A B C D E F G H I J K L M N O P R S T U V W
All Classes All Packages

A

AbstractAuthenticatableOIDCContext - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context

An abstract base class for subcontexts that carry information which may be authenticated.

AbstractAuthenticatableOIDCContext() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.AbstractAuthenticatableOIDCContext

AbstractHttpOIDCAuthenticationAction<T extends com.nimbusds.oauth2.sdk.Response> - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

An abstract class for OIDC actions that make synchronous HTTP requests and return responses.

AbstractHttpOIDCAuthenticationAction() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction

AbstractJSONResponseDecoderFunction<T> - Class in net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl

Abstract class for JSON based response decoders.

AbstractJSONResponseDecoderFunction() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl.AbstractJSONResponseDecoderFunction

AbstractOIDCAuthenticationRequestActionMessageHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl

An abstract message handler that runs inside an WebFlowMessageHandlerAdaptor that provides functions to make available various OIDC contexts.

AbstractOIDCAuthenticationRequestActionMessageHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler

Constructor.

AbstractOIDCAuthenticationRequestMessageHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl

An abstract message handler that does *not* run inside an WebFlowMessageHandlerAdaptor.

AbstractOIDCAuthenticationRequestMessageHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestMessageHandler

Constructor.

AbstractOIDCAuthenticationResponseAction - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

Abstract class for actions based on the AuthenticationResponse located under the InOutOperationContext.getInboundMessageContext() and the built OIDCAuthenticationRequest located under the InOutOperationContext.getOutboundMessageContext().

AbstractOIDCAuthenticationResponseAction() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractOIDCAuthenticationResponseAction

Constructor.

AbstractRequestEncoderFunction - Class in net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl

Abstract request encoder function that pulls out various contexts and request/response messages.

AbstractRequestEncoderFunction() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction

Constructor.

AbstractTokenResponseLookupStrategy - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate

Base class for looking up the token response context.

AbstractTokenResponseLookupStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.AbstractTokenResponseLookupStrategy

Constructor.

AbstractTokenResponseLookupStrategy(Function<ProfileRequestContext, AccessTokenResponseContext>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.AbstractTokenResponseLookupStrategy

Constructor.

AbstractUserInfoResponseTypeCondition - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic

Abstract predicate for pulling out the UserInfoResponseContext.

AbstractUserInfoResponseTypeCondition() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.AbstractUserInfoResponseTypeCondition

Constructor.

AbstractUserInfoResponseTypeCondition(Function<ProfileRequestContext, UserInfoResponseContext>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.AbstractUserInfoResponseTypeCondition

Constructor.

AbstractUserInfoTokenResponseLookupStrategy - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate

Base class for looking up the UserInfo token response context.

AbstractUserInfoTokenResponseLookupStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.AbstractUserInfoTokenResponseLookupStrategy

Constructor.

AbstractUserInfoTokenResponseLookupStrategy(Function<ProfileRequestContext, UserInfoResponseContext>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.AbstractUserInfoTokenResponseLookupStrategy

Constructor.

accept(JWT, MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.RequestObjectTokenUpdateStrategy

accept(ProfileRequestContext, JWT) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.IDTokenInAccessTokenUpdateStrategy

accept(ProfileRequestContext, JWT) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.UserInfoInUserInfoResponseContextUpdateStrategy

accessToken - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OAuth2AccessTokenPrincipal

The access_token.

AccessTokenLookupStrategy - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate

Function that extracts the access_token from the AccessTokenResponseContext.

AccessTokenLookupStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.AccessTokenLookupStrategy

Constructor.

AccessTokenLookupStrategy(Function<ProfileRequestContext, AccessTokenResponseContext>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.AccessTokenLookupStrategy

Constructor.

AccessTokenResponseContext - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context

A context to hold an OIDC token request response.

AccessTokenResponseContext() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.AccessTokenResponseContext

accessTokenResponseContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims

Strategy used to look up the AccessTokenResponseContext .

AccessTokenToPrivateCredentialsMappingStrategy - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

A mapping strategy that locates the AccessTokenResponseContext from the ProfileRequestContext and constructs and returns an OAuth2AccessTokenPrincipal from the access_token, token_type, and expires_in.

AccessTokenToPrivateCredentialsMappingStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AccessTokenToPrivateCredentialsMappingStrategy

Constructor.

AccessTokenToPrivateCredentialsMappingStrategy(Function<ProfileRequestContext, AccessTokenResponseContext>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AccessTokenToPrivateCredentialsMappingStrategy

Constructor.

accessTokenType - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OAuth2AccessTokenPrincipal

The token_type.

acrTranslator - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Incoming context translation function for converting OIDC ACRs into Principals.

ActivationCondition(boolean) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.SimpleOIDCSubjectIdentifierCanonicalization.ActivationCondition

Constructor.

adapt(Function<ProfileRequestContext, T>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler

Adapt a ProfileRequestContext function to a MessageContext function via composing with a lookup function.

adapt(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler

Adapt a ProfileRequestContext predicate into a MessageContext predicate via composing with a lookup function.

AddAuthenticationContextClassReferencesHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl

A message handler that adds any authentication context class references from the those derived from the profile config - which may be proxied and mapped from the original request.

AddAuthenticationContextClassReferencesHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddAuthenticationContextClassReferencesHandler

addBearerTokenToGet(RequestBuilder, AccessTokenResponseContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.DefaultUserInfoRequestEncoder

Add the bearer token to the Authorization header, used when issuing HTTP GET requests.

addBearerTokenToPost(RequestBuilder, AccessTokenResponseContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.DefaultUserInfoRequestEncoder

Add the bearer token to the 'access_token' parameter, used when issuing HTTP POST requests.

AddEndpointURIHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl

A message handler that adds the authorization endpoint URI from the providers metadata to the under constructions authentication request.

AddEndpointURIHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddEndpointURIHandler

AddForceAuthenticationHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl

An action that sets the 'prompt' parameter to 'login' and max_age to 0 seconds, iff force authn was requested by the upstream SP (or is overridden in the profile config).

AddForceAuthenticationHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddForceAuthenticationHandler

AddLoginHintHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl

Message handler that adds the login_hint parameter based on any defined in the profile configuration.

AddLoginHintHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddLoginHintHandler

AddMaxAgeHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl

Message handler that adds the max_age parameter based on any defined in the profile configuration.

AddMaxAgeHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddMaxAgeHandler

AddNonceHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl

A message handler that adds a nonce from a lookup strategy to the authentication request.

AddNonceHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddNonceHandler

Constructor.

AddPassiveAuthenticationHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl

A message handler that sets the 'prompt' parameter to 'none' if passive authentication has been requested by the SP.

AddPassiveAuthenticationHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddPassiveAuthenticationHandler

AddRedirectURIHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl

A message handler that adds a redirect_uri to the authentication request.

AddRedirectURIHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddRedirectURIHandler

AddRequestedClaimsHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl

A message handler that adds requested claims to the under constructions authentication request.

AddRequestedClaimsHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddRequestedClaimsHandler

Constructor.

AddResponseTypeAndModeHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl

Action that populates the authentication request response_mode and response_type from various strategies, by default from the profile configuration.

AddResponseTypeAndModeHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddResponseTypeAndModeHandler

AddScopesHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl

A message handler that adds the scopes from the profile request object to the authentication request.

AddScopesHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddScopesHandler

AddStateHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl

Add state to the authentication request URL and the request object claims (if present).

AddStateHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddStateHandler

Constructor.

addToExistingInboundMessageContextPredicate - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.PrepareOIDCInboundMessageContext

Should the peer entity context be added to an existing inbound message context or not.

allowedOrigins - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultRedirectUriCreationFunction

A set of 'allowed' origins that can be used as the scheme, host, and port portion of the redirectURI.

amrTranslator - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Incoming context translation function for converting OIDC ACRs into Principals.

apply(ClaimsSet) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultClaimSanitizationStrategy

apply(ClaimsSet, ClaimsSet) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultClaimMergingStrategy

apply(OIDCProviderMetadata) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate.ProviderMetadataStringListValueLookupFunction

apply(OIDCProviderMetadata) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.navigate.RequestObjectSupportedSignatureSigningAlgorithms

apply(HttpServletRequest, ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultRedirectUriCreationFunction

apply(HttpResponse) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl.DefaultAccessTokenResponseDecoder

apply(HttpResponse) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl.DefaultUserInfoResponseDecoder

apply(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.DefaultIssuerIDLookupFunction

apply(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.navigate.JWTClaimsSetFromRequestObjectLookupFunction

apply(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.navigate.PayloadFromRequestObjectLookupFunction

apply(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.ClientAuthenticationConfigurationLookupFunction

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.audit.impl.FixedStringAuditExtractor

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.audit.impl.ProxyAuthenticationFlowAuditExtractor

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate.MaxAgeLookupFunction

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate.RedirectUriLookupFunction

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate.UserInfoHttpRequestMethodLookupStrategy

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.AccessTokenLookupStrategy

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.AuthenticationRequestTimeLookupFunction

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.DefaultEndUserClaimsLookupStrategy

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.DefaultIDTokenLookupStrategy

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.DefaultUserInfoJWTLookupStrategy

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.EncryptedIDTokenLookupStrategy

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.EncryptedUserInfoJWTLookupStrategy

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.IDTokenJOSEHeaderLookupStrategy

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.InboundMessageContextFromProxyPRC

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.OIDCProviderMetadataFromOuboundPeerLookupStrategy

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.OutboundMessageContextFromProxyPRC

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AccessTokenToPrivateCredentialsMappingStrategy

apply(ProfileRequestContext, JWTClaimsSet) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate.ExtraAudiencesLookupStrategy

apply(ProfileRequestContext, JWTClaimsSet) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.ClientIDFromOAuth2ClientContextFunction

apply(ProfileRequestContext, JWTClaimsSet) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.SubFromIDTokenLookupFunction

The input claims set is ignored because it belongs to the JWT that is being tested.

apply(ProfileRequestContext, JWTClaimsSet) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.AuthenticationRequestNonceClaimLookupStrategy

apply(ProfileRequestContext, SubjectCanonicalizationContext, boolean) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.SimpleOIDCSubjectIdentifierCanonicalization.ActivationCondition

