Package net.shibboleth.idp.plugin.authn.oidc.rp.security.impl

Class ClientAuthenticationConfigurationLookupFunction

java.lang.Object

net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.ClientAuthenticationConfigurationLookupFunction

All Implemented Interfaces:

Function<MessageContext,List<SignatureSigningConfiguration>>, ContextDataLookupFunction<MessageContext,List<SignatureSigningConfiguration>>

public class ClientAuthenticationConfigurationLookupFunction
extends Object
implements ContextDataLookupFunction<MessageContext,List<SignatureSigningConfiguration>>

A function that returns a SignatureSigningConfiguration list for signing client authentication JWTs.

The configuration list is taken from the active security configuration, but the algorithms are filtered to only allow those that are compatible with the client authentication type chosen. For example, the HMAC family of algorithms if the client_secret_jwt method is used.

Field Summary

Fields

Modifier and Type	Field	Description
private org.slf4j.Logger	log	Class logger.
private static ParentProfileRequestContextLookup<MessageContext>	PRC_LOOKUP	Lookup function for parent ProfileRequestContext.
private Function<ProfileRequestContext,RelyingPartyContext>	relyingPartyContextLookupStrategy	Strategy used to locate the RelyingPartyContext associated with a given ProfileRequestContext.
private RelyingPartyConfigurationResolver	rpResolver	A resolver for default security configurations.

Constructor Summary

Constructors

Constructor	Description
ClientAuthenticationConfigurationLookupFunction()	Constructor.

Method Summary

Modifier and Type	Method	Description
List<SignatureSigningConfiguration>	apply(MessageContext input)
private BasicSignatureSigningConfiguration	createSignatureSigningConfiguration(SignatureSigningConfiguration signingConfig, List<String> algorithms)	Create a copy of the signature signing configuration given, but replace the algorithms with those input.
private List<String>	filterAlgorithmsAgainstFamily(com.nimbusds.jose.JWSAlgorithm.Family algFamily, List<String> algorithms)	Filter out any algorithms in the list that are not from the given algorithm family.
void	setRelyingPartyConfigurationResolver(RelyingPartyConfigurationResolver resolver)	Set the resolver for default security configurations.
void	setRelyingPartyContextLookupStrategy(Function<ProfileRequestContext,RelyingPartyContext> strategy)	Set the strategy used to locate the RelyingPartyContext associated with a given ProfileRequestContext.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface java.util.function.Function

andThen, compose

Field Detail

PRC_LOOKUP

@Nonnull
private static final ParentProfileRequestContextLookup<MessageContext> PRC_LOOKUP

Lookup function for parent ProfileRequestContext.

log

@Nonnull
private final org.slf4j.Logger log

Class logger.

relyingPartyContextLookupStrategy

@Nonnull
private Function<ProfileRequestContext,RelyingPartyContext> relyingPartyContextLookupStrategy

Strategy used to locate the RelyingPartyContext associated with a given ProfileRequestContext.

rpResolver

@Nullable
private RelyingPartyConfigurationResolver rpResolver

A resolver for default security configurations.

Constructor Detail

ClientAuthenticationConfigurationLookupFunction

public ClientAuthenticationConfigurationLookupFunction()

Constructor.

Method Detail

setRelyingPartyConfigurationResolver

public void setRelyingPartyConfigurationResolver(@Nullable
                                                 RelyingPartyConfigurationResolver resolver)

Set the resolver for default security configurations.

Parameters:

resolver - the resolver to use

setRelyingPartyContextLookupStrategy

public void setRelyingPartyContextLookupStrategy(@Nonnull
                                                 Function<ProfileRequestContext,RelyingPartyContext> strategy)

Set the strategy used to locate the RelyingPartyContext associated with a given ProfileRequestContext.

Parameters:

strategy - lookup strategy

apply

@Nonnull
@NonnullElements
@NotLive
@Unmodifiable
public List<SignatureSigningConfiguration> apply(@Nullable
                                                 MessageContext input)

Specified by:

apply in interface Function<MessageContext,List<SignatureSigningConfiguration>>

filterAlgorithmsAgainstFamily

@Nonnull
@NonnullElements
@NotLive
@Unmodifiable
private List<String> filterAlgorithmsAgainstFamily(@Nonnull
                                                   com.nimbusds.jose.JWSAlgorithm.Family algFamily,
                                                   @Nullable
                                                   List<String> algorithms)

Filter out any algorithms in the list that are not from the given algorithm family.

Parameters:

algFamily - the algorithm family to filter on

algorithms - the algorithms to filter

Returns:

a filtered list of algorithms

createSignatureSigningConfiguration

@Nonnull
private BasicSignatureSigningConfiguration createSignatureSigningConfiguration(@Nonnull
                                                                               SignatureSigningConfiguration signingConfig,
                                                                               @Nonnull
                                                                               List<String> algorithms)

Create a copy of the signature signing configuration given, but replace the algorithms with those input.

Parameters:

signingConfig - the signature signing configuration to copy

algorithms - the algorithms to add into the copied configuration

Returns:

a copied signature signing configuration with the algorithms input