Package net.shibboleth.idp.plugin.oidc.op.profile.logic

Class DefaultRevokeConsentPredicate

java.lang.Object

net.shibboleth.shared.component.AbstractInitializableComponent

net.shibboleth.idp.plugin.oidc.op.profile.logic.DefaultRevokeConsentPredicate

All Implemented Interfaces:

Predicate<ProfileRequestContext>, Component, DestructableComponent, InitializableComponent

public class DefaultRevokeConsentPredicate
extends AbstractInitializableComponent
implements Predicate<ProfileRequestContext>

Default predicate to decide if the pre-existing consent should be revoked. By default the revocation is done if the scope offline_access was requested (and granted) or if prompt contained consent value.

Since:

4.1.0

Field Summary

Fields

Modifier and Type	Field	Description
private final org.slf4j.Logger	log	Class logger.
private Function<ProfileRequestContext,com.nimbusds.openid.connect.sdk.Prompt>	promptLookupStrategy	Strategy used to obtain the requested prompt value.
private Predicate<ProfileRequestContext>	revokeWithConsentPromptPredicate	Predicate used to determine if consent should be revoked with consent prompt.
private Predicate<ProfileRequestContext>	revokeWithOfflineAccessScopePredicate	Predicate used to determine if consent should be revoked with offline_access scope.
private Function<ProfileRequestContext,com.nimbusds.oauth2.sdk.Scope>	scopeLookupStrategy	Strategy used to obtain the validated scope value.

Constructor Summary

Constructors

Constructor	Description
DefaultRevokeConsentPredicate()	Constructor.

Method Summary

Modifier and Type	Method	Description
protected void	doInitialize()
void	setPromptLookupStrategy(Function<ProfileRequestContext,com.nimbusds.openid.connect.sdk.Prompt> strategy)	Set the strategy used to locate the requested prompt.
void	setRevokeWithConsentPromptPredicate(Predicate<ProfileRequestContext> predicate)	Set the predicate used to determine if consent should be revoked with consent prompt.
void	setRevokeWithOfflineAccessScopePredicate(Predicate<ProfileRequestContext> predicate)	Set the predicate used to determine if consent should be revoked with offline_access scope.
void	setScopeLookupStrategy(Function<ProfileRequestContext,com.nimbusds.oauth2.sdk.Scope> strategy)	Set the strategy used to locate the validated scope.
boolean	test(ProfileRequestContext input)

Methods inherited from class net.shibboleth.shared.component.AbstractInitializableComponent

checkComponentActive, checkSetterPreconditions, destroy, doDestroy, ifDestroyedThrowDestroyedComponentException, ifInitializedThrowUnmodifiabledComponentException, ifNotInitializedThrowUninitializedComponentException, initialize, isDestroyed, isInitialized

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface java.util.function.Predicate

and, negate, or

Field Details

log

@Nonnull
private final org.slf4j.Logger log

Class logger.

scopeLookupStrategy

@Nonnull
private Function<ProfileRequestContext,com.nimbusds.oauth2.sdk.Scope> scopeLookupStrategy

Strategy used to obtain the validated scope value.

promptLookupStrategy

@NonnullAfterInit
private Function<ProfileRequestContext,com.nimbusds.openid.connect.sdk.Prompt> promptLookupStrategy

Strategy used to obtain the requested prompt value.

revokeWithOfflineAccessScopePredicate

@Nonnull
private Predicate<ProfileRequestContext> revokeWithOfflineAccessScopePredicate

Predicate used to determine if consent should be revoked with offline_access scope.

revokeWithConsentPromptPredicate

@Nonnull
private Predicate<ProfileRequestContext> revokeWithConsentPromptPredicate

Predicate used to determine if consent should be revoked with consent prompt.

Constructor Details

DefaultRevokeConsentPredicate

public DefaultRevokeConsentPredicate()

Constructor.

Method Details

setScopeLookupStrategy

public void setScopeLookupStrategy(@Nonnull
 Function<ProfileRequestContext,com.nimbusds.oauth2.sdk.Scope> strategy)

Set the strategy used to locate the validated scope.

Parameters:

strategy - What to set.

setPromptLookupStrategy

public void setPromptLookupStrategy(@Nonnull
 Function<ProfileRequestContext,com.nimbusds.openid.connect.sdk.Prompt> strategy)

Set the strategy used to locate the requested prompt.

Parameters:

strategy - What to set.

setRevokeWithOfflineAccessScopePredicate

public void setRevokeWithOfflineAccessScopePredicate(@Nonnull
 Predicate<ProfileRequestContext> predicate)

Set the predicate used to determine if consent should be revoked with offline_access scope.

Parameters:

predicate - What to set.

setRevokeWithConsentPromptPredicate

public void setRevokeWithConsentPromptPredicate(@Nonnull
 Predicate<ProfileRequestContext> predicate)

Set the predicate used to determine if consent should be revoked with consent prompt.

Parameters:

predicate - What to set.

doInitialize

protected void doInitialize()
                     throws ComponentInitializationException

Overrides:

doInitialize in class AbstractInitializableComponent

Throws:

ComponentInitializationException

test

public boolean test(@Nullable
 ProfileRequestContext input)

Specified by:

test in interface Predicate<ProfileRequestContext>