Index
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form
A
- AbstractAuthenticationRequestAuditExtractor<T> - Class in net.shibboleth.oidc.profile.audit.impl
-
A base class for audit extractors that lookup the
OIDCAuthenticationRequest. - AbstractAuthenticationRequestAuditExtractor(Function<ProfileRequestContext, OIDCAuthenticationRequest>) - Constructor for class net.shibboleth.oidc.profile.audit.impl.AbstractAuthenticationRequestAuditExtractor
-
Constructor.
- AbstractAuthenticationResponseAuditExtractor<T> - Class in net.shibboleth.oidc.profile.audit.impl
-
A base class for audit extractors that lookup the
AuthenticationResponse. - AbstractAuthenticationResponseAuditExtractor(Function<ProfileRequestContext, AuthenticationResponse>) - Constructor for class net.shibboleth.oidc.profile.audit.impl.AbstractAuthenticationResponseAuditExtractor
-
Constructor.
- AbstractBackingStore<I,
T> - Class in net.shibboleth.oidc.metadata.impl -
A base backing store implementation.
- AbstractBackingStore() - Constructor for class net.shibboleth.oidc.metadata.impl.AbstractBackingStore
-
Constructor.
- AbstractBuildErrorResponseFromEvent<T extends ErrorResponse> - Class in net.shibboleth.oidc.profile.impl
-
This action is extended by error response actions.
- AbstractBuildErrorResponseFromEvent() - Constructor for class net.shibboleth.oidc.profile.impl.AbstractBuildErrorResponseFromEvent
-
Constructor.
- AbstractClaimsSetAuditExtractor<T> - Class in net.shibboleth.oidc.profile.audit.impl
-
An abstract audit extractor function to extract claims from the located claims set.
- AbstractClaimsSetAuditExtractor() - Constructor for class net.shibboleth.oidc.profile.audit.impl.AbstractClaimsSetAuditExtractor
- AbstractClaimsValidator - Class in net.shibboleth.oidc.jwt.claims
-
Base class for
claims validators. - AbstractClaimsValidator() - Constructor for class net.shibboleth.oidc.jwt.claims.AbstractClaimsValidator
-
Constructor.
- AbstractClientInformationCredentialResolver - Class in net.shibboleth.oidc.security.credential.impl
-
Base class for resolving credentials from
OIDCClientInformation. - AbstractClientInformationCredentialResolver() - Constructor for class net.shibboleth.oidc.security.credential.impl.AbstractClientInformationCredentialResolver
- AbstractClientSecretValueResolver - Class in net.shibboleth.oidc.metadata.impl
-
Base class for
ClientSecretValueResolvers. - AbstractClientSecretValueResolver() - Constructor for class net.shibboleth.oidc.metadata.impl.AbstractClientSecretValueResolver
- AbstractDynamicHTTPFetchingStrategy<MetadataType> - Class in net.shibboleth.oidc.metadata.impl
-
Abstract strategy for fetching metadata dynamically over HTTP.
- AbstractDynamicHTTPFetchingStrategy(HttpClient, HttpClientResponseHandler<MetadataType>) - Constructor for class net.shibboleth.oidc.metadata.impl.AbstractDynamicHTTPFetchingStrategy
-
Constructor.
- AbstractEncryptionAlgorithmsLookupStrategy - Class in net.shibboleth.oidc.security.impl
-
A base class for lookup strategies that return encryption algorithms and make use of the
AlgorithmRegistry. - AbstractEncryptionAlgorithmsLookupStrategy(AlgorithmRegistry) - Constructor for class net.shibboleth.oidc.security.impl.AbstractEncryptionAlgorithmsLookupStrategy
-
Constructor.
- AbstractEvaluableMetadataCriterion<T> - Class in net.shibboleth.oidc.metadata
-
Base class for all metadata criterion classes.
- AbstractEvaluableMetadataCriterion(Class<T>, boolean) - Constructor for class net.shibboleth.oidc.metadata.AbstractEvaluableMetadataCriterion
-
Constructor.
- AbstractFileOIDCEntityResolver<Key extends Identifier,
Value> - Class in net.shibboleth.oidc.metadata.impl -
Based on
FilesystemMetadataResolver. - AbstractFileOIDCEntityResolver(Timer, Resource) - Constructor for class net.shibboleth.oidc.metadata.impl.AbstractFileOIDCEntityResolver
-
Constructor.
- AbstractFileOIDCEntityResolver(Resource) - Constructor for class net.shibboleth.oidc.metadata.impl.AbstractFileOIDCEntityResolver
-
Constructor.
- AbstractMetadataCache<IdentifierType,
MetadataType> - Class in net.shibboleth.oidc.metadata.cache.impl -
A base
MetadataCacheimplementation. - AbstractMetadataCache(BackingStore<IdentifierType, MetadataType>) - Constructor for class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
-
Package private constructor.
- AbstractMetadataCache(BackingStore<IdentifierType, MetadataType>, ScheduledExecutorService) - Constructor for class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
-
Package private constructor.
- AbstractMetadataValueSAMLObject - Class in net.shibboleth.oidc.saml.xmlobject.impl
-
Base implementation for all simple metadata objects containing
Stringvalue inside the element. - AbstractMetadataValueSAMLObject(String, String, String) - Constructor for class net.shibboleth.oidc.saml.xmlobject.impl.AbstractMetadataValueSAMLObject
-
Constructor.
- AbstractOAuth2ClientAuthenticableProfileConfiguration - Class in net.shibboleth.oidc.profile.oauth2.config.impl
-
Base class for OAuth profile configurations that support OAuth-defined client authentication methods.
- AbstractOAuth2ClientAuthenticableProfileConfiguration(String) - Constructor for class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Constructor.
- AbstractOAuth2FlowAwareProfileConfiguration - Class in net.shibboleth.oidc.profile.oauth2.config.impl
-
Base class for OIDC protocol configuration, containing configuration bits shared by all flow aware OIDC protocol configurations.
- AbstractOAuth2FlowAwareProfileConfiguration(String) - Constructor for class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2FlowAwareProfileConfiguration
-
Constructor.
- AbstractOAuth2InterceptorAwareProfileConfiguration - Class in net.shibboleth.oidc.profile.oauth2.config.impl
-
Abstract profile configuration implementation for interceptor flow aware OAuth2 profile configurations.
- AbstractOAuth2InterceptorAwareProfileConfiguration(String) - Constructor for class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2InterceptorAwareProfileConfiguration
-
Constructor.
- AbstractOAuth2TokenValidatingConfiguration - Class in net.shibboleth.oidc.profile.oauth2.config.impl
-
Base class for profile configurations that validate previously issued OAuth2 tokens.
- AbstractOAuth2TokenValidatingConfiguration(String) - Constructor for class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2TokenValidatingConfiguration
-
Creates a new configuration instance.
- AbstractOIDCAttributeTranscoder - Class in net.shibboleth.oidc.attribute.transcoding
-
Abstract class for OIDC attribute encoders.
- AbstractOIDCAttributeTranscoder() - Constructor for class net.shibboleth.oidc.attribute.transcoding.AbstractOIDCAttributeTranscoder
- AbstractOIDCAttributeTranscoder.NamingFunction - Class in net.shibboleth.oidc.attribute.transcoding
-
A function to produce a "canonical" name for an OIDC claim for transcoding rules.
- AbstractOIDCEntityContext - Class in net.shibboleth.oidc.profile.messaging.context
-
Abstract base class for subcontexts that carry information about a OIDC entity.
- AbstractOIDCEntityContext() - Constructor for class net.shibboleth.oidc.profile.messaging.context.AbstractOIDCEntityContext
- AbstractOIDCEntityResolver<Key extends Identifier,
Value> - Class in net.shibboleth.oidc.metadata.impl -
A base class for
Resolvers used for resolving entities containing identifiers based onIdentifier. - AbstractOIDCEntityResolver() - Constructor for class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver
-
Constructor.
- AbstractOIDCEntityResolver.JsonBackingStore - Class in net.shibboleth.oidc.metadata.impl
-
The collection of data which provides the backing store for the processed metadata.
- AbstractOIDCMessageEncoder - Class in net.shibboleth.oidc.profile.encoding.impl
-
Base class for OIDC message encoders.
- AbstractOIDCMessageEncoder() - Constructor for class net.shibboleth.oidc.profile.encoding.impl.AbstractOIDCMessageEncoder
-
Constructor.
- AbstractOIDCMetadataResolver<MetadataIdentifier,
MetadataType> - Class in net.shibboleth.oidc.metadata.impl -
An abstract metadata resolver which supports any type of metadata.
- AbstractOIDCMetadataResolver(MetadataCache<MetadataType>) - Constructor for class net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver
-
Constructor.
- AbstractOIDCSSOConfiguration - Class in net.shibboleth.oidc.profile.config.impl
-
Base class for profiles that support OIDC's concept of SSO, which spans multiple endpoints.
- AbstractOIDCSSOConfiguration(String) - Constructor for class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Creates a new configuration instance.
- AbstractReloadingOIDCEntityResolver<Key extends Identifier,
Value> - Class in net.shibboleth.oidc.metadata.impl -
Base class for metadata providers that cache and periodically refresh their entities.
- AbstractReloadingOIDCEntityResolver() - Constructor for class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver
-
Constructor.
- AbstractReloadingOIDCEntityResolver(Timer) - Constructor for class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver
-
Constructor.
- AbstractReloadingOIDCEntityResolver.RefreshMetadataTask - Class in net.shibboleth.oidc.metadata.impl
-
Background task that refreshes metadata.
- AccessTokenClaimsSetManipulationStrategyLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
A function that returns
(ProfileRequestContext)if such a profile is available from aRelyingPartyContextobtained via a lookup function, by default a child of theProfileRequestContext. - AccessTokenClaimsSetManipulationStrategyLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.AccessTokenClaimsSetManipulationStrategyLookupFunction
- accessTokenClaimsSetManipulationStrategyLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Lookup function to supply strategy bi-function for manipulating access token claims set.
- accessTokenClaimsSetManipulationStrategyLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
-
Lookup function to supply strategy bi-function for manipulating access token claims set.
- AccessTokenHashValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl
-
A validator that checks the access_token value matches its encoded at_hash representation in the id_token.
- AccessTokenHashValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.AccessTokenHashValidator
- AccessTokenLifetimeLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
A function that returns
OAuth2AccessTokenProducingProfileConfiguration.getAccessTokenLifetime(ProfileRequestContext)if such a profile is available from aRelyingPartyContextobtained via a lookup function, by default a child of theProfileRequestContext. - AccessTokenLifetimeLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.AccessTokenLifetimeLookupFunction
- accessTokenLifetimeLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Lookup function to supply access token lifetime.
- accessTokenLifetimeLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
-
Lookup function to supply access token lifetime.
- accessTokenLookupStrategy - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AccessTokenHashValidator
-
Strategy to find the access_token.
- AccessTokenTypeLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
A function that returns
OAuth2AccessTokenProducingProfileConfiguration.getAccessTokenType(ProfileRequestContext)if such a profile is available from aRelyingPartyContextobtained via a lookup function, by default a child of theProfileRequestContext. - AccessTokenTypeLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.AccessTokenTypeLookupFunction
- accessTokenTypeLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Lookup function to supply access token type.
- accessTokenTypeLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
-
Lookup functioon to supply access token type.
- ACR - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
-
The authentication context reference value.
- AcrClaimAlwaysEssentialLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
A predicate that returns
OIDCAuthorizationConfiguration.isAcrRequestAlwaysEssential(ProfileRequestContext)if such a profile is available from aRelyingPartyContextobtained via a lookup function, by default a child of theProfileRequestContext. - AcrClaimAlwaysEssentialLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.AcrClaimAlwaysEssentialLookupFunction
- ACRClaimsValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl
-
Check the ACR values requested were received.
- ACRClaimsValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.ACRClaimsValidator
- acrRequestAlwaysEssentialPredicate - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Whether all acr claim requests should be treated as Essential.
- acrs - Variable in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
-
List of requested authentication context class reference values.
- ACRS - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
-
The authentication context class references for the authentication request.
- acrTranslationStrategyLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Lookup function to supply the strategy function for translating OIDC ACR claims.
- activationCondition - Variable in class net.shibboleth.oidc.jwt.claims.AbstractClaimsValidator
-
Does this validator apply to this request? Default is true.
- activeProfileOnly - Variable in class net.shibboleth.oidc.profile.config.navigate.RevocationLifetimeLookupFunction
-
The flag whether to use active profile only.
- adapt(Function<ProfileRequestContext, T>) - Method in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler
-
Adapt a
ProfileRequestContextfunction to aMessageContextfunction via composing with a lookup function. - adaptedFunction - Variable in class net.shibboleth.oidc.profile.config.navigate.MessageContextLookupFunctionAdaptor
-
The adapted function.
- add - Variable in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
-
The value(s) to be added for the claim.
- add - Variable in class net.shibboleth.oidc.metadata.policy.MetadataPolicy.Builder
-
The value(s) to be added for the claim.
- additionalAudiencesLookupStrategy - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AudienceClaimsValidator
-
A strategy to lookup a list of additional audiences expected in the 'aud' claim.
- additionalCriteria - Variable in class net.shibboleth.oidc.security.jose.DecryptionParameters
-
Carries additional criterion made available to the resolvers at runtime.
- alg - Variable in class net.shibboleth.oidc.security.credential.BasicExpiringJWTSharedSecretCredentialFactoryBean
-
The key management algorithm ('alg') this credential supports.
- alg - Variable in class net.shibboleth.oidc.security.credential.impl.EvaluableMACKeyLengthCredentialCriterion
-
Base criteria.
- ALGO_ID_ALG_AES_128_GCM_KW - Static variable in class net.shibboleth.oidc.jwa.support.KeyManagementConstants
-
Encryption - Optional key wrapping with AES GCM using 128-bit key.
- ALGO_ID_ALG_AES_128_KW - Static variable in class net.shibboleth.oidc.jwa.support.KeyManagementConstants
-
Encryption - Recommended AES Key Wrap with default initial value using 128-bit key.
- ALGO_ID_ALG_AES_192_GCM_KW - Static variable in class net.shibboleth.oidc.jwa.support.KeyManagementConstants
-
Encryption - Optional key wrapping with AES GCM using 192-bit key.
- ALGO_ID_ALG_AES_192_KW - Static variable in class net.shibboleth.oidc.jwa.support.KeyManagementConstants
-
Encryption - Optional AES Key Wrap with default initial value using 192-bit key.
- ALGO_ID_ALG_AES_256_GCM_KW - Static variable in class net.shibboleth.oidc.jwa.support.KeyManagementConstants
-
Encryption - Optional key wrapping with AES GCM using 256-bit key.
- ALGO_ID_ALG_AES_256_KW - Static variable in class net.shibboleth.oidc.jwa.support.KeyManagementConstants
-
Encryption - Recommended AES Key Wrap with default initial value using 256-bit key.
- ALGO_ID_ALG_DIR - Static variable in class net.shibboleth.oidc.jwa.support.KeyManagementConstants
-
Encryption - Recommended Direct use of a shared symmetric key as the CEK.
- ALGO_ID_ALG_ECDH_ES - Static variable in class net.shibboleth.oidc.jwa.support.KeyManagementConstants
-
Encryption - Recommended+ Elliptic Curve Diffie-Helman Ephemeral Static key agreement.
- ALGO_ID_ALG_ECDH_ES_AES_128_KW - Static variable in class net.shibboleth.oidc.jwa.support.KeyManagementConstants
-
Encryption - Recommended ECDH-ES using Concat KDF and CEK wrapped with A128KW.
- ALGO_ID_ALG_ECDH_ES_AES_192_KW - Static variable in class net.shibboleth.oidc.jwa.support.KeyManagementConstants
-
Encryption - Optional ECDH-ES using Concat KDF and CEK wrapped with A192KW.
- ALGO_ID_ALG_ECDH_ES_AES_256_KW - Static variable in class net.shibboleth.oidc.jwa.support.KeyManagementConstants
-
Encryption - Recommended ECDH-ES using Concat KDF and CEK wrapped with A256KW.
- ALGO_ID_ALG_PBES2_HS_256_AES_128_KW - Static variable in class net.shibboleth.oidc.jwa.support.KeyManagementConstants
-
Encryption - Optional PBES2 with HMAC SHA-256 and A128KW wrapping.
- ALGO_ID_ALG_PBES2_HS_384_AES_192_KW - Static variable in class net.shibboleth.oidc.jwa.support.KeyManagementConstants
-
Encryption - Optional PBES2 with HMAC SHA-538 and A192KW wrapping.
- ALGO_ID_ALG_PBES2_HS_512_AES_256_KW - Static variable in class net.shibboleth.oidc.jwa.support.KeyManagementConstants
-
Encryption - Optional PBES2 with HMAC SHA-512 and A256KW wrapping.
- ALGO_ID_ALG_RSA_1_5 - Static variable in class net.shibboleth.oidc.jwa.support.KeyManagementConstants
-
Encryption - Recommended- RSAES-PKCS1-v1_5.
- ALGO_ID_ALG_RSA_OAEP - Static variable in class net.shibboleth.oidc.jwa.support.KeyManagementConstants
-
Encryption - Recommended+ RSAES OAEP using default parameters.
- ALGO_ID_ALG_RSA_OAEP_256 - Static variable in class net.shibboleth.oidc.jwa.support.KeyManagementConstants
-
Encryption - Optional RSAES OAEP using SHA-256 and MGF1 with SHA-256.
- ALGO_ID_ALG_RSA_OAEP_384 - Static variable in class net.shibboleth.oidc.jwa.support.KeyManagementConstants
-
Encryption - Optional RSAES OAEP using SHA-256 and MGF1 with SHA-384.
- ALGO_ID_ALG_RSA_OAEP_512 - Static variable in class net.shibboleth.oidc.jwa.support.KeyManagementConstants
-
Encryption - Optional RSAES OAEP using SHA-256 and MGF1 with SHA-512.
- ALGO_ID_ENC_ALG_A128CBC_HS256 - Static variable in class net.shibboleth.oidc.jwa.support.EncryptionConstants
-
Encryption - Required- A128CBC-HS256.
- ALGO_ID_ENC_ALG_A128GCM - Static variable in class net.shibboleth.oidc.jwa.support.EncryptionConstants
-
Encryption -Recommended- A128GCM.
- ALGO_ID_ENC_ALG_A192CBC_HS384 - Static variable in class net.shibboleth.oidc.jwa.support.EncryptionConstants
-
Encryption - Optional- A192CBC-HS384.
- ALGO_ID_ENC_ALG_A192GCM - Static variable in class net.shibboleth.oidc.jwa.support.EncryptionConstants
-
Encryption -Optional- A192GCM.
- ALGO_ID_ENC_ALG_A256CBC_HS512 - Static variable in class net.shibboleth.oidc.jwa.support.EncryptionConstants
-
Encryption -Required- A256CBC-HS512.
- ALGO_ID_ENC_ALG_A256GCM - Static variable in class net.shibboleth.oidc.jwa.support.EncryptionConstants
-
Encryption -Recommended- A256GCM.
- ALGO_ID_SIGNATURE_ES_256 - Static variable in class net.shibboleth.oidc.jwa.support.SignatureConstants
-
Signature - Recommended+ ES256.
- ALGO_ID_SIGNATURE_ES_384 - Static variable in class net.shibboleth.oidc.jwa.support.SignatureConstants
-
Signature - Optional ES384.
- ALGO_ID_SIGNATURE_ES_512 - Static variable in class net.shibboleth.oidc.jwa.support.SignatureConstants
-
Signature - Optional ES512.
- ALGO_ID_SIGNATURE_HS_256 - Static variable in class net.shibboleth.oidc.jwa.support.SignatureConstants
-
Signature - Required HS256.
- ALGO_ID_SIGNATURE_HS_384 - Static variable in class net.shibboleth.oidc.jwa.support.SignatureConstants
-
Signature - Optional HS384.
- ALGO_ID_SIGNATURE_HS_512 - Static variable in class net.shibboleth.oidc.jwa.support.SignatureConstants
-
Signature - Optional HS512.
- ALGO_ID_SIGNATURE_NONE - Static variable in class net.shibboleth.oidc.jwa.support.SignatureConstants
-
No Signature.
- ALGO_ID_SIGNATURE_PS_256 - Static variable in class net.shibboleth.oidc.jwa.support.SignatureConstants
-
Signature - Optional PS256.
- ALGO_ID_SIGNATURE_PS_384 - Static variable in class net.shibboleth.oidc.jwa.support.SignatureConstants
-
Signature - Optional PS384.
- ALGO_ID_SIGNATURE_PS_512 - Static variable in class net.shibboleth.oidc.jwa.support.SignatureConstants
-
Signature - Optional PS512.
- ALGO_ID_SIGNATURE_RS_256 - Static variable in class net.shibboleth.oidc.jwa.support.SignatureConstants
-
Signature - Recommended RS256.
- ALGO_ID_SIGNATURE_RS_384 - Static variable in class net.shibboleth.oidc.jwa.support.SignatureConstants
-
Signature - Optional RS384.
- ALGO_ID_SIGNATURE_RS_512 - Static variable in class net.shibboleth.oidc.jwa.support.SignatureConstants
-
Signature - Optional RS512.
- algorithmName - Variable in class net.shibboleth.oidc.security.credential.impl.KeyManagmentAlgorithmCriterion
-
Key algorithm type of resolved credentials.
- algorithmRegistry - Variable in class net.shibboleth.oidc.security.impl.AbstractEncryptionAlgorithmsLookupStrategy
-
The AlgorithmRegistry used when processing algorithm URIs.
- algorithmRegistry - Variable in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver
-
The AlgorithmRegistry used when processing algorithm URIs.
- algorithmRegistry - Variable in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
-
The AlgorithmRegistry used when processing algorithm URIs.
- allowMissing - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AccessTokenHashValidator
-
Allow a missing at_hash claim.
- allowMissing - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AudienceClaimsValidator
-
Allow a missing aud claim.
- allowPKCEPlainPredicate - Variable in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Whether client is allowed to use PKCE code challenge method plain.
- AllowPKCEPlainPredicate - Class in net.shibboleth.oidc.profile.config.logic
-
A predicate implementation that forwards to
OIDCSSOProfileConfiguration.isAllowPKCEPlain(ProfileRequestContext). - AllowPKCEPlainPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.AllowPKCEPlainPredicate
- AlwaysIncludedAttributesLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
A function that obtains
OIDCIDTokenProducingProfileConfiguration.getAlwaysIncludedAttributes(ProfileRequestContext)if such a profile is available from aRelyingPartyContextobtained via a lookup function, by default a child of theProfileRequestContext. - AlwaysIncludedAttributesLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.AlwaysIncludedAttributesLookupFunction
- alwaysIncludedAttributesLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Lookup function to supply attribute IDs to include in ID token regardless of response_type.
- alwaysIssueBearerAccessTokenPredicate - Variable in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Whether the access token to be issued is always a bearer access token.
- alwaysIssueBearerAccessTokenPredicate - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
-
Whether the access token to be issued is always a bearer access token.
- AlwaysIssueBearerAccessTokenPredicate - Class in net.shibboleth.oidc.profile.config.logic
-
A predicate implementation that forwards to
OAuth2AccessTokenProducingProfileConfiguration.isAlwaysIssueBearerAccessToken(ProfileRequestContext). - AlwaysIssueBearerAccessTokenPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.AlwaysIssueBearerAccessTokenPredicate
- amrTranslationStrategyLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Lookup function to supply the strategy function for translating OIDC ACR claims.
- APPLICATION_TYPE_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Attribute local name.
- applicationContext - Variable in class net.shibboleth.oidc.metadata.policy.impl.BeanMetadataPolicyOperator
-
The application context from where to fetch the custom policy operators.
- applicationType - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Application type for this entity.
- apply(byte[]) - Method in class net.shibboleth.oidc.metadata.cache.impl.DefaultJSONMapParsingStrategy
- apply(byte[]) - Method in class net.shibboleth.oidc.metadata.cache.impl.DefaultOIDCProviderMetadataParsingStrategy
- apply(byte[]) - Method in class net.shibboleth.oidc.metadata.cache.impl.DefaultSourceMetadataExpirationTimeStrategy
- apply(Issuer, String) - Method in class net.shibboleth.oidc.metadata.impl.HTTPProviderConfigurationFetchingStrategy.DefaultWellKnownPathCompositionStrategy
- apply(OIDCProviderMetadata) - Method in class net.shibboleth.oidc.metadata.cache.impl.DefaultOIDCProviderMetadataIdentifierExtractionStrategy
- apply(OIDCProviderMetadata) - Method in class net.shibboleth.oidc.profile.config.navigate.ProviderMetadataStringValuesLookupFunction
- apply(OIDCClientInformation) - Method in class net.shibboleth.oidc.profile.config.navigate.ClientInformationStringValueLookupFunction
- apply(Object, MetadataPolicy) - Method in class net.shibboleth.oidc.metadata.policy.impl.BeanMetadataPolicyOperator
- apply(Object, MetadataPolicy) - Method in interface net.shibboleth.oidc.metadata.policy.impl.CustomMetadataPolicyOperator
-
Apply the operator for the given input that has the given metadata policy attached.
- apply(Object, MetadataPolicy) - Method in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyEnforcer
- apply(Object, MetadataPolicy) - Method in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyOperator
- apply(String) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.CalculateSha256DigestForLongKeyFunction
- apply(Collection<String>) - Method in class net.shibboleth.oidc.profile.config.navigate.ProxyAwareDefaultOIDCAuthenticationContextClassResponseLookupFunction
- apply(JSONObject) - Method in class net.shibboleth.oidc.attribute.transcoding.AbstractOIDCAttributeTranscoder.NamingFunction
- apply(ExpirationTimeContext<OIDCProviderMetadata>) - Method in class net.shibboleth.oidc.metadata.cache.impl.DefaultOIDCProviderMetadataExpirationTimeStrategy
- apply(JSONSecurityConfiguration) - Method in class net.shibboleth.oidc.profile.config.navigate.JWKCredentialsToPublishLookupStrategy
- apply(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.cache.impl.DefaultOIDCProviderMetadataCriteriaToIdentifierStrategy
- apply(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.AbstractDynamicHTTPFetchingStrategy
- apply(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.policy.impl.MetadataPolicyViaLocationFetchingStrategy
- apply(CriteriaSet, Predicate<String>) - Method in class net.shibboleth.oidc.security.jose.impl.ClientInformationDataEncryptionAlgorithmsLookupStrategy
- apply(CriteriaSet, Predicate<String>) - Method in class net.shibboleth.oidc.security.jose.impl.ClientInformationKeyTransportEncryptionAlgorithmsLookupStrategy
- apply(CriteriaSet, Predicate<String>) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultDataEncryptionAlgorithmsLookupStrategy
- apply(CriteriaSet, Predicate<String>) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultKeyTransportEncryptionAlgorithmsLookupStrategy
- apply(CriteriaSet, Predicate<String>) - Method in class net.shibboleth.oidc.security.jose.impl.ProviderMetadataDataEncryptionAlgorithmsLookupStrategy
- apply(CriteriaSet, Predicate<String>) - Method in class net.shibboleth.oidc.security.jose.impl.ProviderMetadataKeyTransportEncryptionAlgorithmsLookupStrategy
- apply(MessageContext) - Method in class net.shibboleth.oidc.profile.config.navigate.MessageContextLookupFunctionAdaptor
- apply(MessageContext) - Method in class net.shibboleth.oidc.profile.config.navigate.MessageHandlerLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.audit.impl.AbstractClaimsSetAuditExtractor
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.audit.impl.AuthenticationContextClassReferencesAuditExtractor
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.audit.impl.AuthenticationResponseStatusAuditExtractor
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.audit.impl.AuthorizationEndpointAuditExtractor
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.audit.impl.ClaimSetFromJWTLookupStrategy
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.audit.impl.ForceAuthnAuditExtractor
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.audit.impl.InboundMessageClassLookupFunction
-
The simple name of the message class in the inbound message context.
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.audit.impl.NonceAuditExtractor
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.audit.impl.OutboundMessageClassLookupFunction
-
The simple name of the message class in the outbound message context.
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.audit.impl.RedirectURIAuditExtractor
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.audit.impl.ResponseModeAuditExtractor
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.audit.impl.ResponseTypeAuditExtractor
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.audit.impl.ScopeAuditExtractor
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.AccessTokenClaimsSetManipulationStrategyLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.AccessTokenLifetimeLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.AccessTokenTypeLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.AlwaysIncludedAttributesLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.AudienceRestrictionsLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.AuthorizationCodeClaimsSetManipulationStrategyLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.AuthzCodeLifetimeLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.ClaimsValidatorLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.CustomRedirectUriValidationStrategyLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.DeniedUserInfoAttributesLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.DPoPProofClaimsValidatorLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.DPoPProofNonceGeneratorLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.DPoPProofSignatureValidationConfigurationLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.EncodedAttributesLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.GrantTypesLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.IDTokenLifetimeLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.IDTokenManipulationStrategyLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.IssuedClaimsValidatorLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.JWEDataEncryptionAlgorithmsLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.JWEKeyTransportEncryptionAlgorithmsLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.JWSSignatureAlgorithmsLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.JWTDecryptionConfigurationLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.JWTEncryptionConfigurationLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.JWTSignatureSigningConfigurationLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.JWTSignatureValidationConfigurationLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.LogoutHintMatchingStrategyLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.ProxyAwareDefaultOIDCAuthenticationContextClassRequestLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.ProxyAwareDefaultOIDCAuthenticationContextClassResponseLookupFunction.LookupFunctionWrapper
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.PushedAuthorizationRequestUriClaimsSetManipulationStrategyLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.PushedAuthorizationRequestUriLifetimeLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.PushedAuthorizationRequestUriTypeLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.RefreshTokenChainLifetimeLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.RefreshTokenClaimsSetManipulationStrategyLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.RefreshTokenTimeoutLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.RefreshTokenTypeLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.RegistrationMetadataPolicyLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.RegistrationValidityPeriodLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.ResolverBasedRegistrationMetadataPolicyLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.ResponseModesLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.RevocationLifetimeLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.RevocationMethodLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.SecretExpirationPeriodLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.TokenEndpointAuthMethodLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.UnregisteredClientPolicyLookupFunction
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.encoding.impl.OIDCResponseEncoderFactory
- apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.impl.AuthenticationRequestMessageEncoderFactory
- apply(ProfileRequestContext, JWTClaimsSet) - Method in class net.shibboleth.oidc.profile.logic.ClientIDFromOIDCMetadataContextLookupFunction
- apply(ProfileRequestContext, JWTClaimsSet) - Method in class net.shibboleth.oidc.profile.logic.IssuerIDFromOIDCProviderMetadataContextLookupFunction
- apply(ProfileRequestContext, JWTClaimsSet) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.RequestedEssentialACRClaimsLookupStrategy
- apply(ApplicationContext) - Method in class net.shibboleth.oidc.profile.spring.relyingparty.metadata.impl.ClientInformationResolverServiceStrategy
- apply(ApplicationContext) - Method in class net.shibboleth.oidc.profile.spring.relyingparty.metadata.impl.ProviderMetadataResolverServiceStrategy
- applyAddOperator(Object, Object) - Method in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyEnforcer
-
Applies the given add value modifier for the given candidate and returns the result of the operation.
- applyCustomOperators(Object, MetadataPolicy) - Method in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyEnforcer
-
Applies the custom operators attached to this enforcer.
- assembleMacJws(JWSAlgorithm, JWTClaimsSet, byte[]) - Static method in class net.shibboleth.oidc.security.JWSAssemblyUtils
-
Assemble a HMAC based JSON Web Signature token (JWS) using the given algorithm, claims, and secret.
- assembleMacJwsAsString(JWSAlgorithm, JWTClaimsSet, byte[]) - Static method in class net.shibboleth.oidc.security.JWSAssemblyUtils
-
Assemble a HMAC based JSON Web Signature token using the given algorithm, claims, and secret, and return its JSON compact serialized form.
- assertionAudiencesLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Lookup function to supply additional audiences for ID token.
- AsynchronousRefreshAHeadTask() - Constructor for class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache.AsynchronousRefreshAHeadTask
- AttributeConsentFlowEnabledPredicate - Class in net.shibboleth.oidc.profile.config.logic
-
A predicate implementation that checks if attribute-release is included in the list of post authentication flows returned by
PostAuthenticationFlowsLookupFunction. - AttributeConsentFlowEnabledPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.AttributeConsentFlowEnabledPredicate
- AttributeEncoderNamespaceHandler - Class in net.shibboleth.oidc.attribute.resolver.spring.enc.impl
-
Namespace handler for the oidc attribute resolver.
- AttributeEncoderNamespaceHandler() - Constructor for class net.shibboleth.oidc.attribute.resolver.spring.enc.impl.AttributeEncoderNamespaceHandler
- attributeIds - Variable in class net.shibboleth.oidc.metadata.impl.ResolverServiceClientSecretValueResolver
-
The list of attribute IDs that may contain the resolved client secret values.
- AUDIENCE - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
-
Token audience.
- AUDIENCE_CLAIM - Enum constant in enum class net.shibboleth.oidc.security.jwt.claims.impl.JWTClaims
-
Audience(s) that this ID Token is intended for.
- AudienceClaimsValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl
-
Verifies the Audience (aud) claim contains the appropriate value.
- AudienceClaimsValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.AudienceClaimsValidator
-
Constructor.
- audienceLookupStrategy - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AudienceClaimsValidator
-
Strategy to find the audience value from the context.
- AudienceRestrictionsLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
A function that returns the effective audience restrictions to include in ID tokens, based on combining a relying party's entityID with the result of
OIDCIDTokenProducingProfileConfiguration.getAdditionalAudiencesForIdToken(ProfileRequestContext), if such a profile is available from aRelyingPartyContextobtained via a lookup function, by default a child of theProfileRequestContext. - AudienceRestrictionsLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.AudienceRestrictionsLookupFunction
- AuditFields - Class in net.shibboleth.oidc.profile.audit
-
Constants to use for audit logging fields stored in an
AuditContext. - AuditFields() - Constructor for class net.shibboleth.oidc.profile.audit.AuditFields
-
Constructor.
- AUTHENTICATION_CONTEXT_CLASS_REFERENCE - Enum constant in enum class net.shibboleth.oidc.security.jwt.claims.impl.IDTokenClaims
-
Authentication Context Class Reference.
- AUTHENTICATION_FLOW_STEP - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
-
The authentication flow step e.g.
- AUTHENTICATION_METHODS_REFERENCES - Enum constant in enum class net.shibboleth.oidc.security.jwt.claims.impl.IDTokenClaims
-
Authentication Methods References.
- AUTHENTICATION_RESULT - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
-
The authentication response result, including any error code if there are any.
- AUTHENTICATION_TIME - Enum constant in enum class net.shibboleth.oidc.security.jwt.claims.impl.IDTokenClaims
-
Time when the End-User authentication occurred.
- AuthenticationAudienceClaimsValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl
-
Verifies the Audience (aud) claim contains the appropriate value in JWT authentication.
- AuthenticationAudienceClaimsValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationAudienceClaimsValidator
-
Constructor.
- AuthenticationContextClassReferencePrincipal - Class in net.shibboleth.oidc.authn.principal
-
Principal based on a OIDC Authentication Context Class Reference.
- AuthenticationContextClassReferencePrincipal(String) - Constructor for class net.shibboleth.oidc.authn.principal.AuthenticationContextClassReferencePrincipal
-
Constructor.
- AuthenticationContextClassReferencesAuditExtractor - Class in net.shibboleth.oidc.profile.audit.impl
-
Functionthat extracts the ACRs from theOIDCAuthenticationRequest. - AuthenticationContextClassReferencesAuditExtractor(Function<ProfileRequestContext, OIDCAuthenticationRequest>) - Constructor for class net.shibboleth.oidc.profile.audit.impl.AuthenticationContextClassReferencesAuditExtractor
-
Constructor.
- AuthenticationContextClassReferenceSupport - Class in net.shibboleth.oidc.profile.encoding
-
Support class for ACR operations.
- AuthenticationContextClassReferenceSupport() - Constructor for class net.shibboleth.oidc.profile.encoding.AuthenticationContextClassReferenceSupport
-
Private constructor.
- authenticationFlowsLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Lookup function to supply authentication flows.
- authenticationRequestLookupStrategy - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AuthTimeRequestedActivationCondition
-
Strategy to find the authentication request.
- authenticationRequestLookupStrategy - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.RequestedEssentialACRClaimsLookupStrategy
-
Strategy to find the authentication request.
- AuthenticationRequestMessageEncoderFactory - Class in net.shibboleth.oidc.profile.impl
-
Message encoder factory function that returns the first encoder suitable for the given request method found in the profile configuration.
