Index (Shibboleth IdP :: Plugins :: OpenID Connect Relying Party Login Flow 2.3.1-SNAPSHOT API)

A B C D E F G H I J K L M N O P R S T U V W
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form

A

AbstractAuthenticatableOIDCContext - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context: An abstract base class for subcontexts that carry information which may be authenticated.
AbstractAuthenticatableOIDCContext() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.AbstractAuthenticatableOIDCContext
AbstractHttpOIDCAuthenticationAction<T extends com.nimbusds.oauth2.sdk.Response> - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl: An abstract class for OIDC actions that make synchronous HTTP requests and return types of responses.
AbstractHttpOIDCAuthenticationAction() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction
AbstractJSONResponseDecoderFunction<T> - Class in net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl: Abstract class for JSON based Http client response decoders.
AbstractJSONResponseDecoderFunction() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl.AbstractJSONResponseDecoderFunction
AbstractOIDCAuthenticationRequestActionMessageHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl: An abstract message handler that runs inside an WebFlowMessageHandlerAdaptor that provides functions to make available various OIDC contexts.
AbstractOIDCAuthenticationRequestActionMessageHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler: Constructor.
AbstractOIDCAuthenticationRequestMessageHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl: An abstract message handler that does *not* run inside an WebFlowMessageHandlerAdaptor.
AbstractOIDCAuthenticationRequestMessageHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestMessageHandler: Constructor.
AbstractOIDCAuthenticationResponseAction - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl: Abstract class for actions based on the AuthenticationResponse located under the InOutOperationContext.getInboundMessageContext() and the built OIDCAuthenticationRequest located under the InOutOperationContext.getOutboundMessageContext().
AbstractOIDCAuthenticationResponseAction() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractOIDCAuthenticationResponseAction: Constructor.
AbstractRequestEncoderFunction - Class in net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl: Abstract request encoder function that pulls out various contexts and request/response messages.
AbstractRequestEncoderFunction() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction: Constructor.
AbstractTokenResponseLookupStrategy - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate: Base class for looking up the token response context.
AbstractTokenResponseLookupStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.AbstractTokenResponseLookupStrategy: Constructor.
AbstractTokenResponseLookupStrategy(Function<ProfileRequestContext, AccessTokenResponseContext>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.AbstractTokenResponseLookupStrategy: Constructor.
AbstractUserInfoResponseTypeCondition - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic: Abstract predicate for pulling out the UserInfoResponseContext.
AbstractUserInfoResponseTypeCondition() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.AbstractUserInfoResponseTypeCondition: Constructor.
AbstractUserInfoResponseTypeCondition(Function<ProfileRequestContext, UserInfoResponseContext>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.AbstractUserInfoResponseTypeCondition: Constructor.
AbstractUserInfoTokenResponseLookupStrategy - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate: Base class for looking up the UserInfo token response context.
AbstractUserInfoTokenResponseLookupStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.AbstractUserInfoTokenResponseLookupStrategy: Constructor.
AbstractUserInfoTokenResponseLookupStrategy(Function<ProfileRequestContext, UserInfoResponseContext>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.AbstractUserInfoTokenResponseLookupStrategy: Constructor.
accept(JWT, MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.RequestObjectTokenUpdateStrategy
accept(ProfileRequestContext, JWT) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.IDTokenInAccessTokenUpdateStrategy
accept(ProfileRequestContext, JWT) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.UserInfoInUserInfoResponseContextUpdateStrategy
accessToken - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OAuth2AccessTokenPrincipal: The access_token.
AccessTokenLookupStrategy - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate: Function that extracts the access_token from the AccessTokenResponseContext.
AccessTokenLookupStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.AccessTokenLookupStrategy: Constructor.
AccessTokenLookupStrategy(Function<ProfileRequestContext, AccessTokenResponseContext>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.AccessTokenLookupStrategy: Constructor.
AccessTokenResponseContext - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context: A context to hold an OIDC token request response.
AccessTokenResponseContext() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.AccessTokenResponseContext
accessTokenResponseContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims: Strategy used to look up the AccessTokenResponseContext .
AccessTokenToPrivateCredentialsMappingStrategy - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl: A mapping strategy that locates the AccessTokenResponseContext from the ProfileRequestContext and constructs and returns an OAuth2AccessTokenPrincipal from the access_token, token_type, and expires_in.
AccessTokenToPrivateCredentialsMappingStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AccessTokenToPrivateCredentialsMappingStrategy: Constructor.
AccessTokenToPrivateCredentialsMappingStrategy(Function<ProfileRequestContext, AccessTokenResponseContext>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AccessTokenToPrivateCredentialsMappingStrategy: Constructor.
accessTokenType - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OAuth2AccessTokenPrincipal: The token_type.
acrTranslator - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication: Incoming context translation function for converting OIDC ACRs into Principals.
ActivationCondition(boolean) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.SimpleOIDCSubjectIdentifierCanonicalization.ActivationCondition: Constructor.
adapt(Function<ProfileRequestContext, T>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler: Adapt a ProfileRequestContext function to a MessageContext function via composing with a lookup function.
adapt(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler: Adapt a ProfileRequestContext predicate into a MessageContext predicate via composing with a lookup function.
AddAuthenticationContextClassReferencesHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl: A message handler that adds any authentication context class references from the those derived from the profile config - which may be proxied and mapped from the original request.
AddAuthenticationContextClassReferencesHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddAuthenticationContextClassReferencesHandler
addBearerTokenToGet(ClassicRequestBuilder, AccessTokenResponseContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.DefaultUserInfoRequestEncoder: Add the bearer token to the Authorization header, used when issuing HTTP GET requests.
addBearerTokenToPost(ClassicRequestBuilder, AccessTokenResponseContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.DefaultUserInfoRequestEncoder: Add the bearer token to the 'access_token' parameter, used when issuing HTTP POST requests.
AddDisplayHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl: Message handler that adds the optional 'display' request parameter if manually set on the profile configuration.
AddDisplayHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddDisplayHandler
AddEndpointURIHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl: A message handler that adds the authorization endpoint URI from the providers metadata to the under constructions authentication request.
AddEndpointURIHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddEndpointURIHandler
AddForceAuthenticationHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl: An action that sets the 'prompt' parameter to 'login' and max_age to 0 seconds, iff force authn was requested by the upstream SP (or is overridden in the profile config).
AddForceAuthenticationHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddForceAuthenticationHandler
AddLoginHintHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl: Message handler that adds the login_hint parameter based on any defined in the profile configuration.
AddLoginHintHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddLoginHintHandler
AddMaxAgeHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl: Message handler that adds the max_age parameter based on any defined in the profile configuration.
AddMaxAgeHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddMaxAgeHandler
AddNonceHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl: A message handler that adds a nonce from a lookup strategy to the authentication request.
AddNonceHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddNonceHandler: Constructor.
AddPassiveAuthenticationHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl: A message handler that sets the 'prompt' parameter to 'none' if passive authentication has been requested by the SP.
AddPassiveAuthenticationHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddPassiveAuthenticationHandler
AddPCKECodeVerifierAndChallenge - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl: Create an OAuth 2.0 PCKE code_verifier to use in the token request, and derives a code_challenge for immediate use in the authorization request.
AddPCKECodeVerifierAndChallenge() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddPCKECodeVerifierAndChallenge
AddRedirectURIHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl: A message handler that adds a redirect_uri to the authentication request.
AddRedirectURIHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddRedirectURIHandler
AddRequestedClaimsHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl: A message handler that adds requested claims to the under constructions authentication request.
AddRequestedClaimsHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddRequestedClaimsHandler: Constructor.
AddResponseTypeAndModeHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl: A message handler that populates the authentication request response_mode and response_type from various strategies, by default from the profile configuration.
AddResponseTypeAndModeHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddResponseTypeAndModeHandler
AddScopesHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl: A message handler that adds the scopes from the profile request object to the authentication request.
AddScopesHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddScopesHandler
AddStateHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl: Add state to the authentication request URL and the request object claims (if present).
AddStateHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddStateHandler: Constructor.
addToExistingInboundMessageContextPredicate - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.PrepareOIDCInboundMessageContext: Should the peer entity context be added to an existing inbound message context or not.
allowedOrigins - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultRedirectUriCreationFunction: A set of 'allowed' origins that can be used as the scheme, host, and port portion of the redirectURI.
amrTranslator - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication: Incoming context translation function for converting OIDC AMRs into Principals.
apply(ClaimsSet) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultClaimSanitizationStrategy
apply(ClaimsSet, ClaimsSet) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultClaimMergingStrategy
apply(OIDCProviderMetadata) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate.ProviderMetadataStringListValueLookupFunction
apply(OIDCProviderMetadata) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.navigate.RequestObjectSupportedSignatureSigningAlgorithms
apply(HttpServletRequest, ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultRedirectUriCreationFunction
apply(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.DefaultIssuerIDLookupFunction
apply(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.navigate.JWTClaimsSetFromRequestObjectLookupFunction
apply(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.navigate.PayloadFromRequestObjectLookupFunction
apply(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.ClientAuthenticationConfigurationLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.audit.impl.FixedStringAuditExtractor
apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.audit.impl.ProxyAuthenticationFlowAuditExtractor
apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate.MaxAgeLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate.RedirectUriLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate.UserInfoHttpRequestMethodLookupStrategy
apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.AccessTokenLookupStrategy
apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.AuthenticationRequestTimeLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.DefaultEndUserClaimsLookupStrategy
apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.DefaultIDTokenLookupStrategy
apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.DefaultUserInfoJWTLookupStrategy
apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.EncryptedIDTokenLookupStrategy
apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.EncryptedUserInfoJWTLookupStrategy
apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.IDTokenJOSEHeaderLookupStrategy
apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.InboundMessageContextFromProxyPRC
apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.OIDCProviderMetadataFromOuboundPeerLookupStrategy
apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.OutboundMessageContextFromProxyPRC
apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AccessTokenToPrivateCredentialsMappingStrategy
apply(ProfileRequestContext, JWTClaimsSet) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate.ExtraAudiencesLookupStrategy
apply(ProfileRequestContext, JWTClaimsSet) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.ClientIDFromOAuth2ClientContextFunction
apply(ProfileRequestContext, JWTClaimsSet) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.SubFromIDTokenLookupFunction: The input claims set is ignored because it belongs to the JWT that is being tested.
apply(ProfileRequestContext, JWTClaimsSet) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.AuthenticationRequestNonceClaimLookupStrategy
apply(ProfileRequestContext, SubjectCanonicalizationContext, boolean) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.SimpleOIDCSubjectIdentifierCanonicalization.ActivationCondition: Helper method that runs either as part of the Predicate or directly from the SimpleOIDCSubjectIdentifierCanonicalization.doPreExecute(ProfileRequestContext, SubjectCanonicalizationContext) method above.
attributeContext - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication: Context for externally supplied inbound attributes.
attributeExtractionStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication: Pluggable strategy function for generalized extraction of data.
attributeFilterService - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication: Service used to get the engine used to filter attributes.
authenticatableOIDCContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.RequiresSignatureVerificationPredicate: Strategy used to lookup the AbstractAuthenticatableOIDCContext to test.
authenticated - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.AbstractAuthenticatableOIDCContext: Flag indicating whether the information contained in this context has been authenticated.
authenticationRequestLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate.MaxAgeLookupFunction: Strategy used to locate the OIDCAuthenticationRequest.
authenticationRequestLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.AuthenticationRequestTimeLookupFunction: Strategy used to locate the OIDCAuthenticationRequest.
authenticationRequestLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.RequestObjectTokenUpdateStrategy: Strategy used to locate the OIDCAuthenticationRequest to sign.
authenticationRequestLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.navigate.JWTClaimsSetFromRequestObjectLookupFunction: Strategy used to locate the OIDCAuthenticationRequest to sign.
authenticationRequestLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.navigate.PayloadFromRequestObjectLookupFunction: Strategy used to locate the OIDCAuthenticationRequest to sign.
authenticationRequestLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestMessageHandler: Strategy used to locate the OIDCAuthenticationRequest.
authenticationRequestLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.AuthenticationRequestNonceClaimLookupStrategy: The strategy used to lookup the authentication request.
authenticationRequestLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.NonceValidationActivationCondition: The strategy used to lookup the authentication request.
AuthenticationRequestNonceClaimLookupStrategy - Class in net.shibboleth.idp.plugin.authn.oidc.rp.security.impl: Lookup strategy that finds the nonce from the OIDCAuthenticationRequest.
AuthenticationRequestNonceClaimLookupStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.AuthenticationRequestNonceClaimLookupStrategy: Constructor.
AuthenticationRequestNonceClaimLookupStrategy(Function<ProfileRequestContext, OIDCAuthenticationRequest>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.AuthenticationRequestNonceClaimLookupStrategy: Constructor.
AuthenticationRequestTimeLookupFunction - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate: Lookup function that returns the time at which the RP sent the authentication request, as taken from the authentication request object.
AuthenticationRequestTimeLookupFunction() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.AuthenticationRequestTimeLookupFunction: Constructor.
authenticationResponse - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateAuthenticationResponseResult: Context containing the result to examine.
authnRequest - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction: OIDC authentication request built by the IdP.
authnRequest - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractOIDCAuthenticationResponseAction: OIDC authentication request built by the IdP.
authnRequest - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject: OIDC authentication request built by the IdP.
authnRequest - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler: OIDC authentication request built by the IdP.
authnRequest - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestMessageHandler: The stashed OIDCAuthenticationRequest.
authnResponse - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction: OIDC authentication response from upstream OP.
authnResponse - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractOIDCAuthenticationResponseAction: OIDC authentication response from upstream OP.
authorizationCallback(HttpServletRequest, HttpServletResponse) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AuthorizationController: Callback endpoint to accept the authorization response.
AuthorizationController - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl: Servlet compatible with the ExternalAuthentication interface that begins, by HTTP redirect, an OpenID Connect authentication request to an OpenID Connect Provider (an OAuth 2.0 Authorization Server that supports OpenID Connect).
AuthorizationController() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AuthorizationController: Constructor.
authorizationRequest(HttpServletRequest, HttpServletResponse) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AuthorizationController: Begin an authorization request to the configured upstream OP.
AUTHORIZE_PATH_SEGMENT - Static variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AuthorizationController: The final part of the IdP URL path which is called to begin authorization.