Helper method that runs either as part of the Predicate or directly from the SimpleOIDCSubjectIdentifierCanonicalization.doPreExecute(ProfileRequestContext, SubjectCanonicalizationContext) method above.

attributeContext - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Context for externally supplied inbound attributes.

attributeExtractionStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Pluggable strategy function for generalized extraction of data.

attributeFilterService - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Service used to get the engine used to filter attributes.

authenticatableOIDCContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.RequiresSignatureVerificationPredicate

Strategy used to lookup the AbstractAuthenticatableOIDCContext to test.

authenticated - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.AbstractAuthenticatableOIDCContext

Flag indicating whether the information contained in this context has been authenticated.

authenticationRequestLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate.MaxAgeLookupFunction

Strategy used to locate the OIDCAuthenticationRequest.

authenticationRequestLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.AuthenticationRequestTimeLookupFunction

Strategy used to locate the OIDCAuthenticationRequest.

authenticationRequestLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.RequestObjectTokenUpdateStrategy

Strategy used to locate the OIDCAuthenticationRequest to sign.

authenticationRequestLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.navigate.JWTClaimsSetFromRequestObjectLookupFunction

Strategy used to locate the OIDCAuthenticationRequest to sign.

authenticationRequestLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.navigate.PayloadFromRequestObjectLookupFunction

Strategy used to locate the OIDCAuthenticationRequest to sign.

authenticationRequestLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestMessageHandler

Strategy used to locate the OIDCAuthenticationRequest.

authenticationRequestLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.AuthenticationRequestNonceClaimLookupStrategy

The strategy used to lookup the authentication request.

authenticationRequestLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.NonceValidationActivationCondition

The strategy used to lookup the authentication request.

AuthenticationRequestNonceClaimLookupStrategy - Class in net.shibboleth.idp.plugin.authn.oidc.rp.security.impl

Lookup strategy that finds the nonce from the OIDCAuthenticationRequest.

AuthenticationRequestNonceClaimLookupStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.AuthenticationRequestNonceClaimLookupStrategy

Constructor.

AuthenticationRequestNonceClaimLookupStrategy(Function<ProfileRequestContext, OIDCAuthenticationRequest>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.AuthenticationRequestNonceClaimLookupStrategy

Constructor.

AuthenticationRequestTimeLookupFunction - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate

Lookup function that returns the time at which the RP sent the authentication request, as taken from the authentication request object.

AuthenticationRequestTimeLookupFunction() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.AuthenticationRequestTimeLookupFunction

Constructor.

authenticationResponse - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateAuthenticationResponseResult

Context containing the result to examine.

authnRequest - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction

OIDC authentication request built by the IdP.

authnRequest - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractOIDCAuthenticationResponseAction

OIDC authentication request built by the IdP.

authnRequest - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject

OIDC authentication request built by the IdP.

authnRequest - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler

OIDC authentication request built by the IdP.

authnRequest - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestMessageHandler

The stashed OIDCAuthenticationRequest.

authnResponse - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction

OIDC authentication response from upstream OP.

authnResponse - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractOIDCAuthenticationResponseAction

OIDC authentication response from upstream OP.

authorizationCallback(HttpServletRequest, HttpServletResponse) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AuthorizationController

Callback endpoint to accept the authorization response.

AuthorizationController - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

Servlet compatible with the ExternalAuthentication interface that begins, by HTTP redirect, an OpenID Connect authentication request to an OpenID Connect Provider (an OAuth 2.0 Authorization Server that supports OpenID Connect).

AuthorizationController() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AuthorizationController

Constructor.

authorizationRequest(HttpServletRequest, HttpServletResponse) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AuthorizationController

Begin an authorization request to the configured upstream OP.

AUTHORIZE_PATH_SEGMENT - Static variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AuthorizationController

The final part of the IdP URL path which is called to begin authorization.

B

buildClientAuthenticationJwt() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler

Build a signed JWT bearer token for client authentication using the populated security parameters.

buildClientAuthenticationJwtClaims() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler

Build the claim values required for a client authentication bearer JWT.

buildErrorResponseString(AuthenticationErrorResponse) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateAuthenticationResponseResult

Build an error response string from the ErrorResponse object.

buildOrigin(URI) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultRedirectUriCreationFunction

Builds the 'origin' (see RFC 6454) from given URI.

BuildPlainRequestObjectJWT - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl

If the Request Object claims are present in the authentication request, convert them into a JWTClaimsSet inside a PlainJWT.

BuildPlainRequestObjectJWT() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.BuildPlainRequestObjectJWT

buildProxyPrincipal() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Construct a populated ProxyAuthenticationPrincipal based on the upstream OP (the issuer of the id_token).

buildRequestedAuthnContext(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddAuthenticationContextClassReferencesHandler

Build a list of ACRs if warranted.

BuildRequestObject - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

Action that creates a Request Object JWT, and sets it to the work context OIDCAuthenticationRequest located under InOutOperationContext.getOutboundMessageContext().

BuildRequestObject() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject

Constructor.

buildURIIgnoreDefaultPorts(String, String, int, String) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultRedirectUriCreationFunction

Build a URI from the given parameters.

C

CALLBACK_PATH_SEGMENT - Static variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AuthorizationController

The final part of the IdP URL path which is called to end authorization via the callback.

callbackServletPath - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultRedirectUriCreationFunction

The path, excluding the context and servlet paths, to the RP callback handler.

checkProviderSupportsResponseMode(ResponseMode) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddResponseTypeAndModeHandler

Check the OpenID Provider supports the response_mode from its metadata value response_modes_supported.

checkProviderSupportsResponseType(ResponseType) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddResponseTypeAndModeHandler

Check the OpenID Provider supports the response_type from its metadata value response_types_supported.

claimMergingStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims

The strategy used to merge UserInfo claims with id_token claims.

claimSanitizationStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims

The strategy used to sanitize claims in an input claimset.

claimsSet - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateTokenClaims

The parsed claimset.

claimsSetIsValidPredicate - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject

A hook to allow additional checking of the request object claims after it is built.

claimsValidator - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateTokenClaims

The JWT claims validator used to verify the claimsset.

cleanupHook - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateTokenClaims

A cleanup hook to execute after either a successful or unsuccessful claims validation.

ClientAuthenticationConfigurationLookupFunction - Class in net.shibboleth.idp.plugin.authn.oidc.rp.security.impl

A function that returns a SignatureSigningConfiguration list for signing client authentication JWTs.

ClientAuthenticationConfigurationLookupFunction() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.ClientAuthenticationConfigurationLookupFunction

Constructor.

clientAuthMethod - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler

The stashed client authentication method to use.

clientAuthnContext - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction

The context used to store client authentication information for communication with a upstream OP.

clientCredential - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler

The stashed client_secret to use if required.

clientId - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.OAuth2ClientContext

The client_id.

clientId - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler

The stashed client identifier for this request.

ClientIDFromOAuth2ClientContextFunction - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate

A function that pulls the client_id out of the OAuth2ClientContext.

ClientIDFromOAuth2ClientContextFunction(Function<ProfileRequestContext, OAuth2ClientContext>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.ClientIDFromOAuth2ClientContextFunction

Constructor.

clone() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OAuth2AccessTokenPrincipal

clone() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OAuth2RefreshTokenPrincipal

clone() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OIDCSubjectIdentifierPrincipal

CODE_PARAMETER - Static variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AuthorizationController

The name of the Http parameter that stores the authorisation code.

contextClassLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.metadata.impl.OIDCProviderMetadataLookupHandler

Strategy to resolve the context class to add the resolved metadata too.

contextToPrivateCredentialsMappingStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

A hook to map context information to private credentials.

convertHttpRequest(HTTPRequest) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.DefaultAuthCodeTokenRequestEncoder

Convert the internally used HTTPRequest to the externally presented HttpUriRequest.

convertSecretKeyToString(SecretKey) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler

Convert the encoded byte array representing the secret into a UTF-8 String.

copyContextStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.metadata.impl.OIDCProviderMetadataLookupHandler

Optional strategy for resolving an existing metadata context from which to copy data.

createSignatureSigningConfiguration(SignatureSigningConfiguration, List<String>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.ClientAuthenticationConfigurationLookupFunction

Create a copy of the signature signing configuration given, but replace the algorithms with those input.

D

decodeAttribute(AttributeTranscoderRegistry, ProfileRequestContext, JSONObject, Multimap<String, IdPAttribute>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Access the registry of transcoding rules to transform (decode) the input claims to IdP Attributes.

decoderFactory - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.OIDCAuthnContext

The function to use to obtain a decoder.

DEFAULT_METRIC_NAME - Static variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Default prefix for metrics.

DEFAULT_RESPONSE_TYPE - Static variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddResponseTypeAndModeHandler

The Default response type if none is selected.

DefaultAccessTokenResponseDecoder - Class in net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl

Default access token response decoder, which converts a successful HTTP response into an OIDCTokenResponse.

DefaultAccessTokenResponseDecoder() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl.DefaultAccessTokenResponseDecoder

DefaultAuthCodeTokenRequestEncoder - Class in net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl

A token request encoder that builds an OAuth2.0 Access Token Request for an authorization_code grant and returns an HttpUriRequest.

DefaultAuthCodeTokenRequestEncoder() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.DefaultAuthCodeTokenRequestEncoder

DefaultClaimMergingStrategy - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

A default merging strategy for combing claims in the UserInfo response with those from the id_token.

DefaultClaimMergingStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultClaimMergingStrategy

DefaultClaimSanitizationStrategy - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

Produce a claims set from the JWT claims set without the validation claims, leaving the identity, authorization, and misc.

DefaultClaimSanitizationStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultClaimSanitizationStrategy

Constructor.

DefaultEndUserClaimsLookupStrategy - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate

Function that extracts the end-user's claims from the EndUserClaimsContext.

DefaultEndUserClaimsLookupStrategy(Function<ProfileRequestContext, EndUserClaimsContext>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.DefaultEndUserClaimsLookupStrategy

Constructor.

DefaultIDTokenLookupStrategy - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate

Function that extracts the id_token from the AccessTokenResponseContext.

DefaultIDTokenLookupStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.DefaultIDTokenLookupStrategy

Constructor.