- AuthenticationRequestMessageEncoderFactory(List<OIDCMessageEncoder>) - Constructor for class net.shibboleth.oidc.profile.impl.AuthenticationRequestMessageEncoderFactory
-
Constructor.
- AuthenticationResponseStatusAuditExtractor - Class in net.shibboleth.oidc.profile.audit.impl
-
Functionthat extracts the status of an authentication response i.e. - AuthenticationResponseStatusAuditExtractor(Function<ProfileRequestContext, AuthenticationResponse>) - Constructor for class net.shibboleth.oidc.profile.audit.impl.AuthenticationResponseStatusAuditExtractor
-
Constructor.
- AuthenticationTimeClaimsValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl
-
Verifies the auth_time (when the End-User authentication took place): If the authnLifetimeLookup returns 0 seconds (e.g.
- AuthenticationTimeClaimsValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationTimeClaimsValidator
-
Constructor.
- AUTHN_INSTANT - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
-
auth_time value.
- authnContextClassReference - Variable in class net.shibboleth.oidc.authn.principal.AuthenticationContextClassReferencePrincipal
-
The class ref.
- authnLifetimeLookupStrategy - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationTimeClaimsValidator
-
Lookup strategy to find the amount of time for which a token is valid after if it was first issued.
- authnRequestTime - Variable in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
-
The time at which the RP made the authentication request to the OP.
- authnRequestTimeLookupStrategy - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationTimeClaimsValidator
-
Lookup strategy to find the time at which the authentication request was made.
- AUTHORIZATION_ENDPOINT - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
-
The authorization endpoint for the authentication request.
- AuthorizationCodeClaimsSetManipulationStrategyLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
A function that returns
(ProfileRequestContext)if such a profile is available from aRelyingPartyContextobtained via a lookup function, by default a child of theProfileRequestContext. - AuthorizationCodeClaimsSetManipulationStrategyLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.AuthorizationCodeClaimsSetManipulationStrategyLookupFunction
- authorizationCodeClaimsSetManipulationStrategyLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Lookup function to supply strategy bi-function for manipulating authorization code claims set.
- AuthorizationCodeFlowEnabledPredicate - Class in net.shibboleth.oidc.profile.config.logic
-
A predicate implementation that forwards to
OAuth2FlowAwareProfileConfiguration.isAuthorizationCodeFlowEnabled(ProfileRequestContext). - AuthorizationCodeFlowEnabledPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.AuthorizationCodeFlowEnabledPredicate
- authorizationCodeFlowPredicate - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2FlowAwareProfileConfiguration
-
Predicate used to indicate whether authorization code flow is supported by this profile.
- AuthorizationEndpointAuditExtractor - Class in net.shibboleth.oidc.profile.audit.impl
-
Functionthat extracts the authorization endpoint from theOIDCAuthenticationRequest. - AuthorizationEndpointAuditExtractor(Function<ProfileRequestContext, OIDCAuthenticationRequest>) - Constructor for class net.shibboleth.oidc.profile.audit.impl.AuthorizationEndpointAuditExtractor
-
Constructor.
- authorizationParamsAreValidPredicate - Variable in class net.shibboleth.oidc.profile.encoding.impl.AbstractOIDCMessageEncoder
-
A hook to allow additional checking of the authorization parameters after it is built.
- authorizeCodeLifetimeLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Lookup function to supply lifetime of authz code.
- AUTHORIZED_PARTY - Enum constant in enum class net.shibboleth.oidc.security.jwt.claims.impl.IDTokenClaims
-
Authorized party - the party to which the ID Token was issued.
- AuthTimeRequestedActivationCondition - Class in net.shibboleth.oidc.security.jwt.claims.impl
-
Has the auth_time claim been requested?
- AuthTimeRequestedActivationCondition(Function<ProfileRequestContext, OIDCAuthenticationRequest>) - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.AuthTimeRequestedActivationCondition
-
Constructor.
- AuthzCodeLifetimeLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
A function that returns
OAuth2AuthorizationCodeProducingProfileConfiguration.getAuthorizeCodeLifetime(ProfileRequestContext)if such a profile is available from aRelyingPartyContextobtained via a lookup function, by default a child of theProfileRequestContext. - AuthzCodeLifetimeLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.AuthzCodeLifetimeLookupFunction
B
- BACK_CHANNEL_LOGOUT_SESSION_REQUIRED_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Attribute local name.
- backChannelLogoutSessionRequired - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Require back-channel logout session id flag for this entity.
- backingStore - Variable in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
-
Backing store for runtime metadata.
- BackingStore<I,
T> - Interface in net.shibboleth.oidc.metadata -
A backing store that holds cached objects.
- BaseJWTSignatureSecurityHandler - Class in net.shibboleth.oidc.security.impl
-
Base class for security message handlers which evaluate a JWT signature with a signature trust engine.
- BaseJWTSignatureSecurityHandler() - Constructor for class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler
-
Constructor.
- BaseMetadataCacheBuilderSpec<IdentifierType,
MetadataType> - Class in net.shibboleth.oidc.metadata.cache.impl -
A based metadata cache builder specification.
- BaseMetadataCacheBuilderSpec() - Constructor for class net.shibboleth.oidc.metadata.cache.impl.BaseMetadataCacheBuilderSpec
-
Constructor.
- BaseOIDCAttributeEncoderParser - Class in net.shibboleth.oidc.attribute.resolver.spring.enc.impl
-
Base class for Spring bean definition parser for OIDC attribute encoders.
- BaseOIDCAttributeEncoderParser() - Constructor for class net.shibboleth.oidc.attribute.resolver.spring.enc.impl.BaseOIDCAttributeEncoderParser
- BaseSignedJWTTrustEngine<TrustBasisType> - Class in net.shibboleth.oidc.security.impl
-
A
TrustEngineimplementation for Signed JSON Web Tokens. - BaseSignedJWTTrustEngine(JOSEObjectCredentialResolver) - Constructor for class net.shibboleth.oidc.security.impl.BaseSignedJWTTrustEngine
-
Constructor.
- BaseStorageServiceClientInformationComponent - Class in net.shibboleth.oidc.metadata.impl
-
A base class for
ClientInformationManagerandClientInformationResolverimplementations exploitingStorageServicefor storing the OIDC client information. - BaseStorageServiceClientInformationComponent() - Constructor for class net.shibboleth.oidc.metadata.impl.BaseStorageServiceClientInformationComponent
- BasicClientSecretCredentialFactoryBean - Class in net.shibboleth.oidc.security.credential
-
Factory to generate a
ClientSecretCredentialfrom a client_secret string. - BasicClientSecretCredentialFactoryBean() - Constructor for class net.shibboleth.oidc.security.credential.BasicClientSecretCredentialFactoryBean
- BasicDecryptionConfiguration - Class in net.shibboleth.oidc.security.jose.impl
-
Basic implementation of
DecryptionConfigurationfor handling JWEs. - BasicDecryptionConfiguration() - Constructor for class net.shibboleth.oidc.security.jose.impl.BasicDecryptionConfiguration
- BasicEncryptionConfiguration - Class in net.shibboleth.oidc.security.jose.impl
-
Basic implementation of
EncryptionConfigurationfor handling JWE encryption. - BasicEncryptionConfiguration() - Constructor for class net.shibboleth.oidc.security.jose.impl.BasicEncryptionConfiguration
-
Constructor.
- BasicExpiringJWKCredential - Class in net.shibboleth.oidc.security.credential
-
Basic implementation of an ExpiringJWKCredential.
- BasicExpiringJWKCredential() - Constructor for class net.shibboleth.oidc.security.credential.BasicExpiringJWKCredential
- BasicExpiringJWTSharedSecretCredentialFactoryBean - Class in net.shibboleth.oidc.security.credential
-
A factory bean for creating a
BasicExpiringJWKCredentialfrom an injected secret. - BasicExpiringJWTSharedSecretCredentialFactoryBean() - Constructor for class net.shibboleth.oidc.security.credential.BasicExpiringJWTSharedSecretCredentialFactoryBean
-
Constructor.
- BasicJOSEObjectCredentialResolver - Class in net.shibboleth.oidc.security.credential.impl
-
A basic implementation of
JOSEObjectCredentialResolver. - BasicJOSEObjectCredentialResolver() - Constructor for class net.shibboleth.oidc.security.credential.impl.BasicJOSEObjectCredentialResolver
- BasicJWKCredential - Class in net.shibboleth.oidc.security.credential
-
A basic implementation of
JWKCredential. - BasicJWKCredential() - Constructor for class net.shibboleth.oidc.security.credential.BasicJWKCredential
- BasicJWKCredentialFactoryBean - Class in net.shibboleth.oidc.security.credential
-
Factory bean for Basic JSON Web Keys (JWK).
- BasicJWKCredentialFactoryBean() - Constructor for class net.shibboleth.oidc.security.credential.BasicJWKCredentialFactoryBean
-
Constructor.
- BasicJWKReferenceCredential - Class in net.shibboleth.oidc.security.credential
-
A basic implementation of
JWKReferenceCredential. - BasicJWKReferenceCredential() - Constructor for class net.shibboleth.oidc.security.credential.BasicJWKReferenceCredential
-
Deprecated, for removal: This API element is subject to removal in a future version.
- BasicJWKReferenceCredential(URI) - Constructor for class net.shibboleth.oidc.security.credential.BasicJWKReferenceCredential
-
Constructor.
- BasicNimbusSecretCredential - Class in net.shibboleth.oidc.security.credential
-
Deprecated, for removal: This API element is subject to removal in a future version.
- BasicNimbusSecretCredential() - Constructor for class net.shibboleth.oidc.security.credential.BasicNimbusSecretCredential
-
Deprecated, for removal: This API element is subject to removal in a future version.
- BasicNimbusSecretCredential(Secret) - Constructor for class net.shibboleth.oidc.security.credential.BasicNimbusSecretCredential
-
Deprecated.Constructor.
- BasicSignatureSigningConfiguration - Class in net.shibboleth.oidc.security.jose.impl
-
The configuration information to use when generating an signed JWT.
- BasicSignatureSigningConfiguration() - Constructor for class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningConfiguration
-
Constructor.
- BasicSignatureSigningParametersResolver - Class in net.shibboleth.oidc.security.jose.impl
-
Basic implementation of an
SignatureSigningParametersResolver. - BasicSignatureSigningParametersResolver() - Constructor for class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver
-
Constructor.
- BasicSignatureValidationConfiguration - Class in net.shibboleth.oidc.security.jose.impl
-
Basic implementation of
SignatureValidationConfigurationfor signed JWTs. - BasicSignatureValidationConfiguration() - Constructor for class net.shibboleth.oidc.security.jose.impl.BasicSignatureValidationConfiguration
- BasicSignatureValidationParametersResolver - Class in net.shibboleth.oidc.security.jose.impl
-
Basic implementation of
SignatureValidationParametersResolver. - BasicSignatureValidationParametersResolver() - Constructor for class net.shibboleth.oidc.security.jose.impl.BasicSignatureValidationParametersResolver
- BatchBackingStore<I,
T> - Interface in net.shibboleth.oidc.metadata -
A specialisation of a
BackingStorethat deals with batch metadata. - BatchMetadataCache<IdentifierType,
MetadataType> - Class in net.shibboleth.oidc.metadata.cache.impl -
A
metadata cacheimplementation that supports 'refresh-ahead' semantics for batch cache updates. - BatchMetadataCache(BatchBackingStore<IdentifierType, MetadataType>) - Constructor for class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
-
Constructor.
- BatchMetadataCache(BatchBackingStore<IdentifierType, MetadataType>, ScheduledExecutorService) - Constructor for class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
-
Protected constructor.
- BatchMetadataCache.AsynchronousRefreshAHeadTask - Class in net.shibboleth.oidc.metadata.cache.impl
-
A runnable that triggers a cache reload.
- BatchMetadataCacheBuilderSpec<IdentifierType,
MetadataType> - Class in net.shibboleth.oidc.metadata.cache.impl -
A specification for building a batch read-ahead metadata cache.
- BatchMetadataCacheBuilderSpec() - Constructor for class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCacheBuilderSpec
-
Constructor.
- BEAN_OPERATOR_NAME - Static variable in class net.shibboleth.oidc.metadata.policy.impl.BeanMetadataPolicyOperator
-
The operator name to be used within
MetadataPolicycustom operators. - BeanMetadataPolicyOperator - Class in net.shibboleth.oidc.metadata.policy.impl
-
A custom metadata policy operator that fetches a bean from
ApplicationContextand uses it for asCustomMetadataPolicyOperator. - BeanMetadataPolicyOperator() - Constructor for class net.shibboleth.oidc.metadata.policy.impl.BeanMetadataPolicyOperator
- BINDING_ID_BACK_SLO_URI - Static variable in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
-
The SLO binding identifier matching to the back-channel uri.
- BINDING_ID_FRONT_SLO_URI - Static variable in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
-
The SLO binding identifier matching to the front-channel uri.
- BINDING_ID_REDIRECT_URI - Static variable in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
-
The ACS binding identifier matching to the redirect_uri.
- build() - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy.Builder
-
Build the metadata policy corresponding to the current builder state.
- build(MetadataCacheBuilderSpec<IdentifierType, MetadataType>) - Method in class net.shibboleth.oidc.metadata.cache.impl.MetadataCacheBuilder.Builder
-
Build the metadata cache from the given specification.
- buildACRClaimsRequest(OIDCAuthenticationRequest) - Static method in class net.shibboleth.oidc.profile.encoding.AuthenticationContextClassReferenceSupport
-
Build an ID Token requested claims request with any ACR values in the authentication request.
- buildClaim(ProfileRequestContext, IdPAttribute, TranscodingRule, Object) - Method in class net.shibboleth.oidc.attribute.transcoding.AbstractOIDCAttributeTranscoder
-
Builds an OIDC claim structure with the given values.
- buildContentEncryptionKeyAlgorithmCriteria(CriteriaSet, EncryptedJWT) - Method in class net.shibboleth.oidc.security.impl.JWETokenDecrypter
-
Optionally build decryption key 'enc' (encryption key algorithm) credential criteria according to information in the encrypted object.
- buildCredential(JWK, KeyInfoResolutionContext) - Method in class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.InlineJwksProvider
-
Build a JWKCredential.
- buildCriteria(EncryptedJWT, List<Criterion>) - Method in class net.shibboleth.oidc.security.impl.JWETokenDecrypter
-
Build a criteria set using the additional criteria in the params, those supplied, and those that relate to the encrypted JWT.
- buildCriteriaSet(String, MessageContext) - Method in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler
- buildCriteriaSet(ProfileRequestContext, List<DecryptionConfiguration>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTDecryptionParameters
-
Build the criteria used as input to the
DecryptionParametersResolver. - buildCriteriaSet(ProfileRequestContext, List<EncryptionConfiguration>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
-
Build the criteria used as input to the
EncryptionParametersResolver. - buildDirectEncryptionParameters(EncryptionParameters, CriteriaSet, List<EncryptionMethod>, JWEAlgorithm) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
-
Build direct encryption parameters from the data encryption credentials input.
- buildEncryptionKeyAlgorithmCriteria(CriteriaSet, JWEAlgorithm, EncryptionMethod) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
-
Build criterion for credential resolvers from the JWE 'enc' header.
- Builder() - Constructor for class net.shibboleth.oidc.metadata.cache.impl.MetadataCacheBuilder.Builder
- Builder() - Constructor for class net.shibboleth.oidc.metadata.policy.MetadataPolicy.Builder
-
Constructor.
- buildErrorResponse(ErrorObject, ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.impl.AbstractBuildErrorResponseFromEvent
-
Method implemented by the extending class to create ErrorResponse.
- buildErrorResponse(ErrorObject, ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.impl.BuildJSONErrorResponseFromEvent
-
Method implemented by the extending class to create ErrorResponse.
- buildFileLoadingMetadataPolicyResolver(String, BatchMetadataCacheBuilderSpec<String, Map<String, MetadataPolicy>>, Function<ProfileRequestContext, CriteriaSet>, String) - Method in class net.shibboleth.oidc.metadata.cache.impl.MetadataPolicyLookupStrategyFactory
-
Build a Function that maps a profile request context to a map of metadata policies.
- buildFileLoadingMetadataPolicyResolver(String, BatchMetadataCacheBuilderSpec<String, Map<String, MetadataPolicy>>, Function<ProfileRequestContext, CriteriaSet>, String, String) - Method in class net.shibboleth.oidc.metadata.cache.impl.MetadataPolicyLookupStrategyFactory
-
Build a Function that maps a profile request context to a map of metadata policies.
- buildHttpClientContext(ClassicHttpRequest) - Method in class net.shibboleth.oidc.metadata.impl.AbstractDynamicHTTPFetchingStrategy
-
Build the
HttpClientContextinstance which will be used to invoke theHttpClientrequest. - buildHttpRequest(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.AbstractDynamicHTTPFetchingStrategy
-
Build an appropriate instance of
ClassicHttpRequestbased on the input criteria set. - buildIdPAttribute(ProfileRequestContext, JSONObject, TranscodingRule, List<IdPAttributeValue>) - Method in class net.shibboleth.oidc.attribute.transcoding.AbstractOIDCAttributeTranscoder
-
Builds an
IdPAttributefrom the given values. - BuildJSONErrorResponseFromEvent - Class in net.shibboleth.oidc.profile.impl
-
This action reads an event from the configured
EventContextlookup strategy, constructs a json error response message and attaches it as the outbound message. - BuildJSONErrorResponseFromEvent() - Constructor for class net.shibboleth.oidc.profile.impl.BuildJSONErrorResponseFromEvent
- buildJWKCredential(JWK, String) - Method in class net.shibboleth.oidc.security.credential.impl.BasicJOSEObjectCredentialResolver
-
Build JWK credential.
- buildKeyAlgorithmCriteria(String) - Method in class net.shibboleth.oidc.security.impl.JWETokenDecrypter
-
Dynamically construct key algorithm credential criteria based on the specified algorithm URI.
- buildKeyEncryptionOrAgreementParameters(EncryptionParameters, CriteriaSet, List<EncryptionMethod>, JWEAlgorithm) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
-
Build key encryption parameters from the key transport encryption credentials input.
- buildKeyLengthCriteria(String) - Method in class net.shibboleth.oidc.security.impl.JWETokenDecrypter
-
Dynamically construct key length credential criteria based on the specified algorithm URI.
- buildKeyManagementAlgorithmCriteria(CriteriaSet, EncryptedJWT) - Method in class net.shibboleth.oidc.security.impl.JWETokenDecrypter
-
Optionally build decryption key 'alg' (key management algorithm) credential criteria according to information in the encrypted object.
- buildKeyManagmentAlgorithmCriteria(CriteriaSet, JWEAlgorithm, EncryptionMethod) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
-
Build criterion for credential resolvers from the JWE 'alg' header.
- buildKeyWrappingParameters(EncryptionParameters, CriteriaSet, List<EncryptionMethod>, JWEAlgorithm) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
-
Build key wrapping encryption parameters from the key transport encryption credentials input.
- buildMetadataPolicyResolver(LoadingStrategy, BatchMetadataCacheBuilderSpec<String, Map<String, MetadataPolicy>>, Function<ProfileRequestContext, CriteriaSet>, String) - Method in class net.shibboleth.oidc.metadata.cache.impl.MetadataPolicyLookupStrategyFactory
-
Build a Function that maps a profile request context to a map of metadata policies.
- buildObject() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.ClientSecretBuilder
- buildObject() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.ClientSecretKeyReferenceBuilder
- buildObject() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.DefaultAcrValueBuilder
- buildObject() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.JwksDataBuilder
- buildObject() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.JwksUriBuilder
- buildObject() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsBuilder
- buildObject() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.PostLogoutRedirectUriBuilder
- buildObject() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.RequestUriBuilder
- buildObject(String, String, String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.ClientSecretBuilder
- buildObject(String, String, String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.ClientSecretKeyReferenceBuilder
- buildObject(String, String, String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.DefaultAcrValueBuilder
- buildObject(String, String, String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.JwksDataBuilder
- buildObject(String, String, String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.JwksUriBuilder
- buildObject(String, String, String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsBuilder
- buildObject(String, String, String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.PostLogoutRedirectUriBuilder
- buildObject(String, String, String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.RequestUriBuilder
- buildRedirectURL(MessageContext, OIDCAuthenticationRequest) - Method in class net.shibboleth.oidc.profile.encoding.impl.HTTPRedirectAuthnRequestEncoder
-
Build the URL to redirect the client to using parameters in the authentication request.
- buildRequestURL(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.AbstractDynamicHTTPFetchingStrategy
-
Build the request URL based on the input criteria set.
- buildRequestURL(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.HTTPProviderConfigurationFetchingStrategy
-
Build the request URL based on the input criteria set.
- buildRequestURL(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.policy.impl.MetadataPolicyViaLocationFetchingStrategy
-
Build the request URL based on the input criteria set.
- buildResourceLoadingMetadataPolicyResolver(Resource, BatchMetadataCacheBuilderSpec<String, Map<String, MetadataPolicy>>, Function<ProfileRequestContext, CriteriaSet>, String) - Method in class net.shibboleth.oidc.metadata.cache.impl.MetadataPolicyLookupStrategyFactory
-
Build a Function that maps a profile request context to a map of metadata policies.
- buildTranscoder() - Method in class net.shibboleth.oidc.attribute.resolver.spring.enc.impl.OIDCByteEncoderParser
- buildTranscoder() - Method in class net.shibboleth.oidc.attribute.resolver.spring.enc.impl.OIDCScopedStringEncoderParser
- buildTranscoder() - Method in class net.shibboleth.oidc.attribute.resolver.spring.enc.impl.OIDCStringEncoderParser
C
- cache - Variable in class net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver
-
The metadata cache.
- cacheControl - Variable in class net.shibboleth.oidc.profile.messaging.JSONErrorResponse
-
cache control value.
- cacheControl - Variable in class net.shibboleth.oidc.profile.messaging.JSONSuccessResponse
-
cache control value.
- cacheId - Variable in class net.shibboleth.oidc.metadata.cache.impl.BaseMetadataCacheBuilderSpec
-
An identifier to give the cache this specification builds.
- CacheLoadingContext - Class in net.shibboleth.oidc.metadata.cache
-
Context to hold information pertaining to a cache loading event.
- CacheLoadingContext(Instant, Instant) - Constructor for class net.shibboleth.oidc.metadata.cache.CacheLoadingContext
-
Constructor.
- CacheLoadingException - Exception in net.shibboleth.oidc.metadata.cache
-
Exception to catch cache loading errors.
- CacheLoadingException() - Constructor for exception net.shibboleth.oidc.metadata.cache.CacheLoadingException
-
Constructor.
- CacheLoadingException(Exception) - Constructor for exception net.shibboleth.oidc.metadata.cache.CacheLoadingException
-
Constructor.
- CacheLoadingException(String) - Constructor for exception net.shibboleth.oidc.metadata.cache.CacheLoadingException
-
Constructor.
- CacheLoadingException(String, Exception) - Constructor for exception net.shibboleth.oidc.metadata.cache.CacheLoadingException
-
Constructor.
- CalculateSha256DigestForLongKeyFunction - Class in net.shibboleth.oidc.security.jwt.claims.impl
-
A function that calculates the SHA-256 digest and returns the value as a hex string, if the input length is more than 64 characters.
- CalculateSha256DigestForLongKeyFunction() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.CalculateSha256DigestForLongKeyFunction
- CHAIN - Enum constant in enum class net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenRevocationConfiguration.OAuth2TokenRevocationMethod
-
Revoke full chain of tokens (from authorization code (or initial access token) onwards).
- ChainingClientInformationResolver - Class in net.shibboleth.oidc.metadata.impl
-
A client information provider that uses registered resolvers, in turn, to answer queries.
- ChainingClientInformationResolver() - Constructor for class net.shibboleth.oidc.metadata.impl.ChainingClientInformationResolver
-
Constructor.
- ChainingJOSEObjectCredentialResolver - Class in net.shibboleth.oidc.security.credential.impl
-
A concrete implementation of
AbstractChainingCredentialResolverwhich is scoped to the simpleJOSEObjectCredentialResolvertype. - ChainingJOSEObjectCredentialResolver(List<JOSEObjectCredentialResolver>) - Constructor for class net.shibboleth.oidc.security.credential.impl.ChainingJOSEObjectCredentialResolver
-
Constructor.
- ChainingJWTClaimsValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl
-
A
ClaimsValidatorimplementation that validates a JWT claims set from a chain of configured validators. - ChainingJWTClaimsValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.ChainingJWTClaimsValidator
-
Constructor.
- ChainingProviderMetadataResolver - Class in net.shibboleth.oidc.metadata.impl
-
A provider metadata provider that uses registered resolvers, in turn, to answer queries.
- ChainingProviderMetadataResolver() - Constructor for class net.shibboleth.oidc.metadata.impl.ChainingProviderMetadataResolver
-
Constructor.
- CheckClientJWTDecryptionConfiguration - Class in net.shibboleth.oidc.security.impl
-
An action that uses a
OIDCClientInformationto verify the encryption parameters of an incoming encrypted JWT are compliant with configuration in the client metadata. - CheckClientJWTDecryptionConfiguration() - Constructor for class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration
- CheckClientJWTSignatureAlgorithmHandler - Class in net.shibboleth.oidc.security.impl
-
A
MessageHandlerthat uses aOIDCClientInformationto verify the signature of a signed JWT uses expected algorithm. - CheckClientJWTSignatureAlgorithmHandler() - Constructor for class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler
- checkCredentialSupportsAlgorithm(Credential, JWEAlgorithm) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
-
Determine if the given credential matches the given algorithm.
- checkCredentialSupportsEncryptionMethod(Credential, EncryptionMethod) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
-
Determine if the given credential supports the given encryption method.
- checkKeyAlgorithmAndLength(Credential, String) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
-
Evaluate whether the specified credential is supported for use with the specified algorithm URI and the key length matches.
- checkKeyWithAlgorithm(JWKCredential, JWEAlgorithm) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
-
Check the credential supports the algorithm given.
- checkParams(SignedJWT, CriteriaSet) - Method in class net.shibboleth.oidc.security.impl.BaseSignedJWTTrustEngine
-
Check the signed JWT and supplied criteria for required values.
- CIPHER_PADDING_OAEP - Static variable in class net.shibboleth.oidc.jwa.support.JCAConstantExtension
-
Cipher padding "OAEP".
- CIPHER_PADDING_OAEP_256 - Static variable in class net.shibboleth.oidc.jwa.support.JCAConstantExtension
-
Cipher padding "OAEP-256".
- CIPHER_PADDING_OAEP_384 - Static variable in class net.shibboleth.oidc.jwa.support.JCAConstantExtension
-
Cipher padding "OAEP-384".
- CIPHER_PADDING_OAEP_512 - Static variable in class net.shibboleth.oidc.jwa.support.JCAConstantExtension
-
Cipher padding "OAEP-512".
- CIPHER_PADDING_PKCS5 - Static variable in class net.shibboleth.oidc.jwa.support.JCAConstantExtension
-
Cipher padding: "PKCS5Padding".
- ClaimExistsActivationCondition - Class in net.shibboleth.oidc.security.jwt.claims.impl
-
Activation condition to check a claim exists in the claims set.
- ClaimExistsActivationCondition(String) - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.ClaimExistsActivationCondition
-
Constructor.
- claimName - Variable in class net.shibboleth.oidc.profile.audit.impl.AbstractClaimsSetAuditExtractor
-
The name of the claim to extract from the ID token.
- claimName - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.ExactMatchClaimsValidator
-
The name of the claim to match from the ID token.
- claimName - Variable in enum class net.shibboleth.oidc.security.jwt.claims.impl.IDTokenClaims
-
The registered claim name.
- claimName - Variable in enum class net.shibboleth.oidc.security.jwt.claims.impl.JWTClaims
-
The IANA registered claim name.
- ClaimSetFromJWTLookupStrategy - Class in net.shibboleth.oidc.profile.audit.impl
-
Strategy to pull out a ClaimsSet from a located JWT.
- ClaimSetFromJWTLookupStrategy(Function<ProfileRequestContext, JWT>) - Constructor for class net.shibboleth.oidc.profile.audit.impl.ClaimSetFromJWTLookupStrategy
-
Constructor.
- claimsSetLookupStrategy - Variable in class net.shibboleth.oidc.profile.audit.impl.AbstractClaimsSetAuditExtractor
-
Strategy to retrieve the JWT ClaimSet to extract the claim from.
- claimsToSignLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.SignJWTHandler
-
Strategy used to locate the payload to encrypt.
- ClaimsValidator - Interface in net.shibboleth.oidc.jwt.claims
-
High-level API for validating a JWT's claims set.
- ClaimsValidatorLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
A function that obtains
OAuth2ClientAuthenticableProfileConfiguration.getClaimsValidator(ProfileRequestContext)if such a profile is available from aRelyingPartyContextobtained via a lookup function, by default a child of theProfileRequestContext. - ClaimsValidatorLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.ClaimsValidatorLookupFunction
- claimsValidatorLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Validation of JWT claims for subset of client auth methods.
- claimToCheck - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.ClaimExistsActivationCondition
-
The name of the claim to check exists in the claims set.
- claimToCheck - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.NumberOfClaimValuesActivationCondition
-
The name of the claim to check exists in the claims set.
- claimValidators - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.ChainingJWTClaimsValidator
-
List of claim validators.
- cleanupTaskInterval - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
-
The interval at which the cleanup task should run.
- cleanupTaskInterval - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
-
The interval at which the cleanup task should run.
- CLIENT_ID - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
-
OIDC client ID.
- CLIENT_URI_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Attribute local name.
- clientAuthentication - Variable in class net.shibboleth.oidc.authn.context.OAuth2ClientAuthenticationContext
-
Client authentication abstraction.
- clientCredentialLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Lookup function to retrieve a client credential from the given profile request context.
- clientEncryptionMethodLookupStrategy - Variable in class net.shibboleth.oidc.security.jose.impl.ClientInformationDataEncryptionAlgorithmsLookupStrategy
-
A strategy to locate the encryption method ('enc') appropriate for the JWT to be encrypted.
- clientID - Variable in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
-
The client identifier.
- ClientIDCriterion - Class in net.shibboleth.oidc.metadata.criterion
-
A
Criterionrepresenting an OIDC client ID. - ClientIDCriterion(ClientID) - Constructor for class net.shibboleth.oidc.metadata.criterion.ClientIDCriterion
-
Constructor.
- ClientIDFromOIDCMetadataContextLookupFunction - Class in net.shibboleth.oidc.profile.logic
-
A function that returns client_id via client information stored in
OIDCMetadataContext. - ClientIDFromOIDCMetadataContextLookupFunction() - Constructor for class net.shibboleth.oidc.profile.logic.ClientIDFromOIDCMetadataContextLookupFunction
-
Constructor.
- clientIdLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Lookup function to retrieve the client_id from the given profile request context.
- clientInformation - Variable in class net.shibboleth.oidc.metadata.context.OIDCMetadataContext
-
The client information.
- clientInformation - Variable in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler
-
The client information found from the lookup strategy.
- ClientInformationClientSecretCredentialResolver - Class in net.shibboleth.oidc.security.credential.impl
-
A
JOSEObjectCredentialResolverthat resolves client secret from of a ClientInformation. - ClientInformationClientSecretCredentialResolver() - Constructor for class net.shibboleth.oidc.security.credential.impl.ClientInformationClientSecretCredentialResolver
- ClientInformationCredentialResolver - Class in net.shibboleth.oidc.security.credential.impl
-
A
JOSEObjectCredentialResolverthat resolves credentials from the jwks or contents of jwks_uri of a ClientInformation. - ClientInformationCredentialResolver(RemoteJwkSetCache) - Constructor for class net.shibboleth.oidc.security.credential.impl.ClientInformationCredentialResolver
-
Constructor.
- ClientInformationCredentialResolver(RemoteJwkSetCache, Duration) - Constructor for class net.shibboleth.oidc.security.credential.impl.ClientInformationCredentialResolver
-
Constructor.
- ClientInformationCriterion - Class in net.shibboleth.oidc.security.jose.criterion
-
Client information criterion to make decisions based on client information.
- ClientInformationCriterion(OIDCClientInformation) - Constructor for class net.shibboleth.oidc.security.jose.criterion.ClientInformationCriterion
-
Constructor.
- ClientInformationDataEncryptionAlgorithmsLookupStrategy - Class in net.shibboleth.oidc.security.jose.impl
-
A lookup strategy that finds data/content encryption algorithms from local configuration that are compatible with those advertised by the RP/client information.
- ClientInformationDataEncryptionAlgorithmsLookupStrategy(Function<OIDCClientInformation, String>) - Constructor for class net.shibboleth.oidc.security.jose.impl.ClientInformationDataEncryptionAlgorithmsLookupStrategy
-
Constructor.
- ClientInformationDataEncryptionAlgorithmsLookupStrategy(Function<OIDCClientInformation, String>, AlgorithmRegistry) - Constructor for class net.shibboleth.oidc.security.jose.impl.ClientInformationDataEncryptionAlgorithmsLookupStrategy
-
Constructor.
- ClientInformationJWTTrustEngine - Class in net.shibboleth.oidc.security.impl
-
An implementation of
SignatureTrustEnginewhich evaluates the validity and trustworthiness of JWT signatures. - ClientInformationJWTTrustEngine(CredentialResolver, JOSEObjectCredentialResolver, Function<OIDCClientInformation, String>, String) - Constructor for class net.shibboleth.oidc.security.impl.ClientInformationJWTTrustEngine
-
Constructor.
- ClientInformationKeyTransportEncryptionAlgorithmsLookupStrategy - Class in net.shibboleth.oidc.security.jose.impl
-
A lookup strategy that finds key transport algorithms from local configuration that are compatible with those configured to RP.
- ClientInformationKeyTransportEncryptionAlgorithmsLookupStrategy(Function<OIDCClientInformation, String>) - Constructor for class net.shibboleth.oidc.security.jose.impl.ClientInformationKeyTransportEncryptionAlgorithmsLookupStrategy
-
Constructor.
- ClientInformationKeyTransportEncryptionAlgorithmsLookupStrategy(Function<OIDCClientInformation, String>, AlgorithmRegistry) - Constructor for class net.shibboleth.oidc.security.jose.impl.ClientInformationKeyTransportEncryptionAlgorithmsLookupStrategy
-
Constructor.
- clientInformationLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler
-
Function that looks up client information from the given message context.
- clientInformationLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration
-
Function that looks up client information from the given profile context.
- clientInformationLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler
-
Function that looks up client information from the given message context.
- ClientInformationManager - Interface in net.shibboleth.oidc.metadata
-
A manager that is capable of managing
ClientInformationinstances. - ClientInformationManagerException - Exception in net.shibboleth.oidc.metadata
-
Exception indicating a problem managing client information.
- ClientInformationManagerException() - Constructor for exception net.shibboleth.oidc.metadata.ClientInformationManagerException
-
Constructor.
- ClientInformationManagerException(Exception) - Constructor for exception net.shibboleth.oidc.metadata.ClientInformationManagerException
-
Constructor.
- ClientInformationManagerException(String) - Constructor for exception net.shibboleth.oidc.metadata.ClientInformationManagerException
-
Constructor.
- ClientInformationManagerException(String, Exception) - Constructor for exception net.shibboleth.oidc.metadata.ClientInformationManagerException
-
Constructor.
- ClientInformationNodeProcessor - Class in net.shibboleth.oidc.metadata.impl
-
An implementation of
MetadataNodeProcessorwhich supports adding an instance ofOIDCClientInformationto the object metadata ofSPSSODescriptor. - ClientInformationNodeProcessor(List<KeyInfoProvider>) - Constructor for class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
-
Constructor.
- ClientInformationNodeProcessor.SkeletonEchoingRoleDescriptorResolver - Class in net.shibboleth.oidc.metadata.impl
-
Abstract base class that fills in some operations.
- ClientInformationParser - Class in net.shibboleth.oidc.profile.spring.relyingparty.metadata.filter.impl
-
Parser for a <ClientInformation> node processor.
- ClientInformationParser() - Constructor for class net.shibboleth.oidc.profile.spring.relyingparty.metadata.filter.impl.ClientInformationParser
- ClientInformationResolver - Interface in net.shibboleth.oidc.metadata
-
A resolver that is capable of resolving
ClientInformationinstances which meet certain supplied criteria. - ClientInformationResolverServiceStrategy - Class in net.shibboleth.oidc.profile.spring.relyingparty.metadata.impl
-
Strategy for summoning up a
ClientInformationResolverfrom a populatedApplicationContext. - ClientInformationResolverServiceStrategy() - Constructor for class net.shibboleth.oidc.profile.spring.relyingparty.metadata.impl.ClientInformationResolverServiceStrategy
- ClientInformationSignatureSigningParametersResolver - Class in net.shibboleth.oidc.security.jose.impl
-
An implementation of an
SignatureSigningParametersResolverthat extends theBasicSignatureSigningParametersResolverfunctionality by adding a configurable lookup strategy for fetching the desired algorithm value fromOIDCClientInformation. - ClientInformationSignatureSigningParametersResolver(Function<OIDCClientInformation, String>, String) - Constructor for class net.shibboleth.oidc.security.jose.impl.ClientInformationSignatureSigningParametersResolver
-
Constructor.
- ClientInformationStringValueLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
Fetches the value for the configured key as
String. - ClientInformationStringValueLookupFunction(String) - Constructor for class net.shibboleth.oidc.profile.config.navigate.ClientInformationStringValueLookupFunction
-
Constructor.
- clientKeyTransportAlgorithmLookupStrategy - Variable in class net.shibboleth.oidc.security.jose.impl.ClientInformationKeyTransportEncryptionAlgorithmsLookupStrategy
-
A strategy to locate the algorithm ('alg') appropriate for the JWT to be encrypted.
- clientSecret - Variable in class net.shibboleth.oidc.security.credential.BasicNimbusSecretCredential
-
Deprecated.The client secret.
- clientSecret - Variable in class net.shibboleth.oidc.security.credential.DefaultClientSecretCredential
-
The client_secret.
- ClientSecret - Interface in net.shibboleth.oidc.saml.xmlobject
-
SAML2 OIDC metadata extension 'ClientSecret'.
- ClientSecretBuilder - Class in net.shibboleth.oidc.saml.xmlobject.impl
-
Builder of
ClientSecretImpl. - ClientSecretBuilder() - Constructor for class net.shibboleth.oidc.saml.xmlobject.impl.ClientSecretBuilder
- ClientSecretCredential - Interface in net.shibboleth.oidc.security.credential
-
Credential wrapping a client_secret.
- ClientSecretCredentialCriterion - Class in net.shibboleth.oidc.security.jose.criterion
-
A
Criterionthat holds a single, fixed, client_secret credential. - ClientSecretCredentialCriterion(ClientSecretCredential) - Constructor for class net.shibboleth.oidc.security.jose.criterion.ClientSecretCredentialCriterion
-
Constructor.
- ClientSecretCriterionCredentialResolver - Class in net.shibboleth.oidc.security.credential.impl
-
Extracts a credential held inside the
ClientSecretCredentialCriterionfrom the given criteria set. - ClientSecretCriterionCredentialResolver() - Constructor for class net.shibboleth.oidc.security.credential.impl.ClientSecretCriterionCredentialResolver
- ClientSecretImpl - Class in net.shibboleth.oidc.saml.xmlobject.impl
-
Concrete implementation of
ClientSecret. - ClientSecretImpl(String, String, String) - Constructor for class net.shibboleth.oidc.saml.xmlobject.impl.ClientSecretImpl
-
Constructor.
- ClientSecretKeyReference - Interface in net.shibboleth.oidc.saml.xmlobject
-
SAML2 OIDC metadata extension 'ClientSecretReferenceKey'.
- ClientSecretKeyReferenceBuilder - Class in net.shibboleth.oidc.saml.xmlobject.impl
-
Builder of
ClientSecretKeyReferenceImpl. - ClientSecretKeyReferenceBuilder() - Constructor for class net.shibboleth.oidc.saml.xmlobject.impl.ClientSecretKeyReferenceBuilder
- ClientSecretKeyReferenceImpl - Class in net.shibboleth.oidc.saml.xmlobject.impl
-
Concrete implementation of
ClientSecretKeyReference. - ClientSecretKeyReferenceImpl(String, String, String) - Constructor for class net.shibboleth.oidc.saml.xmlobject.impl.ClientSecretKeyReferenceImpl
-
Constructor.
- ClientSecretProvider - Class in net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider
-
Implementation of
KeyInfoProviderwhich provides basic support for extracting aNimbusSecretCredentialchild of KeyInfo. - ClientSecretProvider() - Constructor for class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.ClientSecretProvider
- ClientSecretReferenceCriterion - Class in net.shibboleth.oidc.metadata.criterion
-
A
Criterionrepresenting a reference to a client secret. - ClientSecretReferenceCriterion(String) - Constructor for class net.shibboleth.oidc.metadata.criterion.ClientSecretReferenceCriterion
-
Constructor.
- ClientSecretReferenceProvider - Class in net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider
-
Implementation of
KeyInfoProviderwhich provides basic support for extracting aNimbusSecretCredentialchild of KeyInfo. - ClientSecretReferenceProvider(Collection<ClientSecretValueResolver>) - Constructor for class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.ClientSecretReferenceProvider
-
Constructor.
- ClientSecretValueResolver - Interface in net.shibboleth.oidc.metadata
-
A resolver that is capable of resolving client secret values (as
Strings) which meet certain supplied criteria. - clientSecretValueResolvers - Variable in class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.ClientSecretReferenceProvider
-
The list of resolvers for resolving the values for client secrets.
- clientUri - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Client URI for this entity.
- clockSkew - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationTimeClaimsValidator
-
Positive clock skew adjustment to consider when checking auth_time is not in the future or has expired.
- clockSkew - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.ExpiryClaimsValidator
-
Positive clock skew adjustment to consider when checking JWT expiration (Default value: 60 seconds).
- clockSkew - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.IssuedAtClaimsValidator
-
Clock skew adjustment in both directions to consider still acceptable (Default value: 1 minute).
- clockSkew - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierClaimsValidator
-
Clock skew adjustment in both directions to consider still acceptable (Default value: 1 minute).
- clockSkew - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.NotBeforeClaimsValidator
-
Positive clock skew adjustment to consider when checking JWT not before and expiration (Default value: 60 seconds).
- clone() - Method in class net.shibboleth.oidc.authn.principal.AuthenticationContextClassReferencePrincipal
- codeChallenge - Variable in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
-
The authorisation code_challenge for Proof Key for Code Exchange.
- codeChallengeMethod - Variable in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
-
The authorisation code_challenge_method used for Proof Key for Code Exchange.
- CodeChallengeMethod(String) - Constructor for enum class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest.CodeChallengeMethod
-
Constructor.
- codeVerifier - Variable in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
-
The authorisation code_verifier for Proof Key for Code Exchange.
- collection - Variable in class net.shibboleth.oidc.security.credential.impl.CollectionJOSEObjectCredentialResolver
-
List of credentials held by this resolver.
- collection - Variable in class net.shibboleth.oidc.security.credential.impl.ReturnAllCollectionJOSEObjectCredentialResolver
-
List of credentials held by this resolver.
- CollectionJOSEObjectCredentialResolver - Class in net.shibboleth.oidc.security.credential.impl
-
An implementation of
BasicJOSEObjectCredentialResolverthat uses aCollectionas the underlying credential source. - CollectionJOSEObjectCredentialResolver(List<Credential>) - Constructor for class net.shibboleth.oidc.security.credential.impl.CollectionJOSEObjectCredentialResolver
-
Constructor.
- CollectionJOSEObjectCredentialResolver(Credential) - Constructor for class net.shibboleth.oidc.security.credential.impl.CollectionJOSEObjectCredentialResolver
-
Constructor.
- compareTo(ProviderMetadataProviderContainer) - Method in class net.shibboleth.oidc.metadata.ProviderMetadataProviderContainer
- compareTo(RelyingPartyClientInformationProvider) - Method in class net.shibboleth.oidc.metadata.RelyingPartyClientInformationProvider
- composeSigningInput(JWSHeader, Payload) - Static method in class net.shibboleth.oidc.security.JWSAssemblyUtils
-
Compose the message that is to be signed.
- computeManagementDataIfAbsent(I, Function<I, MetadataManagementData<I>>) - Method in interface net.shibboleth.oidc.metadata.DynamicBackingStore
-
Get the management data for the specified identifier.
- computeManagementDataIfAbsent(I, Function<I, MetadataManagementData<I>>) - Method in class net.shibboleth.oidc.metadata.impl.DefaultDynamicBackingStore
-
Get the management data for the specified identifier.
- computeNextRefreshDelay(Instant) - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
-
Computes the delay until the next refresh time based on the current metadata's expiration time and the refresh interval floor.
- computeRefreshTriggerTime(Instant, Instant) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
-
Compute the refresh trigger time.
- configs - Static variable in class net.shibboleth.oidc.saml.xmlobject.impl.XMLObjectProviderInitializer
-
Config resources.
- configs - Variable in class net.shibboleth.oidc.security.jose.criterion.DecryptionConfigurationCriterion
-
The list of configuration instances.
- configs - Variable in class net.shibboleth.oidc.security.jose.criterion.EncryptionConfigurationCriterion
-
The list of configuration instances.
- configs - Variable in class net.shibboleth.oidc.security.jose.criterion.SignatureSigningConfigurationCriterion
-
The list of configuration instances.
- configs - Variable in class net.shibboleth.oidc.security.jose.criterion.SignatureValidationConfigurationCriterion
-
The list of configuration instances.
- configurationLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTDecryptionParameters
-
Strategy used to lookup a per-request
DecryptionConfigurationlist. - configurationLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
-
Strategy used to look up a per-request
EncryptionConfigurationlist. - configurationLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParameters
-
Strategy used to look up a per-request
SignatureSigningConfigurationlist. - configurationLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
-
Strategy used to look up a per-request
SignatureSigningConfigurationlist. - configurationLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureValidationParameters
-
Strategy used to lookup a per-request
SignatureValidationConfigurationlist. - configurationLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureValidationParametersHandler
-
Strategy used to lookup a per-request
SignatureValidationConfigurationlist. - Constants - Class in net.shibboleth.oidc.saml.xmlobject
-
Constants related to SAML 2.0 Metadata extension OAuthRPRoleDescriptorType.
- Constants() - Constructor for class net.shibboleth.oidc.saml.xmlobject.Constants
-
Constructor.
- content - Variable in class net.shibboleth.oidc.profile.messaging.JSONSuccessResponse
-
JSON content.
- CONTENT_TYPE - Static variable in class net.shibboleth.oidc.metadata.impl.HTTPProviderConfigurationFetchingStrategy
-
The returned content_type, must be application/json see openid-connect-discovery section 4.
- contentEncryptionKeyCredentialResolver - Variable in class net.shibboleth.oidc.security.jose.DecryptionParameters
-
The content encryption key (CEK) resolver.
- contentEncryptionKeyCredentialResolver - Variable in class net.shibboleth.oidc.security.jose.impl.BasicDecryptionConfiguration
-
The content encryption key (CEK) resolver.
- contentEncryptionKeyCredentialResolver - Variable in class net.shibboleth.oidc.security.jose.impl.BasicEncryptionConfiguration
-
The content encryption key (CEK) resolver.
- context - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierRevocationValidator
-
Context in revocation cache.
- CONTEXT_NAME - Static variable in class net.shibboleth.oidc.jwk.RemoteJwkSetCache
-
The context name in the
StorageService. - CONTEXT_NAME - Static variable in class net.shibboleth.oidc.metadata.impl.BaseStorageServiceClientInformationComponent
-
The context name in the
StorageService. - convertAndPublishToList(List<Credential>, List<JWK>) - Method in class net.shibboleth.oidc.profile.impl.FormOutboundKeySetResponseMessage
-
Converts the given credentials into JWK and adds all the successfully converted JWKs to the given list.
- convertIntoListIfEnabled(String, List<String>) - Method in class net.shibboleth.oidc.security.jose.impl.ClientInformationSignatureSigningParametersResolver
-
Returns the given algorithm in a
Listif it was enabled in the list of enabled algorithms. - convertStringAlgorithmURIsToJwkAlgorithms(List<String>) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
-
Convert the algorithms represented as Strings into Nimbus
Algorithms for later comparison. - convertStringEncryptionMethodURIsToEncryptionMethods(List<String>) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
-
Convert the encryption methods represented as Strings into Nimbus
EncryptionMethods for later comparison. - copySymmetricCredentialWithNewSecret(JWKCredential, String, SecretKey) - Static method in class net.shibboleth.oidc.security.CredentialConversionUtil
-
Create a shallow copy of the input credential, replacing the secrete key and keyID with those supplied.
- countClients(ClientInformationResolver) - Method in class net.shibboleth.oidc.metadata.impl.ChainingClientInformationResolver
-
Counts the clients found from the given resolver.
- countClients(ProviderMetadataResolver) - Method in class net.shibboleth.oidc.metadata.impl.ChainingProviderMetadataResolver
-
Counts the clients found from the given resolver.
- createdOwnTaskTimer - Variable in class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver
-
Whether we created our own task timer during object construction.
- createExpirationTimeContext(MetadataType, Instant) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
-
Create an expiration time context from the given metadata, the min and max cache durations, and the instant representing 'now'.
- createInstance() - Method in class net.shibboleth.oidc.profile.config.CredentialsListFactory
- createLoadingContext() - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
-
Create a cache loading context based on the last refresh and last update time of the backing store.
- createNewBackingStore() - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver
-
Create a new backing store instance for entity data.
- createOwnSchedular - Variable in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
-
Whether we created our own schedular during object construction.
- createParametersFromRequest(OIDCAuthenticationRequest) - Method in class net.shibboleth.oidc.profile.encoding.impl.AbstractOIDCMessageEncoder
-
Create a list of OAuth 2.0 authorization parameters from the
OIDCAuthenticationRequestobject. - createParametersFromRequestWithoutRequestObject(List<Pair<String, String>>, OIDCAuthenticationRequest) - Method in class net.shibboleth.oidc.profile.encoding.impl.AbstractOIDCMessageEncoder
-
Create the set of OAuth2.0 authorization and and OIDC authentication request parameters when no RequestObject has been built.
- createParametersFromRequestWithRequestObject(List<Pair<String, String>>, OIDCAuthenticationRequest) - Method in class net.shibboleth.oidc.profile.encoding.impl.AbstractOIDCMessageEncoder
-
Create the set of OAuth2.0 authorization and and OIDC authentication request parameters when a RequestObject is present.
- createStandardOAuthParameters(List<Pair<String, String>>, OIDCAuthenticationRequest) - Method in class net.shibboleth.oidc.profile.encoding.impl.AbstractOIDCMessageEncoder
-
Add the standard set of OAuth2 2.0 authorization parameters to the params list using the OAuth 2.0 request syntax.
- credential - Variable in class net.shibboleth.oidc.security.jose.criterion.ClientSecretCredentialCriterion
-
The credential to hold.
- CredentialConversionUtil - Class in net.shibboleth.oidc.security
-
Generic tool methods related to converting
Credentialto JWK. - CredentialConversionUtil() - Constructor for class net.shibboleth.oidc.security.CredentialConversionUtil
-
Private constructor.
- credentialExpiresAt - Variable in class net.shibboleth.oidc.security.credential.BasicExpiringJWKCredential
-
When the credential expires in seconds since 1970-01-01T0:0:0Z.
- credentialExpiresAt - Variable in class net.shibboleth.oidc.security.credential.BasicExpiringJWTSharedSecretCredentialFactoryBean
-
When the credential expires in seconds since 1970-01-01T0:0:0Z.
- credentialResolver - Variable in class net.shibboleth.oidc.security.impl.ExplicitKeySignedJWTTrustEngine
-
Resolver used for resolving trusted credentials.
- credentials - Variable in class net.shibboleth.oidc.profile.config.CredentialsListFactory
-
The credentials which may contain null elements.
- CredentialsListFactory - Class in net.shibboleth.oidc.profile.config
-
A factory that returns a list of credentials which does not contain any null elements.
- CredentialsListFactory(List<Credential>) - Constructor for class net.shibboleth.oidc.profile.config.CredentialsListFactory
-
Constructor.
- credentialsToPublishLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.FormOutboundKeySetResponseMessage
-
Strategy used to locate the list of credentials to publish.
- credentialSupportsAlgorithm(Credential, String) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
-
Evaluate whether the specified credential is supported for use with the specified algorithm URI.
- credentialSupportsSigningAlgorithm(Credential, String) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver
-
Evaluate whether the specified credential is supported for use with the specified signing algorithm.
- credentialToKey(Credential) - Static method in class net.shibboleth.oidc.security.CredentialConversionUtil
-
Converts credential to JWK with only *public* components.
- criteriaSetLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.navigate.ResolverBasedRegistrationMetadataPolicyLookupFunction
-
The lookup strategy for the criteria set used for the metadata policy resolver.
- criteriaToIdentifierStrategy - Variable in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
-
Map criteria to identifiers to use as keys to the backing store.
- criteriaToIdentifierStrategy - Variable in class net.shibboleth.oidc.metadata.cache.impl.BaseMetadataCacheBuilderSpec
-
Map criteria to identifiers to use as keys to the backing store.
- criterionPredicateRegistry - Variable in class net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver
-
Registry used in resolving predicates from criteria.
- cspDigester - Variable in class net.shibboleth.oidc.profile.encoding.impl.HTTPPostAuthnRequestEncoder
-
CSP digester for generating CSP hashes.
- cspNonceGenerator - Variable in class net.shibboleth.oidc.profile.encoding.impl.HTTPPostAuthnRequestEncoder
-
CSP nonce generator.
- CustomMetadataPolicyOperator - Interface in net.shibboleth.oidc.metadata.policy.impl
-
Interface describing a custom policy operator to be used with
MetadataPolicyobjects. - customOperators - Variable in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyEnforcer
-
Map of custom metadata policy operators that are applied after the standard operators.
- customOperators - Variable in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyValidator
-
Map of custom metadata policy operators that are applied after the standard operators.
- customOperators - Variable in class net.shibboleth.oidc.metadata.policy.MetadataPolicy.Builder
-
The map of any other operators not directly mapped.
- customOperators - Variable in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
-
The map of any other operators not directly mapped.
- CustomRedirectUriValidationStrategyLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
A function that returns
OIDCSSOProfileConfiguration.getCustomRedirectUriValidationStrategy(ProfileRequestContext)if such a profile is available from aRelyingPartyContextobtained via a lookup function, by default a child of theProfileRequestContext. - CustomRedirectUriValidationStrategyLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.CustomRedirectUriValidationStrategyLookupFunction
- customRedirectUriValidationStrategyLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Lookup function to supply strategy bi-predicate for custom valdation of redirect URI in the request.
D
- DataEncryptionAlgorithmCriterion - Class in net.shibboleth.oidc.security.credential.impl
-
An implementation of an
Criterionwhich specifies content encryption algorithm criteria. - DataEncryptionAlgorithmCriterion(String) - Constructor for class net.shibboleth.oidc.security.credential.impl.DataEncryptionAlgorithmCriterion
-
Constructor.
- dataEncryptionAlgorithmLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration
-
A lookup function for the data encryption algorithm in the client metadata.
- dataEncryptionAlgorithms - Variable in class net.shibboleth.oidc.security.jose.impl.BasicEncryptionConfiguration
-
Data encryption algorithm URIs.
- dataEncryptionAlgorithmsLookupStrategy - Variable in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
-
A lookup strategy to locate data encryption algorithms from the given criteria set and includesExcludes predicate.
- dataEncryptionAlgorithmURI - Variable in class net.shibboleth.oidc.security.jose.EncryptionParameters
-
The EncryptedData encryption algorithm URI.
- dataEncryptionCredential - Variable in class net.shibboleth.oidc.security.jose.EncryptionParameters
-
The EncryptedData encryption credential.
- DateBasedJWTClaimAuditExtractor - Class in net.shibboleth.oidc.profile.audit.impl
-
A JWT claim extractor function that returns a formatted String representation of the JSON Date.
- DateBasedJWTClaimAuditExtractor() - Constructor for class net.shibboleth.oidc.profile.audit.impl.DateBasedJWTClaimAuditExtractor
-
Constructor.
- dateTimeFormatter - Variable in class net.shibboleth.oidc.profile.audit.impl.DateBasedJWTClaimAuditExtractor
-
Formatter for date/time fields.
- decodeValues(ProfileRequestContext, Object, TranscodingRule) - Method in class net.shibboleth.oidc.attribute.transcoding.AbstractOIDCAttributeTranscoder
-
Subclasses should override this method to perform specific claim value decoding into
IdPAttributeValueobjects. - decodeValues(ProfileRequestContext, Object, TranscodingRule) - Method in class net.shibboleth.oidc.attribute.transcoding.impl.OIDCByteAttributeTranscoder
-
Subclasses should override this method to perform specific claim value decoding into
IdPAttributeValueobjects. - decodeValues(ProfileRequestContext, Object, TranscodingRule) - Method in class net.shibboleth.oidc.attribute.transcoding.impl.OIDCScopedStringAttributeTranscoder
-
Subclasses should override this method to perform specific claim value decoding into
IdPAttributeValueobjects. - decodeValues(ProfileRequestContext, Object, TranscodingRule) - Method in class net.shibboleth.oidc.attribute.transcoding.impl.OIDCStringAttributeTranscoder
-
Subclasses should override this method to perform specific claim value decoding into
IdPAttributeValueobjects. - decrypt(EncryptedJWT) - Method in class net.shibboleth.oidc.security.impl.JWETokenDecrypter
-
Decrypt a JWE object using credentials resolved from the CEK and KEK resolvers inside the decryption parameters.
- decrypter - Variable in class net.shibboleth.oidc.security.impl.DecryptJWE
-
The decryption object.
- DecryptionConfiguration - Interface in net.shibboleth.oidc.security.jose
-
The configuration information to use when decrypting JWEs.
- DecryptionConfigurationCriterion - Class in net.shibboleth.oidc.security.jose.criterion
-
Criterion which holds one or more instances of a
DecryptionConfiguration. - DecryptionConfigurationCriterion(List<DecryptionConfiguration>) - Constructor for class net.shibboleth.oidc.security.jose.criterion.DecryptionConfigurationCriterion
-
Constructor.
- DecryptionConfigurationCriterion(DecryptionConfiguration...) - Constructor for class net.shibboleth.oidc.security.jose.criterion.DecryptionConfigurationCriterion
-
Constructor.
- decryptionParameters - Variable in class net.shibboleth.oidc.security.jose.context.SecurityParametersContext
-
Decryption parameters.
- DecryptionParameters - Class in net.shibboleth.oidc.security.jose
-
Describes the decryption parameters the system is required to use to decrypt a JWE.
- DecryptionParameters() - Constructor for class net.shibboleth.oidc.security.jose.DecryptionParameters
-
Constructor .
- DecryptionParametersResolver - Interface in net.shibboleth.oidc.security.jose
-
An interface for components which resolve
DecryptionParametersbased on aCriteriaSet. - DecryptJWE - Class in net.shibboleth.oidc.security.impl
-
Decrypt the located JWE using the decryption parameters stored in the security context.
- DecryptJWE() - Constructor for class net.shibboleth.oidc.security.impl.DecryptJWE
-
Constructor.
- decryptUsingDirectEncryption(EncryptedJWT) - Method in class net.shibboleth.oidc.security.impl.JWETokenDecrypter
-
Decrypt the encrypted JWT using direct encryption.
- decryptUsingKeyAgreement(EncryptedJWT) - Method in class net.shibboleth.oidc.security.impl.JWETokenDecrypter
-
Decrypt the encrypted JWT by computing the content encryption key using Elliptic Curve Diffie-Hellman key agreement.
- decryptUsingKeyEncryption(EncryptedJWT) - Method in class net.shibboleth.oidc.security.impl.JWETokenDecrypter
-
Decrypt the encrypted JWT by first decrypting the content encryption key using one of the (asymmetric) key encryption keys resolved by the
DecryptionParameters.getKEKCredentialResolver()resolver. - decryptUsingKeyWrapping(EncryptedJWT) - Method in class net.shibboleth.oidc.security.impl.JWETokenDecrypter
-
Decrypt the encrypted JWT by first decrypting the wrapped content encryption key using one of the shared key wrapping keys derived from a symmetric key resolved by the
DecryptionParameters.getKEKCredentialResolver()resolver. - DEFAULT_CONTENT_TYPES - Static variable in class net.shibboleth.oidc.metadata.impl.AbstractDynamicHTTPFetchingStrategy
-
Default list of supported content MIME types.
- DEFAULT_ELEMENT_LOCAL_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.ClientSecret
-
Element name, no namespace.
- DEFAULT_ELEMENT_LOCAL_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.ClientSecretKeyReference
-
Element name, no namespace.
- DEFAULT_ELEMENT_LOCAL_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.DefaultAcrValue
-
Element name, no namespace.
- DEFAULT_ELEMENT_LOCAL_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.JwksData
-
Element name, no namespace.
- DEFAULT_ELEMENT_LOCAL_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.JwksUri
-
Element name, no namespace.
- DEFAULT_ELEMENT_LOCAL_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.PostLogoutRedirectUri
-
Element name, no namespace.
- DEFAULT_ELEMENT_LOCAL_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.RequestUri
-
Element name, no namespace.
- DEFAULT_ELEMENT_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.ClientSecret
-
Default element name.
- DEFAULT_ELEMENT_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.ClientSecretKeyReference
-
Default element name.
- DEFAULT_ELEMENT_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.DefaultAcrValue
-
Default element name.
- DEFAULT_ELEMENT_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.JwksData
-
Default element name.
- DEFAULT_ELEMENT_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.JwksUri
-
Default element name.
- DEFAULT_ELEMENT_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.PostLogoutRedirectUri
-
Default element name.
- DEFAULT_ELEMENT_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.RequestUri
-
Default element name.
- DEFAULT_ERROR_CODE - Static variable in class net.shibboleth.oidc.profile.impl.AbstractBuildErrorResponseFromEvent
-
Default value for the error code in the error response messages.
- DEFAULT_HTTP_STATUS_CODE - Static variable in class net.shibboleth.oidc.profile.impl.AbstractBuildErrorResponseFromEvent
-
Default value for the HTTP response status code in the HTTP responses.
- DEFAULT_MAX_AGE_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Attribute local name.
- DEFAULT_OPENID_PROVIDER_WELL_KNOWN_PATH - Static variable in class net.shibboleth.oidc.metadata.impl.HTTPProviderConfigurationFetchingStrategy
-
The default well-known path for OpenID Provider metadata.
- DEFAULT_OPENID_SCOPE - Static variable in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
-
The default OpenID scope.
- DEFAULT_SECRET_KEY_NAME - Static variable in class net.shibboleth.oidc.security.credential.DefaultClientSecretCredential
-
Default client_secret keyname.
- DEFAULT_TEMPLATE_ID - Static variable in class net.shibboleth.oidc.profile.encoding.impl.HTTPPostAuthnRequestEncoder
-
Default template ID for using FORM POST request type.
- DefaultAcrValue - Interface in net.shibboleth.oidc.saml.xmlobject
-
SAML2 OIDC metadata extension 'DefaultAcrValue'.
- DefaultAcrValueBuilder - Class in net.shibboleth.oidc.saml.xmlobject.impl
-
Builder of
DefaultAcrValueImpl. - DefaultAcrValueBuilder() - Constructor for class net.shibboleth.oidc.saml.xmlobject.impl.DefaultAcrValueBuilder
- DefaultAcrValueImpl - Class in net.shibboleth.oidc.saml.xmlobject.impl
-
Concrete implementation of
DefaultAcrValue. - DefaultAcrValueImpl(String, String, String) - Constructor for class net.shibboleth.oidc.saml.xmlobject.impl.DefaultAcrValueImpl
-
Constructor.
- defaultAcrValues - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Default ACR values for this entity.
- defaultAlgorithmValue - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler
-
The default algorithm value used if lookup strategy returned null.
- defaultAlgorithmValue - Variable in class net.shibboleth.oidc.security.impl.ClientInformationJWTTrustEngine
-
The default algorithm value used if lookup strategy returned null.
- defaultAlgorithmValue - Variable in class net.shibboleth.oidc.security.jose.impl.ClientInformationSignatureSigningParametersResolver
-
The default algorithm value used if lookup strategy returned null.
- defaultAuthenticationContextsLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Lookup function to supply default authentication methods.
- DefaultBatchBackingStore<I,
T> - Class in net.shibboleth.oidc.metadata.impl -
Default implementation of a
BatchBackingStore. - DefaultBatchBackingStore() - Constructor for class net.shibboleth.oidc.metadata.impl.DefaultBatchBackingStore
- DefaultClientSecretCredential - Class in net.shibboleth.oidc.security.credential
-
A basic implementation of
ClientSecretCredential. - DefaultClientSecretCredential(String) - Constructor for class net.shibboleth.oidc.security.credential.DefaultClientSecretCredential
-
Constructor.
- DefaultClientSecretCredential(String, String) - Constructor for class net.shibboleth.oidc.security.credential.DefaultClientSecretCredential
-
Constructor.
- defaultCode - Variable in class net.shibboleth.oidc.profile.impl.AbstractBuildErrorResponseFromEvent
-
The code for unmapped events.
- DefaultDataEncryptionAlgorithmsLookupStrategy - Class in net.shibboleth.oidc.security.jose.impl
-
A BiFunction which pulls data encryption (content encryption) algorithms to use from the encryption configuration and filters them.
- DefaultDataEncryptionAlgorithmsLookupStrategy(AlgorithmRegistry) - Constructor for class net.shibboleth.oidc.security.jose.impl.DefaultDataEncryptionAlgorithmsLookupStrategy
-
Constructor.
- DefaultDecryptionParametersResolver - Class in net.shibboleth.oidc.security.jose.impl
-
Basic implementation of
DecryptionParametersResolver. - DefaultDecryptionParametersResolver() - Constructor for class net.shibboleth.oidc.security.jose.impl.DefaultDecryptionParametersResolver
- DefaultDynamicBackingStore<I,
T> - Class in net.shibboleth.oidc.metadata.impl -
Default implementation of a
DynamicBackingStore. - DefaultDynamicBackingStore() - Constructor for class net.shibboleth.oidc.metadata.impl.DefaultDynamicBackingStore
-
Constructor.
- DefaultEncryptionParametersResolver - Class in net.shibboleth.oidc.security.jose.impl
-
Default implementation of an
EncryptionParametersResolver. - DefaultEncryptionParametersResolver() - Constructor for class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
-
Constructor.
- DefaultFileLoadingStrategy - Class in net.shibboleth.oidc.metadata.cache.impl
-
Default strategy for loading information from a file.
- DefaultFileLoadingStrategy(Resource) - Constructor for class net.shibboleth.oidc.metadata.cache.impl.DefaultFileLoadingStrategy
-
Constructor.
- DefaultJSONMapParsingStrategy<V> - Class in net.shibboleth.oidc.metadata.cache.impl
-
Deserializes a UTF-8 JSON string into a Map.
- DefaultJSONMapParsingStrategy(ObjectMapper, Class<V>) - Constructor for class net.shibboleth.oidc.metadata.cache.impl.DefaultJSONMapParsingStrategy
-
Constructor.
- DefaultJSONMapParsingStrategy(Class<V>) - Constructor for class net.shibboleth.oidc.metadata.cache.impl.DefaultJSONMapParsingStrategy
-
Constructor.
- DefaultKeyTransportEncryptionAlgorithmsLookupStrategy - Class in net.shibboleth.oidc.security.jose.impl
-
A BiFunction that retrieves and filters the key transport encryption algorithms from the
EncryptionConfigurationinside the criteria set. - DefaultKeyTransportEncryptionAlgorithmsLookupStrategy(AlgorithmRegistry) - Constructor for class net.shibboleth.oidc.security.jose.impl.DefaultKeyTransportEncryptionAlgorithmsLookupStrategy
-
Constructor.
- defaultMaxAge - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Default max age for this entity.
- DefaultMetadataPolicyEnforcer - Class in net.shibboleth.oidc.metadata.policy.impl
-
A function that applies the given
MetadataPolicyto the given object. - DefaultMetadataPolicyEnforcer() - Constructor for class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyEnforcer
-
Constructor.
- DefaultMetadataPolicyOperator - Class in net.shibboleth.oidc.metadata.policy.impl
-
A
CustomMetadataPolicyOperatorimplementation that uses customizablePredicatefor validating the metadata policy andBiFunctionfor performing the operation. - DefaultMetadataPolicyOperator() - Constructor for class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyOperator
- DefaultMetadataPolicyResponseHandler - Class in net.shibboleth.oidc.metadata.policy.impl
-
The response handler for parsing the metadata policy document into a map.
- DefaultMetadataPolicyResponseHandler() - Constructor for class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyResponseHandler
- DefaultMetadataPolicyValidator - Class in net.shibboleth.oidc.metadata.policy.impl
-
A function that verifies that the map of
MetadataPolicyentries meets the restrictions defined in the OIDC federation specification 1.0 (draft 17 / September 2021): - DefaultMetadataPolicyValidator() - Constructor for class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyValidator
-
Constructor.
- DefaultOAuth2PushedAuthorizationRequestConfiguration - Class in net.shibboleth.oidc.profile.oauth2.config.impl
-
Implementation of a profile configuration for the OAuth2 Pushed Authorization Requests (PAR).
- DefaultOAuth2PushedAuthorizationRequestConfiguration() - Constructor for class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2PushedAuthorizationRequestConfiguration
-
Constructor.
- DefaultOAuth2PushedAuthorizationRequestConfiguration(String) - Constructor for class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2PushedAuthorizationRequestConfiguration
-
Creates a new configuration instance.
- DefaultOAuth2TokenAudienceConfiguration - Class in net.shibboleth.oidc.profile.oauth2.config.impl
-
Implementation of an OAuth 2.0 token "audience" profile configuration.
- DefaultOAuth2TokenAudienceConfiguration() - Constructor for class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
-
Constructor.
- DefaultOAuth2TokenAudienceConfiguration(String) - Constructor for class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
-
Creates a new configuration instance.
- DefaultOAuth2TokenConfiguration - Class in net.shibboleth.oidc.profile.oauth2.config.impl
-
Implementation of an OIDC-aware OAuth 2 token endpoint profile configuration.
- DefaultOAuth2TokenConfiguration() - Constructor for class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
-
Constructor.
- DefaultOAuth2TokenConfiguration(String) - Constructor for class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
-
Creates a new configuration instance.
- DefaultOAuth2TokenIntrospectionConfiguration - Class in net.shibboleth.oidc.profile.oauth2.config.impl
-
Implementation of a profile configuration for the OAuth2 Token Introspection.
- DefaultOAuth2TokenIntrospectionConfiguration() - Constructor for class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenIntrospectionConfiguration
-
Constructor.
- DefaultOAuth2TokenIntrospectionConfiguration(String) - Constructor for class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenIntrospectionConfiguration
-
Creates a new configuration instance.
- DefaultOAuth2TokenRevocationConfiguration - Class in net.shibboleth.oidc.profile.oauth2.config.impl
-
Implementation of a profile configuration for OAuth2 Token Revocation.
- DefaultOAuth2TokenRevocationConfiguration() - Constructor for class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenRevocationConfiguration
-
Constructor.
- DefaultOAuth2TokenRevocationConfiguration(String) - Constructor for class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenRevocationConfiguration
-
Creates a new configuration instance.
- DefaultOIDCAuthorizationConfiguration - Class in net.shibboleth.oidc.profile.config.impl
-
Implementation of a profile configuration for the OpenID Connect authorization endpoint.
- DefaultOIDCAuthorizationConfiguration() - Constructor for class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Constructor.
- DefaultOIDCAuthorizationConfiguration(String) - Constructor for class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Creates a new configuration instance.
- DefaultOIDCDynamicRegistrationConfiguration - Class in net.shibboleth.oidc.profile.config.impl
-
Implemenation of a profile configuration for the OpenID Connect dynamic client registration.
- DefaultOIDCDynamicRegistrationConfiguration() - Constructor for class net.shibboleth.oidc.profile.config.impl.DefaultOIDCDynamicRegistrationConfiguration
-
Constructor.
- DefaultOIDCDynamicRegistrationConfiguration(String) - Constructor for class net.shibboleth.oidc.profile.config.impl.DefaultOIDCDynamicRegistrationConfiguration
-
Creates a new configuration instance.
- DefaultOIDCLogoutConfiguration - Class in net.shibboleth.oidc.profile.config.impl
-
Implementation of a profile configuration for the OpenID Connect logout.
- DefaultOIDCLogoutConfiguration() - Constructor for class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
-
Constructor.
- DefaultOIDCLogoutConfiguration(String) - Constructor for class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
-
Creates a new configuration instance.
- DefaultOIDCProviderInformationConfiguration - Class in net.shibboleth.oidc.profile.config.impl
-
Implementation of a profile configuration for the OpenID Connect Provider Configuration.
- DefaultOIDCProviderInformationConfiguration() - Constructor for class net.shibboleth.oidc.profile.config.impl.DefaultOIDCProviderInformationConfiguration
-
Constructor.