B

buildClientAuthenticationJwt(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler: Build a signed JWT bearer token for client authentication using the populated security parameters.
buildClientAuthenticationJwtClaims(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler: Build the claim values required for a client authentication bearer JWT.
buildErrorResponseString(AuthenticationErrorResponse) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateAuthenticationResponseResult: Build an error response string from the ErrorResponse object.
buildOrigin(URI) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultRedirectUriCreationFunction: Builds the 'origin' (see RFC 6454) from given URI.
BuildPlainRequestObjectJWT - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl: If the Request Object claims are present in the authentication request, convert them into a JWTClaimsSet inside a PlainJWT.
BuildPlainRequestObjectJWT() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.BuildPlainRequestObjectJWT
buildProxyPrincipal() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication: Construct a populated ProxyAuthenticationPrincipal based on the upstream OP (the issuer of the id_token).
buildRequestedAuthnContext(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddAuthenticationContextClassReferencesHandler: Build a list of ACRs if warranted.
BuildRequestObject - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl: Action that creates a Request Object JWT, and sets it to the work context OIDCAuthenticationRequest located under InOutOperationContext.getOutboundMessageContext().
BuildRequestObject() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject: Constructor.
buildURIIgnoreDefaultPorts(String, String, int, String) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultRedirectUriCreationFunction: Build a URI from the given parameters.

C

CALLBACK_PATH_SEGMENT - Static variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AuthorizationController: The final part of the IdP URL path which is called to end authorization via the callback.
callbackServletPath - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultRedirectUriCreationFunction: The path, excluding the context and servlet paths, to the RP callback handler.
checkProviderSupportsResponseMode(ResponseMode) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddResponseTypeAndModeHandler: Check the OpenID Provider supports the response_mode from its metadata value response_modes_supported.
checkProviderSupportsResponseType(ResponseType) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddResponseTypeAndModeHandler: Check the OpenID Provider supports the response_type from its metadata value response_types_supported.
claimMergingStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims: The strategy used to merge UserInfo claims with id_token claims.
claimSanitizationStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims: The strategy used to sanitize claims in an input claimset.
claimsSet - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateTokenClaims: The parsed claimset.
claimsSetIsValidPredicate - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject: A hook to allow additional checking of the request object claims after it is built.
claimsValidator - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateTokenClaims: The JWT claims validator used to verify the claimsset.
cleanupHook - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateTokenClaims: A cleanup hook to execute after either a successful or unsuccessful claims validation.
ClientAuthenticationConfigurationLookupFunction - Class in net.shibboleth.idp.plugin.authn.oidc.rp.security.impl: A function that returns a SignatureSigningConfiguration list for signing client authentication JWTs.
ClientAuthenticationConfigurationLookupFunction() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.ClientAuthenticationConfigurationLookupFunction: Constructor.
clientAuthMethod - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler: The stashed client authentication method to use.
clientAuthnContext - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction: The context used to store client authentication information for communication with a upstream OP.
clientCredential - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler: The stashed client_secret to use if required.
clientId - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.OAuth2ClientContext: The client_id.
clientId - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler: The stashed client identifier for this request.
ClientIDFromOAuth2ClientContextFunction - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate: A function that pulls the client_id out of the OAuth2ClientContext.
ClientIDFromOAuth2ClientContextFunction(Function<ProfileRequestContext, OAuth2ClientContext>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.ClientIDFromOAuth2ClientContextFunction: Constructor.
clockSkew - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.AuthenticationRequestTimeLookupFunction: A clock skew to apply to the authentication request time.
clone() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OAuth2AccessTokenPrincipal
clone() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OAuth2RefreshTokenPrincipal
clone() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OIDCSubjectIdentifierPrincipal
CODE_PARAMETER - Static variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AuthorizationController: The name of the Http parameter that stores the authorisation code.
computeCodeChallenge(String, OAuthAuthorizationRequest.CodeChallengeMethod) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddPCKECodeVerifierAndChallenge: Compute the code_challenge from the code_verifier.
contextClassLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.metadata.impl.OIDCProviderMetadataLookupHandler: Strategy to resolve the context class to add the resolved metadata too.
contextToPrivateCredentialsMappingStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication: A hook to map context information to private credentials.
convertHttpRequest(HTTPRequest) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.DefaultAuthCodeTokenRequestEncoder: Convert the internally used HTTPRequest to the externally presented HttpUriRequest.
copyContextStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.metadata.impl.OIDCProviderMetadataLookupHandler: Optional strategy for resolving an existing metadata context from which to copy data.
createSignatureSigningConfiguration(SignatureSigningConfiguration, List<String>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.ClientAuthenticationConfigurationLookupFunction: Create a copy of the signature signing configuration given, but replace the algorithms with those input.
customClaimsStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject: A strategy hook to add custom claims to the claims set.

