A B C D E F G H I L M N O P R S T U V W
All Classes All Packages
All Classes All Packages
All Classes All Packages
A
- AbstractDuoAuditExtractor<T> - Class in net.shibboleth.idp.plugin.authn.duo.audit
-
An abstract audit extractor function to extract values directly from the Duo context.
- AbstractDuoAuditExtractor() - Constructor for class net.shibboleth.idp.plugin.authn.duo.audit.AbstractDuoAuditExtractor
- AbstractDuoAuthenticationAction - Class in net.shibboleth.idp.plugin.authn.duo
-
A base class for Duo 2FA authentication related actions.
- AbstractDuoAuthenticationAction() - Constructor for class net.shibboleth.idp.plugin.authn.duo.AbstractDuoAuthenticationAction
-
Constructor.
- AbstractDuoOIDCClient - Class in net.shibboleth.idp.plugin.authn.duo
-
Abstract base class for
DuoOIDCClientimplementations. - AbstractDuoOIDCClient() - Constructor for class net.shibboleth.idp.plugin.authn.duo.AbstractDuoOIDCClient
-
Constructor.
- AbstractDuoTokenClaimsAuditExtractor<T> - Class in net.shibboleth.idp.plugin.authn.duo.audit
-
An extension of the
AbstractDuoAuditExtractorthat allows extraction of claims inside the Duo authentication token. - AbstractDuoTokenClaimsAuditExtractor() - Constructor for class net.shibboleth.idp.plugin.authn.duo.audit.AbstractDuoTokenClaimsAuditExtractor
- accept(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.duo.impl.ValidateDuoTokenAuthenticationResult.DuoOIDCCleanupHook
- accept(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.duo.impl.ValidateTokenClaims.DuoOIDAuthenticationContextCleanupHook
- accessToken - Variable in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.TokenResponse
-
The access token issued by the authorization server.
- accessToken - Variable in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.TokenResponse.Builder
-
The access token.
- allowedOrigins - Variable in class net.shibboleth.idp.plugin.authn.duo.DefaultDuoOIDCIntegration
-
A set of 'allowed' origins that can be used as the scheme, host, and port portion of the redirectURI.
- apiHost - Variable in class net.shibboleth.idp.plugin.authn.duo.DefaultDuoOIDCIntegration
-
API host.
- apiHost - Variable in class net.shibboleth.idp.plugin.authn.duo.SimpleDuoOIDCIntegration
-
API host.
- apply(HealthCheckResponse) - Method in class net.shibboleth.idp.plugin.authn.duo.sdk.impl.DuoSDKClientAdaptor.DefaultHealthCheckResponseConverter
- apply(Token, DuoOIDCIntegration) - Method in class net.shibboleth.idp.plugin.authn.duo.sdk.impl.DuoSDKClientAdaptor.DefaultTokenResponseConverter
- apply(HttpServletRequest, DynamicDuoOIDCIntegration) - Method in class net.shibboleth.idp.plugin.authn.duo.impl.DefaultRedirectURICreationStrategy
- apply(DuoOIDCIntegration) - Method in class net.shibboleth.idp.plugin.authn.duo.impl.DefaultDuoOIDCClientRegistry.CreateNewClientMappingFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.duo.audit.AbstractDuoAuditExtractor
- apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.duo.audit.AbstractDuoTokenClaimsAuditExtractor
- apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.duo.audit.impl.AttemptedAuthenticationFlowIdAuditExtractor
- apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.duo.audit.impl.FixedStringAuditExtractor
- apply(ProfileRequestContext, JWTClaimsSet) - Method in class net.shibboleth.idp.plugin.authn.duo.impl.DuoAudienceClaimLookupStrategy
- apply(ProfileRequestContext, JWTClaimsSet) - Method in class net.shibboleth.idp.plugin.authn.duo.impl.DuoIssuerClaimLookupStrategy
- apply(ProfileRequestContext, JWTClaimsSet) - Method in class net.shibboleth.idp.plugin.authn.duo.impl.DuoNonceClaimLookupStrategy
- apply(ProfileRequestContext, JWTClaimsSet) - Method in class net.shibboleth.idp.plugin.authn.duo.impl.DuoUsernameClaimLookupStrategy
- ATTEMPTED_AUTHN_FLOW_ID - Static variable in class net.shibboleth.idp.plugin.authn.duo.audit.AuditFields
-
The id of the currently attempted flow.
- AttemptedAuthenticationFlowIdAuditExtractor - Class in net.shibboleth.idp.plugin.authn.duo.audit.impl
-
An audit extractor to pull out the attempted authentication flow ID from the current authentication context.
- AttemptedAuthenticationFlowIdAuditExtractor() - Constructor for class net.shibboleth.idp.plugin.authn.duo.audit.impl.AttemptedAuthenticationFlowIdAuditExtractor
- AuditFields - Class in net.shibboleth.idp.plugin.authn.duo.audit
-
Constants to use for Duo audit logging fields stored in an
AuditContext. - AuditFields() - Constructor for class net.shibboleth.idp.plugin.authn.duo.audit.AuditFields
-
Constructor.
- authCode - Variable in class net.shibboleth.idp.plugin.authn.duo.context.DuoOIDCAuthenticationContext
-
The authorization code return from the Duo authorization request.
- authorizationCallback(HttpServletRequest, HttpServletResponse) - Method in class net.shibboleth.idp.plugin.authn.duo.impl.DuoOIDCAuthnController
-
The redirect_uri endpoint for accepting an authorization code and resuming the flow execution.
- authorizationRequest(HttpServletRequest, HttpServletResponse) - Method in class net.shibboleth.idp.plugin.authn.duo.impl.DuoOIDCAuthnController
-
Start the Duo ODIC authorization code flow.
- AUTHORIZE_PATH_SEGMENT - Static variable in class net.shibboleth.idp.plugin.authn.duo.DuoOIDCAuthAPI
-
The final part of the IdP URL path which is called to begin authorization.
- authorizeEndpoint - Variable in class net.shibboleth.idp.plugin.authn.duo.DefaultDuoOIDCIntegration
-
The URL path to the authorization endpoint.
- authorizeEndpoint - Variable in class net.shibboleth.idp.plugin.authn.duo.SimpleDuoOIDCIntegration
-
The URL path to the authorization endpoint.
- authToken - Variable in class net.shibboleth.idp.plugin.authn.duo.context.DuoOIDCAuthenticationContext
-
The JWT token received from Duo as a result of 2FA.
B
- blankState(DuoOIDCAuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.duo.impl.ValidateDuoResponseState
-
Set the request and response states to null so they can't be reused.
- build() - Method in class net.shibboleth.idp.plugin.authn.duo.model.DuoHealthCheck.Builder
- build() - Method in interface net.shibboleth.idp.plugin.authn.duo.model.DuoHealthCheck.IBuildStage
-
Build the health check response.
- build() - Method in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.TokenResponse.Builder
- build() - Method in interface net.shibboleth.idp.plugin.authn.duo.nimbus.impl.TokenResponse.IBuildStage
-
Do the build.
- buildAuthenticationResult(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.duo.impl.ValidateDuoTokenAuthenticationResult
- builder() - Static method in class net.shibboleth.idp.plugin.authn.duo.model.DuoHealthCheck
-
Creates builder to build
DuoHealthCheck. - builder() - Static method in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.TokenResponse
-
Creates builder to build
TokenResponse. - Builder() - Constructor for class net.shibboleth.idp.plugin.authn.duo.model.DuoHealthCheck.Builder
- Builder() - Constructor for class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.TokenResponse.Builder
- buildOrigin(URI) - Static method in class net.shibboleth.idp.plugin.authn.duo.URISupport
-
Builds the 'origin' (see RFC 6454) from given URI.
- buildURIIgnoreDefaultPorts(String, String, int, String) - Static method in class net.shibboleth.idp.plugin.authn.duo.URISupport
-
Build a
URIfrom the given parameters.
C
- caCerts - Variable in class net.shibboleth.idp.plugin.authn.duo.sdk.impl.DuoSDKClientFactory
-
List of CA Certificate pins.
- CALLBACK_PATH_SEGMENT - Static variable in class net.shibboleth.idp.plugin.authn.duo.DuoOIDCAuthAPI
-
The final part of the IdP URL path which is called after authorization.
- callbackServletPath - Variable in class net.shibboleth.idp.plugin.authn.duo.impl.DefaultRedirectURICreationStrategy
-
The path, excluding the context and servlet paths, to the Duo callback handler.
- claimSet - Variable in class net.shibboleth.idp.plugin.authn.duo.impl.ValidateTokenSignature
-
The parsed claimset.
- claimsSet - Variable in class net.shibboleth.idp.plugin.authn.duo.impl.ValidateDuoTokenAuthenticationResult
-
The parsed claimset.
- claimsSet - Variable in class net.shibboleth.idp.plugin.authn.duo.impl.ValidateTokenClaims
-
The parsed claimset.
- claimsValidator - Variable in class net.shibboleth.idp.plugin.authn.duo.impl.ValidateTokenClaims
-
The JWT claims validator used to verify the claimsset.
- cleanupHook - Variable in class net.shibboleth.idp.plugin.authn.duo.impl.ValidateTokenClaims
-
A cleanup hook to execute after either a successful or unsuccessful claims validation.
- client - Variable in class net.shibboleth.idp.plugin.authn.duo.context.DuoOIDCAuthenticationContext
-
The Duo OIDC client to use for the lifetime of this authentication request.
- client - Variable in class net.shibboleth.idp.plugin.authn.duo.sdk.impl.DuoSDKClientAdaptor
-
The wrapped Duo native client.
- CLIENT_ASSERTION_TYPE - Static variable in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.NimbusClient
-
The only supported client assertion type.
- CLIENT_ID - Static variable in class net.shibboleth.idp.plugin.authn.duo.audit.AuditFields
-
The Duo client ID.
- clientFactory - Variable in class net.shibboleth.idp.plugin.authn.duo.impl.DefaultDuoOIDCClientRegistry
-
Factory to produce Duo clients.
- clientId - Variable in class net.shibboleth.idp.plugin.authn.duo.AbstractDuoOIDCClient
-
The client instance UUID for identification.
- clientId - Variable in class net.shibboleth.idp.plugin.authn.duo.DefaultDuoOIDCIntegration
-
Integration key.
- clientId - Variable in class net.shibboleth.idp.plugin.authn.duo.SimpleDuoOIDCIntegration
-
Integration key.
- clientRegistry - Variable in class net.shibboleth.idp.plugin.authn.duo.impl.DefaultDuoOIDCClientRegistry
-
Registry of Duo client to Duo integration.
- clientRegistry - Variable in class net.shibboleth.idp.plugin.authn.duo.impl.PopulateDuoAuthenticationContext
-
The registry for locating the DuoClient for the established integration.