- DefaultOIDCProviderInformationConfiguration(String) - Constructor for class net.shibboleth.oidc.profile.config.impl.DefaultOIDCProviderInformationConfiguration
-
Creates a new configuration instance.
- DefaultOIDCProviderMetadataCriteriaToIdentifierStrategy - Class in net.shibboleth.oidc.metadata.cache.impl
-
Strategy for extracting the
IssuerIDCriterionfrom aCriteriaSet. - DefaultOIDCProviderMetadataCriteriaToIdentifierStrategy() - Constructor for class net.shibboleth.oidc.metadata.cache.impl.DefaultOIDCProviderMetadataCriteriaToIdentifierStrategy
- DefaultOIDCProviderMetadataExpirationTimeStrategy - Class in net.shibboleth.oidc.metadata.cache.impl
-
Strategy for computing an expiry time for
OIDCProviderMetadata. - DefaultOIDCProviderMetadataExpirationTimeStrategy() - Constructor for class net.shibboleth.oidc.metadata.cache.impl.DefaultOIDCProviderMetadataExpirationTimeStrategy
- DefaultOIDCProviderMetadataIdentifierExtractionStrategy - Class in net.shibboleth.oidc.metadata.cache.impl
-
Strategy for finding the Issuer of the given OIDCProviderMetadata.
- DefaultOIDCProviderMetadataIdentifierExtractionStrategy() - Constructor for class net.shibboleth.oidc.metadata.cache.impl.DefaultOIDCProviderMetadataIdentifierExtractionStrategy
- DefaultOIDCProviderMetadataParsingStrategy - Class in net.shibboleth.oidc.metadata.cache.impl
-
Parse a raw byte array into a *single* OIDCProviderMetadata object.
- DefaultOIDCProviderMetadataParsingStrategy() - Constructor for class net.shibboleth.oidc.metadata.cache.impl.DefaultOIDCProviderMetadataParsingStrategy
- DefaultOIDCPublishKeySetConfiguration - Class in net.shibboleth.oidc.profile.config.impl
-
Implementation of a profile configuration for publishing OP key set.
- DefaultOIDCPublishKeySetConfiguration() - Constructor for class net.shibboleth.oidc.profile.config.impl.DefaultOIDCPublishKeySetConfiguration
-
Constructor.
- DefaultOIDCPublishKeySetConfiguration(String) - Constructor for class net.shibboleth.oidc.profile.config.impl.DefaultOIDCPublishKeySetConfiguration
-
Creates a new configuration instance.
- DefaultOIDCUserInfoConfiguration - Class in net.shibboleth.oidc.profile.config.impl
-
Implementation of a profile configuration for the OpenID Connect core protocol userinfo endpoint.
- DefaultOIDCUserInfoConfiguration() - Constructor for class net.shibboleth.oidc.profile.config.impl.DefaultOIDCUserInfoConfiguration
-
Constructor.
- DefaultOIDCUserInfoConfiguration(String) - Constructor for class net.shibboleth.oidc.profile.config.impl.DefaultOIDCUserInfoConfiguration
-
Creates a new configuration instance.
- DefaultResourceLoadingStrategy - Class in net.shibboleth.oidc.metadata.cache.impl
-
Default strategy for loading information from a resource.
- DefaultResourceLoadingStrategy(Resource) - Constructor for class net.shibboleth.oidc.metadata.cache.impl.DefaultResourceLoadingStrategy
-
Constructor.
- defaultResponseMode - Variable in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
-
The default response mode for the given response_type.
- defaultResultOnWrongType - Variable in class net.shibboleth.oidc.metadata.AbstractEvaluableMetadataCriterion
-
What should the default return type be if the wrong type is supplied.
- DefaultSourceMetadataExpirationTimeStrategy - Class in net.shibboleth.oidc.metadata.cache.impl
-
Simple strategy for computing an expiry time by adding an expiry duration to the current time.
- DefaultSourceMetadataExpirationTimeStrategy(Duration) - Constructor for class net.shibboleth.oidc.metadata.cache.impl.DefaultSourceMetadataExpirationTimeStrategy
-
Constructor.
- defaultStatusCode - Variable in class net.shibboleth.oidc.profile.impl.AbstractBuildErrorResponseFromEvent
-
The status code for unmapped events.
- defaultValue - Variable in class net.shibboleth.oidc.metadata.policy.MetadataPolicy.Builder
-
The default value for the claim to be used in case none is specified.
- defaultValue - Variable in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
-
The default value for the claim to be used in case none is specified.
- DefaultWellKnownPathCompositionStrategy() - Constructor for class net.shibboleth.oidc.metadata.impl.HTTPProviderConfigurationFetchingStrategy.DefaultWellKnownPathCompositionStrategy
- DeniedUserInfoAttributesLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
A function that obtains
OIDCAuthorizationConfiguration.getDeniedUserInfoAttributes(ProfileRequestContext)orOIDCUserInfoConfiguration.getDeniedUserInfoAttributes(ProfileRequestContext)if such a profile is available from aRelyingPartyContextobtained via a lookup function, by default a child of theProfileRequestContext. - DeniedUserInfoAttributesLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.DeniedUserInfoAttributesLookupFunction
- deniedUserInfoAttributesLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Lookup function to supply attribute IDs to omit from UserInfo token.
- deniedUserInfoAttributesLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCUserInfoConfiguration
-
Lookup function to supply attribute IDs to omit from UserInfo token.
- deriveClientSecretCredential(ClientSecretCredential, CriteriaSet) - Method in class net.shibboleth.oidc.security.credential.impl.BasicJOSEObjectCredentialResolver
-
Use the usage type and algorithm information in the criteria to build a suitable signing or encryption credential.
- deriveSymmetricKeyForAlgAndEnc(JWKCredential, JWEAlgorithm, EncryptionMethod) - Static method in class net.shibboleth.oidc.security.credential.JWKCredentialSupport
-
Derive a *new* symmetric key credential suitable for the given 'alg' and 'enc' algorithms.
- destroyClientInformation(ClientID) - Method in interface net.shibboleth.oidc.metadata.ClientInformationManager
-
Invalidates or otherwise removes a
ClientInformationfrom persistent storage. - destroyClientInformation(ClientID) - Method in class net.shibboleth.oidc.metadata.impl.StorageServiceClientInformationManager
-
Invalidates or otherwise removes a
ClientInformationfrom persistent storage. - display - Variable in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
-
ASCII string value that specifies how the Authorization Server displays the authentication and consent user interface pages to the End-User.
- displayLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Lookup function to determine the optional display parameter value of an authentication request.
- doCreateInstance() - Method in class net.shibboleth.oidc.security.credential.BasicClientSecretCredentialFactoryBean
- doCreateInstance() - Method in class net.shibboleth.oidc.security.credential.BasicExpiringJWTSharedSecretCredentialFactoryBean
- doCreateInstance() - Method in class net.shibboleth.oidc.security.credential.BasicJWKCredentialFactoryBean
- doDecode() - Method in class net.shibboleth.oidc.profile.decoding.impl.HTTPPostAuthnResponseDecoder
- doDecode() - Method in class net.shibboleth.oidc.profile.decoding.impl.HTTPRedirectAuthnResponseDecoder
- doDecode(ProfileRequestContext, JSONObject, TranscodingRule) - Method in class net.shibboleth.oidc.attribute.transcoding.AbstractOIDCAttributeTranscoder
- doDestroy() - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
- doDestroy() - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
- doDestroy() - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver
- doDestroy() - Method in class net.shibboleth.oidc.metadata.impl.ChainingClientInformationResolver
- doDestroy() - Method in class net.shibboleth.oidc.metadata.impl.ChainingProviderMetadataResolver
- doDestroy() - Method in class net.shibboleth.oidc.metadata.impl.PropertiesClientSecretValueResolver
- doDestroy() - Method in class net.shibboleth.oidc.metadata.impl.ResolverServiceClientSecretValueResolver
- doEncode() - Method in class net.shibboleth.oidc.profile.encoding.impl.HTTPPostAuthnRequestEncoder
- doEncode() - Method in class net.shibboleth.oidc.profile.encoding.impl.HTTPRedirectAuthnRequestEncoder
- doEncode() - Method in class net.shibboleth.oidc.profile.encoding.impl.SimpleNimbusResponseEncoder
- doEncode(ProfileRequestContext, IdPAttribute, Class<? extends JSONObject>, TranscodingRule) - Method in class net.shibboleth.oidc.attribute.transcoding.AbstractOIDCAttributeTranscoder
- doExecute(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.impl.AbstractBuildErrorResponseFromEvent
- doExecute(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.impl.FormOutboundKeySetResponseMessage
- doExecute(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTDecryptionParameters
- doExecute(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
- doExecute(ProfileRequestContext) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration
- doExecute(ProfileRequestContext) - Method in class net.shibboleth.oidc.security.impl.DecryptJWE
- doInitialize() - Method in class net.shibboleth.oidc.jwk.RemoteJwkSetCache
- doInitialize() - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
- doInitialize() - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
- doInitialize() - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
- doInitialize() - Method in class net.shibboleth.oidc.metadata.cache.impl.FetchThroughMetadataCache
- doInitialize() - Method in class net.shibboleth.oidc.metadata.impl.AbstractDynamicHTTPFetchingStrategy
- doInitialize() - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver
- doInitialize() - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver
- doInitialize() - Method in class net.shibboleth.oidc.metadata.impl.BaseStorageServiceClientInformationComponent
-
This method checks to ensure that the
StorageServiceback-end is not null. - doInitialize() - Method in class net.shibboleth.oidc.metadata.impl.ChainingClientInformationResolver
- doInitialize() - Method in class net.shibboleth.oidc.metadata.impl.ChainingProviderMetadataResolver
- doInitialize() - Method in class net.shibboleth.oidc.metadata.impl.FilesystemClientInformationResolver
- doInitialize() - Method in class net.shibboleth.oidc.metadata.impl.PropertiesClientSecretValueResolver
- doInitialize() - Method in class net.shibboleth.oidc.metadata.impl.ResolverServiceClientSecretValueResolver
- doInitialize() - Method in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyOperator
- doInitialize() - Method in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyResponseHandler
- doInitialize() - Method in class net.shibboleth.oidc.metadata.policy.impl.MetadataPolicyViaLocationFetchingStrategy
- doInitialize() - Method in class net.shibboleth.oidc.metadata.ProviderMetadataProviderContainer
- doInitialize() - Method in class net.shibboleth.oidc.metadata.RelyingPartyClientInformationProvider
- doInitialize() - Method in class net.shibboleth.oidc.profile.audit.impl.AbstractClaimsSetAuditExtractor
- doInitialize() - Method in class net.shibboleth.oidc.profile.encoding.impl.OIDCResponseEncoderFactory
- doInitialize() - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTDecryptionParameters
- doInitialize() - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
- doInitialize() - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParameters
- doInitialize() - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
- doInitialize() - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureValidationParameters
- doInitialize() - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureValidationParametersHandler
- doInitialize() - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration
- doInitialize() - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler
- doInitialize() - Method in class net.shibboleth.oidc.security.impl.DecryptJWE
- doInitialize() - Method in class net.shibboleth.oidc.security.impl.EncryptJWTHandler
- doInitialize() - Method in class net.shibboleth.oidc.security.impl.JWTMessageSignatureSecurityHandler
- doInitialize() - Method in class net.shibboleth.oidc.security.impl.SignJWTHandler
- doInitialize() - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AccessTokenHashValidator
- doInitialize() - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ACRClaimsValidator
- doInitialize() - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AudienceClaimsValidator
- doInitialize() - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ChainingJWTClaimsValidator
- doInitialize() - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ExactMatchClaimsValidator
- doInitialize() - Method in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierClaimsValidator
- doInitialize() - Method in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierRevocationValidator
- doInvoke(MessageContext) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
- doInvoke(MessageContext) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureValidationParametersHandler
- doInvoke(MessageContext) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler
- doInvoke(MessageContext) - Method in class net.shibboleth.oidc.security.impl.EncryptJWTHandler
- doInvoke(MessageContext) - Method in class net.shibboleth.oidc.security.impl.JWTMessageSignatureSecurityHandler
- doInvoke(MessageContext) - Method in class net.shibboleth.oidc.security.impl.SignJWTHandler
- doLookup(ClaimsSet) - Method in class net.shibboleth.oidc.profile.audit.impl.AbstractClaimsSetAuditExtractor
-
Implemented to perform the actual lookup.
- doLookup(ClaimsSet) - Method in class net.shibboleth.oidc.profile.audit.impl.DateBasedJWTClaimAuditExtractor
-
Implemented to perform the actual lookup.
- doLookup(ClaimsSet) - Method in class net.shibboleth.oidc.profile.audit.impl.StringBasedJWTClaimAuditExtractor
-
Implemented to perform the actual lookup.
- doLookup(ClaimsSet) - Method in class net.shibboleth.oidc.profile.audit.impl.StringListBasedJWTClaimAuditExtractor
-
Implemented to perform the actual lookup.
- doMergeForTwoLists(List<?>, List<?>, boolean) - Static method in class net.shibboleth.oidc.metadata.policy.impl.MetadataPolicyHelper
-
Merges two metadata policy list values.
- doMergeForTwoObjects(Object, Object, boolean) - Static method in class net.shibboleth.oidc.metadata.policy.impl.MetadataPolicyHelper
-
Merges two metadata policy values that can be either single valued or lists.
- doParse(Element, ParserContext, Map<String, Object>) - Method in class net.shibboleth.oidc.attribute.resolver.spring.enc.impl.BaseOIDCAttributeEncoderParser
- doParse(Element, ParserContext, Map<String, Object>) - Method in class net.shibboleth.oidc.attribute.resolver.spring.enc.impl.OIDCScopedStringEncoderParser
- doParse(Element, ParserContext, Map<String, Object>) - Method in class net.shibboleth.oidc.attribute.resolver.spring.enc.impl.OIDCStringEncoderParser
- doParse(Element, ParserContext, BeanDefinitionBuilder) - Method in class net.shibboleth.oidc.profile.spring.relyingparty.metadata.filter.impl.ClientInformationParser
- doPostEncode(OIDCAuthenticationRequest, HttpServletResponse) - Method in class net.shibboleth.oidc.profile.encoding.impl.HTTPPostAuthnRequestEncoder
-
Construct form POST.
- doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.impl.AbstractBuildErrorResponseFromEvent
- doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.impl.FormOutboundKeySetResponseMessage
- doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
- doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParameters
- doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration
- doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.oidc.security.impl.DecryptJWE
- doPreInvoke(MessageContext) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
- doPreInvoke(MessageContext) - Method in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler
- doPreInvoke(MessageContext) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler
- doPreInvoke(MessageContext) - Method in class net.shibboleth.oidc.security.impl.EncryptJWTHandler
- doPreInvoke(MessageContext) - Method in class net.shibboleth.oidc.security.impl.JWTMessageSignatureSecurityHandler
- doPreInvoke(MessageContext) - Method in class net.shibboleth.oidc.security.impl.SignJWTHandler
- doTest(T) - Method in class net.shibboleth.oidc.metadata.AbstractEvaluableMetadataCriterion
-
Evaluates the predicate on the given argument.
- doValidate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.jwt.claims.AbstractClaimsValidator
-
Perform validation of the given claims supported by the supplied context.
- doValidate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AccessTokenHashValidator
- doValidate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ACRClaimsValidator
- doValidate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AudienceClaimsValidator
-
Perform validation of the given claims supported by the supplied context.
- doValidate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationTimeClaimsValidator
- doValidate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ExactMatchClaimsValidator
-
Perform validation of the given claims supported by the supplied context.
- doValidate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ExpiryClaimsValidator
-
Perform validation of the given claims supported by the supplied context.
- doValidate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.FunctionClaimsValidator
-
Perform validation of the given claims supported by the supplied context.
- doValidate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.IssuedAtClaimsValidator
-
Perform validation of the given claims supported by the supplied context.
- doValidate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierClaimsValidator
-
Perform validation of the given claims supported by the supplied context.
- doValidate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierRevocationValidator
-
Perform validation of the given claims supported by the supplied context.
- doValidate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.NotBeforeClaimsValidator
-
Perform validation of the given claims supported by the supplied context.
- doValidate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ProhibitedClaimsValidator
-
Perform validation of the given claims supported by the supplied context.
- doValidate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.RequiredClaimsValidator
-
Perform validation of the given claims supported by the supplied context.
- doValidate(SignedJWT, CriteriaSet) - Method in class net.shibboleth.oidc.security.impl.BaseSignedJWTTrustEngine
-
Validate the signed JWT using the supplied trust criteria.
- doValidate(SignedJWT, CriteriaSet) - Method in class net.shibboleth.oidc.security.impl.ClientInformationJWTTrustEngine
-
Validate the signed JWT using the supplied trust criteria.
- doValidate(SignedJWT, CriteriaSet) - Method in class net.shibboleth.oidc.security.impl.ExplicitKeySignedJWTTrustEngine
-
Validate the signed JWT using the supplied trust criteria.
- doValidate(SignedJWT, CriteriaSet) - Method in class net.shibboleth.oidc.security.impl.TokenAsymmetricKeyTrustEngine
- doValueChecks(Object, MetadataPolicy) - Method in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyEnforcer
-
Runs the value check operators for the candidate.
- DPoPProofClaimsValidatorLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
A function that obtains
OAuth2DPoPProofValidatingProfileConfiguration.getDpopProofClaimsValidator(ProfileRequestContext)if such a profile is available from aRelyingPartyContextobtained via a lookup function, by default a child of theProfileRequestContext. - DPoPProofClaimsValidatorLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.DPoPProofClaimsValidatorLookupFunction
- dpopProofClaimsValidatorLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Validation of JWT claims for DPoP proofs.
- DPoPProofNonceGeneratorLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
A function that obtains
OAuth2DPoPProofValidatingProfileConfiguration.getDpopProofNonceGenerator(ProfileRequestContext)if such a profile is available from aRelyingPartyContextobtained via a lookup function, by default a child of theProfileRequestContext. - DPoPProofNonceGeneratorLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.DPoPProofNonceGeneratorLookupFunction
- dpopProofNonceGeneratorLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Lookup function to retrieve nonce generator for DPoP proofs.
- DPoPProofSignatureValidationConfigurationLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
A function that obtains
OAuth2DPoPProofValidatingProfileConfiguration.getDpopProofSignatureValidationConfiguration(ProfileRequestContext)if such a profile is available from aRelyingPartyContextobtained via a lookup function, by default a child of theProfileRequestContext. - DPoPProofSignatureValidationConfigurationLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.DPoPProofSignatureValidationConfigurationLookupFunction
- dpopSignatureValidationConfigurationLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Validation of JWT signature of DPoP proofs.
- DynamicBackingStore<I,
T> - Interface in net.shibboleth.oidc.metadata -
A dynamic version of a
BackingStore. - DynamicMetadataCache<IdentifierType,
MetadataType> - Class in net.shibboleth.oidc.metadata.cache.impl -
A metadata cache implementation that supports 'read-through' semantics.
- DynamicMetadataCache(DynamicBackingStore<IdentifierType, MetadataType>) - Constructor for class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
-
Constructor.
- DynamicMetadataCache(DynamicBackingStore<IdentifierType, MetadataType>, ScheduledExecutorService) - Constructor for class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
-
Protected constructor.
- DynamicMetadataCache.ExpiredAndIdleMetadataCleanupTask - Class in net.shibboleth.oidc.metadata.cache.impl
-
Cleanup task that removes expired and idle metadata from the backing store.
- DynamicMetadataCacheBuilderSpec<IdentifierType,
MetadataType> - Class in net.shibboleth.oidc.metadata.cache.impl -
A specification for building a dynamic read-through metadata cache.
- DynamicMetadataCacheBuilderSpec() - Constructor for class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
-
Constructor.
- DynamicOIDCMetadataResolver<T> - Interface in net.shibboleth.oidc.metadata
-
Marker interface for
OIDCMetadataResolverimplementations which resolve metadata by dynamically querying for the requested data individually at the time of the resolution operation, for example by invoking a request to the well-known provider configuration endpoint.
E
- EmptyBackingStore<I,
T> - Class in net.shibboleth.oidc.metadata.impl -
A backing store which provides no functionality other than to return empty unmodifiable lists.
- EmptyBackingStore() - Constructor for class net.shibboleth.oidc.metadata.impl.EmptyBackingStore
- encAlgorithm - Variable in class net.shibboleth.oidc.security.credential.impl.DataEncryptionAlgorithmCriterion
-
Key algorithm type of resolved credentials.
- encodeConsentInTokensPredicate - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Whether to encode consent in authorization code and access/refresh tokens.
- EncodeConsentPredicate - Class in net.shibboleth.oidc.profile.config.logic
-
A predicate implementation that forwards to
OIDCAuthorizationConfiguration.isEncodeConsentInTokens(ProfileRequestContext). - EncodeConsentPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.EncodeConsentPredicate
- EncodedAttributesLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
A function that obtains
OIDCAuthorizationConfiguration.getEncodedAttributes(ProfileRequestContext)if such a profile is available from aRelyingPartyContextobtained via a lookup function, by default a child of theProfileRequestContext. - EncodedAttributesLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.EncodedAttributesLookupFunction
- encodedAttributesLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Lookup function to supply attribute IDs to embed in authorization code or access token.
- encoders - Variable in class net.shibboleth.oidc.profile.impl.AuthenticationRequestMessageEncoderFactory
-
The list of message encoders to choose from.
- encodeValues(ProfileRequestContext, IdPAttribute, TranscodingRule) - Method in class net.shibboleth.oidc.attribute.transcoding.AbstractOIDCAttributeTranscoder
-
Performs encoding of
IdPAttribute's values based on rule into a claim value. - encodeValues(ProfileRequestContext, IdPAttribute, TranscodingRule) - Method in class net.shibboleth.oidc.attribute.transcoding.impl.OIDCByteAttributeTranscoder
-
Performs encoding of
IdPAttribute's values based on rule into a claim value. - encodeValues(ProfileRequestContext, IdPAttribute, TranscodingRule) - Method in class net.shibboleth.oidc.attribute.transcoding.impl.OIDCScopedStringAttributeTranscoder
-
Performs encoding of
IdPAttribute's values based on rule into a claim value. - encodeValues(ProfileRequestContext, IdPAttribute, TranscodingRule) - Method in class net.shibboleth.oidc.attribute.transcoding.impl.OIDCStringAttributeTranscoder
-
Performs encoding of
IdPAttribute's values based on rule into a claim value. - encParamsresolver - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
-
Resolver for parameters to store into context.
- ENCRYPTED_ID_TOKEN - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
-
The flag whether the id_token is encrypted.
- encryptedJwt - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration
-
The extracted encrypted JWT that is to be processed.
- encryptedJwt - Variable in class net.shibboleth.oidc.security.impl.DecryptJWE
-
The extracted encrypted JWT that is to be validated.
- EncryptionA128CBCHS256 - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
-
Algorithm descriptor for block encryption algorithm: A128CBC-HS256.
- EncryptionA128CBCHS256() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA128CBCHS256
- EncryptionA128GCM - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
-
Algorithm descriptor for block encryption algorithm: 128GCM.
- EncryptionA128GCM() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA128GCM
- EncryptionA192CBCHS384 - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
-
Algorithm descriptor for block encryption algorithm: A192CBC-HS384.
- EncryptionA192CBCHS384() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA192CBCHS384
- EncryptionA192GCM - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
-
Algorithm descriptor for block encryption algorithm: 192GCM.
- EncryptionA192GCM() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA192GCM
- EncryptionA256CBCHS512 - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
-
Algorithm descriptor for block encryption algorithm: A256CBC-HS512.
- EncryptionA256CBCHS512() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA256CBCHS512
- EncryptionA256GCM - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
-
Algorithm descriptor for block encryption algorithm: 256GCM.
- EncryptionA256GCM() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA256GCM
- EncryptionConfiguration - Interface in net.shibboleth.oidc.security.jose
-
The configuration information to use when generating a JWE.
- EncryptionConfigurationCriterion - Class in net.shibboleth.oidc.security.jose.criterion
-
Criterion which holds one or more instances of
EncryptionConfigurationCriterion. - EncryptionConfigurationCriterion(List<EncryptionConfiguration>) - Constructor for class net.shibboleth.oidc.security.jose.criterion.EncryptionConfigurationCriterion
-
Constructor.
- EncryptionConfigurationCriterion(EncryptionConfiguration...) - Constructor for class net.shibboleth.oidc.security.jose.criterion.EncryptionConfigurationCriterion
-
Constructor.
- EncryptionConstants - Class in net.shibboleth.oidc.jwa.support
-
Algorithm Header Parameter 'enc' Values for JWE as defined by RFC 7518.
- EncryptionConstants() - Constructor for class net.shibboleth.oidc.jwa.support.EncryptionConstants
-
Constructor.
- encryptionContext - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
-
Context to populate.
- encryptionOptional - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
-
Whether encryption is optional.
- encryptionOptional - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration
-
Whether encryption is optional.
- encryptionOptionalPredicate - Variable in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Whether encryption is optional in the face of no key, etc.
- encryptionOptionalPredicate - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
-
Whether encryption is optional in the face of no key, etc.
- encryptionOptionalPredicate - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCUserInfoConfiguration
-
Whether encryption is optional in the face of no key, etc.
- encryptionOptionalPredicate - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
-
Predicate to determine how to proceed if no encryption parameters are resolved.
- encryptionOptionalPredicate - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
-
Whether encryption is optional in the face of no key, etc.
- encryptionOptionalPredicate - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration
-
Predicate to determine how to proceed if JWT token was not encrypted.
- EncryptionOptionalPredicate - Class in net.shibboleth.oidc.profile.config.logic
-
A predicate implementation that forwards to
OAuth2TokenEncryptionProfileConfiguration.isEncryptionOptional(ProfileRequestContext). - EncryptionOptionalPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.EncryptionOptionalPredicate
- encryptionParameters - Variable in class net.shibboleth.oidc.security.impl.EncryptJWTHandler
-
The signature signing parameters.
- encryptionParameters - Variable in class net.shibboleth.oidc.security.jose.context.SecurityParametersContext
-
Encryption parameters.
- EncryptionParameters - Class in net.shibboleth.oidc.security.jose
-
The effective parameters to use when generating encrypted JWTs.
- EncryptionParameters() - Constructor for class net.shibboleth.oidc.security.jose.EncryptionParameters
- EncryptionParametersResolver - Interface in net.shibboleth.oidc.security.jose
-
An interface for components which resolve
EncryptionParametersbased on aCriteriaSet. - EncryptJWTHandler - Class in net.shibboleth.oidc.security.impl
-
A
MessageHandlerthat encrypts a JWT using theEncryptionParametersfound in theSecurityParametersContext. - EncryptJWTHandler() - Constructor for class net.shibboleth.oidc.security.impl.EncryptJWTHandler
-
Constructor.
- encryptRequestObjectPredicate - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Predicate used to determine if the generated request object should be encrypted.
- EncryptRequestObjectPredicate - Class in net.shibboleth.oidc.profile.config.logic
-
A predicate that determines if the RequestObject JWT should be encrypted based on the profile configuration.
- EncryptRequestObjectPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.EncryptRequestObjectPredicate
- endpointReplacement - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationAudienceClaimsValidator
-
The replacement substring for the endpoint containing any ones configured at
AuthenticationAudienceClaimsValidator.endpointTargets. - endpointTargets - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationAudienceClaimsValidator
-
The substrings to replace from resolved endpoint with one configured at
AuthenticationAudienceClaimsValidator.endpointReplacement. - endpointURI - Variable in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
-
The request endpoint.
- enforceRefreshTokenRotationPredicate - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
-
Whether always revoke the refresh_token after it's used.
- EnforceRefreshTokenRotationPredicate - Class in net.shibboleth.oidc.profile.config.logic
-
A predicate implementation that forwards to
OAuth2TokenConfiguration.isEnforceRefreshTokenRotation(ProfileRequestContext). - EnforceRefreshTokenRotationPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.EnforceRefreshTokenRotationPredicate
- equals(Object) - Method in class net.shibboleth.oidc.authn.principal.AuthenticationContextClassReferencePrincipal
- equals(Object) - Method in class net.shibboleth.oidc.metadata.criterion.ClientIDCriterion
- equals(Object) - Method in class net.shibboleth.oidc.metadata.criterion.ClientSecretReferenceCriterion
- equals(Object) - Method in class net.shibboleth.oidc.metadata.criterion.IssuerIDCriterion
- equals(Object) - Method in class net.shibboleth.oidc.metadata.criterion.ResourceLocationCriterion
- equals(Object) - Method in class net.shibboleth.oidc.metadata.ProviderMetadataProviderContainer
-
.
- equals(Object) - Method in class net.shibboleth.oidc.metadata.RelyingPartyClientInformationProvider
-
.
- equals(Object) - Method in class net.shibboleth.oidc.security.credential.impl.DataEncryptionAlgorithmCriterion
- equals(Object) - Method in class net.shibboleth.oidc.security.credential.impl.EvaluableKeyIDCredentialCriterion
- equals(Object) - Method in class net.shibboleth.oidc.security.credential.impl.EvaluableMACKeyLengthCredentialCriterion
- equals(Object) - Method in class net.shibboleth.oidc.security.credential.impl.KeyManagmentAlgorithmCriterion
- equals(Object) - Method in class net.shibboleth.oidc.security.jose.criterion.ClientSecretCredentialCriterion
- equals(Object) - Method in class net.shibboleth.oidc.security.jose.criterion.DecryptionConfigurationCriterion
- equals(Object) - Method in class net.shibboleth.oidc.security.jose.criterion.EncryptionConfigurationCriterion
- equals(Object) - Method in class net.shibboleth.oidc.security.jose.criterion.JOSEObjectCriterion
- equals(Object) - Method in class net.shibboleth.oidc.security.jose.criterion.JWKSetCriterion
- equals(Object) - Method in class net.shibboleth.oidc.security.jose.criterion.KeyIdCriterion
- equals(Object) - Method in class net.shibboleth.oidc.security.jose.criterion.ProviderMetadataCriterion
- equals(Object) - Method in class net.shibboleth.oidc.security.jose.criterion.SignatureSigningConfigurationCriterion
- equals(Object) - Method in class net.shibboleth.oidc.security.jose.criterion.SignatureValidationConfigurationCriterion
- equals(Object) - Method in class net.shibboleth.oidc.security.jose.criterion.SignatureValidationParametersCriterion
- error - Variable in class net.shibboleth.oidc.profile.messaging.JSONErrorResponse
-
Error object.
- errorEventId - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration
-
Event identifier to publish if token parameters are not compliant with the configuration.
- errorEventId - Variable in class net.shibboleth.oidc.security.impl.DecryptJWE
-
Event identifier to publish in the case of decryption errors.
- errorHandlingWrapper(Runnable) - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
-
Create a wrapper for runnables that catches any throwable and logs it.
- essential - Variable in class net.shibboleth.oidc.metadata.policy.MetadataPolicy.Builder
-
The flag indicating that the claim must have a value.
- essential - Variable in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
-
The flag indicating that the claim must have a value.
- EvaluableKeyIDCredentialCriterion - Class in net.shibboleth.oidc.security.credential.impl
-
Instance of evaluable credential criteria for evaluating credential key IDs.
- EvaluableKeyIDCredentialCriterion(String) - Constructor for class net.shibboleth.oidc.security.credential.impl.EvaluableKeyIDCredentialCriterion
-
Constructor.
- EvaluableKeyIDCredentialCriterion(KeyIdCriterion) - Constructor for class net.shibboleth.oidc.security.credential.impl.EvaluableKeyIDCredentialCriterion
-
Constructor.
- EvaluableMACKeyLengthCredentialCriterion - Class in net.shibboleth.oidc.security.credential.impl
-
Instance of evaluable credential criteria for evaluating if the key length of the secret key inside the credential is compatible with the MAC algorithm given.
- EvaluableMACKeyLengthCredentialCriterion(JWSAlgorithm) - Constructor for class net.shibboleth.oidc.security.credential.impl.EvaluableMACKeyLengthCredentialCriterion
-
Constructor.
- evaluateTrust(Credential, Iterable<Credential>) - Method in class net.shibboleth.oidc.security.impl.ExplicitKeySignedJWTTrustEngine
-
Evaluate the untrusted KeyInfo-derived credential with respect to the specified trusted information.
- evaluateTrust(Credential, Credential) - Method in class net.shibboleth.oidc.security.impl.TokenAsymmetricKeyTrustEngine
- evaluateTrust(Credential, TrustBasisType) - Method in class net.shibboleth.oidc.security.impl.BaseSignedJWTTrustEngine
-
Evaluate the untrusted KeyInfo-derived credential with respect to the specified trusted information.
- eventContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.AbstractBuildErrorResponseFromEvent
-
Strategy function for access to
EventContextto check. - ExactMatchClaimsValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl
-
Validator that checks a JWT claim exactly matches (by Object equality) a value returned by a lookup strategy.
- ExactMatchClaimsValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.ExactMatchClaimsValidator
- executorService - Variable in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
-
A single threaded executor service for running background cache tasks.
- existingParametersContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParameters
-
Strategy used to look up an existing
SecurityParametersContextto copy. - existingParametersContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
-
Strategy used to look up an existing
SecurityParametersContextto copy. - EXPIRATION_TIME_CLAIM - Enum constant in enum class net.shibboleth.oidc.security.jwt.claims.impl.JWTClaims
-
Expiration time on or after which the ID Token MUST NOT be accepted for processing.
- expirationTime - Variable in class net.shibboleth.oidc.metadata.MetadataManagementData
-
Expiration time of the associated metadata.
- ExpirationTimeContext<T> - Class in net.shibboleth.oidc.metadata.cache
-
Context to hold information pertaining to the computation of a metadata's expiration time.
- ExpirationTimeContext(T, Duration, Duration, Instant) - Constructor for class net.shibboleth.oidc.metadata.cache.ExpirationTimeContext
-
Constructor.
- ExpiredAndIdleMetadataCleanupTask() - Constructor for class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache.ExpiredAndIdleMetadataCleanupTask
- ExpiringJWKCredential - Interface in net.shibboleth.oidc.security.credential
-
A
credentialthat expires at some duration in seconds after 1970-01-01T0:0:0Z. - ExpiryClaimsValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl
-
Iff an expiration time (exp) claim is present, verifies that it is ahead of the current time, else the JWT claims set is rejected.
- ExpiryClaimsValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.ExpiryClaimsValidator
-
Constructor.
- expiryDuration - Variable in class net.shibboleth.oidc.metadata.cache.impl.DefaultSourceMetadataExpirationTimeStrategy
-
How long after now should the metadata expire.
- ExplicitKeySignedJWTTrustEngine - Class in net.shibboleth.oidc.security.impl
-
An implementation of
SignatureTrustEnginewhich evaluates the validity and trustworthiness of JWT signatures. - ExplicitKeySignedJWTTrustEngine(CredentialResolver, JOSEObjectCredentialResolver) - Constructor for class net.shibboleth.oidc.security.impl.ExplicitKeySignedJWTTrustEngine
-
Constructor.
- ExplicitKeyTrustEvaluator - Class in net.shibboleth.oidc.security.impl
-
Auxillary trust evaluator for evaluating an untrusted key or credential against a trusted key or credential.
- ExplicitKeyTrustEvaluator() - Constructor for class net.shibboleth.oidc.security.impl.ExplicitKeyTrustEvaluator
- extraAudienceValidation - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AudienceClaimsValidator
-
If enabled, any extra audience must be contained in the List returned from the additionalAudiencesLookupStrategy.
- extractKeyIdFromCriteria(CriteriaSet) - Method in class net.shibboleth.oidc.security.credential.impl.BasicJOSEObjectCredentialResolver
-
Extract a KeyId from the criteria set if one exists.
F
- failFastInitialization - Variable in class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver
-
Whether problems during initialization should cause the provider to fail or go on without metadata.
- failFastInitialization - Variable in class net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver
-
Whether problems during initialization should cause the provider to fail or go on without metadata.
- failIfResourceIsNull - Variable in class net.shibboleth.oidc.security.credential.BasicJWKCredentialFactoryBean
-
Should the factory throw an exception if the resource is null?.
- fetch(String, URI, String, Instant) - Method in class net.shibboleth.oidc.jwk.RemoteJwkSetCache
-
Returns remote JWK set if found from the cache, otherwise fetches and stores it.
- fetch(String, URI, Instant) - Method in class net.shibboleth.oidc.jwk.RemoteJwkSetCache
-
Returns remote JWK set if found from the cache, otherwise fetches and stores it.
- fetch(URI, String, Instant) - Method in class net.shibboleth.oidc.jwk.RemoteJwkSetCache
-
Returns remote JWK set if found from the cache, otherwise fetches and stores it.