DefaultIDTokenLookupStrategy(Function<ProfileRequestContext, AccessTokenResponseContext>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.DefaultIDTokenLookupStrategy

Constructor.

DefaultIssuerIDLookupFunction - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate

Strategy to pull out the ID of the OIDC proxy issuer/provider from the OIDCPeerEntityContext.

DefaultIssuerIDLookupFunction() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.DefaultIssuerIDLookupFunction

DefaultRedirectUriCreationFunction - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

Constructive, pure, function that returns a redirect_uri from one of (ordered): A pre-registered redirect_uri on the OAuth2ClientContext.getRedirectUriOverride().

DefaultRedirectUriCreationFunction() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultRedirectUriCreationFunction

Constructor.

DefaultUserInfoJWTLookupStrategy - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate

Function that extracts the UserInfo claims as a JWT from the UserInfoResponseContext.

DefaultUserInfoJWTLookupStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.DefaultUserInfoJWTLookupStrategy

Constructor.

DefaultUserInfoJWTLookupStrategy(Function<ProfileRequestContext, UserInfoResponseContext>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.DefaultUserInfoJWTLookupStrategy

Constructor.

DefaultUserInfoRequestEncoder - Class in net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl

Default encoder for UserInfo requests.

DefaultUserInfoRequestEncoder() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.DefaultUserInfoRequestEncoder

Constructor.

DefaultUserInfoResponseDecoder - Class in net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl

Response decoder for UserInfo responses.

DefaultUserInfoResponseDecoder() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl.DefaultUserInfoResponseDecoder

disabled - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.SimpleOIDCSubjectIdentifierCanonicalization.ActivationCondition

Disable this C14N no matter how appropriate the context?

doApply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction

Encode a HttpUriRequest from the given context.

doApply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.DefaultAuthCodeTokenRequestEncoder

doApply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.DefaultUserInfoRequestEncoder

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.audit.impl.TransitionActionWriteAuditLog

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeAuthorizationRequest

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeBlankOutboundResponseMessageContext

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientContext

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOutboundAuthorizationRequestMessageContext

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeRelyingPartyContext

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeUnverifiedRelyingPartyContext

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.PrepareOIDCInboundMessageContext

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.UnsupportedResponseTypeAction

doExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject

doExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ExchangeCodeForAccessToken

doExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims

doExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.UserInfoEndpointLookup

doExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateAuthenticationResponseResult

doExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateExternalAuthenticationContext

doExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOAuthAccessTokenResponse

doExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

doExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateResponseState

doExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateTokenClaims

doExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateUserInfoJSONObjectClaims

doExecute(ProfileRequestContext, SubjectCanonicalizationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.SimpleOIDCSubjectIdentifierCanonicalization

doInitialize() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl.AbstractJSONResponseDecoderFunction

doInitialize() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction

doInitialize() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultRedirectUriCreationFunction

doInitialize() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.PrepareOIDCInboundMessageContext

doInitialize() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

doInitialize() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateTokenClaims

doInitialize() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddRedirectURIHandler

doInitialize() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddStateHandler

doInitialize() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.metadata.impl.OIDCProviderMetadataLookupHandler

doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationContext

doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler

doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddAuthenticationContextClassReferencesHandler

doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddEndpointURIHandler

doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddForceAuthenticationHandler

doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddLoginHintHandler

doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddMaxAgeHandler

doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddNonceHandler

doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddPassiveAuthenticationHandler

doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddRedirectURIHandler

doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddRequestedClaimsHandler

doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddResponseTypeAndModeHandler

doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddScopesHandler

doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddStateHandler

doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.BuildPlainRequestObjectJWT

doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.SetAuthenticationRequestTimeHandler

doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.metadata.impl.OIDCProviderMetadataLookupHandler

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeAuthorizationRequest

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientContext

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOutboundAuthorizationRequestMessageContext

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeRelyingPartyContext

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.PrepareOIDCInboundMessageContext

doPreExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractOIDCAuthenticationResponseAction

doPreExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject

doPreExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims

doPreExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateAuthenticationResponseResult

doPreExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateExternalAuthenticationContext

doPreExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

doPreExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateTokenClaims

doPreExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateUserInfoJSONObjectClaims

doPreExecute(ProfileRequestContext, SubjectCanonicalizationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.SimpleOIDCSubjectIdentifierCanonicalization

doPreInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler

doPreInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler

doPreInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestMessageHandler

doTest(ProfileRequestContext, UserInfoResponseContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.AbstractUserInfoResponseTypeCondition

Implementations should override this method to provide necessary logic.

doTest(ProfileRequestContext, UserInfoResponseContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.UserInfoPlainResponseTypeCondition

E

embeddedPredicate - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.SimpleOIDCSubjectIdentifierCanonicalization

Supplies logic for pre-execute test.

encodeMessageAction - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.OIDCAuthnContext

Profile action to execute to produce outbound message response.

EncryptedIDTokenLookupStrategy - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate

Function that extracts the id_token from the AccessTokenResponseContext iff it is an EncryptedJWT type.

EncryptedIDTokenLookupStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.EncryptedIDTokenLookupStrategy

Constructor.

EncryptedIDTokenLookupStrategy(Function<ProfileRequestContext, AccessTokenResponseContext>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.EncryptedIDTokenLookupStrategy

Constructor.

EncryptedUserInfoJWTLookupStrategy - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate

Function that extracts the UserInfo JWT from the UserInfoResponseContext iff it is an EncryptedJWT type.

EncryptedUserInfoJWTLookupStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.EncryptedUserInfoJWTLookupStrategy

Constructor.

EncryptedUserInfoJWTLookupStrategy(Function<ProfileRequestContext, UserInfoResponseContext>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.EncryptedUserInfoJWTLookupStrategy

Constructor.

endUserClaims - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.EndUserClaimsContext

The claims associated with the authenticated end-user.

EndUserClaimsContext - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context

A context to hold the final set of claims associated with an authenticated end-user.

EndUserClaimsContext() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.EndUserClaimsContext

endUserClaimsContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.DefaultEndUserClaimsLookupStrategy

Strategy used to lookup the EndUserClaimsContext.

endUserClaimsContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims

Strategy used to look up the EndUserClaimsContext to set the parameters for.

endUserClaimsContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Strategy used to look up the EndUserClaimsContext to set the parameters for.

endUserContext - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

The context with claims pertaining to the end-user of this authentication.

equals(Object) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OAuth2AccessTokenPrincipal

equals(Object) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OAuth2RefreshTokenPrincipal

equals(Object) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OIDCSubjectIdentifierPrincipal

ExchangeCodeForAccessToken - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

Action to exchange the authorization code in the authentication response for an OAuth access token which contains an OIDC id_token.

ExchangeCodeForAccessToken() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ExchangeCodeForAccessToken

Constructor.

executeHttpRequest(HttpUriRequest, AbstractAuthenticatableOIDCContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction

Performs a call to an HTTP endpoint using the configured HttpClient and security parameters.

expiresIn - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OAuth2AccessTokenPrincipal

The duration in seconds when the access token expires.

extContext - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateExternalAuthenticationContext

Context containing the result to examine.

ExtraAudiencesLookupStrategy - Class in net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate

Locate additional accepted audiences from the ID Token profile config value.

ExtraAudiencesLookupStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate.ExtraAudiencesLookupStrategy

Constructor.

extractKeyFromState(String) - Static method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.OIDCProxySupport

Extract the key component from the state.

extractNonceFromState(String) - Static method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.OIDCProxySupport

Extract the nonce component from the state.

F

filterAlgorithmsAgainstFamily(JWSAlgorithm.Family, List<String>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.ClientAuthenticationConfigurationLookupFunction

Filter out any algorithms in the list that are not from the given algorithm family.

filterAttributes(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Check for inbound attributes and apply filtering.

FixedStringAuditExtractor - Class in net.shibboleth.idp.plugin.authn.oidc.rp.audit.impl

A simple audit extractor that allows a fixed string to be logged.

FixedStringAuditExtractor(String) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.audit.impl.FixedStringAuditExtractor

Constructor.

formatErrorResponse(ErrorObject) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction

Format an error message string from the ErrorObject provided.

G

generateNonce(Integer) - Static method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.OIDCProxySupport

Generates a random identifier to be used as a nonce.

generateState(String, String) - Static method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.OIDCProxySupport

Generate a state parameter from a nonce component and an execution key component.

getAccessTokenType() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OAuth2AccessTokenPrincipal

Get the token_type.

getAuthenticationRequest() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction

Returns the authentication request build by this IdP.

getAuthenticationRequest() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractOIDCAuthenticationResponseAction

Returns the authentication request build by this IdP.

getAuthenticationRequest() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler

Returns the authentication request build by this IdP.

getAuthenticationRequest() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestMessageHandler

Get the authentication request.

getAuthenticationResponse() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction

Returns the authentication response from the upstream OP.

getAuthenticationResponse() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractOIDCAuthenticationResponseAction

Returns the authentication response from the upstream OP.

getClientAuthenticationContext() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction

Get the client authentication context.

getClientId() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.OAuth2ClientContext

Get the client_id.

getEncodeMessageAction() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.OIDCAuthnContext

Get the message-encoding profile action.

getEndUserClaims() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.EndUserClaimsContext

Get the claims about the authenticated end-user.

getExpiresIn() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OAuth2AccessTokenPrincipal

Get the number of seconds since the response was generated the access_token expires.

getHttpRequestEncoderStrategy() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction

Get the HTTP request encoder strategy.

getHttpResponseDecoderStrategy() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction

Get the HTTP response decoder strategy.

getHttpServletRequest() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler

Get the HTTP servlet request supplier.

getHttpServletRequestSupplier() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler

Get the supplier for HTTP request if available.

getMessageDecoderFactory() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.OIDCAuthnContext

Get the factory function to obtain message decoders.

getName() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OAuth2AccessTokenPrincipal

getName() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OAuth2RefreshTokenPrincipal

getName() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OIDCSubjectIdentifierPrincipal

getObjectMapper() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl.AbstractJSONResponseDecoderFunction

Get the object mapper.

getOutboundMessageContext() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestMessageHandler

Get the outbound message context.

getOutboundMessageHandler() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.OIDCAuthnContext

Get the outbound MessageHandler to run prior to encoding.

getProfileConfiguration() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler

Returns the profile configuration associated with this request.

getProviderMetadata() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler

Returns the OpenID Provider metadata.

getProviderMetadataContext() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction

Returns the OIDC provider metadata context.

getProviderMetadataContext() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractOIDCAuthenticationResponseAction

Returns the OIDC provider metadata context.

getRedirectUriOverride() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.OAuth2ClientContext

Get the redirect_uri which should be used in place of any other.

getSigner(Algorithm, Credential) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler

Returns correct implementation of signer based on algorithm type.

getTokenResponse() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.AccessTokenResponseContext

Get the OAuth 2.0 and OIDC Token Response.

getTokenResponseContextLookupStrategy() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.AbstractTokenResponseLookupStrategy

Get the token response context lookup strategy.

getTokenResponseCreatedAt() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.AccessTokenResponseContext

Get the time the token response was set onto this context.

getUnprocessedIdTokenClaims() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.EndUserClaimsContext

Get the unproccessed id_token claims.

getUserInfo() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.UserInfoResponseContext

Get the user info response.

getUserInfoResponseContextLookupStrategy() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.AbstractUserInfoTokenResponseLookupStrategy

Get the UserInfo response context lookup strategy.

getWebflowKey() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.OutboundMessageHandlerContext

Get the Spring Webflow execution key.

