Package net.shibboleth.idp.plugin.oidc.op.profile.logic

Class DefaultEnforceSelfAudienceCondition

java.lang.Object

net.shibboleth.idp.plugin.oidc.op.profile.logic.DefaultEnforceSelfAudienceCondition

All Implemented Interfaces:

Predicate<ProfileRequestContext>

public class DefaultEnforceSelfAudienceCondition
extends Object
implements Predicate<ProfileRequestContext>

A predicate that returns true if all the following conditions are met:

• limitInitialAccessTokenToSelfPredicate returns true
• The inbound message is a TokenRequest
• The token request grant_type is authorization_code

Field Summary

Fields

Modifier and Type	Field	Description
private Predicate<ProfileRequestContext>	limitInitialAccessTokenToSelfPredicate	Whether the initial access token audience is solely to self (i.e.

Constructor Summary

Constructors

Constructor	Description
DefaultEnforceSelfAudienceCondition()	Constructor.
DefaultEnforceSelfAudienceCondition(Predicate<ProfileRequestContext> condition)	Constructor.

Method Summary

Modifier and Type	Method	Description
boolean	test(ProfileRequestContext profileRequestContext)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface java.util.function.Predicate

and, negate, or

Field Details

limitInitialAccessTokenToSelfPredicate

@Nonnull
private Predicate<ProfileRequestContext> limitInitialAccessTokenToSelfPredicate

Whether the initial access token audience is solely to self (i.e. UserInfo) use.

Constructor Details

DefaultEnforceSelfAudienceCondition

public DefaultEnforceSelfAudienceCondition()

Constructor.

DefaultEnforceSelfAudienceCondition

public DefaultEnforceSelfAudienceCondition(@Nonnull @ParameterName(name="limitInitialAccessTokenToSelfPredicate")
 Predicate<ProfileRequestContext> condition)

Constructor.

Parameters:

condition - whether the initial access token audience is solely to self (i.e. UserInfo) use

Method Details

test

public boolean test(@Nullable
 ProfileRequestContext profileRequestContext)

Specified by:

test in interface Predicate<ProfileRequestContext>