- fetch(URI, Instant) - Method in class net.shibboleth.oidc.jwk.RemoteJwkSetCache
-
Returns remote JWK set if found from the cache, otherwise fetches and stores it.
- fetch(MetadataManagementData<IdentifierType>, IdentifierType, CriteriaSet) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
-
Fetch metadata using the supplied fetch function, then save it to the backing store.
- fetchAndStore(String, String, URI, Instant) - Method in class net.shibboleth.oidc.jwk.RemoteJwkSetCache
-
Fetches the remote JWK set from the given URI and stores it in the storage service.
- fetchMetadata() - Method in class net.shibboleth.oidc.metadata.impl.AbstractFileOIDCEntityResolver
-
Fetches metadata from a source.
- fetchMetadata() - Method in class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver
-
Fetches metadata from a source.
- fetchPolicyOperatorBean(MetadataPolicy) - Method in class net.shibboleth.oidc.metadata.policy.impl.BeanMetadataPolicyOperator
-
Fetch the bean from
ApplicationContextvia identifier set in the given policy. - fetchRemoteJwkSet(String, URI, HttpClient, HttpClientSecurityParameters) - Static method in class net.shibboleth.oidc.jwk.support.RemoteJwkUtils
-
Fetches the JWK set from the given URI using the given client and security parameters.
- fetchStrategy - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
-
The function to use to fetch/load metadata if either none exists, or the existing is stale.
- fetchStrategy - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
-
The function to use to fetch metadata if either none exists, or the existing is stale.
- fetchStrategy - Variable in class net.shibboleth.oidc.metadata.cache.impl.FetchThroughMetadataCache
-
The function to use to fetch/load metadata entries.
- fetchStrategy - Variable in class net.shibboleth.oidc.metadata.cache.impl.FetchThroughMetadataCacheBuilderSpec
-
The function to use to fetch metadata if either none exists, or the existing is stale.
- FetchThroughMetadataCache<IdentifierType,
MetadataType> - Class in net.shibboleth.oidc.metadata.cache.impl -
A
metadata cacheimplementation that does not support reading and writing to a backing store. - FetchThroughMetadataCache() - Constructor for class net.shibboleth.oidc.metadata.cache.impl.FetchThroughMetadataCache
-
Constructor.
- FetchThroughMetadataCacheBuilderSpec<IdentifierType,
MetadataType> - Class in net.shibboleth.oidc.metadata.cache.impl -
A specification for building a fetch-through metadata cache.
- FetchThroughMetadataCacheBuilderSpec() - Constructor for class net.shibboleth.oidc.metadata.cache.impl.FetchThroughMetadataCacheBuilderSpec
-
Constructor.
- FilesystemClientInformationResolver - Class in net.shibboleth.oidc.metadata.impl
-
An OIDC metadata provider that pulls client metadata from a file on the local filesystem.
- FilesystemClientInformationResolver(Timer, Resource) - Constructor for class net.shibboleth.oidc.metadata.impl.FilesystemClientInformationResolver
-
Constructor.
- FilesystemClientInformationResolver(Resource) - Constructor for class net.shibboleth.oidc.metadata.impl.FilesystemClientInformationResolver
-
Constructor.
- FilesystemProviderMetadataResolver - Class in net.shibboleth.oidc.metadata.impl
-
An OIDC metadata provider that pulls provider metadata from a file on the local filesystem.
- FilesystemProviderMetadataResolver(Timer, Resource) - Constructor for class net.shibboleth.oidc.metadata.impl.FilesystemProviderMetadataResolver
-
Constructor.
- FilesystemProviderMetadataResolver(Resource) - Constructor for class net.shibboleth.oidc.metadata.impl.FilesystemProviderMetadataResolver
-
Constructor.
- filter(T, MetadataFilterContext) - Method in interface net.shibboleth.oidc.metadata.filter.MetadataFilter
-
Filters the given metadata, perhaps to remove elements that are not wanted.
- FilterException - Exception in net.shibboleth.oidc.metadata.filter
-
An exception thrown during the evaluation of a
MetadataFilter. - FilterException() - Constructor for exception net.shibboleth.oidc.metadata.filter.FilterException
-
Constructor.
- FilterException(Exception) - Constructor for exception net.shibboleth.oidc.metadata.filter.FilterException
-
Constructor.
- FilterException(String) - Constructor for exception net.shibboleth.oidc.metadata.filter.FilterException
-
Constructor.
- FilterException(String, Exception) - Constructor for exception net.shibboleth.oidc.metadata.filter.FilterException
-
Constructor.
- filterForProviderSupportedAlgorithms(CriteriaSet, List<String>) - Method in class net.shibboleth.oidc.security.jose.impl.RelyingPartySigningParametersResolver
-
Filter the set of algorithms against the set supported by the OpenID Provider.
- findAlgorithmIntersection(List<String>, List<String>) - Method in class net.shibboleth.oidc.security.impl.AbstractEncryptionAlgorithmsLookupStrategy
-
Return a new list of algorithms that represents the set intersection of the two input algorithm lists.
- findCompatibleAlgorithmAndCredential(List<String>, List<Credential>, SignatureSigningParameters) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver
-
Loop through the algorithms and find the first compatible credential.
- FORCE_AUTHN - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
-
prompt=login requested field.
- ForceAuthnAuditExtractor - Class in net.shibboleth.oidc.profile.audit.impl
-
Functionthat returns true if the OIDC prompt is set as 'login' in the authentication request. - ForceAuthnAuditExtractor(Function<ProfileRequestContext, Object>) - Constructor for class net.shibboleth.oidc.profile.audit.impl.ForceAuthnAuditExtractor
-
Constructor.
- forceAuthnPredicate - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Whether to mandate forced authentication for the request.
- ForcedAuthenticationActivationCondition - Class in net.shibboleth.oidc.security.jwt.claims.impl
-
Has forced authentication been requested?
- ForcedAuthenticationActivationCondition() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.ForcedAuthenticationActivationCondition
- forcedValue - Variable in class net.shibboleth.oidc.metadata.policy.MetadataPolicy.Builder
-
The (forced) value for the claim.
- forcedValue - Variable in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
-
The (forced) value for the claim.
- forcePKCEPredicate - Variable in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Whether client is required to use PKCE.
- ForcePKCEPredicate - Class in net.shibboleth.oidc.profile.config.logic
-
A predicate implementation that forwards to
OIDCSSOProfileConfiguration.isForcePKCE(ProfileRequestContext). - ForcePKCEPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.ForcePKCEPredicate
- forFriendlyName - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
-
A friendly name to log as the subject of encryption parameter resolution.
- FormOutboundKeySetResponseMessage - Class in net.shibboleth.oidc.profile.impl
-
Action that forms outbound message containing keyset.
- FormOutboundKeySetResponseMessage() - Constructor for class net.shibboleth.oidc.profile.impl.FormOutboundKeySetResponseMessage
-
Constructor.
- freshLoad(List<MetadataType>) - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
-
Clear the backing store and load each metadata entry one at a time.
- FRONT_CHANNEL_LOGOUT_SESSION_REQUIRED_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Attribute local name.
- frontChannelLogoutSessionRequired - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Require front-channel logout session id flag for this entity.
- FrontChannelLogoutSuccessPredicate - Class in net.shibboleth.oidc.profile.config.logic
-
A predicate implementation that forwards to
OIDCLogoutProfileConfiguration.isFrontChannelSuccess(ProfileRequestContext). - FrontChannelLogoutSuccessPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.FrontChannelLogoutSuccessPredicate
- frontChannelSuccessPredicate - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
-
Whether to consider front-channel logout propagation successful.
- function - Variable in class net.shibboleth.oidc.profile.config.navigate.ProxyAwareDefaultOIDCAuthenticationContextClassResponseLookupFunction.LookupFunctionWrapper
-
A function used to map OIDC ACR/AMRs to Principals.
- FunctionClaimsValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl
-
A
ClaimsValidatorthat relies on an injectedBiFunction. - FunctionClaimsValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.FunctionClaimsValidator
G
- gaugeNumLiveIndexedMetadata - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
-
Metrics Gauge for the number of live indexed metadata.
- generateSymmetricKey(byte[], JWEAlgorithm, EncryptionMethod) - Static method in class net.shibboleth.oidc.security.credential.JWKCredentialSupport
-
Generate symmetric key from client_secret using the algorithms supplied.
- generateSymmetricKey(Secret, JWEAlgorithm, EncryptionMethod) - Static method in class net.shibboleth.oidc.security.credential.JWKCredentialSupport
-
Generate symmetric key from client_secret using the algorithms supplied.
- get(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
-
Get the list of metadata matching the given identifier.
- get(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
- get(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.cache.impl.FetchThroughMetadataCache
-
Get the list of metadata matching the given identifier.
- get(CriteriaSet) - Method in interface net.shibboleth.oidc.metadata.cache.MetadataCache
-
Get the list of metadata matching the given identifier.
- GET - Enum constant in enum class net.shibboleth.oidc.profile.oauth2.config.OAuth2AuthorizationProfileConfiguration.HttpRequestMethod
-
HTTP GET.
- getAccessTokenClaimsSetManipulationStrategy(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Get the bi-function for manipulating access token claims set.
- getAccessTokenClaimsSetManipulationStrategy(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
-
Get the bi-function for manipulating access token claims set.
- getAccessTokenClaimsSetManipulationStrategy(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2AccessTokenProducingProfileConfiguration
-
Get the bi-function for manipulating access token claims set.
- getAccessTokenLifetime(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Get access token lifetime.
- getAccessTokenLifetime(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
-
Get access token lifetime.
- getAccessTokenLifetime(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2AccessTokenProducingProfileConfiguration
-
Get access token lifetime.
- getAccessTokenType(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Get access token type.
- getAccessTokenType(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
-
Get access token type.
- getAccessTokenType(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2AccessTokenProducingProfileConfiguration
-
Get access token type.
- getAcrs() - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
-
Get the ACRs.
- getAdd() - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
-
Get the value(s) to be added for the claim.
- getAdditionalAudiencesForIdToken(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Get the set of audiences, in addition to the relying party(ies) to which the IdP is issuing the ID Token, with which the token may be shared.
- getAdditionalAudiencesForIdToken(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCIDTokenProducingProfileConfiguration
-
Get the set of audiences, in addition to the relying party(ies) to which the IdP is issuing the ID Token, with which the token may be shared.
- getAdditionalCriteria() - Method in class net.shibboleth.oidc.security.jose.DecryptionParameters
-
Get the criteria set to add additional criterion too.
- getAlgorithm() - Method in class net.shibboleth.oidc.security.credential.BasicJWKCredential
-
Get algorithm of JWK.
- getAlgorithm() - Method in class net.shibboleth.oidc.security.credential.impl.KeyManagmentAlgorithmCriterion
-
Get the algorithm criteria.
- getAlgorithm() - Method in interface net.shibboleth.oidc.security.credential.JWKCredential
-
Get algorithm of JWK.
- getAlgorithmRegistry() - Method in class net.shibboleth.oidc.security.impl.AbstractEncryptionAlgorithmsLookupStrategy
-
Get the algorithm registry.
- getAlgorithmRegistry() - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver
-
Get the
AlgorithmRegistryinstance used when resolving algorithm URIs. - getAlgorithmRegistry() - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
-
Get the
AlgorithmRegistryinstance used when resolving algorithm URIs. - getAlgorithmRuntimeSupportedPredicate() - Method in class net.shibboleth.oidc.security.impl.AbstractEncryptionAlgorithmsLookupStrategy
-
Get a predicate which evaluates whether a cryptographic algorithm is supported by the runtime environment.
- getAlgorithmRuntimeSupportedPredicate() - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver
-
Get a predicate which evaluates whether a cryptographic algorithm is supported by the runtime environment.
- getAlgorithmRuntimeSupportedPredicate() - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
-
Get a predicate which evaluates whether a cryptographic algorithm is supported by the runtime environment.
- getAlwaysIncludedAttributes(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Get the set of attribute IDs which should be included in the ID token regardless of response_type.
- getAlwaysIncludedAttributes(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCIDTokenProducingProfileConfiguration
-
Get the set of attribute IDs which should be included in the ID token regardless of response_type.
- getApplicationType() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Get the application type.
- getApplicationType() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Get the application type.
- getAttributeIds() - Method in class net.shibboleth.oidc.metadata.impl.ResolverServiceClientSecretValueResolver
-
Get the list of attribute IDs that may contain the resolved client secret values.
- getAttributeResolver() - Method in class net.shibboleth.oidc.metadata.impl.ResolverServiceClientSecretValueResolver
-
Get the attribute resolver service used for the client secret value resolution.
- getAuthenticationContextClassReferenceTranslationStrategy(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Get the function used to translate ACRs in the id_token into an appropriate set of custom
Principalobjects to populate into the subject. - getAuthenticationContextClassReferenceTranslationStrategy(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCAuthenticationProfileConfiguration
-
Get the function used to translate ACRs in the id_token into an appropriate set of custom
Principalobjects to populate into the subject. - getAuthenticationFlows(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
- getAuthenticationMethodsReferencesTranslationStrategy(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Get the function used to translate AMRs in the id_token into an appropriate set of custom
Principalobjects to populate into the subject. - getAuthenticationMethodsReferencesTranslationStrategy(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCAuthenticationProfileConfiguration
-
Get the function used to translate AMRs in the id_token into an appropriate set of custom
Principalobjects to populate into the subject. - getAuthnRequestTime() - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
-
Get the time at which this RP sent this authentication request to the OP.
- getAuthorizationCodeClaimsSetManipulationStrategy(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Get the bi-function for manipulating authorization code claims set.
- getAuthorizationCodeClaimsSetManipulationStrategy(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2AuthorizationCodeProducingProfileConfiguration
-
Get the bi-function for manipulating authorization code claims set.
- getAuthorizeCodeLifetime(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Get authz code lifetime.
- getAuthorizeCodeLifetime(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2AuthorizationCodeProducingProfileConfiguration
-
Get authz code lifetime.
- getBackingStore() - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
-
Get the backing store.
- getBackingStore() - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
-
Get the backing store.
- getBackingStore() - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
-
Get the backing store.
- getBackingStore() - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver
-
Get the entity backing store currently in use by the metadata resolver.
- getBeanClass(Element) - Method in class net.shibboleth.oidc.profile.spring.relyingparty.metadata.filter.impl.ClientInformationParser
- getCache() - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver
-
Get the metadata cache currently in use by the metadata resolver.
- getCacheId() - Method in class net.shibboleth.oidc.metadata.cache.impl.BaseMetadataCacheBuilderSpec
-
Get the cache identifier.
- getCipherMode() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA128CBCHS256
- getCipherMode() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA128GCM
- getCipherMode() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA192CBCHS384
- getCipherMode() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA192GCM
- getCipherMode() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA256CBCHS512
- getCipherMode() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA256GCM
- getCipherMode() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSA15
- getCipherMode() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP
- getCipherMode() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP256
- getCipherMode() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP384
- getCipherMode() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP512
- getClaimName() - Method in class net.shibboleth.oidc.profile.audit.impl.AbstractClaimsSetAuditExtractor
-
Get the claim name to extract.
- getClaimName() - Method in enum class net.shibboleth.oidc.security.jwt.claims.impl.IDTokenClaims
-
Get the registered claim name.
- getClaimName() - Method in enum class net.shibboleth.oidc.security.jwt.claims.impl.JWTClaims
-
Get the IANA registered claim name.
- getClaimsSetLookupStrategy() - Method in class net.shibboleth.oidc.profile.audit.impl.AbstractClaimsSetAuditExtractor
-
Get the claims set lookup strategy.
- getClaimsValidator(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Get the
ClaimsValidatorto apply to JWT-based client authentication. - getClaimsValidator(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2ClientAuthenticableProfileConfiguration
-
Get the
ClaimsValidatorto apply to JWT-based client authentication. - getCleanupTaskInterval() - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
-
Get the interval at which the cleanup task should run.
- getClientAuthentication() - Method in class net.shibboleth.oidc.authn.context.OAuth2ClientAuthenticationContext
-
Get the OAuth 2 client authentication credentials.
- getClientCredential(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Get the client credential for the given context.
- getClientCredential(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2ClientAuthenticableClientProfileConfiguration
-
Get the client credential for the given context.
- getClientId(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Get the client_id appropriate for the given context.
- getClientId(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2ClientAuthenticableClientProfileConfiguration
-
Get the client_id appropriate for the given context.
- getClientID() - Method in class net.shibboleth.oidc.metadata.criterion.ClientIDCriterion
-
Gets the client ID.
- getClientID() - Method in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
-
Get the client ID.
- getClientInformation() - Method in class net.shibboleth.oidc.metadata.context.OIDCMetadataContext
-
Get the client information.
- getClientInformation(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.ClientInformationSignatureSigningParametersResolver
-
Returns the client information from the given criteria set, if one was found.
- getClientSecret(XMLObject) - Method in class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.ClientSecretProvider
-
Get the ClientSecret from the passed XML object.
- getClientSecret(XMLObject) - Method in class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.ClientSecretReferenceProvider
-
Get the ClientSecretReferenceKey from the passed XML object.
- getClientUri() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Get the client URI.
- getClientUri() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Get the client URI.
- getCodeChallenge() - Method in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
-
Get the authorisation code_challenge (which was derived from the code_verifier) for Proof Key for Code Exchange.
- getCodeChallengeMethod() - Method in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
-
Get the code_challenge_method used to transform the code_verifier into a code_challenge.
- getCodeVerifier() - Method in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
-
Get the authorisation code_verifier for Proof Key for Code Exchange.
- getComponent() - Method in class net.shibboleth.oidc.metadata.ProviderMetadataProviderContainer
- getComponent() - Method in class net.shibboleth.oidc.metadata.RelyingPartyClientInformationProvider
- getConfigResources() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.XMLObjectProviderInitializer
- getConfigurations() - Method in class net.shibboleth.oidc.security.jose.criterion.DecryptionConfigurationCriterion
-
Get the list of configuration instances.
- getConfigurations() - Method in class net.shibboleth.oidc.security.jose.criterion.EncryptionConfigurationCriterion
-
Get the list of configuration instances.
- getConfigurations() - Method in class net.shibboleth.oidc.security.jose.criterion.SignatureSigningConfigurationCriterion
-
Get the list of configuration instances.
- getConfigurations() - Method in class net.shibboleth.oidc.security.jose.criterion.SignatureValidationConfigurationCriterion
-
Get the list of configuration instances.
- getContent() - Method in class net.shibboleth.oidc.profile.messaging.JSONErrorResponse
-
Error content as json.
- getContentEncryptionKeyCredentialResolver() - Method in interface net.shibboleth.oidc.security.jose.DecryptionConfiguration
-
Get the CredentialResolver to use when processing the encrypted content.
- getContentEncryptionKeyCredentialResolver() - Method in class net.shibboleth.oidc.security.jose.DecryptionParameters
-
Get the CredentialResolver to use when processing the encrypted content.
- getContentEncryptionKeyCredentialResolver() - Method in interface net.shibboleth.oidc.security.jose.EncryptionConfiguration
-
Get the CredentialResolver to resolve the content encryption key.
- getContentEncryptionKeyCredentialResolver() - Method in class net.shibboleth.oidc.security.jose.impl.BasicDecryptionConfiguration
- getContentEncryptionKeyCredentialResolver() - Method in class net.shibboleth.oidc.security.jose.impl.BasicEncryptionConfiguration
- getCredential() - Method in class net.shibboleth.oidc.security.jose.criterion.ClientSecretCredentialCriterion
-
The held credential.
- getCredentialExpiresAt() - Method in class net.shibboleth.oidc.security.credential.BasicExpiringJWKCredential
-
Time at which the client_secret will expire or 0 if it will not expire.
- getCredentialExpiresAt() - Method in interface net.shibboleth.oidc.security.credential.ExpiringJWKCredential
-
Time at which the client_secret will expire or 0 if it will not expire.
- getCredentialResolver() - Method in class net.shibboleth.oidc.security.impl.ExplicitKeySignedJWTTrustEngine
- getCredentialType() - Method in class net.shibboleth.oidc.security.credential.BasicJWKReferenceCredential
- getCredentialType() - Method in class net.shibboleth.oidc.security.credential.BasicNimbusSecretCredential
-
Deprecated.
- getCriteriaToIdentifierStrategy() - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
-
Get the identifier from criteria set extraction strategy.
- getCriteriaToIdentifierStrategy() - Method in class net.shibboleth.oidc.metadata.cache.impl.BaseMetadataCacheBuilderSpec
-
Get the criteria set to identifier lookup strategy.
- getCriterionPredicateRegistry() - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver
-
Get the registry used in resolving predicates from criteria.
- getCustomOperators() - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
-
Get the map of custom operators.
- getCustomRedirectUriValidationStrategy(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Get the bi-predicate for validating redirect URI in request to the current profile request context state.
- getCustomRedirectUriValidationStrategy(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCSSOProfileConfiguration
-
Get the bi-predicate for validating redirect URI in request to the current profile request context state.
- getDataEncryptionAlgorithm() - Method in class net.shibboleth.oidc.security.jose.EncryptionParameters
-
Get the encryption algorithm URI to use when encrypting the EncryptedData.
- getDataEncryptionAlgorithms() - Method in interface net.shibboleth.oidc.security.jose.EncryptionConfiguration
-
Get the list of preferred data encryption algorithm URIs, in preference order.
- getDataEncryptionAlgorithms() - Method in class net.shibboleth.oidc.security.jose.impl.BasicEncryptionConfiguration
-
Get the list of preferred data encryption algorithm URIs, in preference order.
- getDataEncryptionAlgorithmsFromConfiguration(CriteriaSet, Predicate<String>) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultDataEncryptionAlgorithmsLookupStrategy
-
Get the data encryption 'enc' algorithms from the
EncryptionConfigurationinside the criteria set. - getDataEncryptionCredential() - Method in class net.shibboleth.oidc.security.jose.EncryptionParameters
-
Get the encryption credential to use when encrypting the EncryptedData.
- getDecryptionParameters() - Method in class net.shibboleth.oidc.security.jose.context.SecurityParametersContext
-
Get the parameters to use for decryption operations.
- getDefaultAcrValues() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Get the list of default ACR values.
- getDefaultAcrValues() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Get the list of default ACR values.
- getDefaultAuthenticationMethods(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
- getDefaultMaxAge() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Get the value for default max age.
- getDefaultMaxAge() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Get the value for default max age.
- getDefaultResponseMode() - Method in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
-
Get the response_mode to use with this authentication request.
- getDefaultValue() - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
-
Get the default value for the claim to be used in case none is specified.
- getDeniedUserInfoAttributes(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Get the set of attribute IDs which should be omitted from the UserInfo token.
- getDeniedUserInfoAttributes(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCUserInfoConfiguration
- getDeniedUserInfoAttributes(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCAuthorizationConfiguration
-
Get the set of attribute IDs which should be omitted from the UserInfo token.
- getDeniedUserInfoAttributes(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCUserInfoConfiguration
-
Get the set of attribute IDs which should be omitted from the UserInfo token.
- getDigest() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureES256
- getDigest() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureES384
- getDigest() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureES512
- getDigest() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureHS256
- getDigest() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureHS384
- getDigest() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureHS512
- getDigest() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignaturePS256
- getDigest() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignaturePS384
- getDigest() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignaturePS512
- getDigest() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureRS256
- getDigest() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureRS384
- getDigest() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureRS512
- getDisplay() - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
-
Get the display.
- getDisplay(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Get the display parameter to use.
- getDisplay(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCAuthenticationProfileConfiguration
-
Get the display parameter to use.
- getDpopProofClaimsValidator(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Get the
ClaimsValidatorto apply to DPoP Proof JWTs being validated by this profile. - getDpopProofClaimsValidator(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2DPoPProofValidatingProfileConfiguration
-
Get the
ClaimsValidatorto apply to DPoP Proof JWTs being validated by this profile. - getDpopProofNonceGenerator(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Get the
Functionto create nonces to be used with DPoP Proof JWTs. - getDpopProofNonceGenerator(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2DPoPProofValidatingProfileConfiguration
-
Get the
Functionto create nonces to be used with DPoP Proof JWTs. - getDpopProofSignatureValidationConfiguration(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Get the
SignatureValidationConfigurationto be used for DPoP Proof JWT signature validation. - getDpopProofSignatureValidationConfiguration(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2DPoPProofValidatingProfileConfiguration
-
Get the
SignatureValidationConfigurationto be used for DPoP Proof JWT signature validation. - getEffectiveDataEncryptionCredentials(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
-
Get the effective list of data/content encryption credentials to consider.
- getEffectiveKeyTransportCredentials(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
-
Get the effective list of key transport credentials to consider.
- getEffectiveSignatureAlgorithms(CriteriaSet, Predicate<String>) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver
-
Get the effective list of signature algorithm URIs to consider, including application of include/exclude policy.
- getEffectiveSignatureAlgorithms(CriteriaSet, Predicate<String>) - Method in class net.shibboleth.oidc.security.jose.impl.ClientInformationSignatureSigningParametersResolver
-
Get the effective list of signature algorithm URIs to consider, including application of include/exclude policy.
- getEffectiveSigningCredentials(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver
-
Get the effective list of signing credentials to consider.
- getEffectiveSigningCredentials(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.ClientInformationSignatureSigningParametersResolver
-
Get the effective list of signing credentials to consider.
- getEmbeddedResolver() - Method in class net.shibboleth.oidc.metadata.ProviderMetadataProviderContainer
-
Return what we are build around.
- getEmbeddedResolver() - Method in class net.shibboleth.oidc.metadata.RelyingPartyClientInformationProvider
-
Return what we are build around.
- getEncAlgorithm() - Method in class net.shibboleth.oidc.security.credential.impl.DataEncryptionAlgorithmCriterion
-
Get the encryption algorithm criteria.
- getEncodedAttributes(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Get the set of attribute IDs which should be encoded in encrypted form into the authorization code and/or access/refresh tokens to enable recovery on the back-channel.
- getEncodedAttributes(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCAuthorizationConfiguration
-
Get the set of attribute IDs which should be encoded in encrypted form into the authorization code and/or access/refresh tokens to enable recovery on the back-channel.
- getEncodedName(TranscodingRule) - Method in class net.shibboleth.oidc.attribute.transcoding.AbstractOIDCAttributeTranscoder
- getEncodedName(ProfileRequestContext, IdPAttribute, TranscodingRule) - Method in class net.shibboleth.oidc.attribute.transcoding.AbstractOIDCAttributeTranscoder
-
Get the encoded name for the attribute via SAML metadata (if enabled) or rule's name property.
- getEncodedType() - Method in class net.shibboleth.oidc.attribute.transcoding.AbstractOIDCAttributeTranscoder
- getEncryptionParameters() - Method in class net.shibboleth.oidc.security.jose.context.SecurityParametersContext
-
Get the parameters to use for encryption operations.
- getEndpointURI() - Method in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
-
Get the endpoint_uri.
- getErrorObject() - Method in class net.shibboleth.oidc.profile.messaging.JSONErrorResponse
- getEssential() - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
-
Get the flag indicating that the claim must have a value.
- getExecutorService() - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
-
Get the background executor service.
- getExpectedAlgorithm(OIDCClientInformation) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler
-
Fetches the expected signature algorithm from the
OIDCClientInformation. - getExpectedAlgorithm(ClientInformationCriterion) - Method in class net.shibboleth.oidc.security.impl.ClientInformationJWTTrustEngine
-
Fetches the expected signature algorithm from the
OIDCClientInformation. - getExpirationTime() - Method in class net.shibboleth.oidc.metadata.MetadataManagementData
-
Get the expiration time of the metadata.
- getFetchStrategy() - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
-
Get the metadata fetching strategy.
- getFetchStrategy() - Method in class net.shibboleth.oidc.metadata.cache.impl.FetchThroughMetadataCacheBuilderSpec
-
Get the metadata fetching strategy.
- getGrantTypes() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Get the whitespace-delimited list of grant types.
- getGrantTypes() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Get the whitespace-delimited list of grant types.
- getGrantTypes(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
- getGrantTypes(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenConfiguration
-
Get the enabled grant types.
- getHttpRequestMethod(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Get the HTTP request method for an authentication request.
- getHttpRequestMethod(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2AuthorizationProfileConfiguration
-
Get the HTTP request method for an authentication request.
- getId() - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor.SkeletonEchoingRoleDescriptorResolver
- getID() - Method in class net.shibboleth.oidc.metadata.MetadataManagementData
-
Get the entity ID managed by this instance.
- getIdentifier() - Method in class net.shibboleth.oidc.profile.messaging.context.AbstractOIDCEntityContext
-
Gets the identifier of the OIDC entity.
- getIdentifierExtractionStrategy() - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
-
Get the identifier extraction strategy.
- getIdentifierExtractionStrategy() - Method in class net.shibboleth.oidc.metadata.cache.impl.BaseMetadataCacheBuilderSpec
-
Get the identifier extraction strategy.
- getIdTokenEncryptedResponseAlg() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Get the JWE alg algorithm for ID token encryption.
- getIdTokenEncryptedResponseAlg() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Get the JWE alg algorithm for ID token encryption.
- getIdTokenEncryptedResponseEnc() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Get the JWE enc algorithm for ID token encryption.
- getIdTokenEncryptedResponseEnc() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Get the JWE enc algorithm for ID token encryption.
- getIDTokenLifetime(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Get ID token lifetime.
- getIDTokenLifetime(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCIDTokenProducingProfileConfiguration
-
Get ID token lifetime.
- getIDTokenManipulationStrategy(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Get the bi-function for manipulating id_token claims.
- getIDTokenManipulationStrategy(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCIDTokenProducingProfileConfiguration
-
Get the bi-function for manipulating id_token claims.
- getIdTokenSignedResponseAlg() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Get the JWS alg algorithm for ID token signature.
- getIdTokenSignedResponseAlg() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Get the JWS alg algorithm for ID token signature.
- getIncludeExcludePredicate(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver
-
Get a predicate which implements the effective configured include/exclude policy.
- getIncludeExcludePredicate(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
-
Get a predicate which implements the effective configured include/exclude policy.
- getIndexedInformation() - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver.JsonBackingStore
-
Get the entity information index.
- getIndexedValues() - Method in interface net.shibboleth.oidc.metadata.BackingStore
-
Get the index - mapping keys to values.
- getIndexedValues() - Method in class net.shibboleth.oidc.metadata.impl.AbstractBackingStore
- getIndexedValues() - Method in class net.shibboleth.oidc.metadata.impl.EmptyBackingStore
- getInitialCleanupTaskDelay() - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
-
Get the initial cleanup task delay.
- getInitiateLoginUri() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Get the URI for initiating login.
- getInitiateLoginUri() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Get the URI for initiating login.
- getIssuedClaimsValidator(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2TokenValidatingConfiguration
-
Get the
ClaimsValidatorto apply to issued JWT-based tokens being validated by this profile. - getIssuedClaimsValidator(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenValidatingProfileConfiguration
-
Get the
ClaimsValidatorto apply to issued JWT-based tokens being validated by this profile. - getIssuer(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
- getIssuer(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCDynamicRegistrationConfiguration
- getIssuer(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
- getIssuer(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCProviderInformationConfiguration
- getIssuer(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2TokenValidatingConfiguration
- getIssuer(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2PushedAuthorizationRequestConfiguration
- getIssuer(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
- getIssuerID() - Method in class net.shibboleth.oidc.metadata.criterion.IssuerIDCriterion
-
Get the issuer ID.
- getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA128CBCHS256
- getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA128GCM
- getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA192CBCHS384
- getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA192GCM
- getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA256CBCHS512
- getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA256GCM
- getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyAgreementECDHES
- getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyAgreementECDHESA128KW
- getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyAgreementECDHESA192KW
- getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyAgreementECDHESA256KW
- getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSA15
- getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP
- getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP256
- getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP384
- getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP512
- getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureES256
- getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureES384
- getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureES512
- getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureHS256
- getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureHS384
- getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureHS512
- getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignaturePS256
- getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignaturePS384
- getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignaturePS512
- getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureRS256
- getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureRS384
- getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureRS512
- getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA128GCMKW
- getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA128KW
- getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA192GCMKW
- getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA192KW
- getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA256GCMKW
- getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA256KW
- getJCAAlgorithmName(JWSAlgorithm) - Static method in class net.shibboleth.oidc.security.JWSAssemblyUtils
-
Gets the matching Java Cryptography Architecture (JCA) algorithm name for the specified HMAC-based JSON Web Algorithm (JWA).
- getJOSEObject() - Method in class net.shibboleth.oidc.security.jose.criterion.JOSEObjectCriterion
-
Gets the JOSEObject which is the source of credential criteria.
- getJwksData(XMLObject) - Method in class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.InlineJwksProvider
-
Get the JwksData from the passed XML object.
- getJWKSet() - Method in class net.shibboleth.oidc.security.jose.criterion.JWKSetCriterion
-
Gets the JWKSet which is the source of credentials.
- getJwksUri(XMLObject) - Method in class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.JWKSReferenceProvider
-
Get the JwksUri from the passed XML object.
- getJwtDecryptionConfiguration() - Method in class net.shibboleth.oidc.profile.config.JSONSecurityConfiguration
-
Get the configuration used when decrypting JWE tokens.
- getJwtEncryptionConfiguration() - Method in class net.shibboleth.oidc.profile.config.JSONSecurityConfiguration
-
Get the configuration used when encrypting JWE tokens.
- getJwtSignatureSigningConfiguration() - Method in class net.shibboleth.oidc.profile.config.JSONSecurityConfiguration
-
Get the configuration used when signing JWS tokens.
- getJwtSignatureValidationConfiguration() - Method in class net.shibboleth.oidc.profile.config.JSONSecurityConfiguration
-
Get the configuration used when validating JWS tokens.
- getKEKCredentialResolver() - Method in interface net.shibboleth.oidc.security.jose.DecryptionConfiguration
-
Get the CredentialResolver to use when processing the EncryptedKey (the Key Encryption Key or KEK).
- getKEKCredentialResolver() - Method in class net.shibboleth.oidc.security.jose.DecryptionParameters
-
Get the CredentialResolver to use when processing the EncryptedKey (the Key Encryption Key or KEK).
- getKEKCredentialResolver() - Method in interface net.shibboleth.oidc.security.jose.EncryptionConfiguration
-
Get the CredentialResolver to resolve the key encryption or key wrapping key.
- getKEKCredentialResolver() - Method in class net.shibboleth.oidc.security.jose.impl.BasicDecryptionConfiguration
- getKEKCredentialResolver() - Method in class net.shibboleth.oidc.security.jose.impl.BasicEncryptionConfiguration
- getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA128CBCHS256
- getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA128GCM
- getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA192CBCHS384
- getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA192GCM
- getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA256CBCHS512
- getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA256GCM
- getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSA15
- getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP
- getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP256
- getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP384
- getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP512
- getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureES256
- getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureES384
- getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureES512
- getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignaturePS256
- getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignaturePS384
- getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignaturePS512
- getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureRS256
- getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureRS384
- getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureRS512
- getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA128GCMKW
- getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA128KW
- getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA192GCMKW
- getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA192KW
- getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA256GCMKW
- getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA256KW
- getKey(OIDCProviderMetadata) - Method in class net.shibboleth.oidc.metadata.impl.FilesystemProviderMetadataResolver
-
Gets the identifier for the given entity.
- getKey(OIDCClientInformation) - Method in class net.shibboleth.oidc.metadata.impl.FilesystemClientInformationResolver
-
Gets the identifier for the given entity.
- getKey(Value) - Method in class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver
-
Gets the identifier for the given entity.
- getKeyId() - Method in class net.shibboleth.oidc.security.credential.impl.EvaluableKeyIDCredentialCriterion
-
Get the keyId.
- getKeyId() - Method in class net.shibboleth.oidc.security.jose.criterion.KeyIdCriterion
-
Get the key ID criteria.
- getKeyLength() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA128CBCHS256
- getKeyLength() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA128GCM
- getKeyLength() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA192CBCHS384
- getKeyLength() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA192GCM
- getKeyLength() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA256CBCHS512
- getKeyLength() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA256GCM
- getKeyLength() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA128GCMKW
- getKeyLength() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA128KW
- getKeyLength() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA192GCMKW
- getKeyLength() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA192KW
- getKeyLength() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA256GCMKW
- getKeyLength() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA256KW
- getKeyTransportAlgorithmsFromConfiguration(CriteriaSet, Predicate<String>) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultKeyTransportEncryptionAlgorithmsLookupStrategy
-
Get the key transport algorithms from the
EncryptionConfigurationinside the criteria set. - getKeyTransportEncryptionAlgorithm() - Method in class net.shibboleth.oidc.security.jose.EncryptionParameters
-
Get the encryption algorithm URI to use when encrypting the EncryptedKey.