H

handleRequest(ProfileRequestContext, AbstractAuthenticatableOIDCContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction

Encode the request using the supplied request encoder strategy.

hashCode() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OAuth2AccessTokenPrincipal

hashCode() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OAuth2RefreshTokenPrincipal

hashCode() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OIDCSubjectIdentifierPrincipal

httpClient - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction

HttpClient for contacting the endpoint.

httpClientSecurityParameters - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction

HTTP client security parameters.

httpMethodLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.DefaultUserInfoRequestEncoder

Strategy used to look up the HttpMethod used for this request.

httpRequestEncoderStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction

The message encoder to encode the HTTP request into a HttpUriRequest.

httpResponseDecoderStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction

The message decoder to decode the HTTP response.

HTTPS - Static variable in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.DefaultUserInfoRequestEncoder

The HTTPS scheme.

httpServletRequestSupplier - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler

Current HTTP request, if available.

I

identifier - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.PrepareOIDCInboundMessageContext

The identifier of the OP/RP to base the inbound context on.

identifierLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.PrepareOIDCInboundMessageContext

Strategy to lookup the identifier of the OP/RP to base the inbound context on.

idTokenClaims - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims

The stashed id_token claims.

idTokenClaims - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateUserInfoJSONObjectClaims

The stashed id_token claims.

IDTokenInAccessTokenUpdateStrategy - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate

Consumer to update the id_token in the AccessTokenResponseContext.

IDTokenInAccessTokenUpdateStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.IDTokenInAccessTokenUpdateStrategy

Constructor.

IDTokenInAccessTokenUpdateStrategy(Function<ProfileRequestContext, AccessTokenResponseContext>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.IDTokenInAccessTokenUpdateStrategy

Constructor.

IDTokenJOSEHeaderLookupStrategy - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate

Function that extracts the JWS JOSE header from the id_token inside the AccessTokenResponseContext.

IDTokenJOSEHeaderLookupStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.IDTokenJOSEHeaderLookupStrategy

Constructor.

IDTokenJOSEHeaderLookupStrategy(Function<ProfileRequestContext, AccessTokenResponseContext>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.IDTokenJOSEHeaderLookupStrategy

Constructor.

InboundMessageContextFromProxyPRC - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate

A ContextDataLookupFunction that returns the inbound MessageContext for a ProfileRequestContext located inside an AuthenticationContext i.e.

InboundMessageContextFromProxyPRC() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.InboundMessageContextFromProxyPRC

InitializeAuthorizationRequest - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

An action that creates an OIDCAuthenticationRequest shell to populate in future steps, and sets it to the outbound message context.

InitializeAuthorizationRequest() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeAuthorizationRequest

Constructor.

InitializeBlankOutboundResponseMessageContext - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

Action that adds an outbound MessageContext to the outbound message context inside the ProfileRequestContext.

InitializeBlankOutboundResponseMessageContext() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeBlankOutboundResponseMessageContext

InitializeOAuth2ClientAuthenticationContext - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

An action that initializes an OAuth2ClientAuthenticationContext for later use.

InitializeOAuth2ClientAuthenticationContext() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationContext

Constructor.

InitializeOAuth2ClientAuthenticationMethodHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

An action that resolves the Client Authentication method for the chosen upstream OpenID Provider (issuer) from the profile configuration, and adds it to the OAuth2ClientAuthenticationContext.

InitializeOAuth2ClientAuthenticationMethodHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler

Constructor.

InitializeOAuth2ClientContext - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

An action that resolves the client identifier and redirect URI for the chosen provider (issuer).

InitializeOAuth2ClientContext() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientContext

Constructor.

InitializeOutboundAuthorizationRequestMessageContext - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

Initialize an outbound message context with an OIDC peer entity context ready for an authorization/authentication request to be built.

InitializeOutboundAuthorizationRequestMessageContext() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOutboundAuthorizationRequestMessageContext

Constructor.

InitializeRelyingPartyContext - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

Action that adds a RelyingPartyContext to the current ProfileRequestContext tree via a creation function.

InitializeRelyingPartyContext() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeRelyingPartyContext

Constructor.

InitializeUnverifiedRelyingPartyContext - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

Action that adds an unverified RelyingPartyContext to the current ProfileRequestContext tree via a creation function.

InitializeUnverifiedRelyingPartyContext() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeUnverifiedRelyingPartyContext

Constructor.

isAuthenticated() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.AbstractAuthenticatableOIDCContext

Gets the flag indicating whether the information contained in this context has been authenticated.

IsCodeFlowPredicate - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic

A predicate that determines if the flow is a 'code-flow' using the Authentication Request that is inside the message context.

IsCodeFlowPredicate() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.IsCodeFlowPredicate

IsHybridFlowPredicate - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic

A predicate that determines if the flow is a 'hybrid-flow' using the Authentication Request that is inside the message context.

IsHybridFlowPredicate() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.IsHybridFlowPredicate

IsImplicitFlowPredicate - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic

A predicate that determines if the flow is a 'implicit-flow' using the Authentication Request that is inside the message context.

IsImplicitFlowPredicate() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.IsImplicitFlowPredicate

J

jwtBearerClientAuthSecurityParameters - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler

Stashed security parameters context for JWT Bearer Token client authentication methods.

jwtBearerExpiryOffset - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler

The offset to add to the 'exp' claim time for JWT client authentication methods.

JWTBearerTokenForClientAuthenticationPredicate - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic

A predicate that determines if the client authentication method chosen is a JWT type.

JWTBearerTokenForClientAuthenticationPredicate() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.JWTBearerTokenForClientAuthenticationPredicate

JWTClaimsSetFromRequestObjectLookupFunction - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.navigate

Extract the Payload from the Request Object inside the OIDCAuthenticationRequest.

JWTClaimsSetFromRequestObjectLookupFunction() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.navigate.JWTClaimsSetFromRequestObjectLookupFunction

Constructor.

jwtLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateTokenClaims

Strategy used to pull out a JWT to validate from the context.

K

keyName - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate.ProviderMetadataStringListValueLookupFunction

The key for which to fetch the value for.

L

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate.ProviderMetadataStringListValueLookupFunction

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.AccessTokenLookupStrategy

Logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.AuthenticationRequestTimeLookupFunction

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.EncryptedIDTokenLookupStrategy

Logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.EncryptedUserInfoJWTLookupStrategy

Logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.IDTokenInAccessTokenUpdateStrategy

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.RequestObjectTokenUpdateStrategy

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.SubFromIDTokenLookupFunction

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.UserInfoInUserInfoResponseContextUpdateStrategy

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl.DefaultAccessTokenResponseDecoder

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl.DefaultUserInfoResponseDecoder

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.DefaultAuthCodeTokenRequestEncoder

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.DefaultUserInfoRequestEncoder

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractOIDCAuthenticationResponseAction

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AuthorizationController

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultClaimMergingStrategy

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultRedirectUriCreationFunction

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ExchangeCodeForAccessToken

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeAuthorizationRequest

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeBlankOutboundResponseMessageContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOutboundAuthorizationRequestMessageContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeRelyingPartyContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeUnverifiedRelyingPartyContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.PrepareOIDCInboundMessageContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.SimpleOIDCSubjectIdentifierCanonicalization

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.UnsupportedResponseTypeAction

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.UserInfoEndpointLookup

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateAuthenticationResponseResult

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateExternalAuthenticationContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOAuthAccessTokenResponse

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateResponseState

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateTokenClaims

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateUserInfoJSONObjectClaims

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.IsCodeFlowPredicate

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.IsHybridFlowPredicate

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.IsImplicitFlowPredicate

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.JWTBearerTokenForClientAuthenticationPredicate

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.RequestObjectRequiredAndSupported

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.RequiresSignatureVerificationPredicate

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.navigate.JWTClaimsSetFromRequestObjectLookupFunction

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.navigate.PayloadFromRequestObjectLookupFunction

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestMessageHandler

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddAuthenticationContextClassReferencesHandler

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddEndpointURIHandler

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddForceAuthenticationHandler

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddLoginHintHandler

Logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddMaxAgeHandler

Logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddNonceHandler

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddPassiveAuthenticationHandler

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddRedirectURIHandler

Logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddRequestedClaimsHandler

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddResponseTypeAndModeHandler

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddScopesHandler

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddStateHandler

Logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.BuildPlainRequestObjectJWT

Logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.SetAuthenticationRequestTimeHandler

Logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.metadata.impl.OIDCProviderMetadataLookupHandler

Logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.ClientAuthenticationConfigurationLookupFunction

Class logger.

lookupProfileRequestContext(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler

Lookup the profile request context from the given message context using the function PRC_LOOKUP.

M

ManyValuesIntegerComparisonPredicate - Class in net.shibboleth.idp.plugin.authn.oidc.rp.security.impl

Predicate that returns true if the test integer is greater than 1.