- clientRegistryMappingFunction - Variable in class net.shibboleth.idp.plugin.authn.duo.impl.DefaultDuoOIDCClientRegistry
-
Function for creating a DuoClient from a DuoIntegration.
- code - Variable in class net.shibboleth.idp.plugin.authn.duo.model.DuoHealthCheck.Builder
-
The code.
- code - Variable in class net.shibboleth.idp.plugin.authn.duo.model.DuoHealthCheck
-
The error response code.
- CODE_PARAMETER - Static variable in class net.shibboleth.idp.plugin.authn.duo.impl.DuoOIDCAuthnController
-
The name of the Http parameter that stores the authorisation code.
- computeAndStoreRedirectURIIfSupported(DuoOIDCIntegration, HttpServletRequest, DuoOIDCAuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.duo.impl.PopulateDuoAuthenticationContext
-
For
DynamicDuoOIDCIntegrations, apply the redirect_uri creation strategy to compute a redirect_uri to use. - contextToPrincipalMappingStrategy - Variable in class net.shibboleth.idp.plugin.authn.duo.impl.ValidateDuoTokenAuthenticationResult
-
Hook to map context information (often Duo factors in the Duo token) to principal collections.
- createAuthUrl(String, String, String, String) - Method in interface net.shibboleth.idp.plugin.authn.duo.DuoOIDCClient
-
Constructs an authorization redirection URL string with the query parameters required to initiate a Duo 2FA request.
- createAuthUrl(String, String, String, String) - Method in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.NimbusClient
- createAuthUrl(String, String, String, String) - Method in class net.shibboleth.idp.plugin.authn.duo.sdk.impl.DuoSDKClientAdaptor
-
Constructs an authorization redirection URL string with the query parameters required to initiate a Duo 2FA request.
- createInstance(DuoOIDCIntegration) - Method in interface net.shibboleth.idp.plugin.authn.duo.DuoOIDCClientFactory
-
Create an
DuoOIDCClientinstance from the supplied integration. - createInstance(DuoOIDCIntegration) - Method in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.NimbusClientFactory
- createInstance(DuoOIDCIntegration) - Method in class net.shibboleth.idp.plugin.authn.duo.sdk.impl.DuoSDKClientFactory
- createJWS(String, String, String) - Static method in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.NimbusClientSupport
-
Create a signed JWT using the audience and client ID supplied.
- createJWSRequestObject(String, String, String, String, String) - Static method in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.NimbusClientSupport
-
Create a signed JWT Request object using the given parameters suitable for the Duo token endpoint.
- CreateNewClientMappingFunction() - Constructor for class net.shibboleth.idp.plugin.authn.duo.impl.DefaultDuoOIDCClientRegistry.CreateNewClientMappingFunction
D
- DEFAULT_ISSUER_PATH - Static variable in class net.shibboleth.idp.plugin.authn.duo.impl.DuoIssuerClaimLookupStrategy
-
The default issuer path, specific to the v1 Duo flow.
- DefaultDuoOIDCClientRegistry - Class in net.shibboleth.idp.plugin.authn.duo.impl
-
The default Duo Client registry for mapping a
DuoOIDCIntegrationto either a new or existingDuoOIDCClient(assumed thread-safe) singleton instance. - DefaultDuoOIDCClientRegistry() - Constructor for class net.shibboleth.idp.plugin.authn.duo.impl.DefaultDuoOIDCClientRegistry
-
Constructor.
- DefaultDuoOIDCClientRegistry.CreateNewClientMappingFunction - Class in net.shibboleth.idp.plugin.authn.duo.impl
-
A function for creating a new Duo client from the configured client factory for the given Duo integration.
- DefaultDuoOIDCIntegration - Class in net.shibboleth.idp.plugin.authn.duo
-
Data wrapper for use with Duo OIDC integrations.
- DefaultDuoOIDCIntegration() - Constructor for class net.shibboleth.idp.plugin.authn.duo.DefaultDuoOIDCIntegration
-
Constructor.
- DefaultHealthCheckResponseConverter() - Constructor for class net.shibboleth.idp.plugin.authn.duo.sdk.impl.DuoSDKClientAdaptor.DefaultHealthCheckResponseConverter
- DefaultRedirectURICreationStrategy - Class in net.shibboleth.idp.plugin.authn.duo.impl
-
Constructive, pure, function that returns a redirect_uri from one of (ordered): A pre-registered redirect_uri on the Duo integration,
DynamicDuoOIDCIntegration.getRegisteredRedirectURI(). - DefaultRedirectURICreationStrategy(String) - Constructor for class net.shibboleth.idp.plugin.authn.duo.impl.DefaultRedirectURICreationStrategy
-
Constructor.
- DefaultTokenResponseConverter() - Constructor for class net.shibboleth.idp.plugin.authn.duo.sdk.impl.DuoSDKClientAdaptor.DefaultTokenResponseConverter
-
Constructor.
- DEVICE_ID - Static variable in class net.shibboleth.idp.plugin.authn.duo.audit.AuditFields
-
Deprecated, for removal: This API element is subject to removal in a future version.use AuthnAuditFields#DUO_DEVICE_ID
- DEVICE_NAME - Static variable in class net.shibboleth.idp.plugin.authn.duo.audit.AuditFields
-
Duo Device friendly name (auth_device:name).
- doExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.duo.AbstractDuoAuthenticationAction
-
Delegates to
AbstractDuoAuthenticationAction.doExecute(ProfileRequestContext, AuthenticationContext, DuoOIDCAuthenticationContext)to perform the actual authentication. - doExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.duo.impl.PopulateDuoAuthenticationContext
- doExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.duo.impl.ValidateDuoTokenAuthenticationResult
- doExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.duo.impl.ValidateExternalAuthenticationContext
- doExecute(ProfileRequestContext, AuthenticationContext, DuoOIDCAuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.duo.AbstractDuoAuthenticationAction
-
Performs this Duo authentication action using the supplied Duo context.
- doExecute(ProfileRequestContext, AuthenticationContext, DuoOIDCAuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.duo.impl.ExchangeCodeForDuoToken
- doExecute(ProfileRequestContext, AuthenticationContext, DuoOIDCAuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.duo.impl.HealthCheckDuoOIDCAuthAPI
- doExecute(ProfileRequestContext, AuthenticationContext, DuoOIDCAuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.duo.impl.ValidateDuoResponseState
-
Performs this Duo authentication action using the supplied Duo context.
- doExecute(ProfileRequestContext, AuthenticationContext, DuoOIDCAuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.duo.impl.ValidateTokenClaims
-
Performs this Duo authentication action using the supplied Duo context.
- doExecute(ProfileRequestContext, AuthenticationContext, DuoOIDCAuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.duo.impl.ValidateTokenSignature
-
Performs this Duo authentication action using the supplied Duo context.
- doInitialize() - Method in class net.shibboleth.idp.plugin.authn.duo.DefaultDuoOIDCIntegration
- doInitialize() - Method in class net.shibboleth.idp.plugin.authn.duo.impl.DefaultDuoOIDCClientRegistry
- doInitialize() - Method in class net.shibboleth.idp.plugin.authn.duo.impl.PopulateDuoAuthenticationContext
- doInitialize() - Method in class net.shibboleth.idp.plugin.authn.duo.impl.ValidateTokenClaims
- doInitialize() - Method in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.NimbusClientFactory
- doInitialize() - Method in class net.shibboleth.idp.plugin.authn.duo.SimpleDuoOIDCIntegration
- doLookup(JWTClaimsSet, DuoOIDCAuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.duo.audit.AbstractDuoTokenClaimsAuditExtractor
-
Implemented to perform the actual lookup.
- doLookup(JWTClaimsSet, DuoOIDCAuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.duo.audit.impl.DuoAuthnDeviceIdAuditExtractor
- doLookup(JWTClaimsSet, DuoOIDCAuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.duo.audit.impl.DuoAuthnDeviceNameAuditExtractor
- doLookup(JWTClaimsSet, DuoOIDCAuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.duo.audit.impl.DuoFactorAuditExtractor
- doLookup(JWTClaimsSet, DuoOIDCAuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.duo.audit.impl.DuoReasonAuditExtractor
- doLookup(JWTClaimsSet, DuoOIDCAuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.duo.audit.impl.DuoTransactionIdAuditExtractor
- doLookup(DuoOIDCAuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.duo.audit.AbstractDuoAuditExtractor
-
Implemented to perform the actual lookup.
- doLookup(DuoOIDCAuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.duo.audit.AbstractDuoTokenClaimsAuditExtractor
- doLookup(DuoOIDCAuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.duo.audit.impl.DuoClientIdAuditExtractor
- doLookup(DuoOIDCAuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.duo.audit.impl.DuoRedirectUriAuditExtractor
- doLookup(DuoOIDCAuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.duo.audit.impl.DuoRequestStateAuditExtractor
- doLookup(DuoOIDCAuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.duo.audit.impl.DuoResponseStateAuditExtractor
- doLookup(DuoOIDCAuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.duo.audit.impl.DuoUsernameAuditExtractor
- doPreExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.duo.AbstractDuoAuthenticationAction
- doPreExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.duo.impl.ValidateDuoTokenAuthenticationResult
- doPreExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.duo.impl.ValidateExternalAuthenticationContext
- doPreExecute(ProfileRequestContext, AuthenticationContext, DuoOIDCAuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.duo.AbstractDuoAuthenticationAction
-
Performs this authentication action's pre-execute step.
- doPreExecute(ProfileRequestContext, AuthenticationContext, DuoOIDCAuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.duo.impl.ValidateTokenClaims
-
Performs this authentication action's pre-execute step.
- doPreExecute(ProfileRequestContext, AuthenticationContext, DuoOIDCAuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.duo.impl.ValidateTokenSignature
- DUO_AUTH_CONTEXT_JSON_OBJECT - Static variable in class net.shibboleth.idp.plugin.authn.duo.DuoOIDCAuthAPI
-
The name of the JSON authentication context object.
- DUO_AUTH_DEVICE_JSON_OBJECT - Static variable in class net.shibboleth.idp.plugin.authn.duo.DuoOIDCAuthAPI
-
The name of the JSON authentication device object.
- DUO_AUTH_DEVICE_KEY_JSON_OBJECT - Static variable in class net.shibboleth.idp.plugin.authn.duo.DuoOIDCAuthAPI
-
The name of the JSON authenticating device key object.
- DUO_AUTH_DEVICE_NAME_JSON_OBJECT - Static variable in class net.shibboleth.idp.plugin.authn.duo.DuoOIDCAuthAPI
-
The name of the JSON authenticating device friendly name object.