D

decodeAttribute(AttributeTranscoderRegistry, ProfileRequestContext, JSONObject, Multimap<String, IdPAttribute>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication: Access the registry of transcoding rules to transform (decode) the input claims to IdP Attributes.
decoderFactory - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.OIDCAuthnContext: The function to use to obtain a decoder.
DEFAULT_METRIC_NAME - Static variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication: Default prefix for metrics.
DefaultAccessTokenResponseDecoder - Class in net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl: Default access token response decoder which converts a successful HTTP response into an OIDCTokenResponse and a unsuccessful response into an TokenErrorResponse.
DefaultAccessTokenResponseDecoder() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl.DefaultAccessTokenResponseDecoder
DefaultAuthCodeTokenRequestEncoder - Class in net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl: A token request encoder that builds an OAuth2.0 Access Token Request for an authorization_code grant and returns an HttpUriRequest.
DefaultAuthCodeTokenRequestEncoder() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.DefaultAuthCodeTokenRequestEncoder
DefaultClaimMergingStrategy - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl: A default merging strategy for combing claims in the UserInfo response with those from the id_token.
DefaultClaimMergingStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultClaimMergingStrategy
DefaultClaimSanitizationStrategy - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl: Produce a claims set from the JWT claims set without either the validation claims or claims with null values.
DefaultClaimSanitizationStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultClaimSanitizationStrategy: Constructor.
DefaultEndUserClaimsLookupStrategy - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate: Function that extracts the end-user's claims from the EndUserClaimsContext.
DefaultEndUserClaimsLookupStrategy(Function<ProfileRequestContext, EndUserClaimsContext>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.DefaultEndUserClaimsLookupStrategy: Constructor.
DefaultIDTokenLookupStrategy - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate: Function that extracts the id_token from the AccessTokenResponseContext.
DefaultIDTokenLookupStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.DefaultIDTokenLookupStrategy: Constructor.
DefaultIDTokenLookupStrategy(Function<ProfileRequestContext, AccessTokenResponseContext>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.DefaultIDTokenLookupStrategy: Constructor.
DefaultIssuerIDLookupFunction - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate: Strategy to pull out the ID of the OIDC proxy issuer/provider from the OIDCPeerEntityContext.
DefaultIssuerIDLookupFunction() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.DefaultIssuerIDLookupFunction
DefaultRedirectUriCreationFunction - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl: Constructive, pure, function that returns a redirect_uri from one of (ordered): A pre-registered redirect_uri on the OAuth2ClientContext.getRedirectUriOverride().
DefaultRedirectUriCreationFunction() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultRedirectUriCreationFunction: Constructor.
DefaultUserInfoJWTLookupStrategy - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate: Function that extracts the UserInfo claims as a JWT from the UserInfoResponseContext.
DefaultUserInfoJWTLookupStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.DefaultUserInfoJWTLookupStrategy: Constructor.
DefaultUserInfoJWTLookupStrategy(Function<ProfileRequestContext, UserInfoResponseContext>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.DefaultUserInfoJWTLookupStrategy: Constructor.
DefaultUserInfoRequestEncoder - Class in net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl: Default encoder for UserInfo requests.
DefaultUserInfoRequestEncoder() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.DefaultUserInfoRequestEncoder: Constructor.
DefaultUserInfoResponseDecoder - Class in net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl: The default Http client UserInfo response decoder.
DefaultUserInfoResponseDecoder() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl.DefaultUserInfoResponseDecoder
disabled - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.SimpleOIDCSubjectIdentifierCanonicalization.ActivationCondition: Disable this C14N no matter how appropriate the context?
doApply(ProfileRequestContext, OIDCProviderMetadata) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction: Encode a ClassicHttpRequest from the given context.
doApply(ProfileRequestContext, OIDCProviderMetadata) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.DefaultAuthCodeTokenRequestEncoder
doApply(ProfileRequestContext, OIDCProviderMetadata) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.DefaultUserInfoRequestEncoder
doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.audit.impl.TransitionActionWriteAuditLog
doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject
doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeAuthorizationRequest
doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeBlankOutboundResponseMessageContext
doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientContext
doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOutboundAuthorizationRequestMessageContext
doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeRelyingPartyContext
doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeUnverifiedRelyingPartyContext
doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.PrepareOIDCInboundMessageContext
doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims
doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.UnsupportedResponseTypeAction
doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOAuthAccessTokenResponse
doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateTokenClaims
doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateUserInfoJSONObjectClaims
doExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ExchangeCodeForAccessToken
doExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.UserInfoEndpointLookup
doExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateAuthenticationResponseResult
doExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateExternalAuthenticationContext
doExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication
doExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateResponseState
doExecute(ProfileRequestContext, SubjectCanonicalizationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.SimpleOIDCSubjectIdentifierCanonicalization
doExecute(RequestContext, ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.audit.impl.TransitionActionWriteAuditLog
doInitialize() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.audit.impl.TransitionActionWriteAuditLog
doInitialize() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl.AbstractJSONResponseDecoderFunction
doInitialize() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction
doInitialize() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultRedirectUriCreationFunction
doInitialize() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.PrepareOIDCInboundMessageContext
doInitialize() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateTokenClaims
doInitialize() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddRedirectURIHandler
doInitialize() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.metadata.impl.OIDCProviderMetadataLookupHandler
doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationContext
doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler
doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddAuthenticationContextClassReferencesHandler
doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddDisplayHandler
doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddEndpointURIHandler
doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddForceAuthenticationHandler
doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddLoginHintHandler
doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddMaxAgeHandler
doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddNonceHandler
doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddPassiveAuthenticationHandler
doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddPCKECodeVerifierAndChallenge
doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddRedirectURIHandler
doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddRequestedClaimsHandler
doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddResponseTypeAndModeHandler
doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddScopesHandler
doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddStateHandler
doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.BuildPlainRequestObjectJWT
doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.SetAuthenticationRequestTimeHandler
doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.metadata.impl.OIDCProviderMetadataLookupHandler
doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.audit.impl.TransitionActionWriteAuditLog
doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject
doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeAuthorizationRequest
doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientContext
doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOutboundAuthorizationRequestMessageContext
doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeRelyingPartyContext
doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.PrepareOIDCInboundMessageContext
doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims
doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateTokenClaims
doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateUserInfoJSONObjectClaims
doPreExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractOIDCAuthenticationResponseAction
doPreExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateAuthenticationResponseResult
doPreExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateExternalAuthenticationContext
doPreExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication
doPreExecute(ProfileRequestContext, SubjectCanonicalizationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.SimpleOIDCSubjectIdentifierCanonicalization
doPreInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler
doPreInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler
doPreInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestMessageHandler
doTest(ProfileRequestContext, UserInfoResponseContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.AbstractUserInfoResponseTypeCondition: Implementations should override this method to provide necessary logic.
doTest(ProfileRequestContext, UserInfoResponseContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.UserInfoPlainResponseTypeCondition

E

embeddedPredicate - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.SimpleOIDCSubjectIdentifierCanonicalization: Supplies logic for pre-execute test.
encodeMessageAction - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.OIDCAuthnContext: Profile action to execute to produce outbound message response.
EncryptedIDTokenLookupStrategy - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate: Function that extracts the id_token from the AccessTokenResponseContext iff it is an EncryptedJWT type.
EncryptedIDTokenLookupStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.EncryptedIDTokenLookupStrategy: Constructor.
EncryptedIDTokenLookupStrategy(Function<ProfileRequestContext, AccessTokenResponseContext>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.EncryptedIDTokenLookupStrategy: Constructor.
EncryptedUserInfoJWTLookupStrategy - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate: Function that extracts the UserInfo JWT from the UserInfoResponseContext iff it is an EncryptedJWT type.
EncryptedUserInfoJWTLookupStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.EncryptedUserInfoJWTLookupStrategy: Constructor.
EncryptedUserInfoJWTLookupStrategy(Function<ProfileRequestContext, UserInfoResponseContext>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.EncryptedUserInfoJWTLookupStrategy: Constructor.
endUserClaims - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.EndUserClaimsContext: The claims associated with the authenticated end-user.
EndUserClaimsContext - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context: A context to hold the final set of claims associated with an authenticated end-user.
EndUserClaimsContext() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.EndUserClaimsContext
endUserClaimsContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.DefaultEndUserClaimsLookupStrategy: Strategy used to lookup the EndUserClaimsContext.
endUserClaimsContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims: Strategy used to look up the EndUserClaimsContext to set the parameters for.
endUserClaimsContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication: Strategy used to look up the EndUserClaimsContext to set the parameters for.
endUserContext - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication: The context with claims pertaining to the end-user of this authentication.
equals(Object) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OAuth2AccessTokenPrincipal
equals(Object) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OAuth2RefreshTokenPrincipal
equals(Object) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OIDCSubjectIdentifierPrincipal
ExchangeCodeForAccessToken - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl: Action to exchange the authorization code in the authentication response for an OAuth access token which contains an OIDC id_token.
ExchangeCodeForAccessToken() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ExchangeCodeForAccessToken: Constructor.
executeHttpRequest(ClassicHttpRequest, AbstractAuthenticatableOIDCContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction: Performs a call to an Http endpoint using the configured HttpClient, HttpClientResponseHandler, and security parameters.
expiresIn - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OAuth2AccessTokenPrincipal: The duration in seconds when the access token expires.
extContext - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateExternalAuthenticationContext: Context containing the result to examine.
ExtraAudiencesLookupStrategy - Class in net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate: Locate additional accepted audiences from the ID Token profile config value.
ExtraAudiencesLookupStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate.ExtraAudiencesLookupStrategy: Constructor.
extractKeyFromState(String) - Static method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.OIDCProxySupport: Extract the key component from the state.
extractNonceFromState(String) - Static method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.OIDCProxySupport: Extract the nonce component from the state.

F

filterAlgorithmsAgainstFamily(JWSAlgorithm.Family, List<String>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.ClientAuthenticationConfigurationLookupFunction: Filter out any algorithms in the list that are not from the given algorithm family.
filterAttributes(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication: Check for inbound attributes and apply filtering.
FixedStringAuditExtractor - Class in net.shibboleth.idp.plugin.authn.oidc.rp.audit.impl: A simple audit extractor that allows a fixed string to be logged.
FixedStringAuditExtractor(String) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.audit.impl.FixedStringAuditExtractor: Constructor.
formatErrorResponse(ErrorObject) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction: Format an error message string from the ErrorObject provided.

G

generateCodeVerifier(Integer) - Static method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddPCKECodeVerifierAndChallenge: Generates a code_verifier for use during Proof Key for Code Exchange.
generateNonce(Integer) - Static method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.OIDCProxySupport: Generates a random identifier to be used as a nonce.
generateState(String, String) - Static method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.OIDCProxySupport: Generate a state parameter from a nonce component and an execution key component.
getAccessTokenType() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OAuth2AccessTokenPrincipal: Get the token_type.
getAuthenticationRequest() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction: Returns the authentication request build by this IdP.
getAuthenticationRequest() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractOIDCAuthenticationResponseAction: Returns the authentication request build by this IdP.
getAuthenticationRequest() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler: Returns the authentication request build by this IdP.
getAuthenticationRequest() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestMessageHandler: Get the authentication request.
getAuthenticationResponse() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction: Returns the authentication response from the upstream OP.
getAuthenticationResponse() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractOIDCAuthenticationResponseAction: Returns the authentication response from the upstream OP.
getClientAuthenticationContext() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction: Get the client authentication context.
getClientId() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.OAuth2ClientContext: Get the client_id.
getEncodeMessageAction() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.OIDCAuthnContext: Get the message-encoding profile action.
getEndUserClaims() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.EndUserClaimsContext: Get the claims about the authenticated end-user.
getExpiresIn() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OAuth2AccessTokenPrincipal: Get the number of seconds since the response was generated the access_token expires.
getHttpRequestEncoderStrategy() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction: Get the HTTP request encoder strategy.
getHttpResponseDecoderStrategy() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction: Get the HTTP response decoder/handler strategy.
getHttpServletRequest() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler: Get the HTTP servlet request supplier.
getHttpServletRequestSupplier() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler: Get the supplier for HTTP request if available.
getMessageDecoderFactory() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.OIDCAuthnContext: Get the factory function to obtain message decoders.
getName() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OAuth2AccessTokenPrincipal
getName() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OAuth2RefreshTokenPrincipal
getName() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OIDCSubjectIdentifierPrincipal
getObjectMapper() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl.AbstractJSONResponseDecoderFunction: Get the object mapper.
getOutboundMessageContext() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestMessageHandler: Get the outbound message context.
getOutboundMessageHandler() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.OIDCAuthnContext: Get the outbound MessageHandler to run prior to encoding.
getProfileConfiguration() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler: Returns the profile configuration associated with this request.
getProviderMetadata() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler: Returns the OpenID Provider metadata.
getProviderMetadataContext() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction: Returns the OIDC provider metadata context.
getProviderMetadataContext() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractOIDCAuthenticationResponseAction: Returns the OIDC provider metadata context.
getRedirectUriOverride() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.OAuth2ClientContext: Get the redirect_uri which should be used in place of any other.
getTokenResponse() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.AccessTokenResponseContext: Get the OAuth 2.0 and OIDC Token Response.
getTokenResponseContextLookupStrategy() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.AbstractTokenResponseLookupStrategy: Get the token response context lookup strategy.
getTokenResponseCreatedAt() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.AccessTokenResponseContext: Get the time the token response was set onto this context.
getUnprocessedIdTokenClaims() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.EndUserClaimsContext: Get the unproccessed id_token claims.
getUserInfo() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.UserInfoResponseContext: Get the user info response.
getUserInfoResponseContextLookupStrategy() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.AbstractUserInfoTokenResponseLookupStrategy: Get the UserInfo response context lookup strategy.
getWebflowKey() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.OutboundMessageHandlerContext: Get the Spring Webflow execution key.

