Package net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate

Class SubFromIDTokenLookupFunction

java.lang.Object

net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.AbstractTokenResponseLookupStrategy

net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.SubFromIDTokenLookupFunction

All Implemented Interfaces:

BiFunction<ProfileRequestContext,com.nimbusds.jwt.JWTClaimsSet,String>

@ThreadSafe
public class SubFromIDTokenLookupFunction
extends AbstractTokenResponseLookupStrategy
implements BiFunction<ProfileRequestContext,com.nimbusds.jwt.JWTClaimsSet,String>

A function that pulls the subject 'sub' out of the id_token in the AccessTokenResponseContext.

Field Summary

Fields

Modifier and Type	Field	Description
private org.slf4j.Logger	log	Class logger.

Constructor Summary

Constructors

Constructor	Description
SubFromIDTokenLookupFunction()	Constructor.
SubFromIDTokenLookupFunction(Function<ProfileRequestContext,AccessTokenResponseContext> strategy)	Constructor.

Method Summary

Modifier and Type	Method	Description
String	apply(ProfileRequestContext prc, com.nimbusds.jwt.JWTClaimsSet claimsSet)	The input claims set is ignored because it belongs to the JWT that is being tested.

Methods inherited from class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.AbstractTokenResponseLookupStrategy

getTokenResponseContextLookupStrategy

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface java.util.function.BiFunction

andThen

Field Detail

log

@Nonnull
private final org.slf4j.Logger log

Class logger.

Constructor Detail

SubFromIDTokenLookupFunction

public SubFromIDTokenLookupFunction()

Constructor.

SubFromIDTokenLookupFunction

public SubFromIDTokenLookupFunction(@Nonnull @ParameterName(name="accessTokenContextLookupStrategy")
                                    Function<ProfileRequestContext,AccessTokenResponseContext> strategy)

Constructor.

Parameters:

strategy - the AccessTokenResponseContext lookup strategy to use.

Method Detail

apply

@Nullable
public String apply(@Nonnull
                    ProfileRequestContext prc,
                    @Nullable
                    com.nimbusds.jwt.JWTClaimsSet claimsSet)

The input claims set is ignored because it belongs to the JWT that is being tested. Here we lookup the 'sub' claim from the id_token in a different context.

Specified by:

apply in interface BiFunction<ProfileRequestContext,com.nimbusds.jwt.JWTClaimsSet,String>