ManyValuesIntegerComparisonPredicate() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.ManyValuesIntegerComparisonPredicate

maxAgeDefault - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate.MaxAgeLookupFunction

Default max authentication age if none can be found on the profile context.

MaxAgeLookupFunction - Class in net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate

Locate the maximum authentication age from the authentication request (first) or profile configuration (second).

MaxAgeLookupFunction(Duration) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate.MaxAgeLookupFunction

Constructor.

metadataResolver - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Optional supplemental metadata source for filtering.

N

net.shibboleth.idp.plugin.authn.oidc.rp - package net.shibboleth.idp.plugin.authn.oidc.rp

Shibboleth relying-party proxy implementation.

net.shibboleth.idp.plugin.authn.oidc.rp.audit.impl - package net.shibboleth.idp.plugin.authn.oidc.rp.audit.impl

Package that contains RP specific audit extractors.

net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate - package net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate

Functions to navigate into profile configuration information.

net.shibboleth.idp.plugin.authn.oidc.rp.context - package net.shibboleth.idp.plugin.authn.oidc.rp.context

Context classes for RP-specific information needed by profile actions.

net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate - package net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate

Functions to navigate profile contexts.

net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl - package net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl

This package has decoders for various OIDC/OAuth2 responses.

net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl - package net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl

This package has encoders for various OIDC/OAuth2 requests.

net.shibboleth.idp.plugin.authn.oidc.rp.exception - package net.shibboleth.idp.plugin.authn.oidc.rp.exception

Relying Party proxy exceptions.

net.shibboleth.idp.plugin.authn.oidc.rp.impl - package net.shibboleth.idp.plugin.authn.oidc.rp.impl

This package has an authentication implementation for OpenID Connect authentication providers.

net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic - package net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic

Predicates for RP-specific messaging configuration.

net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.navigate - package net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.navigate

Functions that navigate messaging contexts.

net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl - package net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl

Package that contains message handlers.

net.shibboleth.idp.plugin.authn.oidc.rp.metadata.impl - package net.shibboleth.idp.plugin.authn.oidc.rp.metadata.impl

Package that OpenID Provider and RelyingParty metadata lookup functions.

net.shibboleth.idp.plugin.authn.oidc.rp.principal - package net.shibboleth.idp.plugin.authn.oidc.rp.principal

OpenID Connect principals.

net.shibboleth.idp.plugin.authn.oidc.rp.security.impl - package net.shibboleth.idp.plugin.authn.oidc.rp.security.impl

Package that RP specific security functions.

nonceGenerationStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddNonceHandler

Strategy used to generate a nonce.

NonceValidationActivationCondition - Class in net.shibboleth.idp.plugin.authn.oidc.rp.security.impl

Determines if nonce validation should occur.

NonceValidationActivationCondition() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.NonceValidationActivationCondition

Constructor.

NonceValidationActivationCondition(Function<ProfileRequestContext, OIDCAuthenticationRequest>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.NonceValidationActivationCondition

Constructor.

O

OAuth2AccessTokenPrincipal - Class in net.shibboleth.idp.plugin.authn.oidc.rp.principal

Principal based on an OAuth 2.0 access token.

OAuth2AccessTokenPrincipal(String, String, Duration) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OAuth2AccessTokenPrincipal

Constructor.

oauth2ClientAuthenticationContext - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler

The stashed OAuth2 client authentication context.

oauth2ClientAuthenticationContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction

The strategy used to lookup or create the OAuth2ClientAuthenticationContext.

oauth2ClientAuthenticationContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationContext

The strategy used to lookup or create the OAuth2ClientAuthenticationContext for storing the client authentication.

oauth2ClientAuthenticationContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler

The strategy used to lookup or create the OAuth2ClientAuthenticationContext for storing the client authentication.

oauth2ClientContext - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeAuthorizationRequest

The stashed OAuth2 client context.

oauth2ClientContext - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientContext

The stashed OAuth2 client context.

OAuth2ClientContext - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context

A context to store information pertaining to the OAuth2 client (Relying Party) to use in communication with a OpenID Provider.

OAuth2ClientContext() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.OAuth2ClientContext

oauth2ClientContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.ClientIDFromOAuth2ClientContextFunction

Lookup strategy that to return a OAuth2ClientContext.

oauth2ClientContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AuthorizationController

The strategy used to lookup or create the OAuth2ClientContext for storing the client_id.

oauth2ClientContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultRedirectUriCreationFunction

The strategy used to lookup or create the OAuth2ClientContext for storing the client_id.

oauth2ClientContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeAuthorizationRequest

The strategy used to lookup or create the OAuth2ClientContext for storing the client_id.

oauth2ClientContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientContext

The strategy used to lookup or create the OAuth2ClientContext for storing the client_id.

OAuth2RefreshTokenPrincipal - Class in net.shibboleth.idp.plugin.authn.oidc.rp.principal

Principal based on an OAuth 2.0 refresh token.

OAuth2RefreshTokenPrincipal(String) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OAuth2RefreshTokenPrincipal

Constructor.

objectMapper - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl.AbstractJSONResponseDecoderFunction

JSON object mapper.

OIDCAuthnContext - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context

Manages state during proxied OIDC authentication via a Spring Controller.

OIDCAuthnContext(ProfileAction, Function<String, MessageDecoder>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.OIDCAuthnContext

Constructor.

oidcClientMetadataCtxLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOutboundAuthorizationRequestMessageContext

Strategy function to lookup the OIDCMetadataContext that represents this client during communication with the given OIDC peer.

oidcContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AuthorizationController

Lookup strategy to locate the SAML context.

oidcProviderMetadataContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeRelyingPartyContext

Strategy that will return OIDCMetadataContext.

oidcProviderMetadataContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.RequestObjectRequiredAndSupported

Strategy that will return OIDCProviderMetadata.

OIDCProviderMetadataFromOuboundPeerLookupStrategy - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate

Lookup function to extract the OIDCProviderMetadataContext from the OIDCPeerEntityContext in the outbound message.

OIDCProviderMetadataFromOuboundPeerLookupStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.OIDCProviderMetadataFromOuboundPeerLookupStrategy

OIDCProviderMetadataLookupHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.metadata.impl

Handler for inbound OIDC protocol messages that attempts to locate OIDC metadata for a OP (issuer), and attaches it with a OIDCMetadataContext as a child of a pre-existing instance of MessageContext.

OIDCProviderMetadataLookupHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.metadata.impl.OIDCProviderMetadataLookupHandler

Constructor.

OIDCProxyException - Exception in net.shibboleth.idp.plugin.authn.oidc.rp.exception

An exception to signal a general proxy error.

OIDCProxyException() - Constructor for exception net.shibboleth.idp.plugin.authn.oidc.rp.exception.OIDCProxyException

Constructor.

OIDCProxyException(String) - Constructor for exception net.shibboleth.idp.plugin.authn.oidc.rp.exception.OIDCProxyException

Constructor.

OIDCProxyException(String, Throwable) - Constructor for exception net.shibboleth.idp.plugin.authn.oidc.rp.exception.OIDCProxyException

Constructor.

OIDCProxyException(Throwable) - Constructor for exception net.shibboleth.idp.plugin.authn.oidc.rp.exception.OIDCProxyException

Constructor.

OIDCProxySupport - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

Support class for OIDC proxy related implementations.

OIDCProxySupport() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.OIDCProxySupport

Private constructor.

OIDCRPException - Exception in net.shibboleth.idp.plugin.authn.oidc.rp.exception

An exception to signal a general OIDC RelyingParty error.

OIDCRPException() - Constructor for exception net.shibboleth.idp.plugin.authn.oidc.rp.exception.OIDCRPException

Constructor.

OIDCRPException(String) - Constructor for exception net.shibboleth.idp.plugin.authn.oidc.rp.exception.OIDCRPException

Constructor.

OIDCRPException(String, Throwable) - Constructor for exception net.shibboleth.idp.plugin.authn.oidc.rp.exception.OIDCRPException

Constructor.

OIDCRPException(Throwable) - Constructor for exception net.shibboleth.idp.plugin.authn.oidc.rp.exception.OIDCRPException

Constructor.

OIDCRPModule - Class in net.shibboleth.idp.plugin.authn.oidc.rp

IdP Module implementation.

OIDCRPModule() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.OIDCRPModule

Constructor.

OIDCRPPlugin - Class in net.shibboleth.idp.plugin.authn.oidc.rp

Plugin description about the OIDC-RP plugin.

OIDCRPPlugin() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.OIDCRPPlugin

Constructor.

OIDCSubjectIdentifierPrincipal - Class in net.shibboleth.idp.plugin.authn.oidc.rp.principal

Principal based on an OIDC 'sub' (subject) identifier.

OIDCSubjectIdentifierPrincipal(String) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OIDCSubjectIdentifierPrincipal

Constructor.

outboundMessageContext - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestMessageHandler

The stashed OutboundMessageHandlerContext.

OutboundMessageContextFromProxyPRC - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate

A ContextDataLookupFunction that returns the outbound MessageContext for a ProfileRequestContext located inside an AuthenticationContext i.e.

OutboundMessageContextFromProxyPRC() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.OutboundMessageContextFromProxyPRC

outboundMessageHandler - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.OIDCAuthnContext

Outbound message handler to run prior to encoding.

OutboundMessageHandlerContext - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context

A context to stash controller parameters for use by message handlers.

OutboundMessageHandlerContext() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.OutboundMessageHandlerContext

Constructor to allow no-arg construction.

OutboundMessageHandlerContext(String) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.OutboundMessageHandlerContext

Convenience constructor.

outboundMessageHandlerContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestMessageHandler

Strategy to locate the OutboundMessageHandlerContext.

P

parseResponseMode(String) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddResponseTypeAndModeHandler

Parse the response_mode into a known ResponseMode.

parseResponseType(String) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddResponseTypeAndModeHandler

Parse the response_type into a known ResponseType.

PayloadFromRequestObjectLookupFunction - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.navigate

Extract the Payload from the Request Object inside the OIDCAuthenticationRequest.