H

handleRequest(ProfileRequestContext, AbstractAuthenticatableOIDCContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction: Encode the request using the supplied request encoder strategy, execute a synchronous HTTP request and decode the response using the supplied Http client response decoder strategy/handler.
handleResponse(ClassicHttpResponse) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl.DefaultAccessTokenResponseDecoder
handleResponse(ClassicHttpResponse) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl.DefaultUserInfoResponseDecoder
hashCode() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OAuth2AccessTokenPrincipal
hashCode() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OAuth2RefreshTokenPrincipal
hashCode() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OIDCSubjectIdentifierPrincipal
httpClient - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction: Http client for contacting the endpoint.
httpClientSecurityParameters - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction: HTTP client security parameters.
httpMethodLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.DefaultUserInfoRequestEncoder: Strategy used to look up the HttpMethod used for this request.
httpRequestEncoderStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction: The message encoder to encode the HTTP request into a HttpUriRequest.
httpResponseDecoderStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction: The message decoder (Http response handler) to decode the HTTP response.
HTTPS - Static variable in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.DefaultUserInfoRequestEncoder: The HTTPS scheme.
httpServletRequestSupplier - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler: Current HTTP request, if available.

I

identifier - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.PrepareOIDCInboundMessageContext: The identifier of the OP/RP to base the inbound context on.
identifierLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.PrepareOIDCInboundMessageContext: Strategy to lookup the identifier of the OP/RP to base the inbound context on.
idTokenClaims - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims: The stashed id_token claims.
idTokenClaims - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateUserInfoJSONObjectClaims: The stashed id_token claims.
IDTokenInAccessTokenUpdateStrategy - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate: Consumer to update the id_token in the AccessTokenResponseContext.
IDTokenInAccessTokenUpdateStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.IDTokenInAccessTokenUpdateStrategy: Constructor.
IDTokenInAccessTokenUpdateStrategy(Function<ProfileRequestContext, AccessTokenResponseContext>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.IDTokenInAccessTokenUpdateStrategy: Constructor.
IDTokenJOSEHeaderLookupStrategy - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate: Function that extracts the JWS JOSE header from the id_token inside the AccessTokenResponseContext.
IDTokenJOSEHeaderLookupStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.IDTokenJOSEHeaderLookupStrategy: Constructor.
IDTokenJOSEHeaderLookupStrategy(Function<ProfileRequestContext, AccessTokenResponseContext>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.IDTokenJOSEHeaderLookupStrategy: Constructor.
InboundMessageContextFromProxyPRC - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate: A ContextDataLookupFunction that returns the inbound MessageContext for a ProfileRequestContext located inside an AuthenticationContext i.e.
InboundMessageContextFromProxyPRC() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.InboundMessageContextFromProxyPRC
InitializeAuthorizationRequest - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl: An action that creates an OIDCAuthenticationRequest shell to populate in future steps, and sets it to the outbound message context.
InitializeAuthorizationRequest() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeAuthorizationRequest: Constructor.
InitializeBlankOutboundResponseMessageContext - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl: Action that adds an outbound MessageContext to the outbound message context inside the ProfileRequestContext.
InitializeBlankOutboundResponseMessageContext() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeBlankOutboundResponseMessageContext
InitializeOAuth2ClientAuthenticationContext - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl: An action that initializes an OAuth2ClientAuthenticationContext for later use.
InitializeOAuth2ClientAuthenticationContext() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationContext: Constructor.
InitializeOAuth2ClientAuthenticationMethodHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl: An action that resolves the Client Authentication method for the chosen upstream OpenID Provider (issuer) from the profile configuration, and adds it to the OAuth2ClientAuthenticationContext.
InitializeOAuth2ClientAuthenticationMethodHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler: Constructor.
InitializeOAuth2ClientContext - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl: An action that resolves the client identifier and redirect URI for the chosen provider (issuer).
InitializeOAuth2ClientContext() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientContext: Constructor.
InitializeOutboundAuthorizationRequestMessageContext - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl: Initialize an outbound message context with an OIDC peer entity context ready for an authorization/authentication request to be built.
InitializeOutboundAuthorizationRequestMessageContext() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOutboundAuthorizationRequestMessageContext: Constructor.
InitializeRelyingPartyContext - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl: Action that adds a RelyingPartyContext to the current ProfileRequestContext tree via a creation function.
InitializeRelyingPartyContext() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeRelyingPartyContext: Constructor.
InitializeUnverifiedRelyingPartyContext - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl: Action that adds an unverified RelyingPartyContext to the current ProfileRequestContext tree via a creation function.
InitializeUnverifiedRelyingPartyContext() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeUnverifiedRelyingPartyContext: Constructor.
isAuthenticated() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.AbstractAuthenticatableOIDCContext: Gets the flag indicating whether the information contained in this context has been authenticated.
IsCodeFlowPredicate - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic: A predicate that determines if the flow is a 'code-flow' using the Authentication Request that is inside the message context.
IsCodeFlowPredicate() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.IsCodeFlowPredicate
IsHybridFlowPredicate - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic: A predicate that determines if the flow is a 'hybrid-flow' using the Authentication Request that is inside the message context.
IsHybridFlowPredicate() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.IsHybridFlowPredicate
IsImplicitFlowPredicate - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic: A predicate that determines if the flow is a 'implicit-flow' using the Authentication Request that is inside the message context.
IsImplicitFlowPredicate() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.IsImplicitFlowPredicate

J

jwtBearerClientAuthSecurityParameters - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler: Stashed security parameters context for JWT Bearer Token client authentication methods.
jwtBearerExpiryOffset - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler: The offset to add to the 'exp' claim time for JWT client authentication methods.
JWTBearerTokenForClientAuthenticationPredicate - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic: A predicate that determines if the client authentication method chosen is a JWT type.
JWTBearerTokenForClientAuthenticationPredicate() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.JWTBearerTokenForClientAuthenticationPredicate
JWTClaimsSetFromRequestObjectLookupFunction - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.navigate: Extract the Payload from the Request Object inside the OIDCAuthenticationRequest.
JWTClaimsSetFromRequestObjectLookupFunction() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.navigate.JWTClaimsSetFromRequestObjectLookupFunction: Constructor.
jwtLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateTokenClaims: Strategy used to pull out a JWT to validate from the context.

K

keyName - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate.ProviderMetadataStringListValueLookupFunction: The key for which to fetch the value for.

L

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate.ProviderMetadataStringListValueLookupFunction: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.EncryptedIDTokenLookupStrategy: Logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.EncryptedUserInfoJWTLookupStrategy: Logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.IDTokenInAccessTokenUpdateStrategy: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.RequestObjectTokenUpdateStrategy: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.SubFromIDTokenLookupFunction: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.UserInfoInUserInfoResponseContextUpdateStrategy: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl.DefaultAccessTokenResponseDecoder: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl.DefaultUserInfoResponseDecoder: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.DefaultAuthCodeTokenRequestEncoder: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.DefaultUserInfoRequestEncoder: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractOIDCAuthenticationResponseAction: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AuthorizationController: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultClaimMergingStrategy: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultRedirectUriCreationFunction: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ExchangeCodeForAccessToken: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeAuthorizationRequest: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeBlankOutboundResponseMessageContext: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationContext: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientContext: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOutboundAuthorizationRequestMessageContext: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeRelyingPartyContext: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeUnverifiedRelyingPartyContext: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.PrepareOIDCInboundMessageContext: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.SimpleOIDCSubjectIdentifierCanonicalization.ActivationCondition: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.SimpleOIDCSubjectIdentifierCanonicalization: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.UnsupportedResponseTypeAction: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.UserInfoEndpointLookup: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateAuthenticationResponseResult: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateExternalAuthenticationContext: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOAuthAccessTokenResponse: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateResponseState: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateTokenClaims: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateUserInfoJSONObjectClaims: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.IsCodeFlowPredicate: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.IsHybridFlowPredicate: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.IsImplicitFlowPredicate: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.JWTBearerTokenForClientAuthenticationPredicate: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.RequestObjectRequiredAndSupported: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.RequiresSignatureVerificationPredicate: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.navigate.JWTClaimsSetFromRequestObjectLookupFunction: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.navigate.PayloadFromRequestObjectLookupFunction: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestMessageHandler: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddAuthenticationContextClassReferencesHandler: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddDisplayHandler: Logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddEndpointURIHandler: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddForceAuthenticationHandler: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddLoginHintHandler: Logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddMaxAgeHandler: Logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddNonceHandler: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddPassiveAuthenticationHandler: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddPCKECodeVerifierAndChallenge: Logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddRedirectURIHandler: Logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddRequestedClaimsHandler: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddResponseTypeAndModeHandler: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddScopesHandler: Class logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddStateHandler: Logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.BuildPlainRequestObjectJWT: Logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.SetAuthenticationRequestTimeHandler: Logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.metadata.impl.OIDCProviderMetadataLookupHandler: Logger.
log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.ClientAuthenticationConfigurationLookupFunction: Class logger.
lookupProfileRequestContext(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler: Lookup the profile request context from the given message context using the function PRC_LOOKUP.