- DUO_AUTH_FACTOR_JSON_OBJECT - Static variable in class net.shibboleth.idp.plugin.authn.duo.DuoOIDCAuthAPI
-
The name of the JSON authentication factor object.
- DUO_AUTH_RESULT_ALLOW - Static variable in class net.shibboleth.idp.plugin.authn.duo.DuoOIDCAuthAPI
-
Duo AuthAPI auth "allow" result value.
- DUO_AUTH_RESULT_DENY - Static variable in class net.shibboleth.idp.plugin.authn.duo.DuoOIDCAuthAPI
-
Duo AuthAPI auth "deny" result value.
- DUO_AUTH_RESULT_JSON_OBJECT - Static variable in class net.shibboleth.idp.plugin.authn.duo.DuoOIDCAuthAPI
-
The name of the JSON authentication result object.
- DUO_AUTH_RESULT_STATUS_JSON_OBJECT - Static variable in class net.shibboleth.idp.plugin.authn.duo.DuoOIDCAuthAPI
-
The name of the JSON result status property.
- DUO_AUTH_RESULT_STATUS_MSG_JSON_OBJECT - Static variable in class net.shibboleth.idp.plugin.authn.duo.DuoOIDCAuthAPI
-
The name of the JSON result status message property.
- DUO_AUTH_STATUS_BYPASS - Static variable in class net.shibboleth.idp.plugin.authn.duo.DuoOIDCAuthAPI
-
Duo AuthAPI auth "bypass" result value.
- DUO_AUTH_STATUS_LOCKED - Static variable in class net.shibboleth.idp.plugin.authn.duo.DuoOIDCAuthAPI
-
Duo AuthAPI auth "locked_out" result value.
- DUO_REASON_JSON_OBJECT - Static variable in class net.shibboleth.idp.plugin.authn.duo.DuoOIDCAuthAPI
-
The name of the JSON reason object.
- DUO_RESPONSE_STATUS_FAIL - Static variable in class net.shibboleth.idp.plugin.authn.duo.DuoOIDCAuthAPI
-
Duo response failure status.
- DUO_RESPONSE_STATUS_OK - Static variable in class net.shibboleth.idp.plugin.authn.duo.DuoOIDCAuthAPI
-
Duo response success status.
- DUO_TXID_JSON_OBJECT - Static variable in class net.shibboleth.idp.plugin.authn.duo.DuoOIDCAuthAPI
-
The name of the JSON transaction id object.
- DUO_USER - Static variable in class net.shibboleth.idp.plugin.authn.duo.audit.AuditFields
-
Duo username used for 2FA.
- DuoAudienceClaimLookupStrategy - Class in net.shibboleth.idp.plugin.authn.duo.impl
-
Looks up the audience from the clientID in the
DuoOIDCIntegrationinside the context. - DuoAudienceClaimLookupStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.duo.impl.DuoAudienceClaimLookupStrategy
- duoAuthContextCreationStrategy - Variable in class net.shibboleth.idp.plugin.authn.duo.impl.PopulateDuoAuthenticationContext
-
Strategy used to locate or create the
DuoOIDCAuthenticationContextto populate. - DuoAuthnDeviceIdAuditExtractor - Class in net.shibboleth.idp.plugin.authn.duo.audit.impl
-
An audit extractor to extract the Duo 2FA device ID (Key) from the auth_device inside the Duo token response.
- DuoAuthnDeviceIdAuditExtractor() - Constructor for class net.shibboleth.idp.plugin.authn.duo.audit.impl.DuoAuthnDeviceIdAuditExtractor
- DuoAuthnDeviceNameAuditExtractor - Class in net.shibboleth.idp.plugin.authn.duo.audit.impl
-
An audit extractor to extract the Duo 2FA device name from the auth_device in the Duo token response.
- DuoAuthnDeviceNameAuditExtractor() - Constructor for class net.shibboleth.idp.plugin.authn.duo.audit.impl.DuoAuthnDeviceNameAuditExtractor
- DuoClientException - Exception in net.shibboleth.idp.plugin.authn.duo
-
An exception to signal an error condition during execution of a Duo client.
- DuoClientException() - Constructor for exception net.shibboleth.idp.plugin.authn.duo.DuoClientException
-
Constructor.
- DuoClientException(String) - Constructor for exception net.shibboleth.idp.plugin.authn.duo.DuoClientException
-
Constructor.
- DuoClientException(String, Throwable) - Constructor for exception net.shibboleth.idp.plugin.authn.duo.DuoClientException
-
Constructor.
- DuoClientException(Throwable) - Constructor for exception net.shibboleth.idp.plugin.authn.duo.DuoClientException
-
Constructor.
- DuoClientIdAuditExtractor - Class in net.shibboleth.idp.plugin.authn.duo.audit.impl
-
An audit extractor to extract the Duo Client ID from the Duo integration.
- DuoClientIdAuditExtractor() - Constructor for class net.shibboleth.idp.plugin.authn.duo.audit.impl.DuoClientIdAuditExtractor
- DuoClientInitializationException - Exception in net.shibboleth.idp.plugin.authn.duo
-
Indicates an error during registry processing.
- DuoClientInitializationException() - Constructor for exception net.shibboleth.idp.plugin.authn.duo.DuoClientInitializationException
-
Constructor.
- DuoClientInitializationException(String) - Constructor for exception net.shibboleth.idp.plugin.authn.duo.DuoClientInitializationException
-
Constructor.
- DuoClientInitializationException(String, Throwable) - Constructor for exception net.shibboleth.idp.plugin.authn.duo.DuoClientInitializationException
-
Constructor.
- DuoClientInitializationException(Throwable) - Constructor for exception net.shibboleth.idp.plugin.authn.duo.DuoClientInitializationException
-
Constructor.
- duoContext - Variable in class net.shibboleth.idp.plugin.authn.duo.AbstractDuoAuthenticationAction
-
The Duo authentication Context.
- duoContext - Variable in class net.shibboleth.idp.plugin.authn.duo.impl.ValidateDuoTokenAuthenticationResult
-
Duo authentiction context.
- duoContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.duo.AbstractDuoAuthenticationAction
-
Lookup strategy to locate the Duo authentication context.
- duoContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.duo.impl.DuoOIDCAuthnController
-
Lookup strategy to locate the Duo authentication context.
- DuoException - Exception in net.shibboleth.idp.plugin.authn.duo
-
An exception to signal a general Duo error.
- DuoException() - Constructor for exception net.shibboleth.idp.plugin.authn.duo.DuoException
-
Constructor.
- DuoException(String) - Constructor for exception net.shibboleth.idp.plugin.authn.duo.DuoException
-
Constructor.
- DuoException(String, Throwable) - Constructor for exception net.shibboleth.idp.plugin.authn.duo.DuoException
-
Constructor.
- DuoException(Throwable) - Constructor for exception net.shibboleth.idp.plugin.authn.duo.DuoException
-
Constructor.
- DuoFactorAuditExtractor - Class in net.shibboleth.idp.plugin.authn.duo.audit.impl
-
An audit extractor to extract the Duo authentication factor from the Duo token response.
- DuoFactorAuditExtractor() - Constructor for class net.shibboleth.idp.plugin.authn.duo.audit.impl.DuoFactorAuditExtractor
- DuoHealthCheck - Class in net.shibboleth.idp.plugin.authn.duo.model
-
Represents a health check response from Duo's 2FA endpoint.
- DuoHealthCheck(DuoHealthCheck.Builder) - Constructor for class net.shibboleth.idp.plugin.authn.duo.model.DuoHealthCheck
-
Private constructor, can only be called by this builder.
- DuoHealthCheck.Builder - Class in net.shibboleth.idp.plugin.authn.duo.model
-
Builder to build
DuoHealthCheck. - DuoHealthCheck.IBuildStage - Interface in net.shibboleth.idp.plugin.authn.duo.model
-
Required fields builder.
- DuoHealthCheck.IStatusStage - Interface in net.shibboleth.idp.plugin.authn.duo.model
-
Status builder.
- DuoHealthCheckResponse - Class in net.shibboleth.idp.plugin.authn.duo.model
-
Represents part of the
DuoHealthCheckresponse. - DuoHealthCheckResponse(Integer) - Constructor for class net.shibboleth.idp.plugin.authn.duo.model.DuoHealthCheckResponse
-
Constructor.
- DuoHttpClientFactoryBean - Class in net.shibboleth.idp.plugin.authn.duo.nimbus.impl
-
Factory bean customization for the Duo plugin.
- DuoHttpClientFactoryBean() - Constructor for class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.DuoHttpClientFactoryBean
-
Constructor.
- duoIntegration - Variable in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.NimbusClient
-
The integration to help generate the JWT.
- duoIntegration - Variable in class net.shibboleth.idp.plugin.authn.duo.sdk.impl.DuoSDKClientAdaptor
-
Save off the integration to help generate the JWT.
- duoIntegrationLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.duo.impl.PopulateDuoAuthenticationContext
-
Lookup strategy for Duo integration.
- DuoIssuerClaimLookupStrategy - Class in net.shibboleth.idp.plugin.authn.duo.impl
-
Find the issuer from the
DuoOIDCIntegration. - DuoIssuerClaimLookupStrategy(String) - Constructor for class net.shibboleth.idp.plugin.authn.duo.impl.DuoIssuerClaimLookupStrategy
-
Constructor.
- DuoNonceClaimLookupStrategy - Class in net.shibboleth.idp.plugin.authn.duo.impl
-
Find the nonce from the
DuoAuthenticationContext. - DuoNonceClaimLookupStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.duo.impl.DuoNonceClaimLookupStrategy
- DuoOIDAuthenticationContextCleanupHook() - Constructor for class net.shibboleth.idp.plugin.authn.duo.impl.ValidateTokenClaims.DuoOIDAuthenticationContextCleanupHook
- DuoOIDCAuthAPI - Class in net.shibboleth.idp.plugin.authn.duo
-
Constants defined in the Duo OIDC Auth API.
- DuoOIDCAuthAPI() - Constructor for class net.shibboleth.idp.plugin.authn.duo.DuoOIDCAuthAPI
-
Constructor.
- DuoOIDCAuthenticationContext - Class in net.shibboleth.idp.plugin.authn.duo.context
-
Mutable Context that carries the Duo integration, request-response state, authorization code, and Duo authentication result token.
- DuoOIDCAuthenticationContext() - Constructor for class net.shibboleth.idp.plugin.authn.duo.context.DuoOIDCAuthenticationContext
-
Public no-arg constructor to allow auto-creation.
- DuoOIDCAuthnController - Class in net.shibboleth.idp.plugin.authn.duo.impl
-
MVC controller for managing Duo 2FA exchanges implemented as an
ExternalAuthenticationmechanism. - DuoOIDCAuthnController() - Constructor for class net.shibboleth.idp.plugin.authn.duo.impl.DuoOIDCAuthnController
-
Constructor.
