Package net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl

Class ValidateAccessToken

java.lang.Object

net.shibboleth.shared.component.AbstractInitializableComponent

org.opensaml.profile.action.AbstractProfileAction

org.opensaml.profile.action.AbstractConditionalProfileAction

net.shibboleth.idp.profile.AbstractProfileAction

net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCRequestAction<com.nimbusds.openid.connect.sdk.UserInfoRequest>

net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.AbstractOIDCUserInfoRequestAction

net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.AbstractOIDCUserInfoValidationResponseAction

net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.ValidateAccessToken

All Implemented Interfaces:

Component, DestructableComponent, InitializableComponent, ProfileAction, Aware, MessageSource, MessageSourceAware, Action

public class ValidateAccessToken
extends AbstractOIDCUserInfoValidationResponseAction

Action that validates the claims pulled from an access token as usable for access to the OP's UserInfo endpoint.

The parsed claims are pulled from OIDCAuthenticationResponseContext.getAuthorizationGrantClaimsSet().

Event:

EventIds.PROCEED_EVENT_ID, IdPEventIds.INVALID_PROFILE_CONFIG, OidcEventIds.INVALID_GRANT

Field Summary

Fields

Modifier and Type	Field	Description
private ClaimsValidator	claimsValidator	The claims validator to use.
private Function<ProfileRequestContext,ClaimsValidator>	claimsValidatorLookupStrategy	Lookup strategy for claims validator.
private Function<ProfileRequestContext,String>	dpopProofThumbprintLookupStrategy	Strategy used to locate thumbprint of validated DPoP Proof JWT.
private org.slf4j.Logger	log	Class logger.

Constructor Summary

Constructors

Constructor	Description
ValidateAccessToken()	Constructor.

Method Summary

Modifier and Type	Method	Description
protected void	doExecute(ProfileRequestContext profileRequestContext)
protected boolean	doPreExecute(ProfileRequestContext profileRequestContext)
void	setClaimsValidatorLookupStrategy(Function<ProfileRequestContext,ClaimsValidator> strategy)	Set the claims validator lookup strategy.
void	setDpopProofThumbprintLookupStrategy(Function<ProfileRequestContext,String> strategy)	Set the strategy used to locate the thumbprint of validated DPoP Proof JWT.

Methods inherited from class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.AbstractOIDCUserInfoValidationResponseAction

getOidcResponseContext

Methods inherited from class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.AbstractOIDCUserInfoRequestAction

getUserInfoRequest

Methods inherited from class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCRequestAction

getRequest

Methods inherited from class net.shibboleth.idp.profile.AbstractProfileAction

doExecute, execute, getBean, getBean, getMessage, getMessage, getMessage, getParameter, getParameter, getProfileContextLookupStrategy, getRequestContext, getResult, setMessageSource, setProfileContextLookupStrategy

Methods inherited from class org.opensaml.profile.action.AbstractConditionalProfileAction

getActivationCondition, setActivationCondition

Methods inherited from class org.opensaml.profile.action.AbstractProfileAction

doPostExecute, doPostExecute, ensureHttpServletRequest, ensureHttpServletResponse, execute, getHttpServletRequest, getHttpServletRequestSupplier, getHttpServletResponse, getHttpServletResponseSupplier, getLogPrefix, isPreExecuteCalled, setHttpServletRequestSupplier, setHttpServletResponseSupplier

Methods inherited from class net.shibboleth.shared.component.AbstractInitializableComponent

checkComponentActive, checkSetterPreconditions, destroy, doDestroy, doInitialize, ifDestroyedThrowDestroyedComponentException, ifInitializedThrowUnmodifiabledComponentException, ifNotInitializedThrowUninitializedComponentException, initialize, isDestroyed, isInitialized

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface net.shibboleth.shared.component.InitializableComponent

initialize, isInitialized

Field Details

log

@Nonnull
private org.slf4j.Logger log

Class logger.

claimsValidatorLookupStrategy

@Nonnull
private Function<ProfileRequestContext,ClaimsValidator> claimsValidatorLookupStrategy

Lookup strategy for claims validator.

dpopProofThumbprintLookupStrategy

@Nonnull
private Function<ProfileRequestContext,String> dpopProofThumbprintLookupStrategy

Strategy used to locate thumbprint of validated DPoP Proof JWT.

claimsValidator

@Nullable
private ClaimsValidator claimsValidator

The claims validator to use.

Constructor Details

ValidateAccessToken

public ValidateAccessToken()

Constructor.

Method Details

setClaimsValidatorLookupStrategy

public void setClaimsValidatorLookupStrategy(@Nonnull
 Function<ProfileRequestContext,ClaimsValidator> strategy)

Set the claims validator lookup strategy.

Parameters:

strategy - lookup strategy

setDpopProofThumbprintLookupStrategy

public void setDpopProofThumbprintLookupStrategy(@Nonnull
 Function<ProfileRequestContext,String> strategy)

Set the strategy used to locate the thumbprint of validated DPoP Proof JWT.

Parameters:

strategy - lookup strategy

Since:

4.2.0

doPreExecute

protected boolean doPreExecute(@Nonnull
 ProfileRequestContext profileRequestContext)

Overrides:

doPreExecute in class AbstractOIDCUserInfoValidationResponseAction

doExecute

protected void doExecute(@Nonnull
 ProfileRequestContext profileRequestContext)

Overrides:

doExecute in class AbstractProfileAction