Package net.shibboleth.idp.plugin.authn.duo.nimbus.impl

Class NimbusClientSupport

java.lang.Object

net.shibboleth.idp.plugin.authn.duo.nimbus.impl.NimbusClientSupport

@ThreadSafe
public final class NimbusClientSupport
extends Object

Helper methods for working with Duo using Nimbus.

Constructor Summary

Constructors

Modifier	Constructor	Description
private	NimbusClientSupport()	private constructor.

Method Summary

Modifier and Type	Method	Description
(package private) static String	createJWS(String aud, String clientID, String secret)	Create a signed JWT using the audience and client ID supplied.
(package private) static String	createJWSRequestObject(String clientID, String redirectURI, String secret, String state, String username)	Create a signed JWT Request object using the given parameters suitable for the Duo token endpoint.
(package private) static String	generateJWTId(Integer length)	Generate a cryptographically strong random JWT identifier.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

NimbusClientSupport

private NimbusClientSupport()

private constructor.

Method Detail

generateJWTId

@Nonnull
static String generateJWTId(@Nonnull
                            Integer length)

Generate a cryptographically strong random JWT identifier.

Parameters:

length - the length of the ID. Can not be null.

Returns:

a cryptographically strong random JWT identifier.

createJWSRequestObject

@Nonnull
static String createJWSRequestObject(@Nonnull @NotEmpty
                                     String clientID,
                                     @Nonnull @NotEmpty
                                     String redirectURI,
                                     @Nonnull @NotEmpty
                                     String secret,
                                     @Nonnull @NotEmpty
                                     String state,
                                     @Nonnull @NotEmpty
                                     String username)
                              throws DuoClientException

Create a signed JWT Request object using the given parameters suitable for the Duo token endpoint.

Only supports the HS512 JWS algorithm.

Parameters:

clientID - the client identifier

redirectURI - the redirectURI

secret - the client secret

state - the state

username - the subject of the authentication

Returns:

a signed JWT

Throws:

DuoClientException - on error constructing the JWS request object

createJWS

@Nonnull
static String createJWS(@Nonnull
                        String aud,
                        @Nonnull
                        String clientID,
                        @Nonnull
                        String secret)
                 throws DuoClientException

Create a signed JWT using the audience and client ID supplied.

Only supports the HS512 JWS algorithm.

Parameters:

aud - the audience of the JWT.

clientID - the client identifier

secret - the client secret

Returns:

a signed JWT.

Throws:

DuoClientException - on error constructing the JWS object