M

ManyValuesIntegerComparisonPredicate - Class in net.shibboleth.idp.plugin.authn.oidc.rp.security.impl: Predicate that returns true if the test integer is greater than 1.
ManyValuesIntegerComparisonPredicate() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.ManyValuesIntegerComparisonPredicate
maxAgeDefault - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate.MaxAgeLookupFunction: Default max authentication age if none can be found on the profile context.
MaxAgeLookupFunction - Class in net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate: Locate the maximum authentication age from the authentication request (first) or profile configuration (second).
MaxAgeLookupFunction(Duration) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate.MaxAgeLookupFunction: Constructor.
metadataResolver - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication: Optional supplemental metadata source for filtering.

N

net.shibboleth.idp.plugin.authn.oidc.rp - package net.shibboleth.idp.plugin.authn.oidc.rp: Shibboleth relying-party proxy implementation.
net.shibboleth.idp.plugin.authn.oidc.rp.audit.impl - package net.shibboleth.idp.plugin.authn.oidc.rp.audit.impl: Package that contains RP specific audit extractors.
net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate - package net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate: Functions to navigate into profile configuration information.
net.shibboleth.idp.plugin.authn.oidc.rp.context - package net.shibboleth.idp.plugin.authn.oidc.rp.context: Context classes for RP-specific information needed by profile actions.
net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate - package net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate: Functions to navigate profile contexts.
net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl - package net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl: This package has decoders for various OIDC/OAuth2 responses.
net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl - package net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl: This package has encoders for various OIDC/OAuth2 requests.
net.shibboleth.idp.plugin.authn.oidc.rp.exception - package net.shibboleth.idp.plugin.authn.oidc.rp.exception: Relying Party proxy exceptions.
net.shibboleth.idp.plugin.authn.oidc.rp.impl - package net.shibboleth.idp.plugin.authn.oidc.rp.impl: This package has an authentication implementation for OpenID Connect authentication providers.
net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic - package net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic: Predicates for RP-specific messaging configuration.
net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.navigate - package net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.navigate: Functions that navigate messaging contexts.
net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl - package net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl: Package that contains message handlers.
net.shibboleth.idp.plugin.authn.oidc.rp.metadata.impl - package net.shibboleth.idp.plugin.authn.oidc.rp.metadata.impl: Package that OpenID Provider and RelyingParty metadata lookup functions.
net.shibboleth.idp.plugin.authn.oidc.rp.principal - package net.shibboleth.idp.plugin.authn.oidc.rp.principal: OpenID Connect principals.
net.shibboleth.idp.plugin.authn.oidc.rp.security.impl - package net.shibboleth.idp.plugin.authn.oidc.rp.security.impl: Package that RP specific security functions.
nonceGenerationStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddNonceHandler: Strategy used to generate a nonce.
NonceValidationActivationCondition - Class in net.shibboleth.idp.plugin.authn.oidc.rp.security.impl: Determines if nonce validation should occur.
NonceValidationActivationCondition() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.NonceValidationActivationCondition: Constructor.
NonceValidationActivationCondition(Function<ProfileRequestContext, OIDCAuthenticationRequest>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.NonceValidationActivationCondition: Constructor.

O

OAuth2AccessTokenPrincipal - Class in net.shibboleth.idp.plugin.authn.oidc.rp.principal: Principal based on an OAuth 2.0 access token.
OAuth2AccessTokenPrincipal(String, String, Duration) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OAuth2AccessTokenPrincipal: Constructor.
oauth2ClientAuthenticationContext - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler: The stashed OAuth2 client authentication context.
oauth2ClientAuthenticationContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction: The strategy used to lookup or create the OAuth2ClientAuthenticationContext.
oauth2ClientAuthenticationContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationContext: The strategy used to lookup or create the OAuth2ClientAuthenticationContext for storing the client authentication.
oauth2ClientAuthenticationContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler: The strategy used to lookup or create the OAuth2ClientAuthenticationContext for storing the client authentication.
oauth2ClientContext - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeAuthorizationRequest: The stashed OAuth2 client context.
oauth2ClientContext - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientContext: The stashed OAuth2 client context.
OAuth2ClientContext - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context: A context to store information pertaining to the OAuth2 client (Relying Party) to use in communication with a OpenID Provider.
OAuth2ClientContext() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.OAuth2ClientContext
oauth2ClientContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.ClientIDFromOAuth2ClientContextFunction: Lookup strategy that to return a OAuth2ClientContext.
oauth2ClientContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultRedirectUriCreationFunction: The strategy used to lookup or create the OAuth2ClientContext for storing the client_id.
oauth2ClientContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeAuthorizationRequest: The strategy used to lookup or create the OAuth2ClientContext for storing the client_id.
oauth2ClientContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientContext: The strategy used to lookup or create the OAuth2ClientContext for storing the client_id.
OAuth2RefreshTokenPrincipal - Class in net.shibboleth.idp.plugin.authn.oidc.rp.principal: Principal based on an OAuth 2.0 refresh token.
OAuth2RefreshTokenPrincipal(String) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OAuth2RefreshTokenPrincipal: Constructor.
objectMapper - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl.AbstractJSONResponseDecoderFunction: JSON object mapper.
OIDCAuthnContext - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context: Manages state during proxied OIDC authentication via a Spring Controller.
OIDCAuthnContext(ProfileAction, Function<String, MessageDecoder>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.OIDCAuthnContext: Constructor.
oidcClientMetadataCtxLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOutboundAuthorizationRequestMessageContext: Strategy function to lookup the OIDCMetadataContext that represents this client during communication with the given OIDC peer.
oidcContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AuthorizationController: Lookup strategy to locate the SAML context.
oidcPeerEntityContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler: Strategy to resolve the OIDC entity context class.
oidcProviderMetadataContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeRelyingPartyContext: Strategy that will return OIDCMetadataContext.
oidcProviderMetadataContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.RequestObjectRequiredAndSupported: Strategy that will return OIDCProviderMetadata.
OIDCProviderMetadataFromOuboundPeerLookupStrategy - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate: Lookup function to extract the OIDCProviderMetadataContext from the OIDCPeerEntityContext in the outbound message.
OIDCProviderMetadataFromOuboundPeerLookupStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.OIDCProviderMetadataFromOuboundPeerLookupStrategy
OIDCProviderMetadataLookupHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.metadata.impl: Handler for inbound OIDC protocol messages that attempts to locate OIDC metadata for a OP (issuer), and attaches it with a OIDCMetadataContext as a child of a pre-existing instance of MessageContext.
OIDCProviderMetadataLookupHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.metadata.impl.OIDCProviderMetadataLookupHandler: Constructor.
OIDCProxyException - Exception in net.shibboleth.idp.plugin.authn.oidc.rp.exception: An exception to signal a general proxy error.
OIDCProxyException() - Constructor for exception net.shibboleth.idp.plugin.authn.oidc.rp.exception.OIDCProxyException: Constructor.
OIDCProxyException(String) - Constructor for exception net.shibboleth.idp.plugin.authn.oidc.rp.exception.OIDCProxyException: Constructor.
OIDCProxyException(String, Throwable) - Constructor for exception net.shibboleth.idp.plugin.authn.oidc.rp.exception.OIDCProxyException: Constructor.
OIDCProxyException(Throwable) - Constructor for exception net.shibboleth.idp.plugin.authn.oidc.rp.exception.OIDCProxyException: Constructor.
OIDCProxySupport - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl: Support class for OIDC proxy related implementations.
OIDCProxySupport() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.OIDCProxySupport: Private constructor.
OIDCRPException - Exception in net.shibboleth.idp.plugin.authn.oidc.rp.exception: An exception to signal a general OIDC RelyingParty error.
OIDCRPException() - Constructor for exception net.shibboleth.idp.plugin.authn.oidc.rp.exception.OIDCRPException: Constructor.
OIDCRPException(String) - Constructor for exception net.shibboleth.idp.plugin.authn.oidc.rp.exception.OIDCRPException: Constructor.
OIDCRPException(String, Throwable) - Constructor for exception net.shibboleth.idp.plugin.authn.oidc.rp.exception.OIDCRPException: Constructor.
OIDCRPException(Throwable) - Constructor for exception net.shibboleth.idp.plugin.authn.oidc.rp.exception.OIDCRPException: Constructor.
OIDCRPModule - Class in net.shibboleth.idp.plugin.authn.oidc.rp: IdP Module implementation.
OIDCRPModule() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.OIDCRPModule: Constructor.
OIDCRPPlugin - Class in net.shibboleth.idp.plugin.authn.oidc.rp: Plugin description about the OIDC-RP plugin.
OIDCRPPlugin() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.OIDCRPPlugin: Constructor.
OIDCSubjectIdentifierPrincipal - Class in net.shibboleth.idp.plugin.authn.oidc.rp.principal: Principal based on an OIDC 'sub' (subject) identifier.
OIDCSubjectIdentifierPrincipal(String) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OIDCSubjectIdentifierPrincipal: Constructor.
outboundMessageContext - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestMessageHandler: The stashed OutboundMessageHandlerContext.
OutboundMessageContextFromProxyPRC - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate: A ContextDataLookupFunction that returns the outbound MessageContext for a ProfileRequestContext located inside an AuthenticationContext i.e.
OutboundMessageContextFromProxyPRC() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.OutboundMessageContextFromProxyPRC
outboundMessageHandler - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.OIDCAuthnContext: Outbound message handler to run prior to encoding.
OutboundMessageHandlerContext - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context: A context to stash controller parameters for use by message handlers.
OutboundMessageHandlerContext() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.OutboundMessageHandlerContext: Constructor to allow no-arg construction.
OutboundMessageHandlerContext(String) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.OutboundMessageHandlerContext: Convenience constructor.
outboundMessageHandlerContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestMessageHandler: Strategy to locate the OutboundMessageHandlerContext.
outMessageContext - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeAuthorizationRequest: The stashed outbound message context.

