Package net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl

Class AddAuthenticationContextClassReferencesHandler

java.lang.Object

net.shibboleth.shared.component.AbstractInitializableComponent

org.opensaml.messaging.handler.AbstractMessageHandler

net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler

net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddAuthenticationContextClassReferencesHandler

All Implemented Interfaces:

Component, DestructableComponent, InitializableComponent, MessageHandler

public class AddAuthenticationContextClassReferencesHandler
extends AbstractOIDCAuthenticationRequestActionMessageHandler

A message handler that adds any authentication context class references from the those derived from the profile config - which may be proxied and mapped from the original request.

Field Summary

Fields

Modifier and Type	Field	Description
private final org.slf4j.Logger	log	Class logger.

Constructor Summary

Constructors

Constructor	Description
AddAuthenticationContextClassReferencesHandler()

Method Summary

Modifier and Type	Method	Description
private List<com.nimbusds.openid.connect.sdk.claims.ACR>	buildRequestedAuthnContext(ProfileRequestContext profileRequestContext)	Build a list of ACRs if warranted.
protected void	doInvoke(MessageContext messageContext)

Methods inherited from class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler

adapt, adapt, doPreInvoke, getAuthenticationRequest, getHttpServletRequest, getHttpServletRequestSupplier, getProfileConfiguration, getProviderMetadata, lookupProfileRequestContext, setHttpServletRequestSupplier, setProviderMetadataLookupStrategy, setRelyingPartyContextLookupStrategy

Methods inherited from class org.opensaml.messaging.handler.AbstractMessageHandler

doPostInvoke, doPostInvoke, getActivationCondition, getLogPrefix, invoke, isPreInvokeCalled, setActivationCondition

Methods inherited from class net.shibboleth.shared.component.AbstractInitializableComponent

checkComponentActive, checkSetterPreconditions, destroy, doDestroy, doInitialize, ifDestroyedThrowDestroyedComponentException, ifInitializedThrowUnmodifiabledComponentException, ifNotInitializedThrowUninitializedComponentException, initialize, isDestroyed, isInitialized

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface net.shibboleth.shared.component.InitializableComponent

initialize, isInitialized

Field Details

log

@Nonnull
private final org.slf4j.Logger log

Class logger.

Constructor Details

AddAuthenticationContextClassReferencesHandler

public AddAuthenticationContextClassReferencesHandler()

Method Details

doInvoke

protected void doInvoke(@Nonnull
 MessageContext messageContext)
                 throws MessageHandlerException

Specified by:

doInvoke in class AbstractMessageHandler

Throws:

MessageHandlerException

buildRequestedAuthnContext

@Nullable
private List<com.nimbusds.openid.connect.sdk.claims.ACR> buildRequestedAuthnContext(@Nullable
 ProfileRequestContext profileRequestContext)

Build a list of ACRs if warranted. Converted from any default authentication method Principals.

By default for this proxy case, the authentication methods are mapped from the upstream request by the default authentication methods e.g. using the ProxyAwareDefaultOIDCAuthenticationContextClassRequestLookupFunction.

Parameters:

profileRequestContext - current profile request context

Returns:

the list of ACRs.