- getKeyTransportEncryptionAlgorithms() - Method in interface net.shibboleth.oidc.security.jose.EncryptionConfiguration
-
Get the list of preferred key transport encryption algorithm URIs, in preference order.
- getKeyTransportEncryptionAlgorithms() - Method in class net.shibboleth.oidc.security.jose.impl.BasicEncryptionConfiguration
-
Get the list of preferred key transport encryption algorithm URIs, in preference order.
- getKeyTransportEncryptionCredential() - Method in class net.shibboleth.oidc.security.jose.EncryptionParameters
-
Get the encryption credential to use when encrypting the EncryptedKey.
- getKid() - Method in class net.shibboleth.oidc.security.credential.BasicJWKCredential
-
Get kid of JWK.
- getKid() - Method in interface net.shibboleth.oidc.security.credential.JWKCredential
-
Get kid of JWK.
- getLastAccessedTime() - Method in class net.shibboleth.oidc.metadata.MetadataManagementData
-
Get the last time at which the entity's backing store data was accessed.
- getLastRefresh() - Method in interface net.shibboleth.oidc.metadata.BatchBackingStore
-
Get the time the last refresh of this backing store was attempted.
- getLastRefresh() - Method in class net.shibboleth.oidc.metadata.cache.CacheLoadingContext
-
Get the last refresh time.
- getLastRefresh() - Method in class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver
-
Get last refresh of resolver.
- getLastRefresh() - Method in class net.shibboleth.oidc.metadata.impl.ChainingClientInformationResolver
-
Gets the time the last refresh cycle occurred.
- getLastRefresh() - Method in class net.shibboleth.oidc.metadata.impl.ChainingProviderMetadataResolver
-
Gets the time the last refresh cycle occurred.
- getLastRefresh() - Method in class net.shibboleth.oidc.metadata.impl.DefaultBatchBackingStore
- getLastRefresh() - Method in interface net.shibboleth.oidc.metadata.RefreshableClientInformationResolver
-
Gets the time the last refresh cycle occurred.
- getLastRefresh() - Method in interface net.shibboleth.oidc.metadata.RefreshableProviderMetadataResolver
-
Gets the time the last refresh cycle occurred.
- getLastRefresh() - Method in class net.shibboleth.oidc.metadata.RelyingPartyClientInformationProvider
-
Gets the time the last refresh cycle occurred.
- getLastUpdate() - Method in interface net.shibboleth.oidc.metadata.BatchBackingStore
-
Get the time at which this batch backing store was successfully reloaded.
- getLastUpdate() - Method in class net.shibboleth.oidc.metadata.cache.CacheLoadingContext
-
Get the last successful update time.
- getLastUpdate() - Method in class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver
-
Get last update of resolver.
- getLastUpdate() - Method in class net.shibboleth.oidc.metadata.impl.ChainingClientInformationResolver
-
Get the time that the currently available client information was last updated.
- getLastUpdate() - Method in class net.shibboleth.oidc.metadata.impl.ChainingProviderMetadataResolver
-
Get the time that the currently available metadata was last updated.
- getLastUpdate() - Method in class net.shibboleth.oidc.metadata.impl.DefaultBatchBackingStore
- getLastUpdate() - Method in interface net.shibboleth.oidc.metadata.RefreshableClientInformationResolver
-
Get the time that the currently available client information was last updated.
- getLastUpdate() - Method in interface net.shibboleth.oidc.metadata.RefreshableProviderMetadataResolver
-
Get the time that the currently available metadata was last updated.
- getLastUpdate() - Method in class net.shibboleth.oidc.metadata.RelyingPartyClientInformationProvider
-
Get the time that the currently available client information was last updated.
- getLastUpdateTime() - Method in class net.shibboleth.oidc.metadata.MetadataManagementData
-
Get the last update time of the metadata.
- getListValues(String) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
-
Parse an XML value list from a metadata value object into a collection of strings.
- getLoadingStrategy() - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
-
Get the loading strategy.
- getLoadingStrategy() - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCacheBuilderSpec
-
Get the batch metadata loading strategy.
- getLocalCredentialResolver() - Method in class net.shibboleth.oidc.security.credential.impl.LocalJOSEObjectCredentialResolver
-
Get the resolver for local credentials.
- getLoginHint() - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
-
Get the login_hint parameter.
- getLoginHint(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Get the login_hint to use.
- getLoginHint(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCAuthenticationProfileConfiguration
-
Get the login_hint to use.
- getLogoutHintMatchingStrategy(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
- getLogoutHintMatchingStrategy(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCLogoutProfileConfiguration
-
Get the bi-predicate for matching logout hint to an existing session in an OIDC RP-initiated logout sequence.
- getLogPrefix() - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
-
Return a prefix for logging messages for this component.
- getLogPrefix() - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver
-
Return a prefix for logging messages for this component.
- getLogPrefix() - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver
-
Return a prefix for logging messages for this component.
- getManagementData(I) - Method in interface net.shibboleth.oidc.metadata.DynamicBackingStore
-
Get the management data for the specified identifier.
- getManagementData(I) - Method in class net.shibboleth.oidc.metadata.impl.DefaultDynamicBackingStore
-
Get the management data for the specified identifier.
- getManagementDataIdentifiers() - Method in interface net.shibboleth.oidc.metadata.DynamicBackingStore
-
Get the set of entityIDs which currently have management data.
- getManagementDataIdentifiers() - Method in class net.shibboleth.oidc.metadata.impl.DefaultDynamicBackingStore
-
Get the set of entityIDs which currently have management data.
- getMaxAge() - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
-
Get the max age.
- getMaxAuthenticationAge(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Get the max authentication age.
- getMaxAuthenticationAge(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCAuthenticationProfileConfiguration
-
Get the max authentication age.
- getMaxCacheDuration() - Method in class net.shibboleth.oidc.metadata.cache.ExpirationTimeContext
-
Get the maximum cache duration.
- getMaxCacheDuration() - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
-
Get the maximum cache duration for metadata.
- getMaxIdleEntityData() - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
-
Get the maximum idle time for which the resolver will keep data for before it is removed.
- getMaxRefreshDelay() - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
-
Get the maximum amount of time between refresh intervals.
- getMaxRefreshDelay() - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCacheBuilderSpec
-
Get the max delay to wait before refreshing metadata.
- getMessageHandler(MessageContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2InterceptorAwareProfileConfiguration
-
Get a custom handler for a message produced or consumed by this profile.
- getMessageHandler(MessageContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2InterceptorAwareProfileConfiguration
-
Get a custom handler for a message produced or consumed by this profile.
- getMetadata() - Method in class net.shibboleth.oidc.metadata.cache.ExpirationTimeContext
-
Get the metadata.
- getMetadata() - Method in class net.shibboleth.oidc.security.jose.criterion.ProviderMetadataCriterion
-
Gets the OIDC provider metadata.
- getMetadataBeforeRemovalHook() - Method in class net.shibboleth.oidc.metadata.cache.impl.BaseMetadataCacheBuilderSpec
-
Get the metadata before removal hook.
- getMetadataExpirationTimeStrategy() - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
-
Get the metadata expiration time strategy.
- getMetadataExpirationTimeStrategy() - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
-
Get the metadata expiration time strategy.
- getMetadataFilterStrategy() - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
-
Get the metadata filtering strategy.
- getMetadataFilterStrategy() - Method in class net.shibboleth.oidc.metadata.cache.impl.BaseMetadataCacheBuilderSpec
-
Get the metadata filter strategy.
- getMetadataIdentifier() - Method in class net.shibboleth.oidc.metadata.impl.AbstractFileOIDCEntityResolver
-
Gets an identifier which may be used to distinguish this metadata in logging statements.
- getMetadataIdentifier() - Method in class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver
-
Gets an identifier which may be used to distinguish this metadata in logging statements.
- getMetadataPolicy(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCDynamicRegistrationConfiguration
-
Get the metadata policy.
- getMetadataPolicy(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCDynamicRegistrationConfiguration
-
Get the metadata policy.
- getMetadataUpdateTime() - Method in class net.shibboleth.oidc.metadata.cache.impl.DefaultFileLoadingStrategy
-
Get the time for the last update/modification of the metadata file.
- getMetadataUpdateTime() - Method in class net.shibboleth.oidc.metadata.cache.impl.DefaultResourceLoadingStrategy
-
Get the time for the last update/modification of the metadata resource.
- getMetadataUpdateTime() - Method in class net.shibboleth.oidc.metadata.impl.AbstractFileOIDCEntityResolver
-
Get the time for the last update/modification of the metadata file.
- getMetadataValidPredicate() - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
-
Get the predicate which determines if a piece of metadata is valid or not.
- getMetadataValidPredicate() - Method in class net.shibboleth.oidc.metadata.cache.impl.BaseMetadataCacheBuilderSpec
-
Get the predicate which determines if a piece of metadata is valid or not.
- getMinCacheDuration() - Method in class net.shibboleth.oidc.metadata.cache.ExpirationTimeContext
-
Get the minimum cache duration.
- getMinCacheDuration() - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
-
Get the minimum cache duration for metadata.
- getMinRefreshDelay() - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
-
Get the minimum amount of time between refreshes.
- getMinRefreshDelay() - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCacheBuilderSpec
-
Get the min delay to wait before refreshing metadata.
- getName() - Method in class net.shibboleth.oidc.authn.principal.AuthenticationContextClassReferencePrincipal
- getNameFromMetadata(ProfileRequestContext, String) - Method in class net.shibboleth.oidc.attribute.transcoding.AbstractOIDCAttributeTranscoder
-
If enabled, search metadata for a tag value prefixed by the input attribute ID followed by a space character.
- getNonce() - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
-
Get the nonce.
- getNow() - Method in class net.shibboleth.oidc.metadata.cache.ExpirationTimeContext
-
Get the time to use a 'now'.
- getOAuthRPExtensions(SPSSODescriptor) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
-
Get the
OAuthRPExtensionsfrom the givenSPSSODescriptor, it it was found from its extensions. - getObjectType() - Method in class net.shibboleth.oidc.profile.config.CredentialsListFactory
- getObjectType() - Method in class net.shibboleth.oidc.security.credential.BasicClientSecretCredentialFactoryBean
- getObjectType() - Method in class net.shibboleth.oidc.security.credential.BasicExpiringJWTSharedSecretCredentialFactoryBean
- getObjectType() - Method in class net.shibboleth.oidc.security.credential.BasicJWKCredentialFactoryBean
- getOidcClientInformation() - Method in class net.shibboleth.oidc.security.jose.criterion.ClientInformationCriterion
-
Get client information.
- getOIDCPeerEntityContext() - Method in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler
-
Get the
OIDCPeerEntityContextassociated with the message. - getOneOfValues() - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
-
Get the list of values from which the claim must be one of.
- getOrderedChildren() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.AbstractMetadataValueSAMLObject
- getOrderedChildren() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
- getOrderedInformation() - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver.JsonBackingStore
-
Get the ordered entity information.
- getOrderedValues() - Method in interface net.shibboleth.oidc.metadata.BackingStore
-
Get the list of ordered values.
- getOrderedValues() - Method in class net.shibboleth.oidc.metadata.impl.AbstractBackingStore
- getOrderedValues() - Method in class net.shibboleth.oidc.metadata.impl.EmptyBackingStore
- getOriginalValue() - Method in interface net.shibboleth.oidc.metadata.BatchBackingStore
-
Gets the source bytes of the source before it was parsed.
- getOriginalValue() - Method in class net.shibboleth.oidc.metadata.impl.DefaultBatchBackingStore
- getPadding() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA128CBCHS256
- getPadding() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA128GCM
- getPadding() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA192CBCHS384
- getPadding() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA192GCM
- getPadding() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA256CBCHS512
- getPadding() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA256GCM
- getPadding() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSA15
- getPadding() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP
- getPadding() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP256
- getPadding() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP384
- getPadding() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP512
- getParsingStrategy() - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
-
Get the parsing strategy.
- getParsingStrategy() - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCacheBuilderSpec
-
Get the raw batch metadata to metadata type parsing strategy.
- getPostAuthenticationFlows(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
- getPostLogoutRedirectUris() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Get the list of post logout redirection URIs.
- getPostLogoutRedirectUris() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Get the list of post logout redirection URIs.
- getProfileRequestContextLookupStrategy() - Method in class net.shibboleth.oidc.profile.config.navigate.MessageContextLookupFunctionAdaptor
-
Get the profile request context lookup strategy used to adapt the message context.
- getPrompt() - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
-
Get the prompt.
- getProviderInformation() - Method in class net.shibboleth.oidc.metadata.context.OIDCProviderMetadataContext
-
Set the client information.
- getProxyCount(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
- getRedirectURI() - Method in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
-
Get the redirect_uri.
- getRedirectUriOverride(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Get the redirect_uri override if set.
- getRedirectUriOverride(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCAuthenticationRelyingPartyProfileConfiguration
-
Get the redirect_uri override if set.
- getReferenceURI() - Method in class net.shibboleth.oidc.security.credential.BasicJWKReferenceCredential
-
Get the reference URI to the remote JWK.
- getReferenceURI() - Method in interface net.shibboleth.oidc.security.credential.JWKReferenceCredential
-
Get the reference URI to the remote JWK.
- getRefreshDelayFactor() - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
-
Get the refresh delay factor.
- getRefreshDelayFactor() - Method in class net.shibboleth.oidc.metadata.cache.impl.BaseMetadataCacheBuilderSpec
-
Gets the delay factor used to compute the next refresh time.
- getRefreshTokenChainLifetime(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Get refresh token chain lifetime.
- getRefreshTokenChainLifetime(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2RefreshTokenProducingProfileConfiguration
-
Get refresh token chain lifetime.
- getRefreshTokenClaimsSetManipulationStrategy(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
-
Get the bi-function for manipulating refresh token claims set.
- getRefreshTokenClaimsSetManipulationStrategy(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenConfiguration
-
Get the bi-function for manipulating refresh token claims set.
- getRefreshTokenTimeout(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Get refresh token timeout.
- getRefreshTokenTimeout(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2RefreshTokenProducingProfileConfiguration
-
Get refresh token timeout.
- getRefreshTokenType(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Get refresh token type.
- getRefreshTokenType(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2RefreshTokenProducingProfileConfiguration
-
Get refresh token type.
- getRefreshTriggerTime() - Method in class net.shibboleth.oidc.metadata.MetadataManagementData
-
Get the refresh trigger time of the metadata.
- getRegexp() - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
-
Get the regular expression that the claim value must meet.
- getRegistrationValidityPeriod(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCDynamicRegistrationConfiguration
-
Get dynamic registration validity period.
- getRegistrationValidityPeriod(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCDynamicRegistrationConfiguration
-
Get dynamic registration validity period.
- getRequestedClaims() - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
-
Get the requested claims.
- getRequestLookupStrategy() - Method in class net.shibboleth.oidc.profile.audit.impl.AbstractAuthenticationRequestAuditExtractor
-
Get the request lookup strategy.
- getRequestObject() - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
-
Get the request object.
- getRequestObjectClaimsSet() - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
-
Get the request object claims set.
- getRequestObjectEncryptionAlg() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Get the JWE alg algorithm for request object encryption.
- getRequestObjectEncryptionAlg() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Get the JWE alg algorithm for request object encryption.
- getRequestObjectEncryptionEnc() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Get the JWE enc algorithm for request object encryption.
- getRequestObjectEncryptionEnc() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Get the JWE enc algorithm for request object encryption.
- getRequestObjectSigningAlg() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Get the JWS alg algorithm for request object signature.
- getRequestObjectSigningAlg() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Get the JWS alg algorithm for request object signature.
- getRequestURI() - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
-
Get the URI to fetch the request object from.
- getRequestUriClaimsSetManipulationStrategy(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2PushedAuthorizationRequestConfiguration
-
Get the bi-function for manipulating request URI claims set.
- getRequestUriClaimsSetManipulationStrategy(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2PushedAuthorizationRequestConfiguration
-
Get the bi-function for manipulating request URI claims set.
- getRequestUriLifetime(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2PushedAuthorizationRequestConfiguration
-
Get request URI lifetime.
- getRequestUriLifetime(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2PushedAuthorizationRequestConfiguration
-
Get request URI lifetime.
- getRequestUris() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Get the list of request URIs.
- getRequestUris() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Get the list of request URIs.
- getRequestUriType(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2PushedAuthorizationRequestConfiguration
-
Get request URI type.
- getRequestUriType(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2PushedAuthorizationRequestConfiguration
-
Get request URI type.
- getResolvers() - Method in class net.shibboleth.oidc.metadata.impl.ChainingClientInformationResolver
-
Get an immutable the list of currently registered resolvers.
- getResolvers() - Method in class net.shibboleth.oidc.metadata.impl.ChainingProviderMetadataResolver
-
Get an immutable the list of currently registered resolvers.
- getResource() - Method in class net.shibboleth.oidc.metadata.impl.PropertiesClientSecretValueResolver
-
Get the properties resource containing client secret values.
- getResourceLocation() - Method in class net.shibboleth.oidc.metadata.criterion.ResourceLocationCriterion
-
Get the resource location.
- getResponseLookupStrategy() - Method in class net.shibboleth.oidc.profile.audit.impl.AbstractAuthenticationResponseAuditExtractor
-
Get the response lookup strategy.
- getResponseMode() - Method in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
-
Get the response mode.
- getResponseMode(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Get the response_mode to use for authorization requests.
- getResponseMode(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2AuthorizationProfileConfiguration
-
Get the response_mode to use for authorization requests.
- getResponseModes(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Get the response_modes that are allowed to be used in authorization requests.
- getResponseModes(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2AuthorizationProfileConfiguration
-
Get the response_modes that are allowed to be used in authorization requests.
- getResponseType() - Method in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
-
Get the response type.
- getResponseType(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Get the response_type to use for authorization requests.
- getResponseType(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2AuthorizationProfileConfiguration
-
Get the response_type to use for authorization requests.
- getResponseTypes() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Get the whitespace-delimited list of response types.
- getResponseTypes() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Get the whitespace-delimited list of response types.
- getRevocationLifetime(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenRevocationConfiguration
-
Get revocation lifetime.
- getRevocationLifetime(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenRevocationConfiguration
-
Get revocation lifetime.
- getRevocationMethod(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenRevocationConfiguration
-
Get the revocation method used when revoking a token.
- getRevocationMethod(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenRevocationConfiguration
-
Get the revocation method used when revoking a token.
- getScope() - Method in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
-
Get the scope.
- getScopes() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Get the whitespace-delimited list of scopes.
- getScopes() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Get the whitespace-delimited list of scopes.
- getScopes(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Get the scopes to use in authentication requests.
- getScopes(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2AuthorizationProfileConfiguration
-
Get the scopes to use in authentication requests.
- getSecret() - Method in class net.shibboleth.oidc.security.credential.BasicNimbusSecretCredential
-
Deprecated.Get the client secret.
- getSecret() - Method in interface net.shibboleth.oidc.security.credential.ClientSecretCredential
-
Get the client_secret as a UTF-8 encoded String.
- getSecret() - Method in class net.shibboleth.oidc.security.credential.DefaultClientSecretCredential
-
Get the client_secret as a UTF-8 encoded String.
- getSecret() - Method in interface net.shibboleth.oidc.security.credential.NimbusSecretCredential
-
Deprecated.Get the client secret.
- getSecretAsBytes() - Method in interface net.shibboleth.oidc.security.credential.ClientSecretCredential
-
Get the client_secret as UTF-8 bytes.
- getSecretAsBytes() - Method in class net.shibboleth.oidc.security.credential.DefaultClientSecretCredential
-
Get the client_secret as UTF-8 bytes.
- getSecretBytes(String) - Static method in class net.shibboleth.oidc.security.JWSAssemblyUtils
-
Convert the given secret into its byte representation assuming a UTF-8 character set.
- getSecretExpirationPeriod(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCDynamicRegistrationConfiguration
-
Get client secret expiration period.
- getSecretExpirationPeriod(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCDynamicRegistrationConfiguration
-
Get client secret expiration period.
- getSecretReference() - Method in class net.shibboleth.oidc.metadata.criterion.ClientSecretReferenceCriterion
-
Get the client secret reference.
- getSectorIdentifierUri() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Get the sector identifier URI.
- getSectorIdentifierUri() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Get the sector identifier URI.
- getSignatureAlgorithm() - Method in class net.shibboleth.oidc.security.jose.SignatureSigningParameters
-
Get the signature algorithm URI to use when signing.
- getSignatureAlgorithms() - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningConfiguration
-
Get the list of preferred signature algorithm URIs, in preference order.
- getSignatureAlgorithms() - Method in interface net.shibboleth.oidc.security.jose.SignatureSigningConfiguration
-
Get the list of preferred signature algorithm URIs, in preference order.
- getSignatureSigningParameters() - Method in class net.shibboleth.oidc.security.jose.context.SecurityParametersContext
-
Get the parameters to use for signature signing operations.
- getSignatureTrustEngine() - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureValidationConfiguration
-
Get the signature trust engine to use.
- getSignatureTrustEngine() - Method in interface net.shibboleth.oidc.security.jose.SignatureValidationConfiguration
-
Get the signature trust engine to use.
- getSignatureTrustEngine() - Method in class net.shibboleth.oidc.security.jose.SignatureValidationParameters
-
Get the signature trust engine to use.
- getSignatureValidationParameters() - Method in class net.shibboleth.oidc.security.jose.context.SecurityParametersContext
-
Get the parameters to use for signature validation operations.
- getSignatureValidationParameters() - Method in class net.shibboleth.oidc.security.jose.criterion.SignatureValidationParametersCriterion
-
Get the signature validation parameters instance.
- getSigner(Algorithm, Credential) - Method in class net.shibboleth.oidc.security.impl.JWSTokenSigner
-
Returns the correct implementation of the
JWSSignerbased on the algorithm type and credential given. - getSigningCredential() - Method in class net.shibboleth.oidc.security.jose.SignatureSigningParameters
-
Get the signing credential to use when signing.
- getSigningCredentials() - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningConfiguration
-
Get the list of signing credentials to use when signing, in preference order.
- getSigningCredentials() - Method in interface net.shibboleth.oidc.security.jose.SignatureSigningConfiguration
-
Get the list of signing credentials to use when signing, in preference order.
- getSingleURIValue(String) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
- getSingleURIValue(MetadataValueSAMLObject) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
-
Converts the metadata value object value into a
URI. - getSoftwareId() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Get the software identifier.
- getSoftwareId() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Get the software identifier.
- getSoftwareVersion() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Get the software version.
- getSoftwareVersion() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Get the software version.
- getSourceId() - Method in class net.shibboleth.oidc.metadata.filter.MetadataSource
-
Get identifier of the metadata source.
- getSourceIdentifier() - Method in class net.shibboleth.oidc.metadata.cache.impl.DefaultFileLoadingStrategy
-
Get a friendly name source identifier to use in log statements.
- getSourceIdentifier() - Method in class net.shibboleth.oidc.metadata.cache.impl.DefaultResourceLoadingStrategy
-
Get a friendly name source identifier to use in log statements.
- getSourceIdentifier() - Method in interface net.shibboleth.oidc.metadata.cache.LoadingStrategy
-
Get a friendly name source identifier to use in log statements.
- getSourceMetadataExpiryStrategy() - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
-
Get the source metadata expiry strategy.
- getSourceMetadataExpiryStrategy() - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCacheBuilderSpec
-
Get the source metadata expiry date strategy.
- getSourceMetadataValidPredicate() - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
-
Get the predicate which determines if the source metadata is valid or not.
- getSourceMetadataValidPredicate() - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCacheBuilderSpec
-
Get the predicate which determines if the source metadata is valid or not.
- getStampLock() - Method in class net.shibboleth.oidc.metadata.MetadataManagementData
-
Get the read-write lock instance which governs access to the metadata's backing store data.
- getState() - Method in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
-
Get the state.
- getStorage() - Method in class net.shibboleth.oidc.jwk.RemoteJwkSetCache
-
Get the backing store for the remote JWK set contents.
- getStorageService() - Method in class net.shibboleth.oidc.metadata.impl.BaseStorageServiceClientInformationComponent
-
Get the
StorageServiceback-end to use. - getSubsetOfValues() - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
-
Get the list of value(s) from which the claim must be subset of.
- getSupersetOfValues() - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
-
Get the list of value(s) from which the claim must be superset of.
- getSupportedContentTypes() - Method in class net.shibboleth.oidc.metadata.impl.AbstractDynamicHTTPFetchingStrategy
-
Get the list of supported MIME types for use in Accept request header and validation of response Content-Type header.
- getTokenEndpointAuthMethod() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Get the token endpoint authentication method.
- getTokenEndpointAuthMethod() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Get the token endpoint authentication method.
- getTokenEndpointAuthMethod(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Get the token endpoint authentication method to use with an OpenID Provider.
- getTokenEndpointAuthMethod(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2ClientAuthenticableClientProfileConfiguration
-
Get the token endpoint authentication method to use with an OpenID Provider.
- getTokenEndpointAuthMethods(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Get the enabled token endpoint authentication methods.
- getTokenEndpointAuthMethods(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2ClientAuthenticableProfileConfiguration
-
Get the enabled token endpoint authentication methods.
- getTokenEndpointAuthSigningAlg() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Get the JWS alg algorithm for token endpoint authentication signature.
- getTokenEndpointAuthSigningAlg() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Get the JWS alg algorithm for token endpoint authentication signature.
- getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA128CBCHS256
- getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA128GCM
- getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA192CBCHS384
- getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA192GCM
- getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA256CBCHS512
- getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA256GCM
- getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyAgreementECDHES
- getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyAgreementECDHESA128KW
- getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyAgreementECDHESA192KW
- getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyAgreementECDHESA256KW
- getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSA15
- getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP
- getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP256
- getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP384
- getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP512
- getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureES256
- getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureES384
- getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureES512
- getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureHS256
- getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureHS384
- getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureHS512
- getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignaturePS256
- getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignaturePS384
- getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignaturePS512
- getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureRS256
- getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureRS384
- getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureRS512
- getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA128GCMKW
- getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA128KW
- getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA192GCMKW
- getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA192KW
- getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA256GCMKW
- getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA256KW
- getType() - Method in class net.shibboleth.oidc.metadata.AbstractEvaluableMetadataCriterion
-
Get the object type this criterion accepts.
- getUnknownAttributes() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
- getUnknownXMLObjects() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
- getUnknownXMLObjects(QName) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
- getUnregisteredClientPolicy(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Get the policy for validating unregistered clients.
- getUnregisteredClientPolicy(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2ClientAuthenticableProfileConfiguration
-
Get the policy for validating unregistered clients.
- getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA128CBCHS256
- getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA128GCM
- getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA192CBCHS384
- getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA192GCM
- getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA256CBCHS512
- getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA256GCM
- getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyAgreementECDHES
- getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyAgreementECDHESA128KW
- getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyAgreementECDHESA192KW
- getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyAgreementECDHESA256KW
- getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSA15
- getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP
- getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP256
- getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP384
- getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP512
- getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureES256
- getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureES384
- getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureES512
- getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureHS256
- getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureHS384
- getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureHS512
- getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignaturePS256
- getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignaturePS384
- getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignaturePS512
- getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureRS256
- getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureRS384
- getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureRS512
- getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA128GCMKW
- getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA128KW
- getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA192GCMKW
- getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA192KW
- getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA256GCMKW
- getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA256KW
- getUsageType(JWK) - Static method in class net.shibboleth.oidc.security.CredentialConversionUtil
-
Converts JWK key usage type to OpenSAML usage type.
- getUserInfoEncryptedResponseAlg() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Get the JWE alg algorithm for UserInfo response encryption.
- getUserInfoEncryptedResponseAlg() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Get the JWE alg algorithm for UserInfo response encryption.
- getUserInfoEncryptedResponseEnc() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Get the JWE enc algorithm for UserInfo response encryption.
- getUserInfoEncryptedResponseEnc() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Get the JWE enc algorithm for UserInfo response encryption.
- getUserInfoHttpRequestMethod(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Get the HTTP request method for the UserInfo request.
- getUserInfoHttpRequestMethod(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCAuthenticationRelyingPartyProfileConfiguration
-
Get the HTTP request method for the UserInfo request.
- getUserInfoSignedResponseAlg() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Get the JWS alg algorithm for UserInfo response signature.
- getUserInfoSignedResponseAlg() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Get the JWS alg algorithm for UserInfo response signature.
- getValue() - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
-
Get the (forced) value for the claim.
- getValue() - Method in enum class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest.CodeChallengeMethod
-
Get the code_challenge_method value.
- getValue() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.AbstractMetadataValueSAMLObject
-
Get the value for this metadata object.
- getValue() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.JwksUriImpl
-
Get the value for this metadata object.
- getValue() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.PostLogoutRedirectUriImpl
-
Get the value for this metadata object.
- getValue() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.RequestUriImpl
-
Get the value for this metadata object.
- getValue() - Method in interface net.shibboleth.oidc.saml.xmlobject.MetadataValueSAMLObject
-
Deprecated, for removal: This API element is subject to removal in a future version.
- GRANT_TYPES_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Attribute local name.
- grantTypes - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Grant types for this entity.
- GrantTypesLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
A function that obtains
OAuth2TokenConfiguration.getGrantTypes(ProfileRequestContext)if such a profile is available from aRelyingPartyContextobtained via a lookup function, by default a child of theProfileRequestContext. - GrantTypesLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.GrantTypesLookupFunction
- grantTypesLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
-
Enabled grant types.
H
- handleResponse(ClassicHttpResponse) - Method in class net.shibboleth.oidc.metadata.impl.HTTPProviderConfigurationFetchingStrategy.OIDCProviderMetadataResponseHandler
- handleResponse(ClassicHttpResponse) - Method in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyResponseHandler
- handles(XMLObject) - Method in class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.ClientSecretProvider
- handles(XMLObject) - Method in class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.ClientSecretReferenceProvider
- handles(XMLObject) - Method in class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.InlineJwksProvider
- handles(XMLObject) - Method in class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.JWKSReferenceProvider
- hasExpired(MetadataManagementData<IdentifierType>) - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
-
Determine if the metadata has expired based on the expiration time set in the management metadata.
- hashCode() - Method in class net.shibboleth.oidc.authn.principal.AuthenticationContextClassReferencePrincipal
- hashCode() - Method in class net.shibboleth.oidc.metadata.criterion.ClientIDCriterion
- hashCode() - Method in class net.shibboleth.oidc.metadata.criterion.ClientSecretReferenceCriterion
- hashCode() - Method in class net.shibboleth.oidc.metadata.criterion.IssuerIDCriterion
- hashCode() - Method in class net.shibboleth.oidc.metadata.criterion.ResourceLocationCriterion
- hashCode() - Method in class net.shibboleth.oidc.metadata.ProviderMetadataProviderContainer
- hashCode() - Method in class net.shibboleth.oidc.metadata.RelyingPartyClientInformationProvider
- hashCode() - Method in class net.shibboleth.oidc.security.credential.impl.DataEncryptionAlgorithmCriterion
- hashCode() - Method in class net.shibboleth.oidc.security.credential.impl.EvaluableKeyIDCredentialCriterion
- hashCode() - Method in class net.shibboleth.oidc.security.credential.impl.EvaluableMACKeyLengthCredentialCriterion
- hashCode() - Method in class net.shibboleth.oidc.security.credential.impl.KeyManagmentAlgorithmCriterion
- hashCode() - Method in class net.shibboleth.oidc.security.jose.criterion.ClientSecretCredentialCriterion
- hashCode() - Method in class net.shibboleth.oidc.security.jose.criterion.DecryptionConfigurationCriterion
- hashCode() - Method in class net.shibboleth.oidc.security.jose.criterion.EncryptionConfigurationCriterion
- hashCode() - Method in class net.shibboleth.oidc.security.jose.criterion.JOSEObjectCriterion
- hashCode() - Method in class net.shibboleth.oidc.security.jose.criterion.JWKSetCriterion
- hashCode() - Method in class net.shibboleth.oidc.security.jose.criterion.KeyIdCriterion
- hashCode() - Method in class net.shibboleth.oidc.security.jose.criterion.ProviderMetadataCriterion
- hashCode() - Method in class net.shibboleth.oidc.security.jose.criterion.SignatureSigningConfigurationCriterion
- hashCode() - Method in class net.shibboleth.oidc.security.jose.criterion.SignatureValidationConfigurationCriterion
- hashCode() - Method in class net.shibboleth.oidc.security.jose.criterion.SignatureValidationParametersCriterion
- httpClient - Variable in class net.shibboleth.oidc.jwk.RemoteJwkSetCache
-
The
HttpClientto use. - httpClient - Variable in class net.shibboleth.oidc.metadata.impl.AbstractDynamicHTTPFetchingStrategy
-
HTTP Client used to pull the configuration information.
- httpClientSecurityParameters - Variable in class net.shibboleth.oidc.jwk.RemoteJwkSetCache
-
HTTP client security parameters.
- httpClientSecurityParameters - Variable in class net.shibboleth.oidc.metadata.impl.AbstractDynamicHTTPFetchingStrategy
-
HTTP client security parameters.
- HTTPPostAuthnRequestEncoder - Class in net.shibboleth.oidc.profile.encoding.impl
-
A
message encoderthat encodes an OpenID authentication request by HTTP Form POST Serialization. - HTTPPostAuthnRequestEncoder() - Constructor for class net.shibboleth.oidc.profile.encoding.impl.HTTPPostAuthnRequestEncoder
- HTTPPostAuthnResponseDecoder - Class in net.shibboleth.oidc.profile.decoding.impl
-
A
message decoderthat decodes an incomingAuthenticationResponsewhen using a form_post response_type. - HTTPPostAuthnResponseDecoder() - Constructor for class net.shibboleth.oidc.profile.decoding.impl.HTTPPostAuthnResponseDecoder
- HTTPProviderConfigurationFetchingStrategy - Class in net.shibboleth.oidc.metadata.impl
-
A dynamic strategy for fetching OpenID Connect Provider Configuration Metadata from its well-known location (OpenID Connect Discovery 1.0, section 4).
- HTTPProviderConfigurationFetchingStrategy(HttpClient, HttpClientResponseHandler<OIDCProviderMetadata>) - Constructor for class net.shibboleth.oidc.metadata.impl.HTTPProviderConfigurationFetchingStrategy
-
Constructor.
- HTTPProviderConfigurationFetchingStrategy.DefaultWellKnownPathCompositionStrategy - Class in net.shibboleth.oidc.metadata.impl
-
Default strategy for composing a well-known URL to fetch a provider's configuration document from.
- HTTPProviderConfigurationFetchingStrategy.OIDCProviderMetadataResponseHandler - Class in net.shibboleth.oidc.metadata.impl
-
The response handler for parsing the providers's configuration information into
OIDCProviderMetadata. - HTTPRedirectAuthnRequestEncoder - Class in net.shibboleth.oidc.profile.encoding.impl
-
A
message encoderthat encodes an OpenID authentication request by Query String Serialization and sends a HTTP redirect response. - HTTPRedirectAuthnRequestEncoder() - Constructor for class net.shibboleth.oidc.profile.encoding.impl.HTTPRedirectAuthnRequestEncoder
- HTTPRedirectAuthnResponseDecoder - Class in net.shibboleth.oidc.profile.decoding.impl
-
A
message decoderthat decodes an incomingAuthenticationResponsewhen using a query response_mode. - HTTPRedirectAuthnResponseDecoder() - Constructor for class net.shibboleth.oidc.profile.decoding.impl.HTTPRedirectAuthnResponseDecoder
- HttpRequestMethod() - Constructor for enum class net.shibboleth.oidc.profile.oauth2.config.OAuth2AuthorizationProfileConfiguration.HttpRequestMethod
- httpRequestMethodLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Which HTTP method should be used to issue OIDC authentication requests.
- HybridFlowEnabledPredicate - Class in net.shibboleth.oidc.profile.config.logic
-
A predicate implementation that forwards to
OIDCFlowAwareProfileConfiguration.isHybridFlowEnabled(ProfileRequestContext). - HybridFlowEnabledPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.HybridFlowEnabledPredicate
- hybridFlowPredicate - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2FlowAwareProfileConfiguration
-
Predicate used to indicate whether hybrid flow is supported by this profile.
I
- id - Variable in class net.shibboleth.oidc.metadata.criterion.ClientIDCriterion
-
The client ID.
- id - Variable in class net.shibboleth.oidc.metadata.criterion.IssuerIDCriterion
-
The issuer ID.
- id - Variable in class net.shibboleth.oidc.metadata.MetadataManagementData
-
The identifier of the entity managed by this instance.