P

parseResponseMode(String) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddResponseTypeAndModeHandler: Parse the response_mode into a known ResponseMode.
parseResponseType(String) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddResponseTypeAndModeHandler: Parse the response_type into a known ResponseType.
PayloadFromRequestObjectLookupFunction - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.navigate: Extract the Payload from the Request Object inside the OIDCAuthenticationRequest.
PayloadFromRequestObjectLookupFunction() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.navigate.PayloadFromRequestObjectLookupFunction: Constructor.
peerEntityContext - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler: The stashed peer entity context.
peerEntityContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeRelyingPartyContext: Strategy used to look up the SAMLPeerEntityContext to draw from.
peerEntityCtx - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOutboundAuthorizationRequestMessageContext: The OIDCPeerEntityContext to base the outbound context on.
peerEntityCtx - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeRelyingPartyContext: OIDC peer entity context to populate from.
peerIdentifier - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeRelyingPartyContext: The stashed identifier of the OIDC entity.
populateFilterContext(ProfileRequestContext, AttributeFilterContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication: Fill in the filter context data.
populateSubject(Subject) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication
prc - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication: The profile request context.
PRC_LOOKUP - Static variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler: Lookup function for parent ProfileRequestContext.
PRC_LOOKUP - Static variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler: Lookup function for parent ProfileRequestContext.
PRC_LOOKUP - Static variable in class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.ClientAuthenticationConfigurationLookupFunction: Lookup function for parent ProfileRequestContext.
PrepareOIDCInboundMessageContext - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl: Action that adds an inbound MessageContext and a OIDCPeerEntityContext to the ProfileRequestContext based on the identity of a relying party, by default from the AuthenticationContext.getAuthenticatingAuthority().
PrepareOIDCInboundMessageContext() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.PrepareOIDCInboundMessageContext: Constructor.
processAttributes(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication: Process the inbound OIDC claims.
ProcessEndUserClaims - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl: Process the end-user claims from the id_token and possible UserInfo claims sets.
ProcessEndUserClaims() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims: Constructor.
profileConfiguration - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler: Applicable stashed profile configuration.
profileConfiguration - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientContext: Applicable stashed profile configuration.
profileConfiguration - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication: Store off profile config.
profileConfiguration - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler: Applicable profile configuration.
profileRequestContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AuthorizationController: Lookup strategy to locate the nested ProfileRequestContext.
providerMetadata - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject: OpenID Provider metadata .
providerMetadata - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler: The stashed provider metadata.
providerMetadata - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler: OpenID Provider metadata .
providerMetadataContext - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction: OIDC Metadata context.
providerMetadataContext - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractOIDCAuthenticationResponseAction: OIDC Metadata context.
providerMetadataLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction: Lookup strategy to locate the OP metadata to use.
providerMetadataLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractOIDCAuthenticationResponseAction: Lookup strategy to locate the OP metadata to use.
providerMetadataLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject: Lookup strategy to locate the OpenID Provider metadata to use.
providerMetadataLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler: Lookup strategy to locate the OP metadata to use.
providerMetadataLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler: Lookup strategy to locate the OpenID Provider metadata to use.
ProviderMetadataStringListValueLookupFunction - Class in net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate: Fetches the value for the configured key as List of Strings.
ProviderMetadataStringListValueLookupFunction(String) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate.ProviderMetadataStringListValueLookupFunction: Constructor.
providerResolver - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.metadata.impl.OIDCProviderMetadataLookupHandler: Resolver used to look up OIDC provider information.
ProxyAuthenticationFlowAuditExtractor - Class in net.shibboleth.idp.plugin.authn.oidc.rp.audit.impl: A Function that returns the authentication flow ID from the attempted flow of the parent context used to satisfy a request.
ProxyAuthenticationFlowAuditExtractor() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.audit.impl.ProxyAuthenticationFlowAuditExtractor

R

redirectUriCreationStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddRedirectURIHandler: Function to create a suitable redirect URI from the given servlet request and profile request context.
RedirectUriLookupFunction - Class in net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate: Pull a redirect_uri from the Relying Party profile config if present.
RedirectUriLookupFunction() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate.RedirectUriLookupFunction
redirectUriOverride - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.OAuth2ClientContext: An redirect URI that should take preference over any automatically computed.
redirectUriOverrideLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientContext: A redirect_uri lookup strategy which can pull out an override redirect_uri from the profile request context.
refreshToken - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OAuth2RefreshTokenPrincipal: The access_token.
relyingPartyContextCreationStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeRelyingPartyContext: Strategy that will return or create a RelyingPartyContext.
relyingPartyContextCreationStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeUnverifiedRelyingPartyContext: Strategy that will return or create a RelyingPartyContext.
relyingPartyContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate.ExtraAudiencesLookupStrategy: Lookup function for relying party context.
relyingPartyContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject: Lookup function for relying party context.
relyingPartyContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler: Lookup function for relying party context.
relyingPartyContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientContext: Lookup function for relying party context.
relyingPartyContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication: Strategy used to look up a RelyingPartyContext for configuration options.
relyingPartyContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler: Lookup function for relying party context.
relyingPartyContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.ClientAuthenticationConfigurationLookupFunction: Strategy used to locate the RelyingPartyContext associated with a given ProfileRequestContext.
relyingPartyCtxLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOutboundAuthorizationRequestMessageContext: Strategy used to locate the RelyingPartyContext associated with a given ProfileRequestContext.
requestContext - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.audit.impl.TransitionActionWriteAuditLog: The Spring RequestContext to operate on.
requestedClaimsHook - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddRequestedClaimsHandler: A hook that creates requested claims JSON Object from the profile request object.
RequestObjectRequiredAndSupported - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic: A predicate that tests whether a request object should be built based on what is configured in the profile configuration and whether the OP supports it.
RequestObjectRequiredAndSupported() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.RequestObjectRequiredAndSupported: Constructor.
RequestObjectSupportedSignatureSigningAlgorithms - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.navigate: Pull out the request object supported signature signing algorithms from the metadata.
RequestObjectSupportedSignatureSigningAlgorithms() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.navigate.RequestObjectSupportedSignatureSigningAlgorithms
requestObjectToBeSignedPredicate - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject: Is the request object going to be signed? if so the 'iss' and 'aud' claims will be set.
RequestObjectTokenUpdateStrategy - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate: Consumer that adds the JWT back to the Request Object in the OIDCAuthenticationRequest.
RequestObjectTokenUpdateStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.RequestObjectTokenUpdateStrategy: Constructor.
RequiresSignatureVerificationPredicate - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic: Is successful TLS credential verification enough to validate the JWT in question or should JWT signature validation be applied? Defaults to true — signature verification is required.
RequiresSignatureVerificationPredicate(Function<MessageContext, AbstractAuthenticatableOIDCContext>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.RequiresSignatureVerificationPredicate: Constructor.
resolveClaimsSet(UserInfoResponse) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateUserInfoJSONObjectClaims: Resolve the UserInfo claims from the user info response.
resolveExisting(MessageContext, String) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.metadata.impl.OIDCProviderMetadataLookupHandler: Attempt to resolve an existing OIDCProviderMetadataContext from which to copy.

