContext	Action that creates a Access Token, and sets it to work context OIDCAuthenticationResponseContext.getAccessToken() located under InOutOperationContext.getOutboundMessageContext().
SetAuthorizationCodeToResponseContext	Action that creates a Authorization Code, and sets it to work context OIDCAuthenticationResponseContext.getAuthorizationCode() located under InOutOperationContext.getOutboundMessageContext().
SetRequestObjectToResponseContext	Action that stored request object to OIDCAuthenticationResponseContext.
StoreDPoPProofKeyThumbprint	Stores the dpop_jkt parameter from the incoming authorization request.
ValidateAudience	Action that validates requested resource/audience values against a computed set of "allowed" values and populates the resulting set into the OIDCAuthenticationResponseContext and a ProxiedRequesterContext.
ValidateAuthorizationRequestType	An action that validates the incoming OAuth2 authorization request via configurable strategy.
ValidateClientIDAgainstPolicy	Validates a client ID against unregistered client policy via configurable policy enforcer.
ValidateCodeChallenge	Validates the presence of PKCE code challenge parameter from the incoming authentication request.
ValidateDPoPProof	Action validates DPoP Proof JWT if already stored to the context.
ValidatePushedAuthorizationClientIDMatch	Validates the client ID in the incoming authorization request matches with the one used in endpoint authentication.
ValidateRedirectURI	Action that validates redirect uri is expected.
ValidateRequestObject	Action validates request object in response context.
ValidateResponseMode	An action that validates the requested response_mode is compliant with the profile configuration.
ValidateResponseType	An action that validates the requested response_type is (1) registered to the requesting RP (or accepted in the policy for unregistered clients) and (2) valid for the protocol used for request.
ValidateScope	Action that validates requested and previously granted scopes are also registered in client metadata and stores the resulting set in the response context.