- ID_TOKEN_ENCRYPTED_RESPONSE_ALG_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Attribute local name.
- ID_TOKEN_ENCRYPTED_RESPONSE_ENC_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Attribute local name.
- ID_TOKEN_ISSUE_INSTANT - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
-
id_token issue instant.
- ID_TOKEN_SIGNED_RESPONSE_ALG_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Attribute local name.
- identifer - Variable in class net.shibboleth.oidc.profile.messaging.context.AbstractOIDCEntityContext
-
The identifier of the OIDC peer entity e.g.
- identifierExtractionStrategy - Variable in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
-
Strategy used to extract an identifier from the given metadata.
- identifierExtractionStrategy - Variable in class net.shibboleth.oidc.metadata.cache.impl.BaseMetadataCacheBuilderSpec
-
Strategy used to extract an identifier from the given metadata.
- IDTokenClaims - Enum Class in net.shibboleth.oidc.security.jwt.claims.impl
-
Enum of those OIDC ID token claims that are not part of the standard
JWT claims set. - IDTokenClaims(String) - Constructor for enum class net.shibboleth.oidc.security.jwt.claims.impl.IDTokenClaims
-
Constructor.
- idTokenEncryptedResponseAlg - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
ID token encrypted response algorithm for this entity.
- idTokenEncryptedResponseEnc - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
ID token encrypted response encoder for this entity.
- IDTokenLifetimeLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
A function that returns
OIDCIDTokenProducingProfileConfiguration.getIDTokenLifetime(ProfileRequestContext)if such a profile is available from aRelyingPartyContextobtained via a lookup function, by default a child of theProfileRequestContext. - IDTokenLifetimeLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.IDTokenLifetimeLookupFunction
- idTokenLifetimeLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Lookup function to supply ID token lifetime.
- IDTokenManipulationStrategyLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
A function that returns
OIDCIDTokenProducingProfileConfiguration.getIDTokenManipulationStrategy(ProfileRequestContext)if such a profile is available from aRelyingPartyContextobtained via a lookup function, by default a child of theProfileRequestContext. - IDTokenManipulationStrategyLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.IDTokenManipulationStrategyLookupFunction
- idTokenManipulationStrategyLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Lookup function to supply strategy bi-function for manipulating id_token claims.
- idTokenSignedResponseAlg - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
ID token signed response algorithm for this entity.
- ImplicitFlowEnabledPredicate - Class in net.shibboleth.oidc.profile.config.logic
-
A predicate implementation that forwards to
OAuth2FlowAwareProfileConfiguration.isImplicitFlowEnabled(ProfileRequestContext). - ImplicitFlowEnabledPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.ImplicitFlowEnabledPredicate
- implicitFlowPredicate - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2FlowAwareProfileConfiguration
-
Predicate used to indicate whether implicit flow is supported by this profile.
- INBOUND_MESSAGE_CLASS - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
-
The inbound (Nimbus) message class.
- InboundMessageClassLookupFunction - Class in net.shibboleth.oidc.profile.audit.impl
-
Looks up the value of the simple class name from the inbound message context's message object.
- InboundMessageClassLookupFunction() - Constructor for class net.shibboleth.oidc.profile.audit.impl.InboundMessageClassLookupFunction
- IncludeIssuerInAuthenticationResponsePredicate - Class in net.shibboleth.oidc.profile.config.logic
-
A predicate implementation that forwards to
OIDCAuthorizationConfiguration.isIncludeIssuerInResponse(ProfileRequestContext). - IncludeIssuerInAuthenticationResponsePredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.IncludeIssuerInAuthenticationResponsePredicate
- includeIssuerInResponsePredicate - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Whether to include iss parameter in the authentication response.
- indexedEntities - Variable in class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver.JsonBackingStore
-
Index of identifiers to their entity information.
- indexedValues - Variable in class net.shibboleth.oidc.metadata.impl.AbstractBackingStore
-
Index of entity IDs to their descriptors.
- indexEntityDescriptor(Value, Key, AbstractOIDCEntityResolver.JsonBackingStore) - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver
-
Index the specified entity descriptor, updating the specified entity backing store instance as necessary.
- indicatesSuccess() - Method in class net.shibboleth.oidc.profile.messaging.JSONErrorResponse
- indicatesSuccess() - Method in class net.shibboleth.oidc.profile.messaging.JSONSuccessResponse
- init() - Method in class net.shibboleth.oidc.attribute.resolver.spring.enc.impl.AttributeEncoderNamespaceHandler
- init() - Method in class net.shibboleth.oidc.profile.spring.relyingparty.metadata.impl.MetadataNamespaceHandler
- initialCleanupTaskDelay - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
-
The initial cleanup task delay.
- initialCleanupTaskDelay - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
-
The initial cleanup task delay.
- initialize() - Method in class net.shibboleth.oidc.security.credential.impl.AbstractClientInformationCredentialResolver
- initialize() - Method in class net.shibboleth.oidc.security.credential.impl.ProviderMetadataCredentialResolver
- initializeMetricsInstrumentation() - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
-
Initialize the Metrics-based instrumentation.
- initializeVerifier(Algorithm, Credential) - Static method in class net.shibboleth.oidc.security.impl.BaseSignedJWTTrustEngine
-
Initializes a
JWSVerifierfor the given algorithm, using the providedCredential. - initializeVerifier(Algorithm, Credential) - Static method in class net.shibboleth.oidc.security.impl.JWTSignatureValidationUtil
-
Initializes a
JWSVerifierfor the given algorithm, using the providedCredential. - INITIATE_LOGIN_URI_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Attribute local name.
- initiateLoginUri - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Initiate login URI for this entity.
- initMetadataResolver() - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver
-
Initialise this metadata provider.
- initMetadataResolver() - Method in class net.shibboleth.oidc.metadata.impl.JSONMapMetadataResolver
- initMetadataResolver() - Method in class net.shibboleth.oidc.metadata.impl.OIDCMapBasedMetadataResolver
- initMetadataResolver() - Method in class net.shibboleth.oidc.metadata.impl.OIDCProviderMetadataResolver
- initMetadataResolver() - Method in class net.shibboleth.oidc.metadata.policy.impl.OIDCMetadataPolicyResolver
-
Initialise this metadata provider.
- initOIDCResolver() - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver
-
Initializes this resolver by creating a new backing store.
- initOIDCResolver() - Method in class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver
- InlineJwksProvider - Class in net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider
-
Implementation of
KeyInfoProviderwhich provides basic support for extracting aJWKCredentialchild of KeyInfo. - InlineJwksProvider() - Constructor for class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.InlineJwksProvider
- inputstreamToByteArray(InputStream) - Static method in class net.shibboleth.oidc.metadata.impl.ResolverHelper
-
Converts an InputStream into a byte array.
- INVALID_ACCESS_TOKEN - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
-
The access token is invalid.
- INVALID_DPOP_ACCESS_TOKEN - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
-
The DPoP access token is invalid.
- INVALID_DPOP_NONCE - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
-
ID of event returned if the DPoP proof nonce is invalid.
- INVALID_DPOP_PROOF - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
-
ID of event returned if the DPoP proof is invalid.
- INVALID_GRANT - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
-
The provided authorization grant is invalid.
- INVALID_GRANT_TYPE - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
-
The grant type in token request is not supported for RP.
- INVALID_ID_TOKEN - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
-
The id_token is invalid.
- INVALID_ID_TOKEN_HINT - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
-
The id_token_hint is invalid.
- INVALID_PKCE_TRANSFORMATION_METHOD - Static variable in class net.shibboleth.oidc.profile.core.OidcError
-
The request contains an unsupported PKCE transform algorithm.
- INVALID_PKCE_TRANSFORMATION_METHOD - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
-
ID of event returned if the PKCE code verifier transformation method is invalid.
- INVALID_REDIRECT_URI - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
-
The redirect_uri in request is invalid.
- INVALID_REDIRECT_URIS - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
-
ID of event returned if the mandatory redirect_uris is invalid.
- INVALID_REQUEST_OBJECT - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
-
The request object cannot be validated.
- INVALID_REQUEST_URI - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
-
The request uri is invalid.
- INVALID_RESPONSE_MODE - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
-
The response type in request is not supported for RP.
- INVALID_RESPONSE_TYPE - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
-
The response type in request is not supported for RP.
- INVALID_SCOPE - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
-
The scope is invalid.
- INVALID_SUBJECT - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
-
The subject resolved is not the expected one.
- INVALID_TARGET - Static variable in class net.shibboleth.oidc.profile.core.OidcError
-
The resource indicator is invalid.
- INVALID_TARGET - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
-
The resource indicator is invalid.
- INVALID_TARGET_CODE - Static variable in class net.shibboleth.oidc.profile.core.OidcError
-
The resource indicator is invalid.
- INVALID_TOKEN - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
-
The token is invalid.
- INVALID_USERINFO_CLAIMS - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
-
The UserInfo claims are invalid.
- invalidate(IdentifierType) - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
-
Remove/discard from the backing store all metadata for the entity with the given identifier.
- invalidateAll() - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
-
Remove/discard all metadata for the backing store.
- IS_PASSIVE - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
-
prompt=none requested field.
- isAcrRequestAlwaysEssential(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Get whether all acr claim requests should be treated as Essential.
- isAcrRequestAlwaysEssential(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCAuthorizationConfiguration
-
Get whether all acr claim requests should be treated as Essential.
- isAllowPKCEPlain(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Get whether client is allowed to use PKCE code challenge method plain.
- isAllowPKCEPlain(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCSSOProfileConfiguration
-
Get whether client is allowed to use PKCE code challenge method plain.
- isAlwaysIssueBearerAccessToken(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Get whether the access token to be issued is always a bearer access token.
- isAlwaysIssueBearerAccessToken(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
-
Get whether the access token to be issued is always a bearer access token.
- isAlwaysIssueBearerAccessToken(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2AccessTokenProducingProfileConfiguration
-
Get whether the access token to be issued is always a bearer access token.
- isAuthorizationCodeFlowEnabled(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2FlowAwareProfileConfiguration
-
Get whether authorization code flow is supported by this profile.
- isAuthorizationCodeFlowEnabled(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2FlowAwareProfileConfiguration
-
Get whether authorization code flow is supported by this profile.
- isBackChannelLogoutSessionRequired() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Get the flag to require session id in back-channel logout request.
- isBackChannelLogoutSessionRequired() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Get the flag to require session id in back-channel logout request.
- isDataEncryptionAlgorithm(String) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
-
Evaluate whether the specified algorithm is a data encryption algorithm.
- isECKeyType(Key) - Static method in class net.shibboleth.oidc.security.credential.JWACredentialSupport
-
Returns true of the key is not null and is an EC key.
- isEncodeConsentInTokens(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Get whether to encode consent in authorization code and access/refresh tokens.
- isEncodeConsentInTokens(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCAuthorizationConfiguration
-
Get whether to encode consent in authorization code and access/refresh tokens.
- isEncryptionOptional(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Get whether encryption is optional in the face of a missing key, etc.
- isEncryptionOptional(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
- isEncryptionOptional(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCUserInfoConfiguration
- isEncryptionOptional(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
-
Get whether encryption is optional in the face of a missing key, etc.
- isEncryptionOptional(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenEncryptionProfileConfiguration
-
Get whether encryption is optional in the face of a missing key, etc.
- isEncryptRequestObject(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Should the RequestObject (if configured) be encrypted?
- isEncryptRequestObject(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCAuthenticationRelyingPartyProfileConfiguration
-
Should the RequestObject (if configured) be encrypted?
- isEnforceRefreshTokenRotation(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
-
Get whether always revoke the refresh_token after it's used.
- isEnforceRefreshTokenRotation(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenConfiguration
-
Get whether always revoke the refresh_token after it's used.
- isEssential() - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
-
Is the flag indicating that the claim must have a value enabled.
- isFailFastInitialization() - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver
-
Gets whether problems during initialization should cause the provider to fail or go on without metadata.
- isFailFastInitialization() - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver
-
Gets whether problems during initialization should cause the provider to fail or go on without metadata.
- isForceAuthn(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
- isForcePKCE(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Get whether client is required to use PKCE.
- isForcePKCE(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCSSOProfileConfiguration
-
Get whether client is required to use PKCE.
- isFrontChannelLogoutSessionRequired() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Get the flag to require session id in front-channel logout request.
- isFrontChannelLogoutSessionRequired() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Get the flag to require session id in front-channel logout request.
- isFrontChannelSuccess(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
- isFrontChannelSuccess(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCLogoutProfileConfiguration
-
Get whether to consider front-channel logout propagation successful.
- isHybridFlowEnabled(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCFlowAwareProfileConfiguration
-
Get whether the implicit flow is supported by this profile.
- isHybridFlowEnabled(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2FlowAwareProfileConfiguration
-
Get whether the implicit flow is supported by this profile.
- isImplicitFlowEnabled(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2FlowAwareProfileConfiguration
-
Get whether hybrid flow is supported by this profile.
- isImplicitFlowEnabled(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2FlowAwareProfileConfiguration
-
Get whether hybrid flow is supported by this profile.
- isIncludeIssuerInResponse(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Get whether to include iss parameter in the authentication response.
- isIncludeIssuerInResponse(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCAuthorizationConfiguration
-
Get whether to include iss parameter in the authentication response.
- isInitialized - Variable in class net.shibboleth.oidc.security.credential.impl.AbstractClientInformationCredentialResolver
-
Initialization flag.
- isInitialized - Variable in class net.shibboleth.oidc.security.credential.impl.ProviderMetadataCredentialResolver
-
Initialization flag.
- isInitialized() - Method in class net.shibboleth.oidc.security.credential.impl.AbstractClientInformationCredentialResolver
- isInitialized() - Method in class net.shibboleth.oidc.security.credential.impl.ProviderMetadataCredentialResolver
- isIssueIdTokenViaRefreshToken(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
-
Get whether the id_token is issued when refresh token grant is used.
- isIssueIdTokenViaRefreshToken(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenConfiguration
-
Get whether the id_token is issued when refresh token grant is used.
- isKeyEncryptionAlgorithm(String) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
-
Evaluate whether the specified algorithm is a key encryption or key wrapping algorithm.
- isLimitInitialAccessTokenToSelf(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
-
Get whether the initial access token audience is solely to self (i.e.
- isLimitInitialAccessTokenToSelf(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenConfiguration
-
Get whether the initial access token audience is solely to self (i.e.
- isLocalCredential(Credential) - Method in class net.shibboleth.oidc.security.credential.impl.LocalJOSEObjectCredentialResolver
-
Determine whether the credential is a local credential.
- isMatchOnIdentifierRequired() - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
-
Is a match on identifier required?
- isMatchOnIdentifierRequired() - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCacheBuilderSpec
-
Get if an identifier criteria match is required.
- isPreferFrontChannel(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
- isPreferFrontChannel(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCLogoutProfileConfiguration
-
Get whether to prefer front-channel if both are defined for the RP.
- isProxiedAuthnInstant(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Gets whether authentication results produced by use of this profile should carry the proxied assertion's auth_time from the id_token, rather than the current time.
- isProxiedAuthnInstant(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCAuthenticationRelyingPartyProfileConfiguration
-
Gets whether authentication results produced by use of this profile should carry the proxied assertion's auth_time from the id_token, rather than the current time.
- isRefreshTokensEnabled(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2FlowAwareProfileConfiguration
-
Get whether refresh tokens are supported by this profile.
- isRefreshTokensEnabled(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2FlowAwareProfileConfiguration
-
Get whether refresh tokens are supported by this profile.
- isRemoveData(MetadataManagementData<IdentifierType>, Instant, Instant) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache.ExpiredAndIdleMetadataCleanupTask
-
Determine whether metadata should be removed based on expiration and idle time data.
- isRemoveIdleEntityData() - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
-
Should idle metadata be removed?
- isRequireAuthenticationRequest(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Get whether client is required to use OIDC authentication request vs plain OAuth2 authorization request.
- isRequireAuthenticationRequest(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2AuthorizationProfileConfiguration
-
Get whether client is required to use OIDC authentication request vs plain OAuth2 authorization request.
- isRequireAuthTime() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Get the flag to require authentication time.
- isRequireAuthTime() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Get the flag to require authentication time.
- isRequireDpopJkt(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Get whether client is required to include jkt parameter in authorization requests.
- isRequireDpopJkt(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2AuthorizationProfileConfiguration
-
Get whether client is required to include jkt parameter in authorization requests.
- isRequireDpopProof(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Get whether client is required to include DPoP Proof JWT in request.
- isRequireDpopProof(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2DPoPProofValidatingProfileConfiguration
-
Get whether client is required to include DPoP Proof JWT in request.
- isRequireIdTokenHint(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
- isRequireIdTokenHint(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCLogoutProfileConfiguration
-
Get whether to require the use of id_token_hint in an OIDC RP-initiated logout sequence.
- isRequirePushedAuthorizationRequest(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Get whether client is required to use pushed authorization requests.
- isRequirePushedAuthorizationRequest(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2AuthorizationProfileConfiguration
-
Get whether client is required to use pushed authorization requests.
- isRequireValidMetadata() - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor.SkeletonEchoingRoleDescriptorResolver
- isResolveAttributes(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
- isResolveAttributes(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCUserInfoConfiguration
- isResolveAttributes(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
- isRetrieveUserInfoEndpointClaims(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Get whether to make a request to the UserInfo Endpoint to obtain authenticated End-User claims.
- isRetrieveUserInfoEndpointClaims(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCAuthenticationRelyingPartyProfileConfiguration
-
Get whether to make a request to the UserInfo Endpoint to obtain authenticated End-User claims.
- isRevokeTokens(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
- isRevokeTokens(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCLogoutProfileConfiguration
-
Get whether to revoke the tokens related to the session to be logged out.
- isSatisfyAnyPredicates() - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver
-
Get the flag indicating whether resolved credentials may satisfy any predicates (i.e.
- isSignRequestObject(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Should the RequestObject (if configured) be signed?
- isSignRequestObject(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCAuthenticationRelyingPartyProfileConfiguration
-
Should the RequestObject (if configured) be signed?
- isStrictScopeValidation(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Get whether scope validation is strict, i.e.
- isStrictScopeValidation(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2ScopeValidatingProfileConfiguration
-
Get whether scope validation is strict, i.e.
- isSubsetOfValues(Object, Collection<?>) - Static method in class net.shibboleth.oidc.metadata.policy.impl.MetadataPolicyHelper
-
Checks if the given candiate is a subset of the given values.
- ISSUED_AT_CLAIM - Enum constant in enum class net.shibboleth.oidc.security.jwt.claims.impl.JWTClaims
-
Time at which the JWT was issued.
- IssuedAtClaimsValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl
-
If the 'iat' claim is present in the JWT, verifies it is not to far away from the current time.
- IssuedAtClaimsValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.IssuedAtClaimsValidator
-
Constructor.
- IssuedClaimsValidatorLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
A function that obtains
OAuth2TokenValidatingProfileConfiguration.getIssuedClaimsValidator(ProfileRequestContext)if such a profile is available from aRelyingPartyContextobtained via a lookup function, by default a child of theProfileRequestContext. - IssuedClaimsValidatorLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.IssuedClaimsValidatorLookupFunction
- issuedClaimsValidatorLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2TokenValidatingConfiguration
-
Validation of JWT claims for issued tokens.
- issueIdTokenViaRefreshTokenPredicate - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
-
Whether issue id_token when refresh_token is used.
- IssueIdTokenViaRefreshTokenPredicate - Class in net.shibboleth.oidc.profile.config.logic
-
A predicate implementation that forwards to
OAuth2TokenConfiguration.isIssueIdTokenViaRefreshToken(ProfileRequestContext). - IssueIdTokenViaRefreshTokenPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.IssueIdTokenViaRefreshTokenPredicate
- ISSUER - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
-
OIDC issuer.
- ISSUER_CLAIM - Enum constant in enum class net.shibboleth.oidc.security.jwt.claims.impl.JWTClaims
-
Issuer Identifier for the Issuer of the response.
- IssuerIDCriterion - Class in net.shibboleth.oidc.metadata.criterion
-
A
Criterionrepresenting an OIDC issuer ID. - IssuerIDCriterion(Issuer) - Constructor for class net.shibboleth.oidc.metadata.criterion.IssuerIDCriterion
-
Constructor.
- IssuerIDFromOIDCProviderMetadataContextLookupFunction - Class in net.shibboleth.oidc.profile.logic
-
A function that returns the issuer id via the provider information stored in
OIDCProviderMetadataContext. - IssuerIDFromOIDCProviderMetadataContextLookupFunction() - Constructor for class net.shibboleth.oidc.profile.logic.IssuerIDFromOIDCProviderMetadataContextLookupFunction
-
Constructor.
- issuerLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Lookup function to override issuer value.
- issuerLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCDynamicRegistrationConfiguration
-
Lookup function to override issuer value.
- issuerLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
-
Lookup function to override issuer value.
- issuerLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCProviderInformationConfiguration
-
Lookup function to override issuer value.
- issuerLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2TokenValidatingConfiguration
-
Lookup function to override issuer value.
- issuerLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2PushedAuthorizationRequestConfiguration
-
Lookup function to override issuer value.
- issuerLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
-
Lookup function to override issuer value.
- isSupersetOfValues(Object, Collection<?>) - Static method in class net.shibboleth.oidc.metadata.policy.impl.MetadataPolicyHelper
-
Checks if the given candidate is a superset of the given values.
- isTlsServerValidationSufficient(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Is TLS server validation of the token endpoint sufficient to verify an id_token without checking the id_token signature.
- isTlsServerValidationSufficient(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCAuthenticationRelyingPartyProfileConfiguration
-
Is TLS server validation of the token endpoint sufficient to verify an id_token without checking the id_token signature.
- isTrusted() - Method in class net.shibboleth.oidc.metadata.filter.MetadataSource
-
Get whether the metadata source is trusted.
- isUseRequestObject(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Should OpenID specific authentication request parameters should be passed in a single, self contained, JWT?
- isUseRequestObject(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCAuthenticationProfileConfiguration
-
Should OpenID specific authentication request parameters should be passed in a single, self contained, JWT?
J
- jcaAlg - Variable in class net.shibboleth.oidc.security.credential.BasicExpiringJWTSharedSecretCredentialFactoryBean
-
The JCA algorithm to set on the
SecretKey. - JCAConstantExtension - Class in net.shibboleth.oidc.jwa.support
-
Additional constants to
JCAConstantsdefined in and/or used with the Java Cryptography Architecture (JCA) specification. - JCAConstantExtension() - Constructor for class net.shibboleth.oidc.jwa.support.JCAConstantExtension
-
Private constructor.
- joseHeaderLookupStrategy - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AccessTokenHashValidator
-
Strategy to find the JOSE headers relating to the id_token the at_hash is taken from.
- joseObject - Variable in class net.shibboleth.oidc.security.jose.criterion.JOSEObjectCriterion
-
The JOSEObject which serves as the source for credential criteria.
- joseObjectCredentialResolver - Variable in class net.shibboleth.oidc.security.impl.BaseSignedJWTTrustEngine
-
Resolver of credentials from JOSEObject headers.
- JOSEObjectCredentialResolver - Interface in net.shibboleth.oidc.security.credential
-
Specialized
CredentialResolvermarker interface for resolvers which resolve credentials from the headers of aJOSEObjectinstance. - JOSEObjectCriterion - Class in net.shibboleth.oidc.security.jose.criterion
-
An implementation of
Criterionwhich specifies criteria based on the contents of aJOSEObjectelement. - JOSEObjectCriterion(JOSEObject) - Constructor for class net.shibboleth.oidc.security.jose.criterion.JOSEObjectCriterion
-
Constructor.
- jsonBackingStore - Variable in class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver
-
Backing store for runtime JSON data.
- JsonBackingStore() - Constructor for class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver.JsonBackingStore
-
Constructor.
- JSONErrorResponse - Class in net.shibboleth.oidc.profile.messaging
-
Class for creating JSON Error response for requests expecting JSON response.
- JSONErrorResponse(ErrorObject) - Constructor for class net.shibboleth.oidc.profile.messaging.JSONErrorResponse
-
Constructor.
- JSONErrorResponse(ErrorObject, String, String) - Constructor for class net.shibboleth.oidc.profile.messaging.JSONErrorResponse
-
Constructor.
- JSONMapMetadataResolver - Class in net.shibboleth.oidc.metadata.impl
-
Concrete metadata resolver for OIDC Provider configuration metadata resolution.
- JSONMapMetadataResolver(MetadataCache<Map<String, Object>>) - Constructor for class net.shibboleth.oidc.metadata.impl.JSONMapMetadataResolver
-
Constructor.
- JSONMetadataResolver - Interface in net.shibboleth.oidc.metadata
-
A resolver that is capable of resolving
Mapinstances which meet certain supplied criteria. - JSONSecurityConfiguration - Class in net.shibboleth.oidc.profile.config
-
Class extends SecurityConfiguration to support separate configuration for various encryption and signature validation operations.
- JSONSecurityConfiguration() - Constructor for class net.shibboleth.oidc.profile.config.JSONSecurityConfiguration
-
Constructor.
- JSONSecurityConfiguration(Duration, IdentifierGenerationStrategy) - Constructor for class net.shibboleth.oidc.profile.config.JSONSecurityConfiguration
-
Constructor.
- JSONSuccessResponse - Class in net.shibboleth.oidc.profile.messaging
-
Class for creating JSON Success response.
- JSONSuccessResponse(JSONObject) - Constructor for class net.shibboleth.oidc.profile.messaging.JSONSuccessResponse
-
Constructor.
- JSONSuccessResponse(JSONObject, String, String) - Constructor for class net.shibboleth.oidc.profile.messaging.JSONSuccessResponse
-
Constructor.
- JWACredentialSupport - Class in net.shibboleth.oidc.security.credential
-
Support class for JSON Web Algorithm credentials.
- JWACredentialSupport() - Constructor for class net.shibboleth.oidc.security.credential.JWACredentialSupport
-
Constructor.
- JWEDataEncryptionAlgorithmsLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
A function that returns
EncryptionConfiguration.getDataEncryptionAlgorithms()if it is available in the OIDC security configuration of the profile configuration. - JWEDataEncryptionAlgorithmsLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.JWEDataEncryptionAlgorithmsLookupFunction
- JWEKeyTransportEncryptionAlgorithmsLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
A function that returns
EncryptionConfiguration.getKeyTransportEncryptionAlgorithms()if it is available in the OIDC security configuration of the profile configuration. - JWEKeyTransportEncryptionAlgorithmsLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.JWEKeyTransportEncryptionAlgorithmsLookupFunction
- JWETokenDecrypter - Class in net.shibboleth.oidc.security.impl
-
Supports decryption of encrypted JSON Web Tokens using the JSON Web Encryption standard.
- JWETokenDecrypter(DecryptionParameters) - Constructor for class net.shibboleth.oidc.security.impl.JWETokenDecrypter
-
Constructor.
- jwkAlgorithm - Variable in class net.shibboleth.oidc.security.credential.BasicJWKCredential
-
jwk algorithm.
- JWKCredential - Interface in net.shibboleth.oidc.security.credential
-
Credential based on JSON Web Key (JWK).
- JWKCredentialsToPublishLookupStrategy - Class in net.shibboleth.oidc.profile.config.navigate
-
Strategy to locate the set of JWK credentials to publish in a KeySet document.
- JWKCredentialsToPublishLookupStrategy() - Constructor for class net.shibboleth.oidc.profile.config.navigate.JWKCredentialsToPublishLookupStrategy
- JWKCredentialSupport - Class in net.shibboleth.oidc.security.credential
-
Provide JWK specific credential support.
- JWKCredentialSupport() - Constructor for class net.shibboleth.oidc.security.credential.JWKCredentialSupport
-
Constructor.
- jwkKid - Variable in class net.shibboleth.oidc.security.credential.BasicJWKCredential
-
jwk kid.
- JWKReferenceCredential - Interface in net.shibboleth.oidc.security.credential
-
Credential based on a reference (URI) to a JSON Web Key (JWK).
- jwkResource - Variable in class net.shibboleth.oidc.security.credential.BasicJWKCredentialFactoryBean
-
Where the private key is to be found.
- JwksData - Interface in net.shibboleth.oidc.saml.xmlobject
-
SAML2 OIDC metadata extension 'JwksData'.
- JwksDataBuilder - Class in net.shibboleth.oidc.saml.xmlobject.impl
-
Builder of
JwksDataImpl. - JwksDataBuilder() - Constructor for class net.shibboleth.oidc.saml.xmlobject.impl.JwksDataBuilder
- JwksDataImpl - Class in net.shibboleth.oidc.saml.xmlobject.impl
-
Concrete implementation of
JwksData. - JwksDataImpl(String, String, String) - Constructor for class net.shibboleth.oidc.saml.xmlobject.impl.JwksDataImpl
-
Constructor.
- jwkSet - Variable in class net.shibboleth.oidc.security.jose.criterion.JWKSetCriterion
-
The JWKSet which serves as a source of credentials.
- JWKSetCriterion - Class in net.shibboleth.oidc.security.jose.criterion
- JWKSetCriterion(JWKSet) - Constructor for class net.shibboleth.oidc.security.jose.criterion.JWKSetCriterion
-
Constructor.
- JWKSReferenceProvider - Class in net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider
-
Implementation of
KeyInfoProviderwhich provides basic support for extracting aJWKReferenceCredentialchild of KeyInfo. - JWKSReferenceProvider() - Constructor for class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.JWKSReferenceProvider
- JwksUri - Interface in net.shibboleth.oidc.saml.xmlobject
-
SAML2 OIDC metadata extension 'JwksUri'.
- JwksUriBuilder - Class in net.shibboleth.oidc.saml.xmlobject.impl
-
Builder of
JwksUriImpl. - JwksUriBuilder() - Constructor for class net.shibboleth.oidc.saml.xmlobject.impl.JwksUriBuilder
- JwksUriImpl - Class in net.shibboleth.oidc.saml.xmlobject.impl
-
Concrete implementation of
JwksUri. - JwksUriImpl(String, String, String) - Constructor for class net.shibboleth.oidc.saml.xmlobject.impl.JwksUriImpl
-
Constructor.
- JWSAssemblyUtils - Class in net.shibboleth.oidc.security
-
Generic utility class for helping with JWS assembly.
- JWSAssemblyUtils() - Constructor for class net.shibboleth.oidc.security.JWSAssemblyUtils
-
Private constructor.
- JWSSignatureAlgorithmsLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
A function that returns
SignatureSigningConfiguration.getSignatureAlgorithms()if it is available in the OIDC security configuration of the profile configuration. - JWSSignatureAlgorithmsLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.JWSSignatureAlgorithmsLookupFunction
- JWSTokenSigner - Class in net.shibboleth.oidc.security.impl
-
Supports signing a JSON Web Token (JWT) claims set using the JSON Web Signature standard using the algorithm and credential contained inside the
SignatureSigningParameters. - JWSTokenSigner(SignatureSigningParameters) - Constructor for class net.shibboleth.oidc.security.impl.JWSTokenSigner
-
Constructor.
- JWT_ID_CLAIM - Enum constant in enum class net.shibboleth.oidc.security.jwt.claims.impl.JWTClaims
-
The "jti" (JWT ID) claim provides a unique identifier for the JWT.
- JWTClaims - Enum Class in net.shibboleth.oidc.security.jwt.claims.impl
-
Enum that represents the standard set of registered JWT claims.
- JWTClaims(String) - Constructor for enum class net.shibboleth.oidc.security.jwt.claims.impl.JWTClaims
-
Constructor.
- jwtClaimSetToSign - Variable in class net.shibboleth.oidc.security.impl.SignJWTHandler
-
The stashed claims to sign.
- jwtDecryptConfig - Variable in class net.shibboleth.oidc.profile.config.JSONSecurityConfiguration
-
Configuration used when decrypting JWE tokens.
- JWTDecryptionConfigurationLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
A function that returns a
DecryptionConfigurationlist for JWE decrypting by way of various lookup strategies. - JWTDecryptionConfigurationLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.JWTDecryptionConfigurationLookupFunction
- jwtEncryptConfig - Variable in class net.shibboleth.oidc.profile.config.JSONSecurityConfiguration
-
Configuration used when encrypting JWE tokens.
- JWTEncryptionConfigurationLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
A function that returns an
EncryptionConfigurationlist for JWT encryption by way of various lookup strategies. - JWTEncryptionConfigurationLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.JWTEncryptionConfigurationLookupFunction
- JWTIdentifierClaimsValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl
-
Verifies the identifier (jit) from the JWT against replay via configurable
ReplayCache. - JWTIdentifierClaimsValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierClaimsValidator
-
Constructor.
- JWTIdentifierRevocationValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl
-
Verifies the identifier (jit) from the JWT against revocation via configurable
RevocationCache. - JWTIdentifierRevocationValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierRevocationValidator
- jwtLookupStrategy - Variable in class net.shibboleth.oidc.profile.audit.impl.ClaimSetFromJWTLookupStrategy
-
Strategy used to lookup the JWT to retrieve the claimsset from.
- JWTMessageSignatureSecurityHandler - Class in net.shibboleth.oidc.security.impl
-
A
MessageHandlerthat uses aTrustEngineto evaluate the signature of a signed JWT. - JWTMessageSignatureSecurityHandler() - Constructor for class net.shibboleth.oidc.security.impl.JWTMessageSignatureSecurityHandler
- jwtSignatureSigningConfig - Variable in class net.shibboleth.oidc.profile.config.JSONSecurityConfiguration
-
Configuration used when JWS tokens.
- JWTSignatureSigningConfigurationLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
A function that returns a
SignatureSigningConfigurationlist for JWT signing by way of various lookup strategies. - JWTSignatureSigningConfigurationLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.JWTSignatureSigningConfigurationLookupFunction
- jwtSignatureValidationConfig - Variable in class net.shibboleth.oidc.profile.config.JSONSecurityConfiguration
-
Configuration used when validating JWS signatures.
- JWTSignatureValidationConfigurationLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
A function that returns a
SignatureValidationConfigurationlist for JWS validation by way of various lookup strategies. - JWTSignatureValidationConfigurationLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.JWTSignatureValidationConfigurationLookupFunction
- JWTSignatureValidationUtil - Class in net.shibboleth.oidc.security.impl
-
Generic utility class for helping JWT signature validation.
- JWTSignatureValidationUtil() - Constructor for class net.shibboleth.oidc.security.impl.JWTSignatureValidationUtil
-
Private constructor.
- jwtTokenLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration
-
Function that looks up an encrypted JWT token from the given profile context to validate .
- jwtTokenLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler
-
Function that looks up a signed JWT token from the given message context to validate .
- jwtTokenLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.DecryptJWE
-
Function that looks up a signed JWT token from the given message context to validate.
- jwtTokenLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.JWTMessageSignatureSecurityHandler
-
Function that looks up a signed JWT token from the given message context to validate.
- jwtUpdateConsumer - Variable in class net.shibboleth.oidc.security.impl.EncryptJWTHandler
-
A consumer that takes the EncryptedJWT and updates the correct object inside the MessageContext.
- jwtUpdateConsumer - Variable in class net.shibboleth.oidc.security.impl.SignJWTHandler
-
A consumer that takes the Signed JWT and updates the correct object inside the MessageContext.
- jwtUpdateStrategy - Variable in class net.shibboleth.oidc.security.impl.DecryptJWE
-
A consumer that sets the JWT produced from this decryption operation back into the profile request context.
- JWTValidationException - Exception in net.shibboleth.oidc.jwt.claims
-
JWT validation exception, to throw when validation fails.
- JWTValidationException() - Constructor for exception net.shibboleth.oidc.jwt.claims.JWTValidationException
-
Constructor.
- JWTValidationException(Exception) - Constructor for exception net.shibboleth.oidc.jwt.claims.JWTValidationException
-
Constructor.
- JWTValidationException(String) - Constructor for exception net.shibboleth.oidc.jwt.claims.JWTValidationException
-
Constructor.
- JWTValidationException(String, Exception) - Constructor for exception net.shibboleth.oidc.jwt.claims.JWTValidationException
-
Constructor.
K
- kekKeyCredentialResolver - Variable in class net.shibboleth.oidc.security.jose.DecryptionParameters
-
The encrypted content encrypted key's (CEK) credential resolver.
- kekKeyCredentialResolver - Variable in class net.shibboleth.oidc.security.jose.impl.BasicDecryptionConfiguration
-
The EncryptedKey's credential resolver.
- kekKeyCredentialResolver - Variable in class net.shibboleth.oidc.security.jose.impl.BasicEncryptionConfiguration
-
The EncryptedKey's credential resolver.
- KeyAgreementECDHES - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
-
Algorithm descriptor for JWE key management algorithm: ECDH-ES.