S

securityParametersContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler: Strategy used to look up the SecurityParametersContext to set the parameters for.
serialVersionUID - Static variable in exception net.shibboleth.idp.plugin.authn.oidc.rp.exception.OIDCProxyException: Generated serial UID.
serialVersionUID - Static variable in exception net.shibboleth.idp.plugin.authn.oidc.rp.exception.OIDCRPException: Serial UID.
setAccessTokenResponseContextLookupStrategy(Function<ProfileRequestContext, AccessTokenResponseContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims: Set the strategy used to look up a AccessTokenResponseContext.
setAddToExistingInboundMessageContext(boolean) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.PrepareOIDCInboundMessageContext: Set whether to append any defined subcontexts to the existing inbound message context, or to a new one.
setAddToExistingInboundMessageContextPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.PrepareOIDCInboundMessageContext: Set a predicate to determine whether to append any defined subcontexts to the existing inbound message context, or to a new one.
setAllowedOrigins(Set<String>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultRedirectUriCreationFunction: Set the allowed origins to use if a redirect_uri is computed.
setAttributeExtractionStrategy(Function<ProfileRequestContext, Collection<IdPAttribute>>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication: Sets the strategy function to invoke for generalized extraction of data into IdPAttribute objects for inclusion in the AuthenticationResult.
setAttributeFilter(ReloadableService<AttributeFilter>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication: Sets the filter service to use for inbound attributes.
setAuthenticated(boolean) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.AbstractAuthenticatableOIDCContext: Sets the flag indicating whether the information contained in this context has been authenticated.
setAuthenticationRequestLookupStrategy(Function<MessageContext, OIDCAuthenticationRequest>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.RequestObjectTokenUpdateStrategy: Set the strategy used to locate the OIDCAuthenticationRequest to use.
setAuthenticationRequestLookupStrategy(Function<MessageContext, OIDCAuthenticationRequest>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.navigate.JWTClaimsSetFromRequestObjectLookupFunction: Set the strategy used to locate the OIDCAuthenticationRequest to use.
setAuthenticationRequestLookupStrategy(Function<MessageContext, OIDCAuthenticationRequest>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.navigate.PayloadFromRequestObjectLookupFunction: Set the strategy used to locate the OIDCAuthenticationRequest to use.
setAuthenticationRequestLookupStrategy(Function<MessageContext, OIDCAuthenticationRequest>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestMessageHandler: Set the strategy used to locate the OIDCAuthenticationRequest to use.
setAuthenticationRequestLookupStrategy(Function<ProfileRequestContext, OIDCAuthenticationRequest>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate.MaxAgeLookupFunction: Set the authentication request lookup strategy to use.
setAuthenticationRequestLookupStrategy(Function<ProfileRequestContext, OIDCAuthenticationRequest>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.AuthenticationRequestTimeLookupFunction: Set the strategy used to locate the OIDCAuthenticationRequest to use.
SetAuthenticationRequestTimeHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl: Handler that adds the authentication request time to the authentication request.
SetAuthenticationRequestTimeHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.SetAuthenticationRequestTimeHandler
setCallbackServletPath(String) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultRedirectUriCreationFunction: Set the path segment relative to the servlet path of the callback endpoint.
setClaimIfPresent(ClaimsSet, String, Object) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject: Set the claim onto the claims set if not null.
setClaimMergingStrategy(BinaryOperator<ClaimsSet>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims: Set the strategy used to merge UserInfo claims with id_token claims.
setClaimSanitizationStrategy(UnaryOperator<ClaimsSet>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims: Set the strategy used to sanitize claims from both the id_token and UserInfo claims set to produce a clean claims set.
setClaimsSetIsValidPredicate(Predicate<ClaimsSet>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject: Set a hook that allows the built request object to be validated before it is used.
setClaimsValidator(ClaimsValidator) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateTokenClaims: Set the JWT claims verifier to use.
setCleanupHook(Consumer<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateTokenClaims: Set the cleanup hook to execute after either a successful or unsuccessful claims validation.
setClientId(String) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.OAuth2ClientContext: Set the client_id.
setClockSkew(Duration) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.AuthenticationRequestTimeLookupFunction: Set the clock skew.
setContextClassLookupStrategy(Function<MessageContext, ? extends AbstractOIDCEntityContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.metadata.impl.OIDCProviderMetadataLookupHandler: Set the context class lookup strategy.
setContextToPrivateCredentialsMappingStrategy(Function<ProfileRequestContext, Collection<Principal>>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication: Set the context to principal mapping strategy for mapping context information into principal collections to place in the private credentials set of the subject.
setCopyContextStrategy(Function<MessageContext, OIDCProviderMetadataContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.metadata.impl.OIDCProviderMetadataLookupHandler: Set the optional strategy for resolving an existing metadata context from which to copy data.
setCustomClaimsStrategy(BiConsumer<ProfileRequestContext, ClaimsSet>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject: Set a bi-consumer hook to add custom claims to the request object.
setEnableClaimSanitizationStrategy(boolean) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims: Set whether to enable claim sanitization.
setEndUserClaims(ClaimsSet) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.EndUserClaimsContext: Set the claims about the authenticated end-user.
setEndUserClaimsContextLookupStrategy(Function<ProfileRequestContext, EndUserClaimsContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims: Set the strategy used to lookup a EndUserClaimsContext.
setHttpClient(HttpClient) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction: Set the HttpClient to use.
setHttpClientSecurityParameters(HttpClientSecurityParameters) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction: Set the optional client security parameters.
setHttpMethodLookupStrategy(Function<ProfileRequestContext, OAuth2AuthorizationProfileConfiguration.HttpRequestMethod>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.DefaultUserInfoRequestEncoder: Set the strategy used to lookup the HTTP method to use in this request.
setHttpRequestEncoderStrategy(Function<ProfileRequestContext, ClassicHttpRequest>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction: Set the strategy used to map a HTTP request to a ClassicHttpRequest object.
setHttpResponseDecoderStrategy(HttpClientResponseHandler<T>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction: Set the strategy (Http client response handler) used to map a HTTP response the response type.
setHttpServletRequestSupplier(NonnullSupplier<HttpServletRequest>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler: Set the HTTP servlet request supplier.
setIdentiferLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.PrepareOIDCInboundMessageContext: Set the lookup strategy to identify the OP/RP.
setJwtBearerExpiryOffset(Duration) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler: Set the JWT expiry time offset for appropriate client authentication methods.
setJwtLookupStrategy(Function<ProfileRequestContext, JWT>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateTokenClaims: Set the lookup strategy that locates the JWT to validate from the context.
setMetadataResolver(MetadataResolver) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication: Set a metadata source to use during filtering.
setNonceGenerationStrategy(Function<ProfileRequestContext, Nonce>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddNonceHandler: Set the nonce generation strategy to use.
setOAuth2ClientAuthenticationContextLookupStrategy(Function<MessageContext, OAuth2ClientAuthenticationContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationContext: Set the strategy to lookup the OAuth2ClientAuthenticationContext from the ProfileRequestContext.
setOAuth2ClientAuthenticationContextLookupStrategy(Function<MessageContext, OAuth2ClientAuthenticationContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler: Set the strategy to lookup the OAuth2ClientAuthenticationContext from the MessageContext.
setOAuth2ClientContextLookupStrategy(Function<ProfileRequestContext, OAuth2ClientContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultRedirectUriCreationFunction: Set the strategy to lookup the OAuth2ClientContext from the ProfileRequestContext.
setOAuth2ClientContextLookupStrategy(Function<ProfileRequestContext, OAuth2ClientContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeAuthorizationRequest: Set the strategy to lookup the OAuth2ClientContext from the ProfileRequestContext.
setOAuth2ClientContextLookupStrategy(Function<ProfileRequestContext, OAuth2ClientContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientContext: Set the strategy to lookup the OAuth2ClientContext from the ProfileRequestContext.
setObjectMapper(ObjectMapper) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl.AbstractJSONResponseDecoderFunction: Set the JSON Object Mapper to use.
setOidcAuthnContextLookupStrategy(Function<ProfileRequestContext, OIDCAuthnContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AuthorizationController: Set the lookup strategy used to locate the OIDCAuthnContext.
setOIDCClientAuthenticationContextContextLookupStrategy(Function<ProfileRequestContext, OAuth2ClientAuthenticationContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction: Set the strategy to lookup the OAuth2ClientAuthenticationContext.
setOIDCClientMetadataContextLookupStrategy(Function<ProfileRequestContext, OIDCMetadataContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOutboundAuthorizationRequestMessageContext: Set the strategy to lookup the OIDCMetadataContext from the ProfileRequestContext.
setOidcPeerEntityContextLookupStrategy(Function<MessageContext, OIDCPeerEntityContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler: Set the lookup strategy to find the OIDCPeerEntityContext.
setOidcProviderMetadataContextLookupStrategy(Function<ProfileRequestContext, OIDCProviderMetadataContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeRelyingPartyContext: Set the strategy used to return the OIDCProviderMetadataContext.
setOidcProviderMetadataContextLookupStrategy(Function<ProfileRequestContext, OIDCProviderMetadataContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.RequestObjectRequiredAndSupported: Set the lookup strategy to use to locate the OIDCProviderMetadataContext.
setOutboundMessageHandler(MessageHandler) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.OIDCAuthnContext: Set the outbound MessageHandler to run prior to encoding.
setOutboundMessageHandlerContextLookupStrategy(Function<MessageContext, OutboundMessageHandlerContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestMessageHandler: Set the strategy used to locate the OutboundMessageHandlerContext.
setPeerEntityContextLookupStrategy(Function<ProfileRequestContext, OIDCPeerEntityContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeRelyingPartyContext: Set the strategy used to look up the OIDCPeerEntityContext to draw from.
setProfileRequestContextLookupStrategy(Function<ProfileRequestContext, ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AuthorizationController: Set the lookup strategy used to locate the nested ProfileRequestContext.
setProviderMetadataLookupStrategy(Function<MessageContext, OIDCProviderMetadataContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler: Set the lookup strategy to locate the OpenID providers metadata.
setProviderMetadataLookupStrategy(Function<MessageContext, OIDCProviderMetadataContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler: Set the lookup strategy to locate the OpenID providers metadata.
setProviderMetadataLookupStrategy(Function<ProfileRequestContext, OIDCProviderMetadataContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction: Set the lookup strategy to locate the OpenID providers metadata.
setProviderMetadataLookupStrategy(Function<ProfileRequestContext, OIDCProviderMetadataContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractOIDCAuthenticationResponseAction: Set the lookup strategy to locate the OpenID providers metadata.
setProviderMetadataLookupStrategy(Function<ProfileRequestContext, OIDCProviderMetadataContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject: Set the lookup strategy to locate the OpenID providers metadata.
setProviderMetadataResolver(ProviderMetadataResolver) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.metadata.impl.OIDCProviderMetadataLookupHandler: Set the ProviderMetadataResolver to use.
setRedirectUriCreationStrategy(BiFunction<HttpServletRequest, ProfileRequestContext, URI>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddRedirectURIHandler: Set the creation strategy used to compute or lookup a redirect URI.
setRedirectUriOverride(URI) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.OAuth2ClientContext: Set the redirect_uri to use in place of any other.
setRedirectUriOverrideLookupStrategy(Function<ProfileRequestContext, URI>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientContext: Set the redirect_uri lookup strategy to locate an explicitly set redirect_uri.
setRelyingPartyContextCreationStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeRelyingPartyContext: Set the strategy used to return or create the RelyingPartyContext .
setRelyingPartyContextCreationStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeUnverifiedRelyingPartyContext: Set the strategy used to return or create the RelyingPartyContext.
setRelyingPartyContextLookupStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject: Set the strategy used to locate the RelyingPartyContext associated with a given ProfileRequestContext.
setRelyingPartyContextLookupStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler: Set lookup strategy for relying party context.
setRelyingPartyContextLookupStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientContext: Set lookup strategy for relying party context.
setRelyingPartyContextLookupStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOutboundAuthorizationRequestMessageContext: Set the strategy used to locate the RelyingPartyContext associated with a given ProfileRequestContext.
setRelyingPartyContextLookupStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication: Set the strategy used to return the RelyingPartyContext for configuration options.
setRelyingPartyContextLookupStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler: Set the strategy used to locate the RelyingPartyContext associated with a given ProfileRequestContext.
setRelyingPartyContextLookupStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.ClientAuthenticationConfigurationLookupFunction: Set the strategy used to locate the RelyingPartyContext associated with a given ProfileRequestContext.
setRequestedClaimsHook(Function<ProfileRequestContext, OIDCClaimsRequest>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddRequestedClaimsHandler: Set the hook that generates a requested claims JSON Object from the given profile request object.
setRequestObjectToBeSignedPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject: Set a predicate to determine if the request object will be 'eventually' signed.
setSecurityParametersContextLookupStrategy(Function<MessageContext, SecurityParametersContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler: Set the strategy used to look up the SecurityParametersContext.
setStateGenerationStrategy(Function<MessageContext, String>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddStateHandler: Set the creation strategy used to compute the 'state'.
setTokenResponse(OIDCTokenResponse) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.AccessTokenResponseContext: Set the OAuth 2.0 and OIDC Token Response.
setTokenResponseContextLookupStrategy(Function<ProfileRequestContext, AccessTokenResponseContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.DefaultUserInfoRequestEncoder: Set the strategy used to lookup the AccessTokenResponseContext.
setTokenResponseContextLookupStrategy(Function<ProfileRequestContext, AccessTokenResponseContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ExchangeCodeForAccessToken: Set the strategy used to look up a AccessTokenResponseContext.
setTokenResponseContextLookupStrategy(Function<ProfileRequestContext, AccessTokenResponseContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOAuthAccessTokenResponse: Set the strategy used to look up a AccessTokenResponseContext.
setTokenResponseContextLookupStrategy(Function<ProfileRequestContext, AccessTokenResponseContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateUserInfoJSONObjectClaims: Set the strategy used to look up a AccessTokenResponseContext.
setTranscoderRegistry(ReloadableService<AttributeTranscoderRegistry>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication: Sets the registry of transcoding rules to apply to encode attributes.
setUnprocessedIdTokenClaims(JWTClaimsSet) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.EndUserClaimsContext: Set the id_token claims about the authenticated end-user as returned from the id_token endpoint e.g.
setUserInfo(UserInfoSuccessResponse) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.UserInfoResponseContext: Set the user info response.
setUserInfoResponseContextLookupStrategy(Function<ProfileRequestContext, UserInfoResponseContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims: Set the strategy used to look up a UserInfoResponseContext.
setUserInfoResponseContextLookupStrategy(Function<ProfileRequestContext, UserInfoResponseContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.UserInfoEndpointLookup: Set the strategy used to look up a UserInfoResponseContext.
setUserInfoResponseContextLookupStrategy(Function<ProfileRequestContext, UserInfoResponseContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateUserInfoJSONObjectClaims: Set the strategy used to look up a UserInfoResponseContext.
setWebflowKey(String) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.context.OutboundMessageHandlerContext: Set the Spring Webflow execution key.
setWriteAuditLogAction(WriteAuditLog) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.audit.impl.TransitionActionWriteAuditLog: Sets an audit output action to run.
SimpleOIDCSubjectIdentifierCanonicalization - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl: An action that operates on a SubjectCanonicalizationContext child of the current ProfileRequestContext, and transforms the input Subject into a principal name by searching for one and only one OIDCSubjectIdentifierPrincipal custom principal.
SimpleOIDCSubjectIdentifierCanonicalization() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.SimpleOIDCSubjectIdentifierCanonicalization: Constructor.
SimpleOIDCSubjectIdentifierCanonicalization.ActivationCondition - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl: A predicate that determines if this action can run or not.
STATE_CLAIM - Static variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddStateHandler: The 'state' claim name.
STATE_PARAMETER - Static variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AuthorizationController: The name of the Http parameter that stores the state value.
stateGenerationStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddStateHandler: Function to create a suitable 'state' to add to the authentication request.
SubFromIDTokenLookupFunction - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate: A function that pulls the subject 'sub' out of the id_token in the AccessTokenResponseContext.
SubFromIDTokenLookupFunction() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.SubFromIDTokenLookupFunction: Constructor.
SubFromIDTokenLookupFunction(Function<ProfileRequestContext, AccessTokenResponseContext>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.SubFromIDTokenLookupFunction: Constructor.
subject - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OIDCSubjectIdentifierPrincipal: The subject.
subjectIdentifierPrincipal - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.SimpleOIDCSubjectIdentifierCanonicalization: The custom Principal to operate on.

