Package net.shibboleth.idp.plugin.authn.oidc.rp.impl

Class UserInfoEndpointLookup

java.lang.Object

net.shibboleth.utilities.java.support.component.AbstractInitializableComponent

org.opensaml.profile.action.AbstractProfileAction

org.opensaml.profile.action.AbstractConditionalProfileAction

net.shibboleth.idp.profile.AbstractProfileAction

net.shibboleth.idp.authn.AbstractAuthenticationAction

net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractOIDCAuthenticationResponseAction

net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction<com.nimbusds.openid.connect.sdk.UserInfoResponse>

net.shibboleth.idp.plugin.authn.oidc.rp.impl.UserInfoEndpointLookup

All Implemented Interfaces:

Component, DestructableComponent, InitializableComponent, ProfileAction, Aware, MessageSource, MessageSourceAware, Action

public class UserInfoEndpointLookup
extends AbstractHttpOIDCAuthenticationAction<com.nimbusds.openid.connect.sdk.UserInfoResponse>

Request information from the UserInfo OAuth2.0 endpoint using the access_token already present in the context. Return consented claims about the subject.

Event:

EventIds.PROCEED_EVENT_ID, EventIds.INVALID_PROFILE_CTX, AuthnEventIds.AUTHN_EXCEPTION

Postcondition:

Add a claims returned from the UserInfo endpoint to the UserInfoResponseContext.

Field Summary

Fields

Modifier and Type	Field	Description
private org.slf4j.Logger	log	Class logger.
private Function<ProfileRequestContext,UserInfoResponseContext>	userInfoResponseContextLookupStrategy	Strategy used to look up the AccessTokenResponseContext to set the parameters for.

Constructor Summary

Constructors

Constructor	Description
UserInfoEndpointLookup()	Constructor.

Method Summary

Modifier and Type	Method	Description
protected void	doExecute(ProfileRequestContext profileRequestContext, AuthenticationContext authenticationContext)
void	setUserInfoResponseContextLookupStrategy(Function<ProfileRequestContext,UserInfoResponseContext> strategy)	Set the strategy used to look up a UserInfoResponseContext.

Methods inherited from class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction

doInitialize, executeHttpRequest, getHttpRequestEncoderStrategy, getHttpResponseDecoderStrategy, handleRequest, setHttpClient, setHttpClientSecurityParameters, setHttpRequestEncoderStrategy, setHttpResponseDecoderStrategy

Methods inherited from class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractOIDCAuthenticationResponseAction

doPreExecute, getAuthenticationRequest, getAuthenticationResponse, getProviderMetadataContext, setProviderMetadataLookupStrategy

Methods inherited from class net.shibboleth.idp.authn.AbstractAuthenticationAction

doExecute, doPreExecute, setAuthenticationContextLookupStrategy

Methods inherited from class net.shibboleth.idp.profile.AbstractProfileAction

doExecute, execute, getBean, getBean, getMessage, getMessage, getMessage, getParameter, getParameter, getProfileContextLookupStrategy, getRequestContext, getResult, setMessageSource, setProfileContextLookupStrategy

Methods inherited from class org.opensaml.profile.action.AbstractConditionalProfileAction

getActivationCondition, setActivationCondition

Methods inherited from class org.opensaml.profile.action.AbstractProfileAction

doPostExecute, doPostExecute, execute, getHttpServletRequest, getHttpServletRequestSupplier, getHttpServletResponse, getHttpServletResponseSupplier, getLogPrefix, setHttpServletRequest, setHttpServletRequestSupplier, setHttpServletResponse, setHttpServletResponseSupplier

Methods inherited from class net.shibboleth.utilities.java.support.component.AbstractInitializableComponent

destroy, doDestroy, initialize, isDestroyed, isInitialized

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface net.shibboleth.utilities.java.support.component.InitializableComponent

initialize, isInitialized

Field Detail

log

@Nonnull
private final org.slf4j.Logger log

Class logger.

userInfoResponseContextLookupStrategy

@Nonnull
private Function<ProfileRequestContext,UserInfoResponseContext> userInfoResponseContextLookupStrategy

Strategy used to look up the AccessTokenResponseContext to set the parameters for.

Constructor Detail

UserInfoEndpointLookup

public UserInfoEndpointLookup()

Constructor.

Method Detail

setUserInfoResponseContextLookupStrategy

public void setUserInfoResponseContextLookupStrategy(@Nonnull
                                                     Function<ProfileRequestContext,UserInfoResponseContext> strategy)

Set the strategy used to look up a UserInfoResponseContext.

Parameters:

strategy - lookup strategy

doExecute

protected void doExecute(@Nonnull
                         ProfileRequestContext profileRequestContext,
                         @Nonnull
                         AuthenticationContext authenticationContext)

Overrides:

doExecute in class AbstractAuthenticationAction