- DuoOIDCCleanupHook() - Constructor for class net.shibboleth.idp.plugin.authn.duo.impl.ValidateDuoTokenAuthenticationResult.DuoOIDCCleanupHook
- DuoOIDCClient - Interface in net.shibboleth.idp.plugin.authn.duo
-
A client for handling Duo OIDC 2FA interactions.
- DuoOIDCClientCapabilities - Interface in net.shibboleth.idp.plugin.authn.duo
-
Exposes capabilities of a
DuoOIDCClient. - DuoOIDCClientFactory - Interface in net.shibboleth.idp.plugin.authn.duo
-
Abstract factory for creating singleton
DuoOIDCClientinstances. - DuoOIDCClientRegistry - Interface in net.shibboleth.idp.plugin.authn.duo
-
A registry of
DuoOIDCClients forDuoOIDCIntegrations. - DuoOIDCIntegration - Interface in net.shibboleth.idp.plugin.authn.duo
-
Interface to a particular Duo OIDC integration point.
- DuoOIDCNimbusModule - Class in net.shibboleth.idp.plugin.authn.duo.nimbus
-
PluginIdPModuleimplementation using only Nimbus OIDC/JWT handling. - DuoOIDCNimbusModule() - Constructor for class net.shibboleth.idp.plugin.authn.duo.nimbus.DuoOIDCNimbusModule
-
Constructor.
- DuoOIDCNimbusPlugin - Class in net.shibboleth.idp.plugin.authn.duo.nimbus
-
Details about the Duo OIDC 2FA plugin using only Nimbus OIDC/JWT handling.
- DuoOIDCNimbusPlugin() - Constructor for class net.shibboleth.idp.plugin.authn.duo.nimbus.DuoOIDCNimbusPlugin
-
Constructor.
- DuoOIDCWebSDKModule - Class in net.shibboleth.idp.plugin.authn.duo.sdk
-
PluginIdPModuleimplementation based on the Duo Web SDK v4. - DuoOIDCWebSDKModule() - Constructor for class net.shibboleth.idp.plugin.authn.duo.sdk.DuoOIDCWebSDKModule
-
Constructor.
- DuoOIDCWebSDKPlugin - Class in net.shibboleth.idp.plugin.authn.duo.sdk
-
Details about the Duo OIDC 2FA plugin based on the Duo Web SDK v4.
- DuoOIDCWebSDKPlugin() - Constructor for class net.shibboleth.idp.plugin.authn.duo.sdk.DuoOIDCWebSDKPlugin
-
Constructor.
- DuoReasonAuditExtractor - Class in net.shibboleth.idp.plugin.authn.duo.audit.impl
-
An audit extractor to extract the Duo authentication reason from the Duo token response.
- DuoReasonAuditExtractor() - Constructor for class net.shibboleth.idp.plugin.authn.duo.audit.impl.DuoReasonAuditExtractor
- DuoRedirectUriAuditExtractor - Class in net.shibboleth.idp.plugin.authn.duo.audit.impl
-
An audit extractor to extract the Duo redirect URI from the Duo context.
- DuoRedirectUriAuditExtractor() - Constructor for class net.shibboleth.idp.plugin.authn.duo.audit.impl.DuoRedirectUriAuditExtractor
- DuoRegistryException - Exception in net.shibboleth.idp.plugin.authn.duo
-
Indicates an error during registry processing.
- DuoRegistryException() - Constructor for exception net.shibboleth.idp.plugin.authn.duo.DuoRegistryException
-
Constructor.
- DuoRegistryException(String) - Constructor for exception net.shibboleth.idp.plugin.authn.duo.DuoRegistryException
-
Constructor.
- DuoRegistryException(String, Throwable) - Constructor for exception net.shibboleth.idp.plugin.authn.duo.DuoRegistryException
-
Constructor.
- DuoRegistryException(Throwable) - Constructor for exception net.shibboleth.idp.plugin.authn.duo.DuoRegistryException
-
Constructor.
- DuoRequestStateAuditExtractor - Class in net.shibboleth.idp.plugin.authn.duo.audit.impl
-
An audit extractor to extract the Duo request state OAuth 2.0 parameter from the Duo context.
- DuoRequestStateAuditExtractor() - Constructor for class net.shibboleth.idp.plugin.authn.duo.audit.impl.DuoRequestStateAuditExtractor
- DuoResponseStateAuditExtractor - Class in net.shibboleth.idp.plugin.authn.duo.audit.impl
-
An audit extractor to extract the Duo response state OAuth 2.0 parameter from the Duo context.
- DuoResponseStateAuditExtractor() - Constructor for class net.shibboleth.idp.plugin.authn.duo.audit.impl.DuoResponseStateAuditExtractor
- DuoSDKClientAdaptor - Class in net.shibboleth.idp.plugin.authn.duo.sdk.impl
-
An Object Adaptor class for bridging between the Duo SDK implementation and the internal
DuoOIDCClientinterface. - DuoSDKClientAdaptor(DuoOIDCIntegration, List<String>) - Constructor for class net.shibboleth.idp.plugin.authn.duo.sdk.impl.DuoSDKClientAdaptor
-
Package-private constructor.
- DuoSDKClientAdaptor.DefaultHealthCheckResponseConverter - Class in net.shibboleth.idp.plugin.authn.duo.sdk.impl
-
Default health check response converter.
- DuoSDKClientAdaptor.DefaultTokenResponseConverter - Class in net.shibboleth.idp.plugin.authn.duo.sdk.impl
-
Default Duo token converter.
- DuoSDKClientFactory - Class in net.shibboleth.idp.plugin.authn.duo.sdk.impl
-
Abstract factory implementation for the
DuoSDKClientAdaptor. - DuoSDKClientFactory() - Constructor for class net.shibboleth.idp.plugin.authn.duo.sdk.impl.DuoSDKClientFactory
- DuoSupport - Class in net.shibboleth.idp.plugin.authn.duo.impl
-
Helper methods for Duo 2FA.
- DuoSupport() - Constructor for class net.shibboleth.idp.plugin.authn.duo.impl.DuoSupport
-
Private Constructor.
- DuoTransactionIdAuditExtractor - Class in net.shibboleth.idp.plugin.authn.duo.audit.impl
-
An audit extractor to extract the Duo transaction ID from the Duo token response.
- DuoTransactionIdAuditExtractor() - Constructor for class net.shibboleth.idp.plugin.authn.duo.audit.impl.DuoTransactionIdAuditExtractor
- DuoUsernameAuditExtractor - Class in net.shibboleth.idp.plugin.authn.duo.audit.impl
-
An audit extractor to extract the Duo username from the Duo context.
- DuoUsernameAuditExtractor() - Constructor for class net.shibboleth.idp.plugin.authn.duo.audit.impl.DuoUsernameAuditExtractor
- DuoUsernameClaimLookupStrategy - Class in net.shibboleth.idp.plugin.authn.duo.impl
-
Find the authenticating principals username from the
DuoAuthenticationContext. - DuoUsernameClaimLookupStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.duo.impl.DuoUsernameClaimLookupStrategy
- DynamicDuoOIDCIntegration - Interface in net.shibboleth.idp.plugin.authn.duo
-
Specialised
DuoOIDCIntegrationthat allows redirectURIs to be pre-registered or computed dynamically against a list of allowed origins.
E
- equals(Object) - Method in class net.shibboleth.idp.plugin.authn.duo.DefaultDuoOIDCIntegration
- equals(Object) - Method in class net.shibboleth.idp.plugin.authn.duo.SimpleDuoOIDCIntegration
- exchangeAuthorizationCodeFor2FAResult(String, String, String) - Method in interface net.shibboleth.idp.plugin.authn.duo.DuoOIDCClient
-
Exchanges the authorizaton code for a signed Json Web Token (JWT) which contains information pertaining to the authentication.
- exchangeAuthorizationCodeFor2FAResult(String, String, String) - Method in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.NimbusClient
- exchangeAuthorizationCodeFor2FAResult(String, String, String) - Method in class net.shibboleth.idp.plugin.authn.duo.sdk.impl.DuoSDKClientAdaptor
-
Exchanges the authorizaton code for a signed Json Web Token (JWT) which contains information pertaining to the authentication.
- ExchangeCodeForDuoToken - Class in net.shibboleth.idp.plugin.authn.duo.impl
-
Action to exchange the authorization code in the Duo 2FA response for a Duo id_token that describes the result of 2FA.
- ExchangeCodeForDuoToken() - Constructor for class net.shibboleth.idp.plugin.authn.duo.impl.ExchangeCodeForDuoToken
- executeRequest(HttpUriRequest, TypeReference<T>) - Method in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.NimbusClient
-
Performs a call to a Duo OIDC endpoint.
- expiresIn - Variable in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.TokenResponse.Builder
-
The expiry.
- expiresIn - Variable in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.TokenResponse
-
The lifetime in seconds of the access token.
- extContext - Variable in class net.shibboleth.idp.plugin.authn.duo.impl.ValidateExternalAuthenticationContext
-
Context containing the result to examine.
- extractFactor() - Method in class net.shibboleth.idp.plugin.authn.duo.impl.ValidateDuoTokenAuthenticationResult
-
Extract the second-factor use for authentication.
- extractKeyFromState(String) - Static method in class net.shibboleth.idp.plugin.authn.duo.impl.DuoSupport
-
Extract the key component from the state.
- extractNonceFromState(String) - Static method in class net.shibboleth.idp.plugin.authn.duo.impl.DuoSupport
-
Extract the nonce component from the state.
F
- FACTOR - Static variable in class net.shibboleth.idp.plugin.authn.duo.audit.AuditFields
-
Deprecated, for removal: This API element is subject to removal in a future version.use AuthnAuditFields#DUO_FACTOR
- FixedStringAuditExtractor - Class in net.shibboleth.idp.plugin.authn.duo.audit.impl
-
A simple audit extractor that allows a fixed string to be logged.
- FixedStringAuditExtractor(String) - Constructor for class net.shibboleth.idp.plugin.authn.duo.audit.impl.FixedStringAuditExtractor
-
Constructor.
G
- generateJWTId(Integer) - Static method in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.NimbusClientSupport
-
Generate a cryptographically strong random JWT identifier.
- generateNonce(Integer) - Static method in class net.shibboleth.idp.plugin.authn.duo.impl.DuoSupport
-
Generates a random identifier to be used as a nonce.
- generateState(String, String) - Static method in class net.shibboleth.idp.plugin.authn.duo.impl.DuoSupport
-
Generate a state parameter from a nonce component and an execution key component.