T

test(int) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.ManyValuesIntegerComparisonPredicate
test(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.IsCodeFlowPredicate
test(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.IsHybridFlowPredicate
test(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.IsImplicitFlowPredicate
test(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.JWTBearerTokenForClientAuthenticationPredicate
test(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.RequiresSignatureVerificationPredicate
test(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.SimpleOIDCSubjectIdentifierCanonicalization.ActivationCondition
test(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.AbstractUserInfoResponseTypeCondition
test(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.RequestObjectRequiredAndSupported
test(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.UserInfoLookupCondition
test(ProfileRequestContext, JWTClaimsSet) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.NonceValidationActivationCondition
tokenResponse - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.AccessTokenResponseContext: The OAuth 2.0 and OIDC token response.
tokenResponseContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.AbstractTokenResponseLookupStrategy: Strategy used to locate the AccessTokenResponseContext to extract the id_token from.
tokenResponseContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.IDTokenInAccessTokenUpdateStrategy: Strategy used to look up the AccessTokenResponseContext to set id_token on.
tokenResponseContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.DefaultUserInfoRequestEncoder: Strategy used to look up the AccessTokenResponseContext to set the parameters for.
tokenResponseContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AccessTokenToPrivateCredentialsMappingStrategy: Strategy used to look up the AccessTokenResponseContext to set the parameters for.
tokenResponseContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ExchangeCodeForAccessToken: Strategy used to look up the AccessTokenResponseContext to set the parameters for.
tokenResponseContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOAuthAccessTokenResponse: Strategy used to look up the AccessTokenResponseContext to validate.
tokenResponseContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateUserInfoJSONObjectClaims: Strategy used to look up the AccessTokenResponseContext.
tokenResponseCreatedAt - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.AccessTokenResponseContext: The time the token response was set onto this context.
toMapMergeDuplicates(Collection<IdPAttribute>) - Static method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication: Convert a collection of IdPAttribute objects into a mutable Map keyed by IdPAttribute.getId().
toString() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OAuth2AccessTokenPrincipal
toString() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OAuth2RefreshTokenPrincipal
toString() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.principal.OIDCSubjectIdentifierPrincipal
transcoderRegistry - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication: Transcoder registry service object.
TransitionActionWriteAuditLog - Class in net.shibboleth.idp.plugin.authn.oidc.rp.audit.impl: An action that decorates the WriteAuditLog action to produce a "success" event such that it can be run inside a transition and the transition can proceed.
TransitionActionWriteAuditLog() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.audit.impl.TransitionActionWriteAuditLog

U

unprocessedIdTokenClaims - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.EndUserClaimsContext: The set of unprocessed id_token claims as returned from an id_token source.
unprocessedIdTokenClaims - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication: The set of id_token claims before they are processed.
UnsupportedResponseTypeAction - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl: Simple action to log the response from an unsupported grant type.
UnsupportedResponseTypeAction() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.UnsupportedResponseTypeAction
userInfo - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.UserInfoResponseContext: The UserInfo response.
userInfo - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateUserInfoJSONObjectClaims: The stashed user info response.
USERINFO_ERROR_RESPONSE_HEADER - Static variable in class net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl.DefaultUserInfoResponseDecoder: The UserInfo response header that carries error information.
userInfoClaims - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims: The stashed UserInfo claims.
userInfoCtx - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateUserInfoJSONObjectClaims: The stashed user info response context.
UserInfoEndpointLookup - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl: Request information from the UserInfo OAuth2.0 endpoint using the access_token already present in the context.
UserInfoEndpointLookup() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.UserInfoEndpointLookup: Constructor.
UserInfoHttpRequestMethodLookupStrategy - Class in net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate: Locate the HTTP request method to use for the UserInfo request.
UserInfoHttpRequestMethodLookupStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate.UserInfoHttpRequestMethodLookupStrategy
UserInfoInUserInfoResponseContextUpdateStrategy - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate: Consumer strategy to update the UserInfo JWT in the UserInfoResponseContext.
UserInfoInUserInfoResponseContextUpdateStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.UserInfoInUserInfoResponseContextUpdateStrategy: Constructor.
UserInfoInUserInfoResponseContextUpdateStrategy(Function<ProfileRequestContext, UserInfoResponseContext>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.UserInfoInUserInfoResponseContextUpdateStrategy: Constructor.
UserInfoLookupCondition - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic: Checks whether the UserInfo endpoint should be accessed to retrieve claims about the authenticated end-user.
UserInfoLookupCondition() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.UserInfoLookupCondition
UserInfoPlainResponseTypeCondition - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic: Condition that returns true if the UserInfo response was an plain JSON type i.e.
UserInfoPlainResponseTypeCondition() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.UserInfoPlainResponseTypeCondition: Constructor.
UserInfoPlainResponseTypeCondition(Function<ProfileRequestContext, UserInfoResponseContext>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.UserInfoPlainResponseTypeCondition: Constructor.
UserInfoResponseContext - Class in net.shibboleth.idp.plugin.authn.oidc.rp.context: A context to hold the response from the UserInfo endpoint.
UserInfoResponseContext() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.context.UserInfoResponseContext
userInfoResponseContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.AbstractUserInfoTokenResponseLookupStrategy: Strategy used to look up the UserInfoResponseContext.
userInfoResponseContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.DefaultUserInfoJWTLookupStrategy: Strategy used to look up the UserInfoResponseContext.
userInfoResponseContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims: Strategy used to look up the UserInfoResponseContext.
userInfoResponseContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.UserInfoEndpointLookup: Strategy used to look up the AccessTokenResponseContext to set the parameters for.
userInfoResponseContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateUserInfoJSONObjectClaims: Strategy used to look up the UserInfoResponseContext.
userInfoResponseContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.AbstractUserInfoResponseTypeCondition: Strategy used to look up the UserInfoResponseContext.

V

ValidateAuthenticationResponseResult - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl: An action that checks the inbound authentication response indicated success as opposed to an error.
ValidateAuthenticationResponseResult() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateAuthenticationResponseResult
ValidateExternalAuthenticationContext - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl: An action that checks for a ExternalAuthenticationContext for a signalled event via the ExternalAuthenticationContext.getAuthnError() method.
ValidateExternalAuthenticationContext() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateExternalAuthenticationContext
ValidateOAuthAccessTokenResponse - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl: Validation action that validates the OAuth Access Token Response against RFC 6749 section 5.1 and OpenID Connect Core 1.0 section 3.1.3.3.
ValidateOAuthAccessTokenResponse() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOAuthAccessTokenResponse: Constructor.
ValidateOIDCAuthentication - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl: An action that builds an AuthenticationResult based on an inbound OIDC authentication response.
ValidateOIDCAuthentication() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication: Constructor.
validateRequestObject(ProfileRequestContext, ClaimsSet) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject: Ensure the request object is valid by assessing the claims are correct.
ValidateResponseState - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl: Authentication action that validates the authentication response state parameter (which is required in the Proxy flow) matches that in the authentication request.
ValidateResponseState() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateResponseState
ValidateTokenClaims - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl: Action that validates the claims of a JWT using the supplied claims validator.
ValidateTokenClaims() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateTokenClaims
ValidateUserInfoJSONObjectClaims - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl: Validate a successful UserInfo JSON Object Response according to section 5.3.2 of OpenID Connect Core 1.0.
ValidateUserInfoJSONObjectClaims() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateUserInfoJSONObjectClaims: Constructor.
validationClaims - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultClaimSanitizationStrategy: The set of validation claims to filter out of the input claims.
value - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.audit.impl.FixedStringAuditExtractor: The fixed string to log.
verifySuitableClientSecretJWTSecurityContext() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler: Check the populated security context is using the correct algorithm family for client_secret_jwt client authentication.
verifySuitablePrivateKetJWTSecurityContext() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationMethodHandler: Check the populated security context is using the correct algorithm family for private_key_jwt client authentication.

W

webflowKey - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.context.OutboundMessageHandlerContext: The spring webflow key.
withMapMergeDuplicates(Map<String, IdPAttribute>, Collection<IdPAttribute>) - Static method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication: Add a collection of IdPAttribute objects into a mutable input Map keyed by IdPAttribute.getId().
writeAuditLogAction - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.audit.impl.TransitionActionWriteAuditLog: Optional audit output action.

A B C D E F G H I J K L M N O P R S T U V W
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form