PayloadFromRequestObjectLookupFunction() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.navigate.PayloadFromRequestObjectLookupFunction

Constructor.

peerEntityContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeRelyingPartyContext

Strategy used to look up the SAMLPeerEntityContext to draw from.

peerEntityCtx - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOutboundAuthorizationRequestMessageContext

The OIDCPeerEntityContext to base the outbound context on.

peerEntityCtx - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeRelyingPartyContext

OIDC peer entity context to populate from.

populateFilterContext(ProfileRequestContext, AttributeFilterContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Fill in the filter context data.

populateSubject(Subject) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

prc - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

The profile request context.

PRC_LOOKUP - Static variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler

Lookup function for parent ProfileRequestContext.

PRC_LOOKUP - Static variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler

Lookup function for parent ProfileRequestContext.

PRC_LOOKUP - Static variable in class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.ClientAuthenticationConfigurationLookupFunction

Lookup function for parent ProfileRequestContext.

PrepareOIDCInboundMessageContext - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

Action that adds an inbound MessageContext and a OIDCPeerEntityContext to the ProfileRequestContext based on the identity of a relying party, by default from the AuthenticationContext.getAuthenticatingAuthority().

PrepareOIDCInboundMessageContext() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.PrepareOIDCInboundMessageContext

Constructor.

processAttributes(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Process the inbound OIDC claims.

ProcessEndUserClaims - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

Process the end-user claims from the id_token and possible UserInfo claims sets.

ProcessEndUserClaims() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims

Constructor.

profileConfiguration - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler

Applicable stashed profile configuration.

profileConfiguration - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientContext

Applicable stashed profile configuration.

profileConfiguration - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Store off profile config.

profileConfiguration - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler

Applicable profile configuration.

profileRequestContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AuthorizationController

Lookup strategy to locate the nested ProfileRequestContext.

providerMetadata - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject

OpenID Provider metadata .

providerMetadata - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler

The stashed provider metadata.

providerMetadata - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler

OpenID Provider metadata .

providerMetadataContext - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction

OIDC Metadata context.

providerMetadataContext - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractOIDCAuthenticationResponseAction

OIDC Metadata context.

providerMetadataLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction

Lookup strategy to locate the OP metadata to use.

providerMetadataLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractOIDCAuthenticationResponseAction

Lookup strategy to locate the OP metadata to use.

providerMetadataLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject

Lookup strategy to locate the OpenID Provider metadata to use.

providerMetadataLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler

Lookup strategy to locate the OP metadata to use.

providerMetadataLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler

Lookup strategy to locate the OpenID Provider metadata to use.

ProviderMetadataStringListValueLookupFunction - Class in net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate

Fetches the value for the configured key as List of Strings.

ProviderMetadataStringListValueLookupFunction(String) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate.ProviderMetadataStringListValueLookupFunction

Constructor.

providerResolver - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.metadata.impl.OIDCProviderMetadataLookupHandler

Resolver used to look up OIDC provider information.

ProxyAuthenticationFlowAuditExtractor - Class in net.shibboleth.idp.plugin.authn.oidc.rp.audit.impl

A Function that returns the authentication flow ID from the attempted flow of the parent context used to satisfy a request.

ProxyAuthenticationFlowAuditExtractor() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.audit.impl.ProxyAuthenticationFlowAuditExtractor

R

redirectUriCreationStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddRedirectURIHandler

Function to create a suitable redirect URI from the given servlet request and profile request context.

RedirectUriLookupFunction - Class in net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate

Pull a redirect_uri from the Relying Party profile config if present.

RedirectUriLookupFunction() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate.RedirectUriLookupFunction

redirectUriOverride - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.OAuth2ClientContext

An redirect URI that should take preference over any automatically computed.

redirectUriOverrideLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientContext

A redirect_uri lookup strategy which can pull out an override redirect_uri from the profile request context.

refreshToken - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OAuth2RefreshTokenPrincipal

The access_token.

relyingPartyContextCreationStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeRelyingPartyContext

Strategy that will return or create a RelyingPartyContext.

relyingPartyContextCreationStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeUnverifiedRelyingPartyContext

Strategy that will return or create a RelyingPartyContext.

relyingPartyContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate.ExtraAudiencesLookupStrategy

Lookup function for relying party context.

relyingPartyContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject

Lookup function for relying party context.

relyingPartyContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler

Lookup function for relying party context.

relyingPartyContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientContext

Lookup function for relying party context.

relyingPartyContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Strategy used to look up a RelyingPartyContext for configuration options.

relyingPartyContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler

Lookup function for relying party context.

relyingPartyContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.ClientAuthenticationConfigurationLookupFunction

Strategy used to locate the RelyingPartyContext associated with a given ProfileRequestContext.

relyingPartyCtxLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOutboundAuthorizationRequestMessageContext

Strategy used to locate the RelyingPartyContext associated with a given ProfileRequestContext.

requestedClaimsHook - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddRequestedClaimsHandler

A hook that creates requested claims JSON Object from the profile request object.

RequestObjectRequiredAndSupported - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic

A predicate that tests whether a request object should be built based on what is configured in the profile configuration and whether the OP supports it.

RequestObjectRequiredAndSupported() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.RequestObjectRequiredAndSupported

Constructor.

RequestObjectSupportedSignatureSigningAlgorithms - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.navigate

Pull out the request object supported signature signing algorithms from the metadata.

RequestObjectSupportedSignatureSigningAlgorithms() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.navigate.RequestObjectSupportedSignatureSigningAlgorithms

requestObjectToBeSignedPredicate - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject

Is the request object going to be signed? if so the 'iss' and 'aud' claims will be set.

RequestObjectTokenUpdateStrategy - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate

Consumer that adds the JWT back to the Request Object in the OIDCAuthenticationRequest.

RequestObjectTokenUpdateStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.RequestObjectTokenUpdateStrategy

Constructor.

RequiresSignatureVerificationPredicate - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic

Is successful TLS credential verification enough to validate the JWT in question or should JWT signature validation be applied? Defaults to true — signature verification is required.

RequiresSignatureVerificationPredicate(Function<MessageContext, AbstractAuthenticatableOIDCContext>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.RequiresSignatureVerificationPredicate

Constructor.

resolveAlgorithm(SignatureSigningParameters) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler

Resolves JWS algorithm from signature signing parameters.

resolveClaimsSet(UserInfoResponse) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateUserInfoJSONObjectClaims

Resolve the UserInfo claims from the user info response.

resolveExisting(MessageContext, String) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.metadata.impl.OIDCProviderMetadataLookupHandler

Attempt to resolve an existing OIDCProviderMetadataContext from which to copy.

rpResolver - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.ClientAuthenticationConfigurationLookupFunction

A resolver for default security configurations.

S

securityParametersContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler

Strategy used to look up the SecurityParametersContext to set the parameters for.

serialVersionUID - Static variable in exception net.shibboleth.idp.plugin.authn.oidc.rp.exception.OIDCProxyException

Generated serial UID.

serialVersionUID - Static variable in exception net.shibboleth.idp.plugin.authn.oidc.rp.exception.OIDCRPException

Serial UID.

setAccessTokenResponseContextLookupStrategy(Function<ProfileRequestContext, AccessTokenResponseContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims

Set the strategy used to look up a AccessTokenResponseContext.

setAddToExistingInboundMessageContext(boolean) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.PrepareOIDCInboundMessageContext

Set whether to append any defined subcontexts to the existing inbound message context, or to a new one.

setAddToExistingInboundMessageContextPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.PrepareOIDCInboundMessageContext

Set a predicate to determine whether to append any defined subcontexts to the existing inbound message context, or to a new one.

setAllowedOrigins(Set<String>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultRedirectUriCreationFunction

Set the allowed origins to use if a redirect_uri is computed.

setAttributeExtractionStrategy(Function<ProfileRequestContext, Collection<IdPAttribute>>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Sets the strategy function to invoke for generalized extraction of data into IdPAttribute objects for inclusion in the AuthenticationResult.

setAttributeFilter(ReloadableService<AttributeFilter>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Sets the filter service to use for inbound attributes.

setAuthenticated(boolean) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.AbstractAuthenticatableOIDCContext

Sets the flag indicating whether the information contained in this context has been authenticated.

setAuthenticationRequestLookupStrategy(Function<MessageContext, OIDCAuthenticationRequest>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.RequestObjectTokenUpdateStrategy

Set the strategy used to locate the OIDCAuthenticationRequest to use.

setAuthenticationRequestLookupStrategy(Function<MessageContext, OIDCAuthenticationRequest>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.navigate.JWTClaimsSetFromRequestObjectLookupFunction

Set the strategy used to locate the OIDCAuthenticationRequest to use.

setAuthenticationRequestLookupStrategy(Function<MessageContext, OIDCAuthenticationRequest>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.navigate.PayloadFromRequestObjectLookupFunction

Set the strategy used to locate the OIDCAuthenticationRequest to use.

setAuthenticationRequestLookupStrategy(Function<MessageContext, OIDCAuthenticationRequest>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestMessageHandler

Set the strategy used to locate the OIDCAuthenticationRequest to use.

setAuthenticationRequestLookupStrategy(Function<ProfileRequestContext, OIDCAuthenticationRequest>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate.MaxAgeLookupFunction

Set the authentication request lookup strategy to use.

setAuthenticationRequestLookupStrategy(Function<ProfileRequestContext, OIDCAuthenticationRequest>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.AuthenticationRequestTimeLookupFunction

Set the strategy used to locate the OIDCAuthenticationRequest to use.

SetAuthenticationRequestTimeHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl

Handler that adds the authentication request time to the authentication request.

SetAuthenticationRequestTimeHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.SetAuthenticationRequestTimeHandler

setCallbackServletPath(String) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultRedirectUriCreationFunction

Set the path segment relative to the servlet path of the callback endpoint.

setClaimIfPresent(ClaimsSet, String, Object) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject

Set the claim onto the claims set if not null.

setClaimMergingStrategy(BinaryOperator<ClaimsSet>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims

Set the strategy used to merge UserInfo claims with id_token claims.

setClaimSanitizationStrategy(UnaryOperator<ClaimsSet>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims

Set the strategy used to sanitize claims from both the id_token and UserInfo claims set to produce a clean claims set.

setClaimsSetIsValidPredicate(Predicate<ClaimsSet>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject

Set a hook that allows the built request object to be validated before it is used.

setClaimsValidator(ClaimsValidator) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateTokenClaims

Set the JWT claims verifier to use.

setCleanupHook(Consumer<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateTokenClaims

Set the cleanup hook to execute after either a successful or unsuccessful claims validation.

setClientId(String) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.OAuth2ClientContext

Set the client_id.

setContextClassLookupStrategy(Function<MessageContext, ? extends AbstractOIDCEntityContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.metadata.impl.OIDCProviderMetadataLookupHandler

Set the context class lookup strategy.

setContextToPrivateCredentialsMappingStrategy(Function<ProfileRequestContext, Collection<Principal>>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Set the context to principal mapping strategy for mapping context information into principal collections to place in the private credentials set of the subject.

setCopyContextStrategy(Function<MessageContext, OIDCProviderMetadataContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.metadata.impl.OIDCProviderMetadataLookupHandler

Set the optional strategy for resolving an existing metadata context from which to copy data.

setEnableClaimSanitizationStrategy(boolean) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims

Set whether to enable claim sanitization.

setEndUserClaims(ClaimsSet) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.EndUserClaimsContext

Set the claims about the authenticated end-user.

setEndUserClaimsContextLookupStrategy(Function<ProfileRequestContext, EndUserClaimsContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims

Set the strategy used to lookup a EndUserClaimsContext.

setHttpClient(HttpClient) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction

Set the HttpClient to use.

setHttpClientSecurityParameters(HttpClientSecurityParameters) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction

Set the optional client security parameters.

setHttpMethodLookupStrategy(Function<ProfileRequestContext, OAuth2AuthorizationProfileConfiguration.HttpRequestMethod>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.DefaultUserInfoRequestEncoder

Set the strategy used to lookup the HTTP method to use in this request.

setHttpRequestEncoderStrategy(Function<ProfileRequestContext, HttpUriRequest>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction

Set the strategy used to map a HTTP request to a HttpUriRequest object.

setHttpResponseDecoderStrategy(Function<HttpResponse, T>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction

Set the strategy used to map a HTTP response the response type.

setHttpServletRequestSupplier(NonnullSupplier<HttpServletRequest>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler

Set the HTTP servlet request supplier.

setIdentiferLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.PrepareOIDCInboundMessageContext

Set the lookup strategy to identify the OP/RP.

setJwtBearerExpiryOffset(Duration) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler

Set the JWT expiry time offset for appropriate client authentication methods.

setJwtLookupStrategy(Function<ProfileRequestContext, JWT>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateTokenClaims

Set the lookup strategy that locates the JWT to validate from the context.

setMetadataResolver(MetadataResolver) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Set a metadata source to use during filtering.

setNonceGenerationStrategy(Function<ProfileRequestContext, Nonce>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddNonceHandler

Set the nonce generation strategy to use.

setOAuth2ClientAuthenticationContextLookupStrategy(Function<MessageContext, OAuth2ClientAuthenticationContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationContext

Set the strategy to lookup the OAuth2ClientAuthenticationContext from the ProfileRequestContext.

setOAuth2ClientAuthenticationContextLookupStrategy(Function<MessageContext, OAuth2ClientAuthenticationContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler

Set the strategy to lookup the OAuth2ClientAuthenticationContext from the MessageContext.

setOAuth2ClientContextLookupStrategy(Function<ProfileRequestContext, OAuth2ClientContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AuthorizationController

Set the strategy to lookup the OAuth2ClientContext from the ProfileRequestContext.

setOAuth2ClientContextLookupStrategy(Function<ProfileRequestContext, OAuth2ClientContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultRedirectUriCreationFunction

Set the strategy to lookup the OAuth2ClientContext from the ProfileRequestContext.

setOAuth2ClientContextLookupStrategy(Function<ProfileRequestContext, OAuth2ClientContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeAuthorizationRequest

Set the strategy to lookup the OAuth2ClientContext from the ProfileRequestContext.

setOAuth2ClientContextLookupStrategy(Function<ProfileRequestContext, OAuth2ClientContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientContext

Set the strategy to lookup the OAuth2ClientContext from the ProfileRequestContext.

setObjectMapper(ObjectMapper) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl.AbstractJSONResponseDecoderFunction

Set the JSON Object Mapper to use.

setOidcAuthnContextLookupStrategy(Function<ProfileRequestContext, OIDCAuthnContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AuthorizationController

Set the lookup strategy used to locate the OIDCAuthnContext.

setOIDCClientAuthenticationContextContextLookupStrategy(Function<ProfileRequestContext, OAuth2ClientAuthenticationContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction

Set the strategy to lookup the OAuth2ClientAuthenticationContext.

setOIDCClientMetadataContextLookupStrategy(Function<ProfileRequestContext, OIDCMetadataContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOutboundAuthorizationRequestMessageContext

Set the strategy to lookup the OIDCMetadataContext from the ProfileRequestContext.

setOidcProviderMetadataContextLookupStrategy(Function<ProfileRequestContext, OIDCProviderMetadataContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeRelyingPartyContext

Set the strategy used to return the OIDCProviderMetadataContext.

setOidcProviderMetadataContextLookupStrategy(Function<ProfileRequestContext, OIDCProviderMetadataContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.RequestObjectRequiredAndSupported

Set the lookup strategy to use to locate the OIDCProviderMetadataContext.

setOutboundMessageHandler(MessageHandler) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.OIDCAuthnContext

Set the outbound MessageHandler to run prior to encoding.

setOutboundMessageHandlerContextLookupStrategy(Function<MessageContext, OutboundMessageHandlerContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestMessageHandler

Set the strategy used to locate the OutboundMessageHandlerContext.

setPeerEntityContextLookupStrategy(Function<ProfileRequestContext, OIDCPeerEntityContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeRelyingPartyContext

Set the strategy used to look up the OIDCPeerEntityContext to draw from.

setProfileRequestContextLookupStrategy(Function<ProfileRequestContext, ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AuthorizationController

Set the lookup strategy used to locate the nested ProfileRequestContext.

setProviderMetadataLookupStrategy(Function<MessageContext, OIDCProviderMetadataContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler

Set the lookup strategy to locate the OpenID providers metadata.

setProviderMetadataLookupStrategy(Function<MessageContext, OIDCProviderMetadataContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler

Set the lookup strategy to locate the OpenID providers metadata.

setProviderMetadataLookupStrategy(Function<ProfileRequestContext, OIDCProviderMetadataContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction

Set the lookup strategy to locate the OpenID providers metadata.

setProviderMetadataLookupStrategy(Function<ProfileRequestContext, OIDCProviderMetadataContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractOIDCAuthenticationResponseAction

Set the lookup strategy to locate the OpenID providers metadata.

setProviderMetadataLookupStrategy(Function<ProfileRequestContext, OIDCProviderMetadataContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject

Set the lookup strategy to locate the OpenID providers metadata.

setProviderMetadataResolver(ProviderMetadataResolver) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.metadata.impl.OIDCProviderMetadataLookupHandler

Set the ProviderMetadataResolver to use.

setRedirectUriCreationStrategy(BiFunction<HttpServletRequest, ProfileRequestContext, URI>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddRedirectURIHandler

Set the creation strategy used to compute or lookup a redirect URI.

setRedirectUriOverride(URI) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.OAuth2ClientContext

Set the redirect_uri to use in place of any other.

setRedirectUriOverrideLookupStrategy(Function<ProfileRequestContext, URI>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientContext

Set the redirect_uri lookup strategy to locate an explicitly set redirect_uri.

setRelyingPartyConfigurationResolver(RelyingPartyConfigurationResolver) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.ClientAuthenticationConfigurationLookupFunction

Set the resolver for default security configurations.

setRelyingPartyContextCreationStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeRelyingPartyContext

Set the strategy used to return or create the RelyingPartyContext .

setRelyingPartyContextCreationStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeUnverifiedRelyingPartyContext

Set the strategy used to return or create the RelyingPartyContext.

setRelyingPartyContextLookupStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject

Set the strategy used to locate the RelyingPartyContext associated with a given ProfileRequestContext.

setRelyingPartyContextLookupStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler

Set lookup strategy for relying party context.

setRelyingPartyContextLookupStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientContext

Set lookup strategy for relying party context.

setRelyingPartyContextLookupStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOutboundAuthorizationRequestMessageContext

Set the strategy used to locate the RelyingPartyContext associated with a given ProfileRequestContext.

setRelyingPartyContextLookupStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Set the strategy used to return the RelyingPartyContext for configuration options.

setRelyingPartyContextLookupStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler

Set the strategy used to locate the RelyingPartyContext associated with a given ProfileRequestContext.

setRelyingPartyContextLookupStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.ClientAuthenticationConfigurationLookupFunction

Set the strategy used to locate the RelyingPartyContext associated with a given ProfileRequestContext.

setRequestedClaimsHook(Function<ProfileRequestContext, OIDCClaimsRequest>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddRequestedClaimsHandler

Set the hook that generates a requested claims JSON Object from the given profile request object.

setRequestObjectToBeSignedPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject

Set a predicate to determine if the request object will be 'eventually' signed.

setSecurityParametersContextLookupStrategy(Function<MessageContext, SecurityParametersContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler

Set the strategy used to look up the SecurityParametersContext.

setStateGenerationStrategy(Function<MessageContext, String>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddStateHandler

Set the creation strategy used to compute the 'state'.

setTokenResponse(OIDCTokenResponse) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.AccessTokenResponseContext

Set the OAuth 2.0 and OIDC Token Response.

setTokenResponseContextLookupStrategy(Function<ProfileRequestContext, AccessTokenResponseContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.DefaultUserInfoRequestEncoder

Set the strategy used to lookup the AccessTokenResponseContext.

setTokenResponseContextLookupStrategy(Function<ProfileRequestContext, AccessTokenResponseContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ExchangeCodeForAccessToken

Set the strategy used to look up a AccessTokenResponseContext.

setTokenResponseContextLookupStrategy(Function<ProfileRequestContext, AccessTokenResponseContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOAuthAccessTokenResponse

Set the strategy used to look up a AccessTokenResponseContext.

setTokenResponseContextLookupStrategy(Function<ProfileRequestContext, AccessTokenResponseContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateUserInfoJSONObjectClaims

Set the strategy used to look up a AccessTokenResponseContext.

setTranscoderRegistry(ReloadableService<AttributeTranscoderRegistry>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Sets the registry of transcoding rules to apply to encode attributes.

setUnprocessedIdTokenClaims(JWTClaimsSet) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.EndUserClaimsContext

Set the id_token claims about the authenticated end-user as returned from the id_token endpoint e.g.

setUserInfo(UserInfoSuccessResponse) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.UserInfoResponseContext

Set the user info response.

setUserInfoResponseContextLookupStrategy(Function<ProfileRequestContext, UserInfoResponseContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims

Set the strategy used to look up a UserInfoResponseContext.

setUserInfoResponseContextLookupStrategy(Function<ProfileRequestContext, UserInfoResponseContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.UserInfoEndpointLookup

Set the strategy used to look up a UserInfoResponseContext.

setUserInfoResponseContextLookupStrategy(Function<ProfileRequestContext, UserInfoResponseContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateUserInfoJSONObjectClaims

Set the strategy used to look up a UserInfoResponseContext.

setWebflowKey(String) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.OutboundMessageHandlerContext

Set the Spring Webflow execution key.

signClaims(JWTClaimsSet, SecurityParametersContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler

Sign the given JWT claims set using the signing parameters from the context.