- getAccessToken() - Method in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.TokenResponse
-
Get the access token.
- getAllowedOrigins() - Method in class net.shibboleth.idp.plugin.authn.duo.DefaultDuoOIDCIntegration
- getAllowedOrigins() - Method in interface net.shibboleth.idp.plugin.authn.duo.DynamicDuoOIDCIntegration
-
Get a list of URL origins that are allowed to appear in computed redirect URIs.
- getAPIHost() - Method in class net.shibboleth.idp.plugin.authn.duo.DefaultDuoOIDCIntegration
- getAPIHost() - Method in interface net.shibboleth.idp.plugin.authn.duo.DuoOIDCIntegration
-
Get the name of the API host to contact.
- getAPIHost() - Method in class net.shibboleth.idp.plugin.authn.duo.SimpleDuoOIDCIntegration
- getAuthorizationCode() - Method in class net.shibboleth.idp.plugin.authn.duo.context.DuoOIDCAuthenticationContext
-
Get the authorization code.
- getAuthorizeEndpoint() - Method in class net.shibboleth.idp.plugin.authn.duo.DefaultDuoOIDCIntegration
- getAuthorizeEndpoint() - Method in interface net.shibboleth.idp.plugin.authn.duo.DuoOIDCIntegration
-
Get the path of the authorization endpoint.
- getAuthorizeEndpoint() - Method in class net.shibboleth.idp.plugin.authn.duo.SimpleDuoOIDCIntegration
- getAuthToken() - Method in class net.shibboleth.idp.plugin.authn.duo.context.DuoOIDCAuthenticationContext
-
Get the Duo authentication token.
- getCaCerts() - Method in class net.shibboleth.idp.plugin.authn.duo.sdk.impl.DuoSDKClientFactory
-
Get the caCerts, guarded by this objects monitor.
- getCapabilities() - Method in class net.shibboleth.idp.plugin.authn.duo.AbstractDuoOIDCClient
- getCapabilities() - Method in interface net.shibboleth.idp.plugin.authn.duo.DuoOIDCClient
-
Returns the capabilities of the underlying client.
- getClient() - Method in class net.shibboleth.idp.plugin.authn.duo.context.DuoOIDCAuthenticationContext
-
Get the client used to communicate with the Duo OIDC API.
- getClientFactory() - Method in class net.shibboleth.idp.plugin.authn.duo.impl.DefaultDuoOIDCClientRegistry
-
Internally synchronized method for obtaining the 'current' client factory.
- getClientId() - Method in class net.shibboleth.idp.plugin.authn.duo.AbstractDuoOIDCClient
- getClientId() - Method in class net.shibboleth.idp.plugin.authn.duo.DefaultDuoOIDCIntegration
- getClientId() - Method in interface net.shibboleth.idp.plugin.authn.duo.DuoOIDCClient
-
Get an identifier for this client e.g.
- getClientId() - Method in interface net.shibboleth.idp.plugin.authn.duo.DuoOIDCIntegration
-
Get the clientId key.
- getClientId() - Method in class net.shibboleth.idp.plugin.authn.duo.SimpleDuoOIDCIntegration
- getClientOrCreate(DuoOIDCIntegration) - Method in interface net.shibboleth.idp.plugin.authn.duo.DuoOIDCClientRegistry
-
Retrieve an existing, or create a new, Duo client for the given Duo integration.
- getClientOrCreate(DuoOIDCIntegration) - Method in class net.shibboleth.idp.plugin.authn.duo.impl.DefaultDuoOIDCClientRegistry
- getCode() - Method in class net.shibboleth.idp.plugin.authn.duo.model.DuoHealthCheck
-
Get the response code.
- getContextToPrincipalMappingStrategy() - Method in class net.shibboleth.idp.plugin.authn.duo.impl.ValidateDuoTokenAuthenticationResult
-
Get the context to principal mapping strategy for mapping context information into principal collections e.g.
- getDuoContextLookupStrategy() - Method in class net.shibboleth.idp.plugin.authn.duo.impl.DuoOIDCAuthnController
-
Internally synchronized method for accessing the Duo context lookup strategy.
- getExpiresIn() - Method in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.TokenResponse
-
Get how long the access token is valid for in seconds.
- getHealthCheckEndpoint() - Method in class net.shibboleth.idp.plugin.authn.duo.DefaultDuoOIDCIntegration
- getHealthCheckEndpoint() - Method in interface net.shibboleth.idp.plugin.authn.duo.DuoOIDCIntegration
-
Get the path of the health check endpoint.
- getHealthCheckEndpoint() - Method in class net.shibboleth.idp.plugin.authn.duo.SimpleDuoOIDCIntegration
- getHttpClient() - Method in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.NimbusClientFactory
-
Internally synchronized method for returning the HttpClient.
- getHttpClientSecurityParameters() - Method in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.NimbusClientFactory
-
Internally synchronized method for returning the http client security parameters.
- getIdToken() - Method in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.TokenResponse
-
Get the ID token.
- getIntegration() - Method in class net.shibboleth.idp.plugin.authn.duo.context.DuoOIDCAuthenticationContext
-
Get the Duo integration.
- getMessage() - Method in class net.shibboleth.idp.plugin.authn.duo.model.DuoHealthCheck
-
Get the response message.
- getMessageDetail() - Method in class net.shibboleth.idp.plugin.authn.duo.model.DuoHealthCheck
-
Get a detailed response message.
- getNonce() - Method in class net.shibboleth.idp.plugin.authn.duo.context.DuoOIDCAuthenticationContext
-
Get the nonce.
- getObjectMapper() - Method in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.NimbusClientFactory
-
Internally synchronized method for returning the object mapper.
- getRedirectURI() - Method in class net.shibboleth.idp.plugin.authn.duo.DefaultDuoOIDCIntegration
- getRedirectURI() - Method in interface net.shibboleth.idp.plugin.authn.duo.DuoOIDCIntegration
-
Get the runtime redirectURI to direct the client to after authorisation.
- getRedirectURI() - Method in class net.shibboleth.idp.plugin.authn.duo.SimpleDuoOIDCIntegration
- getRedirectURIOverride() - Method in class net.shibboleth.idp.plugin.authn.duo.context.DuoOIDCAuthenticationContext
-
Get the override redirect URI.
- getRefreshToken() - Method in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.TokenResponse
-
Get the refresh token.
- getRegisteredRedirectURI() - Method in class net.shibboleth.idp.plugin.authn.duo.DefaultDuoOIDCIntegration
- getRegisteredRedirectURI() - Method in interface net.shibboleth.idp.plugin.authn.duo.DynamicDuoOIDCIntegration
-
Get the static pre-registered redirect_uri.
- getRequestState() - Method in class net.shibboleth.idp.plugin.authn.duo.context.DuoOIDCAuthenticationContext
-
Get the request state.
- getResponse() - Method in class net.shibboleth.idp.plugin.authn.duo.model.DuoHealthCheck
-
Get the response object.
- getResponseState() - Method in class net.shibboleth.idp.plugin.authn.duo.context.DuoOIDCAuthenticationContext
-
Get the response state.
- getScope() - Method in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.TokenResponse
-
Get the requested scope.
- getSecretKey() - Method in class net.shibboleth.idp.plugin.authn.duo.DefaultDuoOIDCIntegration
- getSecretKey() - Method in interface net.shibboleth.idp.plugin.authn.duo.DuoOIDCIntegration
-
Get the secret key.
- getSecretKey() - Method in class net.shibboleth.idp.plugin.authn.duo.SimpleDuoOIDCIntegration
- getStatus() - Method in class net.shibboleth.idp.plugin.authn.duo.model.DuoHealthCheck
-
Get the health status of the 2FA endpoint.
- getSupportedPrincipals(Class<T>) - Method in class net.shibboleth.idp.plugin.authn.duo.DefaultDuoOIDCIntegration
- getSupportedPrincipals(Class<T>) - Method in class net.shibboleth.idp.plugin.authn.duo.SimpleDuoOIDCIntegration
- getTimestamp() - Method in class net.shibboleth.idp.plugin.authn.duo.model.DuoHealthCheck
-
Get the timestamp!!
- getTimestamp() - Method in class net.shibboleth.idp.plugin.authn.duo.model.DuoHealthCheckResponse
-
Get the response timestamp.
- getTokenEndpoint() - Method in class net.shibboleth.idp.plugin.authn.duo.DefaultDuoOIDCIntegration
- getTokenEndpoint() - Method in interface net.shibboleth.idp.plugin.authn.duo.DuoOIDCIntegration
-
Get the path of the token endpoint.
- getTokenEndpoint() - Method in class net.shibboleth.idp.plugin.authn.duo.SimpleDuoOIDCIntegration
- getTokenType() - Method in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.TokenResponse
-
Get the token type.
- getUsername() - Method in class net.shibboleth.idp.plugin.authn.duo.context.DuoOIDCAuthenticationContext
-
Get the username.
- getVersion() - Static method in class net.shibboleth.idp.plugin.authn.duo.Version
-
Get the version of the IdP.
H
- hashCode() - Method in class net.shibboleth.idp.plugin.authn.duo.DefaultDuoOIDCIntegration
- hashCode() - Method in class net.shibboleth.idp.plugin.authn.duo.SimpleDuoOIDCIntegration
- healthCheck() - Method in interface net.shibboleth.idp.plugin.authn.duo.DuoOIDCClient
-
Check the health of the Duo 2FA endpoint and the clients configuration.
- healthCheck() - Method in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.NimbusClient
- healthCheck() - Method in class net.shibboleth.idp.plugin.authn.duo.sdk.impl.DuoSDKClientAdaptor
-
Check the health of the Duo 2FA endpoint and the clients configuration.
- HealthCheckDuoOIDCAuthAPI - Class in net.shibboleth.idp.plugin.authn.duo.impl
-
An action that checks the health of the Duo 2FA endpoint for the established Duo integration.
- HealthCheckDuoOIDCAuthAPI() - Constructor for class net.shibboleth.idp.plugin.authn.duo.impl.HealthCheckDuoOIDCAuthAPI
- healthCheckResponseConverter - Variable in class net.shibboleth.idp.plugin.authn.duo.sdk.impl.DuoSDKClientAdaptor
-
Function to map the native Duo
HealthCheckResponseobject to the interfaceDuoHealthCheckobject. - healthEndpoint - Variable in class net.shibboleth.idp.plugin.authn.duo.DefaultDuoOIDCIntegration
-
The URL path to the health endpoint.
- healthEndpoint - Variable in class net.shibboleth.idp.plugin.authn.duo.SimpleDuoOIDCIntegration
-
The URL path to the health endpoint.
- httpClient - Variable in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.NimbusClient
-
HttpClient for contacting Duo.
