Package net.shibboleth.idp.plugin.authn.oidc.rp.impl

This package has an authentication implementation for OpenID Connect authentication providers.

Class Summary

Class	Description
AbstractHttpOIDCAuthenticationAction<T extends com.nimbusds.oauth2.sdk.Response>	An abstract class for OIDC actions that make synchronous HTTP requests and return responses.
AbstractOIDCAuthenticationResponseAction	Abstract class for actions based on the AuthenticationResponse located under the InOutOperationContext.getInboundMessageContext() and the built OIDCAuthenticationRequest located under the InOutOperationContext.getOutboundMessageContext().
AccessTokenToPrivateCredentialsMappingStrategy	A mapping strategy that locates the AccessTokenResponseContext from the ProfileRequestContext and constructs and returns an OAuth2AccessTokenPrincipal from the access_token, token_type, and expires_in.
AuthorizationController	Servlet compatible with the ExternalAuthentication interface that begins, by HTTP redirect, an OpenID Connect authentication request to an OpenID Connect Provider (an OAuth 2.0 Authorization Server that supports OpenID Connect).
BuildRequestObject	Action that creates a Request Object JWT, and sets it to the work context OIDCAuthenticationRequest located under InOutOperationContext.getOutboundMessageContext().
DefaultClaimMergingStrategy	A default merging strategy for combing claims in the UserInfo response with those from the id_token.
DefaultClaimSanitizationStrategy	Produce a claims set from the JWT claims set without the validation claims, leaving the identity, authorization, and misc.
DefaultRedirectUriCreationFunction	Constructive, pure, function that returns a redirect_uri from one of (ordered): A pre-registered redirect_uri on the OAuth2ClientContext.getRedirectUriOverride().
ExchangeCodeForAccessToken	Action to exchange the authorization code in the authentication response for an OAuth access token which contains an OIDC id_token.
InitializeAuthorizationRequest	An action that creates an OIDCAuthenticationRequest shell to populate in future steps, and sets it to the outbound message context.
InitializeBlankOutboundResponseMessageContext	Action that adds an outbound MessageContext to the outbound message context inside the ProfileRequestContext.
InitializeOAuth2ClientAuthenticationContext	An action that initializes an OAuth2ClientAuthenticationContext for later use.
InitializeOAuth2ClientAuthenticationMethodHandler	An action that resolves the Client Authentication method for the chosen upstream OpenID Provider (issuer) from the profile configuration, and adds it to the OAuth2ClientAuthenticationContext.
InitializeOAuth2ClientContext	An action that resolves the client identifier and redirect URI for the chosen provider (issuer).
InitializeOutboundAuthorizationRequestMessageContext	Initialize an outbound message context with an OIDC peer entity context ready for an authorization/authentication request to be built.
InitializeRelyingPartyContext	Action that adds a RelyingPartyContext to the current ProfileRequestContext tree via a creation function.
InitializeUnverifiedRelyingPartyContext	Action that adds an unverified RelyingPartyContext to the current ProfileRequestContext tree via a creation function.
OIDCProxySupport	Support class for OIDC proxy related implementations.
PrepareOIDCInboundMessageContext	Action that adds an inbound MessageContext and a OIDCPeerEntityContext to the ProfileRequestContext based on the identity of a relying party, by default from the AuthenticationContext.getAuthenticatingAuthority().
ProcessEndUserClaims	Process the end-user claims from the id_token and possible UserInfo claims sets.
SimpleOIDCSubjectIdentifierCanonicalization	An action that operates on a SubjectCanonicalizationContext child of the current ProfileRequestContext, and transforms the input Subject into a principal name by searching for one and only one OIDCSubjectIdentifierPrincipal custom principal.
SimpleOIDCSubjectIdentifierCanonicalization.ActivationCondition	A predicate that determines if this action can run or not.
UnsupportedResponseTypeAction	Simple action to log the response from an unsupported grant type.
UserInfoEndpointLookup	Request information from the UserInfo OAuth2.0 endpoint using the access_token already present in the context.
ValidateAuthenticationResponseResult	An action that checks the inbound authentication response indicated success as opposed to an error.
ValidateExternalAuthenticationContext	An action that checks for a ExternalAuthenticationContext for a signalled event via the ExternalAuthenticationContext.getAuthnError() method.
ValidateOAuthAccessTokenResponse	Validation action that validates the OAuth Access Token Response against RFC 6749 section 5.1 and OpenID Connect Core 1.0 section 3.1.3.3.
ValidateOIDCAuthentication	An action that builds an AuthenticationResult based on an inbound OIDC authentication response.
ValidateResponseState	Authentication action that validates the authentication response state parameter (which is required in the Proxy flow) matches that in the authentication request.
ValidateTokenClaims	Action that validates the claims of a JWT using the supplied claims validator.
ValidateUserInfoJSONObjectClaims	Validate a successful UserInfo JSON Object Response according to section 5.3.2 of OpenID Connect Core 1.0.