SimpleOIDCSubjectIdentifierCanonicalization - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

An action that operates on a SubjectCanonicalizationContext child of the current ProfileRequestContext, and transforms the input Subject into a principal name by searching for one and only one OIDCSubjectIdentifierPrincipal custom principal.

SimpleOIDCSubjectIdentifierCanonicalization() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.SimpleOIDCSubjectIdentifierCanonicalization

Constructor.

SimpleOIDCSubjectIdentifierCanonicalization.ActivationCondition - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

A predicate that determines if this action can run or not.

STATE_CLAIM - Static variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddStateHandler

The 'state' claim name.

STATE_PARAMETER - Static variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AuthorizationController

The name of the Http parameter that stores the state value.

stateGenerationStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddStateHandler

Function to create a suitable 'state' to add to the authentication request.

SubFromIDTokenLookupFunction - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate

A function that pulls the subject 'sub' out of the id_token in the AccessTokenResponseContext.

SubFromIDTokenLookupFunction() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.SubFromIDTokenLookupFunction

Constructor.

SubFromIDTokenLookupFunction(Function<ProfileRequestContext, AccessTokenResponseContext>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.SubFromIDTokenLookupFunction

Constructor.

subject - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OIDCSubjectIdentifierPrincipal

The subject.

subjectIdentifierPrincipal - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.SimpleOIDCSubjectIdentifierCanonicalization

The custom Principal to operate on.

T

test(int) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.ManyValuesIntegerComparisonPredicate

test(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.IsCodeFlowPredicate

test(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.IsHybridFlowPredicate

test(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.IsImplicitFlowPredicate

test(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.JWTBearerTokenForClientAuthenticationPredicate

test(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.RequiresSignatureVerificationPredicate

test(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.SimpleOIDCSubjectIdentifierCanonicalization.ActivationCondition

test(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.AbstractUserInfoResponseTypeCondition

test(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.RequestObjectRequiredAndSupported

test(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.UserInfoLookupCondition

test(ProfileRequestContext, JWTClaimsSet) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.NonceValidationActivationCondition

tokenResponse - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.AccessTokenResponseContext

The OAuth 2.0 and OIDC token response.

tokenResponseContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.AbstractTokenResponseLookupStrategy

Strategy used to locate the AccessTokenResponseContext to extract the id_token from.

tokenResponseContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.IDTokenInAccessTokenUpdateStrategy

Strategy used to look up the AccessTokenResponseContext to set id_token on.

tokenResponseContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.DefaultUserInfoRequestEncoder

Strategy used to look up the AccessTokenResponseContext to set the parameters for.

tokenResponseContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AccessTokenToPrivateCredentialsMappingStrategy

Strategy used to look up the AccessTokenResponseContext to set the parameters for.

tokenResponseContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ExchangeCodeForAccessToken

Strategy used to look up the AccessTokenResponseContext to set the parameters for.

tokenResponseContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOAuthAccessTokenResponse

Strategy used to look up the AccessTokenResponseContext to validate.

tokenResponseContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateUserInfoJSONObjectClaims

Strategy used to look up the AccessTokenResponseContext.

tokenResponseCreatedAt - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.AccessTokenResponseContext

The time the token response was set onto this context.

toString() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OAuth2AccessTokenPrincipal

toString() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OAuth2RefreshTokenPrincipal

toString() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OIDCSubjectIdentifierPrincipal

transcoderRegistry - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Transcoder registry service object.

TransitionActionWriteAuditLog - Class in net.shibboleth.idp.plugin.authn.oidc.rp.audit.impl

A simple extension of the WriteAuditLog action that creates an Event with the string literal 'success', such that the write audit log action can be used inside a transition and does not prevent the transition from proceeding.

TransitionActionWriteAuditLog() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.audit.impl.TransitionActionWriteAuditLog

U

unprocessedIdTokenClaims - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.EndUserClaimsContext

The set of unprocessed id_token claims as returned from an id_token source.

UnsupportedResponseTypeAction - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

Simple action to log the response from an unsupported grant type.

UnsupportedResponseTypeAction() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.UnsupportedResponseTypeAction

userInfo - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.UserInfoResponseContext

The UserInfo response.

USERINFO_ERROR_RESPONSE_HEADER - Static variable in class net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl.DefaultUserInfoResponseDecoder

The UserInfo response header that carries error information.

userInfoClaims - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims

The stashed UserInfo claims.

userInfoCtx - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateUserInfoJSONObjectClaims

The stashed user info response context.

UserInfoEndpointLookup - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

Request information from the UserInfo OAuth2.0 endpoint using the access_token already present in the context.

UserInfoEndpointLookup() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.UserInfoEndpointLookup

Constructor.

UserInfoHttpRequestMethodLookupStrategy - Class in net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate

Locate the HTTP request method to use for the UserInfo request.

UserInfoHttpRequestMethodLookupStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate.UserInfoHttpRequestMethodLookupStrategy

UserInfoInUserInfoResponseContextUpdateStrategy - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate

Consumer strategy to update the UserInfo JWT in the UserInfoResponseContext.

UserInfoInUserInfoResponseContextUpdateStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.UserInfoInUserInfoResponseContextUpdateStrategy

Constructor.

UserInfoInUserInfoResponseContextUpdateStrategy(Function<ProfileRequestContext, UserInfoResponseContext>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.UserInfoInUserInfoResponseContextUpdateStrategy

Constructor.

UserInfoLookupCondition - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic

Checks whether the UserInfo endpoint should be accessed to retrieve claims about the authenticated end-user.

UserInfoLookupCondition() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.UserInfoLookupCondition

UserInfoPlainResponseTypeCondition - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic

Condition that returns true if the UserInfo response was an plain JSON type i.e.

UserInfoPlainResponseTypeCondition() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.UserInfoPlainResponseTypeCondition

Constructor.

UserInfoPlainResponseTypeCondition(Function<ProfileRequestContext, UserInfoResponseContext>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.UserInfoPlainResponseTypeCondition

Constructor.

UserInfoResponseContext - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context

A context to hold the response from the UserInfo endpoint.

UserInfoResponseContext() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.UserInfoResponseContext

userInfoResponseContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.AbstractUserInfoTokenResponseLookupStrategy

Strategy used to look up the UserInfoResponseContext.

userInfoResponseContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.DefaultUserInfoJWTLookupStrategy

Strategy used to look up the UserInfoResponseContext.

userInfoResponseContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims

Strategy used to look up the UserInfoResponseContext.

userInfoResponseContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.UserInfoEndpointLookup

Strategy used to look up the AccessTokenResponseContext to set the parameters for.

userInfoResponseContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateUserInfoJSONObjectClaims

Strategy used to look up the UserInfoResponseContext.

userInfoResponseContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.AbstractUserInfoResponseTypeCondition

Strategy used to look up the UserInfoResponseContext.

V

ValidateAuthenticationResponseResult - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

An action that checks the inbound authentication response indicated success as opposed to an error.

ValidateAuthenticationResponseResult() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateAuthenticationResponseResult

ValidateExternalAuthenticationContext - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

An action that checks for a ExternalAuthenticationContext for a signalled event via the ExternalAuthenticationContext.getAuthnError() method.

ValidateExternalAuthenticationContext() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateExternalAuthenticationContext

ValidateOAuthAccessTokenResponse - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

Validation action that validates the OAuth Access Token Response against RFC 6749 section 5.1 and OpenID Connect Core 1.0 section 3.1.3.3.

ValidateOAuthAccessTokenResponse() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOAuthAccessTokenResponse

Constructor.

ValidateOIDCAuthentication - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

An action that builds an AuthenticationResult based on an inbound OIDC authentication response.

ValidateOIDCAuthentication() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Constructor.

validateRequestObject(ProfileRequestContext, ClaimsSet) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject

Ensure the request object is valid by assessing the claims are correct.

ValidateResponseState - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

Authentication action that validates the authentication response state parameter (which is required in the Proxy flow) matches that in the authentication request.

ValidateResponseState() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateResponseState

ValidateTokenClaims - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

Action that validates the claims of a JWT using the supplied claims validator.

ValidateTokenClaims() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateTokenClaims

ValidateUserInfoJSONObjectClaims - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

Validate a successful UserInfo JSON Object Response according to section 5.3.2 of OpenID Connect Core 1.0.

ValidateUserInfoJSONObjectClaims() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateUserInfoJSONObjectClaims

Constructor.

validationClaims - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultClaimSanitizationStrategy

The set of validation claims to filter out of the input claims.

value - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.audit.impl.FixedStringAuditExtractor

The fixed string to log.

verifySuitableClientSecretJWTSecurityContext() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler

Check the populated security context is using the correct algorithm family for client_secret_jwt client authentication.

verifySuitablePrivateKetJWTSecurityContext() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler

Check the populated security context is using the correct algorithm family for private_key_jwt client authentication.

W

webflowKey - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.OutboundMessageHandlerContext

The spring webflow key.

A B C D E F G H I J K L M N O P R S T U V W
All Classes All Packages