- httpClient - Variable in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.NimbusClientFactory
-
HttpClient for contacting Duo.
- httpClientSecurityParameters - Variable in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.NimbusClient
-
HTTP client security parameters.
- httpClientSecurityParameters - Variable in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.NimbusClientFactory
-
HTTP client security parameters.
- HTTPS - Static variable in class net.shibboleth.idp.plugin.authn.duo.impl.DuoIssuerClaimLookupStrategy
-
HTTPS scheme protocol.
- HTTPS - Static variable in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.NimbusClient
-
The HTTPS scheme.
I
- idToken - Variable in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.TokenResponse.Builder
-
The id token.
- idToken - Variable in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.TokenResponse
-
The OIDC ID token string base64 encoded.
- integration - Variable in class net.shibboleth.idp.plugin.authn.duo.context.DuoOIDCAuthenticationContext
-
The selected Duo integration to use for the lifetime of this request.
- integration - Variable in class net.shibboleth.idp.plugin.authn.duo.impl.ValidateTokenSignature
-
The Duo integration appropriate for this request.
- isRedirectURIPreregistered() - Method in class net.shibboleth.idp.plugin.authn.duo.DefaultDuoOIDCIntegration
- isRedirectURIPreregistered() - Method in interface net.shibboleth.idp.plugin.authn.duo.DynamicDuoOIDCIntegration
-
Has a redirectURI been pre-registered i.e.
- issuerPath - Variable in class net.shibboleth.idp.plugin.authn.duo.impl.DuoIssuerClaimLookupStrategy
-
The URL path component of the issuer.
- isSupportsNonce() - Method in interface net.shibboleth.idp.plugin.authn.duo.DuoOIDCClientCapabilities
-
Does this client support the OIDC nonce parameter.
- isSupportsNonce() - Method in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.NimbusClient
- isSupportsNonce() - Method in class net.shibboleth.idp.plugin.authn.duo.sdk.impl.DuoSDKClientAdaptor
L
- log - Variable in class net.shibboleth.idp.plugin.authn.duo.AbstractDuoAuthenticationAction
-
Class logger.
- log - Variable in class net.shibboleth.idp.plugin.authn.duo.DefaultDuoOIDCIntegration
-
Class logger.
- log - Variable in class net.shibboleth.idp.plugin.authn.duo.impl.DefaultDuoOIDCClientRegistry.CreateNewClientMappingFunction
-
Class logger.
- log - Variable in class net.shibboleth.idp.plugin.authn.duo.impl.DefaultDuoOIDCClientRegistry
-
Class logger.
- log - Variable in class net.shibboleth.idp.plugin.authn.duo.impl.DefaultRedirectURICreationStrategy
-
Class logger.
- log - Variable in class net.shibboleth.idp.plugin.authn.duo.impl.DuoOIDCAuthnController
-
Class logger.
- log - Variable in class net.shibboleth.idp.plugin.authn.duo.impl.ExchangeCodeForDuoToken
-
Class logger.
- log - Variable in class net.shibboleth.idp.plugin.authn.duo.impl.HealthCheckDuoOIDCAuthAPI
-
Class logger.
- log - Variable in class net.shibboleth.idp.plugin.authn.duo.impl.PopulateDuoAuthenticationContext
-
Class logger.
- log - Variable in class net.shibboleth.idp.plugin.authn.duo.impl.ValidateDuoResponseState
-
Class logger.
- log - Variable in class net.shibboleth.idp.plugin.authn.duo.impl.ValidateDuoTokenAuthenticationResult
-
Class logger.
- log - Variable in class net.shibboleth.idp.plugin.authn.duo.impl.ValidateExternalAuthenticationContext
-
Class logger.
- log - Variable in class net.shibboleth.idp.plugin.authn.duo.impl.ValidateTokenClaims
-
Class logger.
- log - Variable in class net.shibboleth.idp.plugin.authn.duo.impl.ValidateTokenSignature
-
Class logger.
- log - Variable in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.NimbusClient
-
Class logger.
- log - Variable in class net.shibboleth.idp.plugin.authn.duo.sdk.impl.DuoSDKClientAdaptor
-
Class logger.
- log - Variable in class net.shibboleth.idp.plugin.authn.duo.sdk.impl.DuoSDKClientFactory
-
Class logger.
- log - Variable in class net.shibboleth.idp.plugin.authn.duo.SimpleDuoOIDCIntegration
-
Class logger.
- logDecodedTokenPayload(JWT) - Method in class net.shibboleth.idp.plugin.authn.duo.impl.ExchangeCodeForDuoToken
-
If the token is not encrypted, and the original parsed parts exist, log the payload base64url decoded.
M
- main(String[]) - Static method in class net.shibboleth.idp.plugin.authn.duo.Version
-
Main entry point to program.
- message - Variable in class net.shibboleth.idp.plugin.authn.duo.model.DuoHealthCheck.Builder
-
The message.
- message - Variable in class net.shibboleth.idp.plugin.authn.duo.model.DuoHealthCheck
-
The error response message.
- messageDetail - Variable in class net.shibboleth.idp.plugin.authn.duo.model.DuoHealthCheck.Builder
-
The message detail.
- messageDetail - Variable in class net.shibboleth.idp.plugin.authn.duo.model.DuoHealthCheck
-
The error response detailed message.
N
- net.shibboleth.idp.plugin.authn.duo - package net.shibboleth.idp.plugin.authn.duo
-
Duo OIDC 2FA login flow API classes.
- net.shibboleth.idp.plugin.authn.duo.audit - package net.shibboleth.idp.plugin.authn.duo.audit
- net.shibboleth.idp.plugin.authn.duo.audit.impl - package net.shibboleth.idp.plugin.authn.duo.audit.impl
- net.shibboleth.idp.plugin.authn.duo.context - package net.shibboleth.idp.plugin.authn.duo.context
-
Duo OIDC 2FA login flow API context classes.
- net.shibboleth.idp.plugin.authn.duo.impl - package net.shibboleth.idp.plugin.authn.duo.impl
-
Duo OIDC 2FA login flow implementation classes.
- net.shibboleth.idp.plugin.authn.duo.model - package net.shibboleth.idp.plugin.authn.duo.model
-
Duo OIDC 2FA login flow API model classes.
- net.shibboleth.idp.plugin.authn.duo.nimbus - package net.shibboleth.idp.plugin.authn.duo.nimbus
-
Native Nimbus based Duo OIDC integration plugin.
- net.shibboleth.idp.plugin.authn.duo.nimbus.impl - package net.shibboleth.idp.plugin.authn.duo.nimbus.impl
-
Native Nimbus based Duo OIDC 2FA client adaptor implementation classes.
- net.shibboleth.idp.plugin.authn.duo.sdk - package net.shibboleth.idp.plugin.authn.duo.sdk
-
Duo WebSDK v4 OIDC integration plugin.
- net.shibboleth.idp.plugin.authn.duo.sdk.impl - package net.shibboleth.idp.plugin.authn.duo.sdk.impl
-
Duo WebSDK v4 OIDC 2FA client adaptor implementation classes.
- NimbusClient - Class in net.shibboleth.idp.plugin.authn.duo.nimbus.impl
-
A Duo client using the Nimbus OIDC library.
- NimbusClient(DuoOIDCIntegration, HttpClient, HttpClientSecurityParameters, ObjectMapper) - Constructor for class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.NimbusClient
-
Package-private Constructor.
- NimbusClientFactory - Class in net.shibboleth.idp.plugin.authn.duo.nimbus.impl
-
Abstract factory implementation for creating new
NimbusClients. - NimbusClientFactory() - Constructor for class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.NimbusClientFactory
- NimbusClientSupport - Class in net.shibboleth.idp.plugin.authn.duo.nimbus.impl
-
Helper methods for working with Duo using Nimbus.
- NimbusClientSupport() - Constructor for class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.NimbusClientSupport
-
private constructor.
- nonce - Variable in class net.shibboleth.idp.plugin.authn.duo.context.DuoOIDCAuthenticationContext
-
String value used to associate a Client session with an ID Token to mitigate replay attacks.
O
- objectMapper - Variable in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.NimbusClient
-
JSON object mapper.
- objectMapper - Variable in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.NimbusClientFactory
-
JSON object mapper.
- objectMapper - Variable in class net.shibboleth.idp.plugin.authn.duo.sdk.impl.DuoSDKClientAdaptor.DefaultTokenResponseConverter
-
Thread-safe JSON object mapper.
P
- PopulateDuoAuthenticationContext - Class in net.shibboleth.idp.plugin.authn.duo.impl
-
An action to create (or lookup) and populate the
DuoOIDCAuthenticationContextwith the username, chosenDuoOIDCIntegration, andDuoOIDCClientappropriate for this request. - PopulateDuoAuthenticationContext() - Constructor for class net.shibboleth.idp.plugin.authn.duo.impl.PopulateDuoAuthenticationContext
-
Constructor.
- populateSubject(Subject) - Method in class net.shibboleth.idp.plugin.authn.duo.impl.ValidateDuoTokenAuthenticationResult
- prc - Variable in class net.shibboleth.idp.plugin.authn.duo.impl.ValidateDuoTokenAuthenticationResult
-
The profile request context.
R
- REASON - Static variable in class net.shibboleth.idp.plugin.authn.duo.audit.AuditFields
-
Duo reason.
- REDIRECT_URI - Static variable in class net.shibboleth.idp.plugin.authn.duo.audit.AuditFields
-
The redirect URI sent to Duo.
- redirectURI - Variable in class net.shibboleth.idp.plugin.authn.duo.DefaultDuoOIDCIntegration
-
The used (by clients) redirect_uri to send the client after authorisation .
- redirectURI - Variable in class net.shibboleth.idp.plugin.authn.duo.SimpleDuoOIDCIntegration
-
The used (by clients) redirect_uri to send the client after authorisation .
- redirectURICreationStrategy - Variable in class net.shibboleth.idp.plugin.authn.duo.impl.PopulateDuoAuthenticationContext
-
Strategy used to compute the redirectURI from the given Duo integration if supported.
- redirectURIOverride - Variable in class net.shibboleth.idp.plugin.authn.duo.context.DuoOIDCAuthenticationContext
-
A request-bound redirect URI that was determined at runtime.
- refreshToken - Variable in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.TokenResponse.Builder
-
The refresh token - not supported by Duo.
- refreshToken - Variable in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.TokenResponse
-
The refresh token, which can be used to obtain new access tokens using the same authorization grant.
- registeredRedirectURI - Variable in class net.shibboleth.idp.plugin.authn.duo.DefaultDuoOIDCIntegration
-
A statically set (pre-registered) redirectURI to send the client to after authorisation.
- REQ_STATE - Static variable in class net.shibboleth.idp.plugin.authn.duo.audit.AuditFields
-
The request state value sent to the Duo 2FA authz endpoint.
