Package net.shibboleth.idp.plugin.oidc.op.profile.impl

Class InitializeAuthenticationContext

java.lang.Object

net.shibboleth.shared.component.AbstractInitializableComponent

org.opensaml.profile.action.AbstractProfileAction

org.opensaml.profile.action.AbstractConditionalProfileAction

net.shibboleth.idp.profile.AbstractProfileAction

net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCRequestAction<com.nimbusds.openid.connect.sdk.AuthenticationRequest>

net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCAuthenticationRequestAction

net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeAuthenticationContext

All Implemented Interfaces:

Component, DestructableComponent, InitializableComponent, ProfileAction, Aware, MessageSource, MessageSourceAware, Action

public class InitializeAuthenticationContext
extends AbstractOIDCAuthenticationRequestAction

An action that creates an AuthenticationContext and attaches it to the current ProfileRequestContext.

As the incoming message is a OIDC AuthenticationRequest, the basic authentication policy (IsPassive, ForceAuthn) is interpreted from the request prompt parameter. If the incoming message has login_hint parameter the value of it is placed to hinted name.

Field Summary

Fields

Modifier and Type	Field	Description
private Predicate<ProfileRequestContext>	forceAuthnPredicate	Extracts forceAuthn property from profile config.
private final org.slf4j.Logger	log	Class logger.
private Function<ProfileRequestContext,String>	loginHintLookupStrategy	Strategy used to obtain the request login hint value.
private Function<ProfileRequestContext,Duration>	maxAgeLookupStrategy	Strategy used to obtain the request max_age value.
private Function<ProfileRequestContext,com.nimbusds.openid.connect.sdk.Prompt>	promptLookupStrategy	Strategy used to obtain the requested prompt value.

Constructor Summary

Constructors

Constructor	Description
InitializeAuthenticationContext()	Constructor.

Method Summary

Modifier and Type	Method	Description
protected void	doExecute(ProfileRequestContext profileRequestContext)
protected void	doInitialize()
void	setForceAuthnPredicate(Predicate<ProfileRequestContext> condition)	Set the predicate to apply to derive the message-independent forced authn default.
void	setLoginHintLookupStrategy(Function<ProfileRequestContext,String> strategy)	Set the strategy used to locate the request login hint.
void	setMaxAgeLookupStrategy(Function<ProfileRequestContext,Duration> strategy)	Set the strategy used to locate the request max age.
void	setPromptLookupStrategy(Function<ProfileRequestContext,com.nimbusds.openid.connect.sdk.Prompt> strategy)	Set the strategy used to locate the requested prompt.

Methods inherited from class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCAuthenticationRequestAction

getAuthenticationRequest

Methods inherited from class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCRequestAction

doPreExecute, getRequest

Methods inherited from class net.shibboleth.idp.profile.AbstractProfileAction

doExecute, execute, getBean, getBean, getMessage, getMessage, getMessage, getParameter, getParameter, getProfileContextLookupStrategy, getRequestContext, getResult, setMessageSource, setProfileContextLookupStrategy

Methods inherited from class org.opensaml.profile.action.AbstractConditionalProfileAction

getActivationCondition, setActivationCondition

Methods inherited from class org.opensaml.profile.action.AbstractProfileAction

doPostExecute, doPostExecute, ensureHttpServletRequest, ensureHttpServletResponse, execute, getHttpServletRequest, getHttpServletRequestSupplier, getHttpServletResponse, getHttpServletResponseSupplier, getLogPrefix, isPreExecuteCalled, setHttpServletRequestSupplier, setHttpServletResponseSupplier

Methods inherited from class net.shibboleth.shared.component.AbstractInitializableComponent

checkComponentActive, checkSetterPreconditions, destroy, doDestroy, ifDestroyedThrowDestroyedComponentException, ifInitializedThrowUnmodifiabledComponentException, ifNotInitializedThrowUninitializedComponentException, initialize, isDestroyed, isInitialized

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface net.shibboleth.shared.component.InitializableComponent

initialize, isInitialized

Field Details

log

@Nonnull
private final org.slf4j.Logger log

Class logger.

promptLookupStrategy

@NonnullAfterInit
private Function<ProfileRequestContext,com.nimbusds.openid.connect.sdk.Prompt> promptLookupStrategy

Strategy used to obtain the requested prompt value.

loginHintLookupStrategy

@NonnullAfterInit
private Function<ProfileRequestContext,String> loginHintLookupStrategy

Strategy used to obtain the request login hint value.

maxAgeLookupStrategy

@NonnullAfterInit
private Function<ProfileRequestContext,Duration> maxAgeLookupStrategy

Strategy used to obtain the request max_age value.

forceAuthnPredicate

@Nonnull
private Predicate<ProfileRequestContext> forceAuthnPredicate

Extracts forceAuthn property from profile config.

Constructor Details

InitializeAuthenticationContext

public InitializeAuthenticationContext()

Constructor.

Method Details

setPromptLookupStrategy

public void setPromptLookupStrategy(@Nonnull
 Function<ProfileRequestContext,com.nimbusds.openid.connect.sdk.Prompt> strategy)

Set the strategy used to locate the requested prompt.

Parameters:

strategy - lookup strategy

setLoginHintLookupStrategy

public void setLoginHintLookupStrategy(@Nonnull
 Function<ProfileRequestContext,String> strategy)

Set the strategy used to locate the request login hint.

Parameters:

strategy - lookup strategy

setMaxAgeLookupStrategy

public void setMaxAgeLookupStrategy(@Nonnull
 Function<ProfileRequestContext,Duration> strategy)

Set the strategy used to locate the request max age.

Parameters:

strategy - lookup strategy

setForceAuthnPredicate

public void setForceAuthnPredicate(@Nonnull
 Predicate<ProfileRequestContext> condition)

Set the predicate to apply to derive the message-independent forced authn default.

Parameters:

condition - condition to set

Since:

3.1.0

doInitialize

protected void doInitialize()
                     throws ComponentInitializationException

Overrides:

doInitialize in class AbstractInitializableComponent

Throws:

ComponentInitializationException

doExecute

protected void doExecute(@Nonnull
 ProfileRequestContext profileRequestContext)

Overrides:

doExecute in class AbstractProfileAction