Package net.shibboleth.idp.plugin.oidc.op.profile.context.navigate

Class LogoutRequestClientIDLookupFunction

java.lang.Object

net.shibboleth.idp.plugin.oidc.op.profile.context.navigate.LogoutRequestClientIDLookupFunction

All Implemented Interfaces:

Function<MessageContext,com.nimbusds.oauth2.sdk.id.ClientID>, ContextDataLookupFunction<MessageContext,com.nimbusds.oauth2.sdk.id.ClientID>

public class LogoutRequestClientIDLookupFunction
extends Object
implements ContextDataLookupFunction<MessageContext,com.nimbusds.oauth2.sdk.id.ClientID>

A function that returns client id of the OIDC logout request. This lookup locates client id from then request if available from the client_id parameter or in the audience of the ID token hint. If multiple audiences exist, the first one is assumed to be the client id. If information is not available, null is returned.

Since:

4.1.0

Field Summary

Fields

Modifier and Type	Field	Description
private final org.slf4j.Logger	log	Class logger.

Constructor Summary

Constructors

Constructor	Description
LogoutRequestClientIDLookupFunction()

Method Summary

Modifier and Type	Method	Description
com.nimbusds.oauth2.sdk.id.ClientID	apply(MessageContext input)
protected String	getClientIdFromJwt(com.nimbusds.jwt.SignedJWT jwt)	Gets the first audience value of the given SignedJWT.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface java.util.function.Function

andThen, compose

Field Details

log

@Nonnull
private final org.slf4j.Logger log

Class logger.

Constructor Details

LogoutRequestClientIDLookupFunction

public LogoutRequestClientIDLookupFunction()

Method Details

apply

@Nullable
public com.nimbusds.oauth2.sdk.id.ClientID apply(@Nullable
 MessageContext input)

Specified by:

apply in interface Function<MessageContext,com.nimbusds.oauth2.sdk.id.ClientID>

getClientIdFromJwt

@Nullable
protected String getClientIdFromJwt(com.nimbusds.jwt.SignedJWT jwt)

Gets the first audience value of the given SignedJWT.

Parameters:

jwt - the source

Returns:

the first item in the audience array, or null if none existed