- requestState - Variable in class net.shibboleth.idp.plugin.authn.duo.context.DuoOIDCAuthenticationContext
-
A randomly generated 32 character minimum String sent in the Duo 2FA authorization request.
- RESP_STATE - Static variable in class net.shibboleth.idp.plugin.authn.duo.audit.AuditFields
-
The response state value received from the Duo 2FA authz endpoint.
- response - Variable in class net.shibboleth.idp.plugin.authn.duo.model.DuoHealthCheck.Builder
-
The response.
- response - Variable in class net.shibboleth.idp.plugin.authn.duo.model.DuoHealthCheck
-
When a successful response was issued, as seconds since Unix EPOCH.
- responseState - Variable in class net.shibboleth.idp.plugin.authn.duo.context.DuoOIDCAuthenticationContext
-
A randomly generated 32 character minimum String returned in the Duo 2FA authorization response.
S
- scope - Variable in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.TokenResponse.Builder
-
The scope.
- scope - Variable in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.TokenResponse
-
The scope requested by the client.
- secretKey - Variable in class net.shibboleth.idp.plugin.authn.duo.DefaultDuoOIDCIntegration
-
Secret key.
- secretKey - Variable in class net.shibboleth.idp.plugin.authn.duo.SimpleDuoOIDCIntegration
-
Secret key.
- serialVersionUID - Static variable in exception net.shibboleth.idp.plugin.authn.duo.DuoClientException
-
Serial UID.
- serialVersionUID - Static variable in exception net.shibboleth.idp.plugin.authn.duo.DuoClientInitializationException
-
Default serialUID.
- serialVersionUID - Static variable in exception net.shibboleth.idp.plugin.authn.duo.DuoException
-
Serial UID.
- serialVersionUID - Static variable in exception net.shibboleth.idp.plugin.authn.duo.DuoRegistryException
-
Default serialUID.
- setAllowedOrigins(Collection<String>) - Method in class net.shibboleth.idp.plugin.authn.duo.DefaultDuoOIDCIntegration
-
Set the origins that are allowed to form the scheme, host, and port part of a computed redirect_uri.
- setAPIHost(String) - Method in class net.shibboleth.idp.plugin.authn.duo.DefaultDuoOIDCIntegration
-
Set the API host to use.
- setAPIHost(String) - Method in class net.shibboleth.idp.plugin.authn.duo.SimpleDuoOIDCIntegration
-
Set the API host to use.
- setAuthorizationCode(String) - Method in class net.shibboleth.idp.plugin.authn.duo.context.DuoOIDCAuthenticationContext
-
Set the authorization code.
- setAuthorizeEndpoint(String) - Method in class net.shibboleth.idp.plugin.authn.duo.DefaultDuoOIDCIntegration
-
Set the authorize endpoint URL path.
- setAuthorizeEndpoint(String) - Method in class net.shibboleth.idp.plugin.authn.duo.SimpleDuoOIDCIntegration
-
Set the authorize endpoint URL path.
- setAuthToken(JWT) - Method in class net.shibboleth.idp.plugin.authn.duo.context.DuoOIDCAuthenticationContext
-
Set the Duo authentication token.
- setCaCerts(List<String>) - Method in class net.shibboleth.idp.plugin.authn.duo.sdk.impl.DuoSDKClientFactory
-
Sets the list of CA certificate pins used to verify the Duo client connection to the API host.
- setClaimsValidator(ClaimsValidator) - Method in class net.shibboleth.idp.plugin.authn.duo.impl.ValidateTokenClaims
-
Set the JWT claims verifier to use.
- setCleanupHook(Consumer<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.authn.duo.impl.ValidateTokenClaims
-
Set the cleanup hook to execute after either a successful or unsuccessful claims validation.
- setClient(DuoOIDCClient) - Method in class net.shibboleth.idp.plugin.authn.duo.context.DuoOIDCAuthenticationContext
-
Set the client used to communicate with the Duo OIDC API.
- setClientFactory(DuoOIDCClientFactory) - Method in class net.shibboleth.idp.plugin.authn.duo.impl.DefaultDuoOIDCClientRegistry
-
Set the client factory to use.
- setClientId(String) - Method in class net.shibboleth.idp.plugin.authn.duo.DefaultDuoOIDCIntegration
-
Set the client ID to use.
- setClientId(String) - Method in class net.shibboleth.idp.plugin.authn.duo.SimpleDuoOIDCIntegration
-
Set the client ID to use.
- setClientRegistry(DuoOIDCClientRegistry) - Method in class net.shibboleth.idp.plugin.authn.duo.impl.PopulateDuoAuthenticationContext
-
Set the Duo client registry.
- setContextToPrincipalMappingStrategy(Function<ProfileRequestContext, Collection<Principal>>) - Method in class net.shibboleth.idp.plugin.authn.duo.impl.ValidateDuoTokenAuthenticationResult
-
Set the context to principal mapping strategy for mapping context information into principal collections e.g.
- setDuoContextCreationStrategy(Function<ProfileRequestContext, DuoOIDCAuthenticationContext>) - Method in class net.shibboleth.idp.plugin.authn.duo.impl.PopulateDuoAuthenticationContext
-
Set the strategy used to locate the
DuoOIDCAuthenticationContextto operate on. - setDuoContextLookupStrategy(Function<ProfileRequestContext, DuoOIDCAuthenticationContext>) - Method in class net.shibboleth.idp.plugin.authn.duo.AbstractDuoAuthenticationAction
-
Set Duo authentication context lookup strategy to use.
- setDuoContextLookupStrategy(Function<ProfileRequestContext, DuoOIDCAuthenticationContext>) - Method in class net.shibboleth.idp.plugin.authn.duo.impl.DuoOIDCAuthnController
-
Set Duo authentication context lookup strategy to use.
- setDuoIntegrationLookupStrategy(Function<ProfileRequestContext, DuoOIDCIntegration>) - Method in class net.shibboleth.idp.plugin.authn.duo.impl.PopulateDuoAuthenticationContext
-
Set DuoIntegration lookup strategy to use.
- setHealthCheckEndpoint(String) - Method in class net.shibboleth.idp.plugin.authn.duo.DefaultDuoOIDCIntegration
-
Set the health check endpoint URL path.
- setHealthCheckEndpoint(String) - Method in class net.shibboleth.idp.plugin.authn.duo.SimpleDuoOIDCIntegration
-
Set the health check endpoint URL path.
- setHttpClient(HttpClient) - Method in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.NimbusClientFactory
-
Set the
HttpClientto use for contacting Duo. - setHttpClientSecurityParameters(HttpClientSecurityParameters) - Method in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.NimbusClientFactory
-
Set the optional client security parameters.
- setIntegration(DuoOIDCIntegration) - Method in class net.shibboleth.idp.plugin.authn.duo.context.DuoOIDCAuthenticationContext
-
Set the Duo integration.
- setNonce(String) - Method in class net.shibboleth.idp.plugin.authn.duo.context.DuoOIDCAuthenticationContext
-
Set the OIDC nonce.
- setObjectMapper(ObjectMapper) - Method in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.NimbusClientFactory
-
Set the JSON
ObjectMapper. - setRedirectURI(String) - Method in class net.shibboleth.idp.plugin.authn.duo.SimpleDuoOIDCIntegration
-
Set the redirect URI.
- setRedirectURICreationStrategy(BiFunction<HttpServletRequest, DynamicDuoOIDCIntegration, String>) - Method in class net.shibboleth.idp.plugin.authn.duo.impl.PopulateDuoAuthenticationContext
-
Set the redirect URI creation strategy.
- setRedirectURIIfAbsent(String) - Method in class net.shibboleth.idp.plugin.authn.duo.DefaultDuoOIDCIntegration
- setRedirectURIIfAbsent(String) - Method in interface net.shibboleth.idp.plugin.authn.duo.DynamicDuoOIDCIntegration
-
Set the redirectURI from the one given in a thread-safe way.
- setRedirectURIOverride(String) - Method in class net.shibboleth.idp.plugin.authn.duo.context.DuoOIDCAuthenticationContext
-
Set the override redirect URI.
- setRegisteredRedirectURI(String) - Method in class net.shibboleth.idp.plugin.authn.duo.DefaultDuoOIDCIntegration
-
Set the redirect_uri to use.
- setRequestState(String) - Method in class net.shibboleth.idp.plugin.authn.duo.context.DuoOIDCAuthenticationContext
-
Set the request state.
- setResponseState(String) - Method in class net.shibboleth.idp.plugin.authn.duo.context.DuoOIDCAuthenticationContext
-
Set the response state.
- setSecretKey(String) - Method in class net.shibboleth.idp.plugin.authn.duo.DefaultDuoOIDCIntegration
-
Set the secret key to use.
- setSecretKey(String) - Method in class net.shibboleth.idp.plugin.authn.duo.SimpleDuoOIDCIntegration
-
Set the secret key to use.
- setSignatureAlgorithm(JWSAlgorithm) - Method in class net.shibboleth.idp.plugin.authn.duo.impl.ValidateTokenSignature
-
Set the signature algorithm to use.
- setSupportedPrincipals(Collection<T>) - Method in class net.shibboleth.idp.plugin.authn.duo.DefaultDuoOIDCIntegration
-
Set supported non-user-specific principals that the action will include in the subjects it generates, in place of any default principals from the flow.
- setSupportedPrincipals(Collection<T>) - Method in class net.shibboleth.idp.plugin.authn.duo.SimpleDuoOIDCIntegration
-
Set supported non-user-specific principals that the action will include in the subjects it generates, in place of any default principals from the flow.
- setTokenEndpoint(String) - Method in class net.shibboleth.idp.plugin.authn.duo.DefaultDuoOIDCIntegration
-
Set the token endpoint URL path.
- setTokenEndpoint(String) - Method in class net.shibboleth.idp.plugin.authn.duo.SimpleDuoOIDCIntegration
-
Set the token endpoint URL path.
- setUsername(String) - Method in class net.shibboleth.idp.plugin.authn.duo.context.DuoOIDCAuthenticationContext
-
Set the username.
- setUsernameLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.idp.plugin.authn.duo.impl.PopulateDuoAuthenticationContext
-
Set the lookup strategy to use for the username to match against Duo identity.
- signatureAlgorithm - Variable in class net.shibboleth.idp.plugin.authn.duo.impl.ValidateTokenSignature
-
The signature algorithm used.
- SimpleDuoOIDCIntegration - Class in net.shibboleth.idp.plugin.authn.duo
-
A data wrapper for use with Duo OIDC integrations which does not support redirectURI generation.
- SimpleDuoOIDCIntegration() - Constructor for class net.shibboleth.idp.plugin.authn.duo.SimpleDuoOIDCIntegration
-
Constructor.
- STATE_PARAMETER - Static variable in class net.shibboleth.idp.plugin.authn.duo.impl.DuoOIDCAuthnController
-
The name of the Http parameter that stores the state value.
- status - Variable in class net.shibboleth.idp.plugin.authn.duo.model.DuoHealthCheck.Builder
-
The status.
- status - Variable in class net.shibboleth.idp.plugin.authn.duo.model.DuoHealthCheck
-
A successful 'OK' or unsuccessful 'FAIL' response.
- SUPPORTED_SIGNATURE_FAMILY - Static variable in class net.shibboleth.idp.plugin.authn.duo.impl.ValidateTokenSignature
-
The HMAC 'family' of signature algorithms is the only supported, based on the shared secret in the client integration.
- supportedPrincipals - Variable in class net.shibboleth.idp.plugin.authn.duo.DefaultDuoOIDCIntegration
-
Container for supported principals.
- supportedPrincipals - Variable in class net.shibboleth.idp.plugin.authn.duo.SimpleDuoOIDCIntegration
-
Container for supported principals.
T
- timestamp - Variable in class net.shibboleth.idp.plugin.authn.duo.model.DuoHealthCheck.Builder
-
The timestamp.
- timestamp - Variable in class net.shibboleth.idp.plugin.authn.duo.model.DuoHealthCheck
-
When an unsuccessful response was issued, as seconds since Unix EPOCH.
- timestamp - Variable in class net.shibboleth.idp.plugin.authn.duo.model.DuoHealthCheckResponse
-
The response timestamp in seconds since Unix EPOCH.
- token - Variable in class net.shibboleth.idp.plugin.authn.duo.impl.ValidateTokenSignature
-
The Duo authentication token.
- tokenEndpoint - Variable in class net.shibboleth.idp.plugin.authn.duo.DefaultDuoOIDCIntegration
-
The URL path to the token endpoint.
- tokenEndpoint - Variable in class net.shibboleth.idp.plugin.authn.duo.SimpleDuoOIDCIntegration
-
The URL path to the token endpoint.
- TokenResponse - Class in net.shibboleth.idp.plugin.authn.duo.nimbus.impl
-
A token response, see RFC6749 section 5.1.
- TokenResponse(TokenResponse.Builder) - Constructor for class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.TokenResponse
-
Constructor.
- TokenResponse.Builder - Class in net.shibboleth.idp.plugin.authn.duo.nimbus.impl
-
Builder to build
TokenResponse. - TokenResponse.IAccessTokenStage - Interface in net.shibboleth.idp.plugin.authn.duo.nimbus.impl
-
Access token stage interface.
- TokenResponse.IBuildStage - Interface in net.shibboleth.idp.plugin.authn.duo.nimbus.impl
-
Build stage interface.
- TokenResponse.IIdTokenStage - Interface in net.shibboleth.idp.plugin.authn.duo.nimbus.impl
-
Token stage interface.
- TokenResponse.ITokenTypeStage - Interface in net.shibboleth.idp.plugin.authn.duo.nimbus.impl
-
Token type stage interface.
- tokenResponseConverter - Variable in class net.shibboleth.idp.plugin.authn.duo.sdk.impl.DuoSDKClientAdaptor
-
Function to map the native Duo
Tokenobject to the interfaceJWTobject. - tokenType - Variable in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.TokenResponse.Builder
-
The token type.
- tokenType - Variable in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.TokenResponse
-
The token type e.g.
- toString() - Method in class net.shibboleth.idp.plugin.authn.duo.DefaultDuoOIDCIntegration
- toString() - Method in class net.shibboleth.idp.plugin.authn.duo.model.DuoHealthCheck
- toString() - Method in class net.shibboleth.idp.plugin.authn.duo.model.DuoHealthCheckResponse
- toString() - Method in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.TokenResponse
- toString() - Method in class net.shibboleth.idp.plugin.authn.duo.SimpleDuoOIDCIntegration
- TXID - Static variable in class net.shibboleth.idp.plugin.authn.duo.audit.AuditFields
-
Duo Transaction ID.
U
- URISupport - Class in net.shibboleth.idp.plugin.authn.duo
-
URL support class.
- URISupport() - Constructor for class net.shibboleth.idp.plugin.authn.duo.URISupport
-
Private constructor.
- username - Variable in class net.shibboleth.idp.plugin.authn.duo.context.DuoOIDCAuthenticationContext
-
Username.
- username - Variable in class net.shibboleth.idp.plugin.authn.duo.impl.ValidateDuoTokenAuthenticationResult
-
Attempted username.
- usernameLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.duo.impl.PopulateDuoAuthenticationContext
-
Lookup strategy for username to match against Duo identity.
V
- ValidateDuoResponseState - Class in net.shibboleth.idp.plugin.authn.duo.impl
-
Authentication action that validates the Duo response state parameter (which is required in the Duo flow) matches that in the 2FA request.
- ValidateDuoResponseState() - Constructor for class net.shibboleth.idp.plugin.authn.duo.impl.ValidateDuoResponseState
- ValidateDuoTokenAuthenticationResult - Class in net.shibboleth.idp.plugin.authn.duo.impl
-
A validation action that checks for a valid Duo authentication token and directly produces an
AuthenticationResultbased on the identity described by the token. - ValidateDuoTokenAuthenticationResult() - Constructor for class net.shibboleth.idp.plugin.authn.duo.impl.ValidateDuoTokenAuthenticationResult
- ValidateDuoTokenAuthenticationResult.DuoOIDCCleanupHook - Class in net.shibboleth.idp.plugin.authn.duo.impl
-
A default cleanup hook that removes the
DuoOIDCAuthenticationContextfrom the tree. - ValidateExternalAuthenticationContext - Class in net.shibboleth.idp.plugin.authn.duo.impl
-
An action that checks for an
ExternalAuthenticationContextfor a signaled event via theExternalAuthenticationContext.getAuthnError()method. - ValidateExternalAuthenticationContext() - Constructor for class net.shibboleth.idp.plugin.authn.duo.impl.ValidateExternalAuthenticationContext
- ValidateTokenClaims - Class in net.shibboleth.idp.plugin.authn.duo.impl
-
Action that validates the claims of the Duo id_token using the supplied
ClaimsValidator. - ValidateTokenClaims() - Constructor for class net.shibboleth.idp.plugin.authn.duo.impl.ValidateTokenClaims
- ValidateTokenClaims.DuoOIDAuthenticationContextCleanupHook - Class in net.shibboleth.idp.plugin.authn.duo.impl
-
A cleanup hook that removes the 'nonce' parameter from the
DuoOIDCAuthenticationContextso it could not be reused. - ValidateTokenSignature - Class in net.shibboleth.idp.plugin.authn.duo.impl
-
Action to validate the JWT signature.
- ValidateTokenSignature() - Constructor for class net.shibboleth.idp.plugin.authn.duo.impl.ValidateTokenSignature
-
Constructor.
- value - Variable in class net.shibboleth.idp.plugin.authn.duo.audit.impl.FixedStringAuditExtractor
-
The fixed string to log.
- Version - Class in net.shibboleth.idp.plugin.authn.duo
-
Class for getting and printing the version of the plugin.
- Version() - Constructor for class net.shibboleth.idp.plugin.authn.duo.Version
-
Constructor.
- VERSION - Static variable in class net.shibboleth.idp.plugin.authn.duo.Version
-
Plugin version.
W
- withAccessToken(String) - Method in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.TokenResponse.Builder
- withAccessToken(String) - Method in interface net.shibboleth.idp.plugin.authn.duo.nimbus.impl.TokenResponse.IAccessTokenStage
-
Supply the access token.
- withCode(String) - Method in class net.shibboleth.idp.plugin.authn.duo.model.DuoHealthCheck.Builder
- withCode(String) - Method in interface net.shibboleth.idp.plugin.authn.duo.model.DuoHealthCheck.IBuildStage
-
Set the code.
- withExpiresIn(Integer) - Method in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.TokenResponse.Builder
- withExpiresIn(Integer) - Method in interface net.shibboleth.idp.plugin.authn.duo.nimbus.impl.TokenResponse.IBuildStage
-
Supply the expiration.
- withIdToken(String) - Method in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.TokenResponse.Builder
- withIdToken(String) - Method in interface net.shibboleth.idp.plugin.authn.duo.nimbus.impl.TokenResponse.IIdTokenStage
-
Supply the ID token.
- withMessage(String) - Method in class net.shibboleth.idp.plugin.authn.duo.model.DuoHealthCheck.Builder
- withMessage(String) - Method in interface net.shibboleth.idp.plugin.authn.duo.model.DuoHealthCheck.IBuildStage
-
Set the message.
- withMessageDetail(String) - Method in class net.shibboleth.idp.plugin.authn.duo.model.DuoHealthCheck.Builder
- withMessageDetail(String) - Method in interface net.shibboleth.idp.plugin.authn.duo.model.DuoHealthCheck.IBuildStage
-
Set the messageDetail.
- withRefreshToken(String) - Method in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.TokenResponse.Builder
- withRefreshToken(String) - Method in interface net.shibboleth.idp.plugin.authn.duo.nimbus.impl.TokenResponse.IBuildStage
-
Supply the refresh token
- withResponse(DuoHealthCheckResponse) - Method in class net.shibboleth.idp.plugin.authn.duo.model.DuoHealthCheck.Builder
- withResponse(DuoHealthCheckResponse) - Method in interface net.shibboleth.idp.plugin.authn.duo.model.DuoHealthCheck.IBuildStage
-
Set the response.
- withScope(String) - Method in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.TokenResponse.Builder
- withScope(String) - Method in interface net.shibboleth.idp.plugin.authn.duo.nimbus.impl.TokenResponse.IBuildStage
-
Supply the scope.
- withStatus(String) - Method in class net.shibboleth.idp.plugin.authn.duo.model.DuoHealthCheck.Builder
- withStatus(String) - Method in interface net.shibboleth.idp.plugin.authn.duo.model.DuoHealthCheck.IStatusStage
-
Set the status.
- withTimestamp(String) - Method in class net.shibboleth.idp.plugin.authn.duo.model.DuoHealthCheck.Builder
- withTimestamp(String) - Method in interface net.shibboleth.idp.plugin.authn.duo.model.DuoHealthCheck.IBuildStage
-
Set the timestamp.
- withTokenType(String) - Method in class net.shibboleth.idp.plugin.authn.duo.nimbus.impl.TokenResponse.Builder
- withTokenType(String) - Method in interface net.shibboleth.idp.plugin.authn.duo.nimbus.impl.TokenResponse.ITokenTypeStage
-
Supply the token type.
All Classes All Packages