- KeyAgreementECDHES() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyAgreementECDHES
- KeyAgreementECDHESA128KW - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
-
Algorithm descriptor for JWE key management algorithm: ECDH-ES+A128KW.
- KeyAgreementECDHESA128KW() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyAgreementECDHESA128KW
- KeyAgreementECDHESA192KW - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
-
Algorithm descriptor for JWE key management algorithm: ECDH-ES+A192KW.
- KeyAgreementECDHESA192KW() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyAgreementECDHESA192KW
- KeyAgreementECDHESA256KW - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
-
Algorithm descriptor for JWE key management algorithm: ECDH-ES+A256KW.
- KeyAgreementECDHESA256KW() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyAgreementECDHESA256KW
- keyFetchInterval - Variable in class net.shibboleth.oidc.security.credential.impl.ClientInformationCredentialResolver
-
The remote key refresh interval.
- keyFetchInterval - Variable in class net.shibboleth.oidc.security.credential.impl.ProviderMetadataCredentialResolver
-
The remote key refresh interval.
- keyId - Variable in class net.shibboleth.oidc.security.credential.impl.EvaluableKeyIDCredentialCriterion
-
Base criteria.
- keyId - Variable in class net.shibboleth.oidc.security.jose.criterion.KeyIdCriterion
-
Expected key ID of resolved credentials.
- KeyIdCriterion - Class in net.shibboleth.oidc.security.jose.criterion
-
An implementation of
Criterionwhich specifies key ID criteria. - KeyIdCriterion(String) - Constructor for class net.shibboleth.oidc.security.jose.criterion.KeyIdCriterion
-
Constructor.
- keyInfoCredentialResolver - Variable in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
-
The
KeyInfoCredentialResolverto be used for the resolution. - keyLengthSupportsMACAlgorithm(JWSAlgorithm, Key) - Static method in class net.shibboleth.oidc.security.credential.JWACredentialSupport
-
Check the key length is compatible with the given JWS algorithm.
- KeyManagementConstants - Class in net.shibboleth.oidc.jwa.support
-
Algorithm Header Parameter 'alg' Values for JWE as defined by RFC 7518.
- KeyManagementConstants() - Constructor for class net.shibboleth.oidc.jwa.support.KeyManagementConstants
-
Constructor.
- KeyManagmentAlgorithmCriterion - Class in net.shibboleth.oidc.security.credential.impl
-
An implementation of
Criterionwhich specifies key management algorithm criteria. - KeyManagmentAlgorithmCriterion(String) - Constructor for class net.shibboleth.oidc.security.credential.impl.KeyManagmentAlgorithmCriterion
-
Constructor.
- keyName - Variable in class net.shibboleth.oidc.profile.config.navigate.ClientInformationStringValueLookupFunction
-
The key for which to fetch the value for.
- keyName - Variable in class net.shibboleth.oidc.profile.config.navigate.ProviderMetadataStringValuesLookupFunction
-
The key for which to fetch the value for.
- keySupportsCurve(ECKey, JWSAlgorithm) - Static method in class net.shibboleth.oidc.security.credential.JWACredentialSupport
-
Is the EC key supplied compatible with the EC Curve required by the algorithm given.
- keySupportsCurve(ECKey, String) - Static method in class net.shibboleth.oidc.security.credential.JWACredentialSupport
-
Is the EC key supplied compatible with the EC Curve required by the algorithm given.
- keyToCredential(JWK) - Static method in class net.shibboleth.oidc.security.CredentialConversionUtil
-
Converts a JWK to an internal Credential.
- keyTransportEncryptionAlgorithmLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration
-
A lookup function for the key transport algorithm in the client metadata.
- keyTransportEncryptionAlgorithms - Variable in class net.shibboleth.oidc.security.jose.impl.BasicEncryptionConfiguration
-
Key transport encryption algorithm URIs.
- keyTransportEncryptionAlgorithmsLookupStrategy - Variable in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
-
A lookup strategy to locate key encryption algorithms from the given criteria set and includesExcludes predicate.
- keyTransportEncryptionAlgorithmURI - Variable in class net.shibboleth.oidc.security.jose.EncryptionParameters
-
The EncryptedKey encryption algorithm URI.
- keyTransportEncryptionCredential - Variable in class net.shibboleth.oidc.security.jose.EncryptionParameters
-
The EncryptedKey encryption credential.
- KeyTransportRSA15 - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
-
Algorithm descriptor for JWE key transport algorithm: RSA1_5.
- KeyTransportRSA15() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSA15
- KeyTransportRSAOAEP - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
-
Algorithm descriptor for JWE key transport algorithm: RSA-OAEP.
- KeyTransportRSAOAEP() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP
- KeyTransportRSAOAEP256 - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
-
Algorithm descriptor for JWE key transport algorithm: RSA-OAEP-256.
- KeyTransportRSAOAEP256() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP256
- KeyTransportRSAOAEP384 - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
-
Algorithm descriptor for JWE key transport algorithm: RSA-OAEP-384.
- KeyTransportRSAOAEP384() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP384
- KeyTransportRSAOAEP512 - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
-
Algorithm descriptor for JWE key transport algorithm: RSA-OAEP-512.
- KeyTransportRSAOAEP512() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP512
- keyTrust - Variable in class net.shibboleth.oidc.security.impl.ExplicitKeySignedJWTTrustEngine
-
The external explicit key trust engine to use as a basis for trust in this implementation.
L
- lastAccessedTime - Variable in class net.shibboleth.oidc.metadata.MetadataManagementData
-
The last time at which the entity's backing store data was accessed.
- lastRefresh - Variable in class net.shibboleth.oidc.metadata.cache.CacheLoadingContext
-
Last time a refresh cycle occurred.
- lastRefresh - Variable in class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver
-
Last time a refresh cycle occurred.
- lastRefresh - Variable in class net.shibboleth.oidc.metadata.impl.DefaultBatchBackingStore
-
Last time a refresh cycle occurred.
- lastUpdate - Variable in class net.shibboleth.oidc.metadata.cache.CacheLoadingContext
-
Last time the metadata was updated.
- lastUpdate - Variable in class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver
-
Last time the metadata was updated.
- lastUpdate - Variable in class net.shibboleth.oidc.metadata.impl.DefaultBatchBackingStore
-
Last time the metadata was updated.
- lastUpdateTime - Variable in class net.shibboleth.oidc.metadata.MetadataManagementData
-
Last update time of the associated metadata.
- limitInitialAccessTokenToSelfPredicate - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
-
Whether initial access token audience is solely to self (i.e.
- LimitInitialAccessTokenToSelfPredicate - Class in net.shibboleth.oidc.profile.config.logic
-
A predicate implementation that forwards to
OAuth2TokenConfiguration.isLimitInitialAccessTokenToSelf(ProfileRequestContext). - LimitInitialAccessTokenToSelfPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.LimitInitialAccessTokenToSelfPredicate
- load(CacheLoadingContext) - Method in class net.shibboleth.oidc.metadata.cache.impl.DefaultFileLoadingStrategy
-
Load cache data from a source.
- load(CacheLoadingContext) - Method in class net.shibboleth.oidc.metadata.cache.impl.DefaultResourceLoadingStrategy
-
Load cache data from a source.
- load(CacheLoadingContext) - Method in interface net.shibboleth.oidc.metadata.cache.LoadingStrategy
-
Load cache data from a source.
- loadCache() - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
-
Reload the entire backing-store cache using the loading strategy.
- loadingStrategy - Variable in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
-
The function to use to load metadata.
- loadingStrategy - Variable in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCacheBuilderSpec
-
The function to use to load metadata.
- LoadingStrategy - Interface in net.shibboleth.oidc.metadata.cache
-
A strategy that loads binary information from a configured source.
- localCredResolver - Variable in class net.shibboleth.oidc.security.credential.impl.LocalJOSEObjectCredentialResolver
-
The resolver which is used to resolve local credentials.
- LocalJOSEObjectCredentialResolver - Class in net.shibboleth.oidc.security.credential.impl
-
A simple specialization of
BasicJOSEObjectCredentialResolverwhich is capable of resolving local credentials from a suppliedCredentialResolverwhich manages local credentials. - LocalJOSEObjectCredentialResolver(JOSEObjectCredentialResolver) - Constructor for class net.shibboleth.oidc.security.credential.impl.LocalJOSEObjectCredentialResolver
-
Constructor.
- location - Variable in class net.shibboleth.oidc.metadata.criterion.ResourceLocationCriterion
-
The resource location.
- log - Variable in class net.shibboleth.oidc.attribute.transcoding.AbstractOIDCAttributeTranscoder
-
Class logger.
- log - Variable in class net.shibboleth.oidc.attribute.transcoding.impl.OIDCScopedStringAttributeTranscoder
-
Class logger.
- log - Variable in class net.shibboleth.oidc.attribute.transcoding.impl.OIDCStringAttributeTranscoder
-
Class logger.
- log - Variable in class net.shibboleth.oidc.jwk.RemoteJwkSetCache
-
Logger.
- log - Variable in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
-
Class logger.
- log - Variable in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
-
Class logger.
- log - Variable in class net.shibboleth.oidc.metadata.cache.impl.DefaultFileLoadingStrategy
-
Class logger.
- log - Variable in class net.shibboleth.oidc.metadata.cache.impl.DefaultJSONMapParsingStrategy
-
Class logger.
- log - Variable in class net.shibboleth.oidc.metadata.cache.impl.DefaultOIDCProviderMetadataParsingStrategy
-
Class logger.
- log - Variable in class net.shibboleth.oidc.metadata.cache.impl.DefaultResourceLoadingStrategy
-
Class logger.
- log - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache.ExpiredAndIdleMetadataCleanupTask
-
Logger.
- log - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
-
Class logger.
- log - Variable in class net.shibboleth.oidc.metadata.cache.impl.FetchThroughMetadataCache
-
Class logger.
- log - Variable in class net.shibboleth.oidc.metadata.cache.impl.MetadataCacheBuilder.Builder
-
Class logger.
- log - Variable in class net.shibboleth.oidc.metadata.impl.AbstractDynamicHTTPFetchingStrategy
-
Class logger.
- log - Variable in class net.shibboleth.oidc.metadata.impl.AbstractFileOIDCEntityResolver
-
Class logger.
- log - Variable in class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver
-
Class logger.
- log - Variable in class net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver
-
Class logger.
- log - Variable in class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver
-
Class logger.
- log - Variable in class net.shibboleth.oidc.metadata.impl.ChainingClientInformationResolver
-
Class logger.
- log - Variable in class net.shibboleth.oidc.metadata.impl.ChainingProviderMetadataResolver
-
Class logger.
- log - Variable in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
-
Class logger.
- log - Variable in class net.shibboleth.oidc.metadata.impl.FilesystemClientInformationResolver
-
Class logger.
- log - Variable in class net.shibboleth.oidc.metadata.impl.FilesystemProviderMetadataResolver
-
Class logger.
- log - Variable in class net.shibboleth.oidc.metadata.impl.HTTPProviderConfigurationFetchingStrategy
-
Class logger.
- log - Variable in class net.shibboleth.oidc.metadata.impl.HTTPProviderConfigurationFetchingStrategy.OIDCProviderMetadataResponseHandler
-
Class logger.
- log - Variable in class net.shibboleth.oidc.metadata.impl.PropertiesClientSecretValueResolver
-
Class logger.
- log - Variable in class net.shibboleth.oidc.metadata.impl.ReloadingProviderMetadataProvider
-
Class logger.
- log - Variable in class net.shibboleth.oidc.metadata.impl.ReloadingRelyingPartyClientInformationProvider
-
Class logger.
- log - Variable in class net.shibboleth.oidc.metadata.impl.ResolverServiceClientSecretValueResolver
-
Class logger.
- log - Variable in class net.shibboleth.oidc.metadata.impl.StorageServiceClientInformationManager
-
Class logger.
- log - Variable in class net.shibboleth.oidc.metadata.impl.StorageServiceClientInformationResolver
-
Class logger.
- log - Variable in class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.ClientSecretProvider
-
Class logger.
- log - Variable in class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.ClientSecretReferenceProvider
-
Class logger.
- log - Variable in class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.InlineJwksProvider
-
Class logger.
- log - Variable in class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.JWKSReferenceProvider
-
Class logger.
- log - Variable in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyEnforcer
-
Class logger.
- log - Variable in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyResponseHandler
-
Class logger.
- log - Variable in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyValidator
-
Class logger.
- log - Variable in class net.shibboleth.oidc.metadata.policy.impl.MetadataPolicyViaLocationFetchingStrategy
-
Class logger.
- log - Variable in class net.shibboleth.oidc.metadata.ProviderMetadataProviderContainer
-
Class logger.
- log - Variable in class net.shibboleth.oidc.metadata.RelyingPartyClientInformationProvider
-
Class logger.
- log - Variable in class net.shibboleth.oidc.profile.audit.impl.AbstractClaimsSetAuditExtractor
-
Class logger.
- log - Variable in class net.shibboleth.oidc.profile.audit.impl.ClaimSetFromJWTLookupStrategy
-
Class logger.
- log - Variable in class net.shibboleth.oidc.profile.audit.impl.DateBasedJWTClaimAuditExtractor
-
Class logger.
- log - Variable in class net.shibboleth.oidc.profile.config.navigate.ClientInformationStringValueLookupFunction
-
Class logger.
- log - Variable in class net.shibboleth.oidc.profile.config.navigate.JWKCredentialsToPublishLookupStrategy
-
Class logger.
- log - Variable in class net.shibboleth.oidc.profile.config.navigate.ProviderMetadataStringValuesLookupFunction
-
Class logger.
- log - Variable in class net.shibboleth.oidc.profile.config.navigate.ResolverBasedRegistrationMetadataPolicyLookupFunction
-
Class logger.
- log - Variable in class net.shibboleth.oidc.profile.decoding.impl.HTTPPostAuthnResponseDecoder
-
Class logger.
- log - Variable in class net.shibboleth.oidc.profile.decoding.impl.HTTPRedirectAuthnResponseDecoder
-
Class logger.
- log - Variable in class net.shibboleth.oidc.profile.encoding.impl.AbstractOIDCMessageEncoder
-
Class logger.
- log - Variable in class net.shibboleth.oidc.profile.encoding.impl.HTTPPostAuthnRequestEncoder
-
Class logger.
- log - Variable in class net.shibboleth.oidc.profile.encoding.impl.HTTPRedirectAuthnRequestEncoder
-
Class logger.
- log - Variable in class net.shibboleth.oidc.profile.encoding.impl.OIDCResponseEncoderFactory
-
Class logger.
- log - Variable in class net.shibboleth.oidc.profile.impl.AbstractBuildErrorResponseFromEvent
-
Class logger.
- log - Variable in class net.shibboleth.oidc.profile.impl.AuthenticationRequestMessageEncoderFactory
-
Class logger.
- log - Variable in class net.shibboleth.oidc.profile.impl.FormOutboundKeySetResponseMessage
-
Class logger.
- log - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTDecryptionParameters
-
Class logger.
- log - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
-
Class logger.
- log - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParameters
-
Class logger.
- log - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
-
Class logger.
- log - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureValidationParametersHandler
-
Class logger.
- log - Variable in class net.shibboleth.oidc.profile.spring.relyingparty.metadata.filter.impl.ClientInformationParser
-
Class logger.
- log - Variable in class net.shibboleth.oidc.security.credential.BasicJWKCredentialFactoryBean
-
Class logger.
- log - Variable in class net.shibboleth.oidc.security.credential.impl.AbstractClientInformationCredentialResolver
-
Class logger.
- log - Variable in class net.shibboleth.oidc.security.credential.impl.BasicJOSEObjectCredentialResolver
-
Logger.
- log - Variable in class net.shibboleth.oidc.security.credential.impl.ClientInformationCredentialResolver
-
Class logger.
- log - Variable in class net.shibboleth.oidc.security.credential.impl.ClientSecretCriterionCredentialResolver
-
Class logger.
- log - Variable in class net.shibboleth.oidc.security.credential.impl.EvaluableKeyIDCredentialCriterion
-
Logger.
- log - Variable in class net.shibboleth.oidc.security.credential.impl.EvaluableMACKeyLengthCredentialCriterion
-
Logger.
- log - Variable in class net.shibboleth.oidc.security.credential.impl.LocalJOSEObjectCredentialResolver
-
Class logger.
- log - Variable in class net.shibboleth.oidc.security.credential.impl.ProviderMetadataCredentialResolver
-
Class logger.
- log - Variable in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler
-
Class logger.
- log - Variable in class net.shibboleth.oidc.security.impl.BaseSignedJWTTrustEngine
-
Logger.
- log - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration
-
Logger.
- log - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler
-
Logger.
- log - Variable in class net.shibboleth.oidc.security.impl.ClientInformationJWTTrustEngine
-
Class logger.
- log - Variable in class net.shibboleth.oidc.security.impl.DecryptJWE
-
Class logger.
- log - Variable in class net.shibboleth.oidc.security.impl.EncryptJWTHandler
-
Class logger.
- log - Variable in class net.shibboleth.oidc.security.impl.ExplicitKeySignedJWTTrustEngine
-
Class logger.
- log - Variable in class net.shibboleth.oidc.security.impl.ExplicitKeyTrustEvaluator
-
Class logger.
- log - Variable in class net.shibboleth.oidc.security.impl.JWETokenDecrypter
-
Class logger.
- log - Variable in class net.shibboleth.oidc.security.impl.JWSTokenSigner
-
Class logger.
- log - Variable in class net.shibboleth.oidc.security.impl.JWTMessageSignatureSecurityHandler
-
Logger.
- log - Static variable in class net.shibboleth.oidc.security.impl.JWTSignatureValidationUtil
-
Class logger.
- log - Variable in class net.shibboleth.oidc.security.impl.SignJWTHandler
-
Class logger.
- log - Variable in class net.shibboleth.oidc.security.impl.TokenAsymmetricKeyTrustEngine
-
Class logger.
- log - Variable in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver
-
Class logger.
- log - Variable in class net.shibboleth.oidc.security.jose.impl.BasicSignatureValidationParametersResolver
-
Logger.
- log - Variable in class net.shibboleth.oidc.security.jose.impl.ClientInformationDataEncryptionAlgorithmsLookupStrategy
-
Logger.
- log - Variable in class net.shibboleth.oidc.security.jose.impl.ClientInformationKeyTransportEncryptionAlgorithmsLookupStrategy
-
Logger.
- log - Variable in class net.shibboleth.oidc.security.jose.impl.ClientInformationSignatureSigningParametersResolver
-
Class logger.
- log - Variable in class net.shibboleth.oidc.security.jose.impl.DefaultDecryptionParametersResolver
-
Logger.
- log - Variable in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
-
Logger.
- log - Variable in class net.shibboleth.oidc.security.jose.impl.ProviderMetadataDataEncryptionAlgorithmsLookupStrategy
-
Logger.
- log - Variable in class net.shibboleth.oidc.security.jose.impl.ProviderMetadataKeyTransportEncryptionAlgorithmsLookupStrategy
-
Logger.
- log - Variable in class net.shibboleth.oidc.security.jose.impl.RelyingPartySigningParametersResolver
-
Logger.
- log - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AccessTokenHashValidator
-
Class logger.
- log - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationTimeClaimsValidator
-
Class logger.
- log - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AuthTimeRequestedActivationCondition
-
Class logger.
- log - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.ChainingJWTClaimsValidator
-
Class logger.
- log - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.ExactMatchClaimsValidator
-
Class logger.
- LOG - Static variable in class net.shibboleth.oidc.security.credential.JWACredentialSupport
-
Logger.
- logEncryption(String, String, String) - Method in class net.shibboleth.oidc.security.impl.EncryptJWTHandler
-
A convince method to log encryption parameters.
- loginHint - Variable in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
-
Hint to the Authorization Server about the login identifier the End-User might use to log in.
- loginHintLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Lookup function to determine the login_hint of an authentication request.
- logJWT(JWT) - Method in class net.shibboleth.oidc.security.impl.DecryptJWE
-
Log (on trace) the JWT.
- logJWT(SignedJWT) - Method in class net.shibboleth.oidc.security.impl.SignJWTHandler
-
Log (on trace) the JWT.
- logName - Variable in class net.shibboleth.oidc.security.impl.EncryptJWTHandler
-
A friendly name to log as the subject of encryption.
- logName - Variable in class net.shibboleth.oidc.security.impl.SignJWTHandler
-
A friendly name to log as the subject of signing.
- LogoutHintMatchingStrategyLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
A function that returns
OIDCLogoutProfileConfiguration.getLogoutHintMatchingStrategy(ProfileRequestContext)if such a profile is available from aRelyingPartyContextobtained via a lookup function, by default a child of theProfileRequestContext. - LogoutHintMatchingStrategyLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.LogoutHintMatchingStrategyLookupFunction
- logoutHintMatchingStrategyLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
-
Lookup function to the RP-initiated logout's logout_hint parameter.
- logPrefix - Variable in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
-
Cached log prefix.
- logPrefix - Variable in class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver
-
Logging prefix.
- logPrefix - Variable in class net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver
-
Logging prefix.
- logResult(DecryptionParameters) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultDecryptionParametersResolver
-
Log the resolved parameters.
- logResult(EncryptionParameters) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
-
Log the resolved parameters.
- logResult(SignatureSigningParameters) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver
-
Log the resolved parameters.
- logResult(SignatureValidationParameters) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureValidationParametersResolver
-
Log the resolved parameters.
- LookupFunctionWrapper(Function<Collection<String>, Collection<Principal>>) - Constructor for class net.shibboleth.oidc.profile.config.navigate.ProxyAwareDefaultOIDCAuthenticationContextClassResponseLookupFunction.LookupFunctionWrapper
-
Constructor.
- lookupIdentifier(IdentifierType) - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
-
Get list of descriptors matching the identifier.
- lookupIdentifier(Key) - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver
-
Get list of information matching a given identifier.
- lookupIndexedIdentifier(IdentifierType) - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
-
Lookup the specified identifier from the index.
- lookupIndexedIdentifier(Key) - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver
-
Lookup the specified identifier from the index.
M
- MapBasedMetadataResolver - Interface in net.shibboleth.oidc.metadata
-
A resolver that is capable of resolving Maps which meet certain supplied criteria.
- mappedErrors - Variable in class net.shibboleth.oidc.profile.impl.AbstractBuildErrorResponseFromEvent
-
Map of eventIds to pre-configured error objects.
- mapType - Variable in class net.shibboleth.oidc.metadata.cache.impl.DefaultJSONMapParsingStrategy
-
The map type used by object mapper for deserializing the JSON into desired format.
- marshallAttributes(XMLObject, Element) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsMarshaller
- matchOnIdentifierRequired - Variable in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
-
Is a match based on an identifier required? If not, all known metadata will be returned.
- matchOnIdentifierRequired - Variable in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCacheBuilderSpec
-
Is a match based on an identifier required? If not, all known metadata will be returned.
- maxAge - Variable in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
-
Specifies the allowable elapsed time in seconds since the last time the End-User was actively authenticated by the OP.
- maxAuthenticationAgeLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Lookup function to determine the max_age of an authentication request.
- maxCacheDuration - Variable in class net.shibboleth.oidc.metadata.cache.ExpirationTimeContext
-
Maximum cache duration.
- maxCacheDuration - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
-
Maximum cache duration.
- maxCacheDuration - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
-
Maximum cache duration.
- maxIdleEntityData - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
-
The maximum idle time for which the resolver will keep data for a given entityID, before it is removed.
- maxIdleEntityData - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
-
The maximum idle time for which the cache will keep data for before it is removed.
- maxRefreshDelay - Variable in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
-
Refresh interval used when metadata does not contain any validUntil or cacheDuration information.
- maxRefreshDelay - Variable in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCacheBuilderSpec
-
Refresh interval used when metadata does not contain any validUntil or cacheDuration information.
- maxRefreshDelay - Variable in class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver
-
Refresh interval used when metadata does not contain any validUntil or cacheDuration information.
- maxReplayCacheRecordLifetime - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierClaimsValidator
-
Maximum lifetime to be used in replay cache when 'exp' claim is exploited.
- MDC_ATTRIB_CURRENT_REQUEST_URI - Static variable in class net.shibboleth.oidc.metadata.impl.AbstractDynamicHTTPFetchingStrategy
-
MDC attribute representing the current request URI.
- mergeMetadataPolicies(MetadataPolicy, MetadataPolicy) - Static method in class net.shibboleth.oidc.metadata.policy.impl.MetadataPolicyHelper
-
Merges two metadata policies with the rules defined in the OIDC federation spec 5.1.3.1:
- MessageContextLookupFunctionAdaptor<ResultType> - Class in net.shibboleth.oidc.profile.config.navigate
-
Adaptor function that allows a profile request context lookup function to work inside a message handler.
- MessageContextLookupFunctionAdaptor(Function<ProfileRequestContext, ResultType>) - Constructor for class net.shibboleth.oidc.profile.config.navigate.MessageContextLookupFunctionAdaptor
-
Constructor.
- messageEncoder - Variable in class net.shibboleth.oidc.profile.encoding.impl.OIDCResponseEncoderFactory
-
The message encoder to be returned by this factory.
- MessageHandlerLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
A function that returns
OAuth2InterceptorAwareProfileConfiguration.getMessageHandler(MessageContext)if such a profile is available from aRelyingPartyContextobtained via a lookup function, by default a child of theProfileRequestContext. - MessageHandlerLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.MessageHandlerLookupFunction
- messageHandlerLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2InterceptorAwareProfileConfiguration
-
Lookup strategy for message handler.
- messageLifetime - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.IssuedAtClaimsValidator
-
Amount of time for which a message is valid after it is issued (Default value: 1 minute).
- metadata - Variable in class net.shibboleth.oidc.metadata.cache.ExpirationTimeContext
-
The metadata to base the expiry time off.
- metadata - Variable in class net.shibboleth.oidc.security.jose.criterion.ProviderMetadataCriterion
-
The OpenID Provider metadata.
- METADATA_TAG_NAME - Static variable in interface net.shibboleth.oidc.attribute.transcoding.OIDCAttributeTranscoder
-
Name of metadata tag/attribute to check for in the event that
OIDCAttributeTranscoder.PROP_NAME_FROM_METADATAis used. - metadataBeforeRemovalHook - Variable in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
-
A hook that is executed just before a cache entry will been removed/invalidated/evicted.
- metadataBeforeRemovalHook - Variable in class net.shibboleth.oidc.metadata.cache.impl.BaseMetadataCacheBuilderSpec
-
A hook that is executed just before a cache entry will been removed/invalidated/evicted.
- MetadataCache<U> - Interface in net.shibboleth.oidc.metadata.cache
-
A cache for loading, storing, and retrieving metadata against against the supplied
CriteriaSet. - MetadataCacheBuilder - Class in net.shibboleth.oidc.metadata.cache.impl
-
A builder that creates, initializes, and safely publishes the correct
metadata cachebased on the suppliedmetadata cache builder specification. - MetadataCacheBuilder() - Constructor for class net.shibboleth.oidc.metadata.cache.impl.MetadataCacheBuilder
-
Private constructor.
- MetadataCacheBuilder.Builder<IdentifierType,
MetadataType> - Class in net.shibboleth.oidc.metadata.cache.impl -
A static builder for generating a batch metadata cache from a given specification.
- MetadataCacheBuilderSpec<IdentifierType,
MetadataType> - Interface in net.shibboleth.oidc.metadata.cache.impl -
Marker interface for metadata cache builder specifications.
- MetadataCacheException - Exception in net.shibboleth.oidc.metadata.cache
-
Base exception for metadata cache related errors.
- MetadataCacheException() - Constructor for exception net.shibboleth.oidc.metadata.cache.MetadataCacheException
-
Constructor.
- MetadataCacheException(Exception) - Constructor for exception net.shibboleth.oidc.metadata.cache.MetadataCacheException
-
Constructor.
- MetadataCacheException(String) - Constructor for exception net.shibboleth.oidc.metadata.cache.MetadataCacheException
-
Constructor.
- MetadataCacheException(String, Exception) - Constructor for exception net.shibboleth.oidc.metadata.cache.MetadataCacheException
-
Constructor.
- metadataContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
-
Strategy used to look up a SAML metadata context.
- metadataExpirationTimeStrategy - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
-
Strategy used to compute an expiration time from a metadata instance.
- metadataExpirationTimeStrategy - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
-
Strategy used to compute an expiration time.
- metadataFile - Variable in class net.shibboleth.oidc.metadata.cache.impl.DefaultFileLoadingStrategy
-
The metadata file.
- metadataFile - Variable in class net.shibboleth.oidc.metadata.impl.AbstractFileOIDCEntityResolver
-
The metadata file.
- metadataFileFriendlyName - Variable in class net.shibboleth.oidc.metadata.cache.impl.DefaultFileLoadingStrategy
-
The metadata file name to use in logs.
- MetadataFilter<T> - Interface in net.shibboleth.oidc.metadata.filter
-
A metadata filter is used to process a metadata document after it has been acquired from a metadata source.
- MetadataFilterContext - Class in net.shibboleth.oidc.metadata.filter
-
Class used to provide contextual information at runtime to
MetadataFilterimplementations. - MetadataFilterContext() - Constructor for class net.shibboleth.oidc.metadata.filter.MetadataFilterContext
- MetadataFilterContext.Data - Interface in net.shibboleth.oidc.metadata.filter
-
Marker interface for data classes to be used with
MetadataFilterContext. - metadataFilterStrategy - Variable in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
-
A strategy to filter metadata.
- metadataFilterStrategy - Variable in class net.shibboleth.oidc.metadata.cache.impl.BaseMetadataCacheBuilderSpec
-
A strategy to filter metadata.
- MetadataManagementData<MetadataIdentifier> - Class in net.shibboleth.oidc.metadata
-
Class that holds management data about an entities metadata.
- MetadataManagementData(MetadataIdentifier) - Constructor for class net.shibboleth.oidc.metadata.MetadataManagementData
-
Constructor.
- MetadataNamespaceHandler - Class in net.shibboleth.oidc.profile.spring.relyingparty.metadata.impl
-
Namespace handler for
urn:mace:shibboleth:2.0:metadata:oidc. - MetadataNamespaceHandler() - Constructor for class net.shibboleth.oidc.profile.spring.relyingparty.metadata.impl.MetadataNamespaceHandler
- MetadataPolicy - Class in net.shibboleth.oidc.metadata.policy
-
The metadata policy for a single claim.
- MetadataPolicy() - Constructor for class net.shibboleth.oidc.metadata.policy.MetadataPolicy
- MetadataPolicy.Builder - Class in net.shibboleth.oidc.metadata.policy
-
Builder class for the
MetadataPolicyobjects. - MetadataPolicyHelper - Class in net.shibboleth.oidc.metadata.policy.impl
-
Static utility methods related to metadata policies.
- MetadataPolicyHelper() - Constructor for class net.shibboleth.oidc.metadata.policy.impl.MetadataPolicyHelper
-
Constructor.
- metadataPolicyLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCDynamicRegistrationConfiguration
-
Lookup function to the default metadata policy.
- MetadataPolicyLookupStrategyFactory - Class in net.shibboleth.oidc.metadata.cache.impl
-
A factory for building a function that resolves maps of metadata policies from the profile request context.
- MetadataPolicyLookupStrategyFactory() - Constructor for class net.shibboleth.oidc.metadata.cache.impl.MetadataPolicyLookupStrategyFactory
- metadataPolicyResolver - Variable in class net.shibboleth.oidc.profile.config.navigate.ResolverBasedRegistrationMetadataPolicyLookupFunction
-
The metadata policy resolver.
- MetadataPolicyResolver - Interface in net.shibboleth.oidc.metadata.policy
-
A resolver that is capable of resolving map of metadata policies (in the entry values as
MetadataPolicyobjects) which meet certain supplied criteria. - MetadataPolicyViaLocationFetchingStrategy - Class in net.shibboleth.oidc.metadata.policy.impl
-
A fetching strategy that exploits
ResourceLocationCriterionfrom the givenCriteriaSetto resolve a location for metadata policy. - MetadataPolicyViaLocationFetchingStrategy(HttpClient, HttpClientResponseHandler<Map<String, MetadataPolicy>>) - Constructor for class net.shibboleth.oidc.metadata.policy.impl.MetadataPolicyViaLocationFetchingStrategy
-
Constructor.
- metadataResource - Variable in class net.shibboleth.oidc.metadata.cache.impl.DefaultResourceLoadingStrategy
-
The metadata resource.
- metadataResourceFriendlyName - Variable in class net.shibboleth.oidc.metadata.cache.impl.DefaultResourceLoadingStrategy
-
The metadata resource name to use in logs.
- MetadataSource - Class in net.shibboleth.oidc.metadata.filter
-
Data object for
MetadataFilterContextintended to hold information about the source of the metadata currently being processed. - MetadataSource() - Constructor for class net.shibboleth.oidc.metadata.filter.MetadataSource
- metadataValid(OIDCProviderMetadata, String) - Method in class net.shibboleth.oidc.metadata.impl.HTTPProviderConfigurationFetchingStrategy.OIDCProviderMetadataResponseHandler
-
Check the Issuer in the metadata is identical to the Issuer URL used to retrieve the metadata.
- metadataValidPredicate - Variable in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
-
Is the metadata valid?
- metadataValidPredicate - Variable in class net.shibboleth.oidc.metadata.cache.impl.BaseMetadataCacheBuilderSpec
-
Is the metadata valid? Defaults to true.
- MetadataValueSAMLObject - Interface in net.shibboleth.oidc.saml.xmlobject
-
Abstract interface for SAML metadata objects containing single
Stringvalue inside the element. - METRIC_GAUGE_NUM_LIVE_INDEX_METADATA - Static variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
-
Metric name for the gauge of the number of live entityIDs.
- METRIC_RATIOGAUGE_FETCH_TO_GET - Static variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
-
Metric name for the ratio gauge of fetches to resolve requests.
- METRIC_TIMER_FETCH_FROM_ORIGIN_SOURCE - Static variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
-
Metric name for the timer for
DynamicMetadataCache.fetch(MetadataManagementData, Object, CriteriaSet). - METRIC_TIMER_GET - Static variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
-
Metric name for the timer for
DynamicMetadataCache.get(CriteriaSet). - metricsBaseName - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
-
Base name for Metrics instrumentation names.
- mgmtDataMap - Variable in class net.shibboleth.oidc.metadata.impl.DefaultDynamicBackingStore
-
Map holding management data for each entityID.
- mgmtMappingFunction - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
-
Mapping function to use when creating new metadata management data.
- minCacheDuration - Variable in class net.shibboleth.oidc.metadata.cache.ExpirationTimeContext
-
Minimum cache duration.
- minCacheDuration - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
-
Minimum cache duration.
- minCacheDuration - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
-
Minimum cache duration.
- minRefreshDelay - Variable in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
-
Floor, in milliseconds, for the refresh interval.
- minRefreshDelay - Variable in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCacheBuilderSpec
-
Floor, in milliseconds, for the refresh interval.
- minRefreshDelay - Variable in class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver
-
Floor, in milliseconds, for the refresh interval.
- MISSING_DPOP_JKT - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
-
ID of event returned if the mandatory dpop_jkt parameter is missing.
- MISSING_DPOP_PROOF - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
-
ID of event returned if the mandatory DPoP proof is missing.
- MISSING_MANDATORY_ID_TOKEN_HINT - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
-
The id_token hint is missing in request, even though it's mandatory.
- MISSING_MANDATORY_PAR_REQUEST_URI - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
-
The pushed authorization request (specific request_uri) is not included in request even though it's mandatory.
- MISSING_MANDATORY_REQUEST_OBJECT - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
-
The request object or uri is missing in request, even though it's mandatory.
- MISSING_PKCE_CODE_CHALLENGE - Static variable in class net.shibboleth.oidc.profile.core.OidcError
-
The request is missing a required PKCE code challenge.
- MISSING_PKCE_CODE_CHALLENGE - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
-
ID of event returned if the mandatory PKCE code challenge is missing.
- MISSING_REDIRECT_URIS - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
-
ID of event returned if the mandatory redirect_uris is missing.
N
- nameFromMetadataLookupStrategy - Variable in class net.shibboleth.oidc.attribute.transcoding.AbstractOIDCAttributeTranscoder
-
Strategy to lookup naming overrides in metadata.
- NAMESPACE - Static variable in class net.shibboleth.oidc.attribute.resolver.spring.enc.impl.AttributeEncoderNamespaceHandler
-
Namespace for this handler.
- NAMESPACE - Static variable in class net.shibboleth.oidc.profile.spring.relyingparty.metadata.impl.MetadataNamespaceHandler
-
Namespace for this handler.
- NamingFunction() - Constructor for class net.shibboleth.oidc.attribute.transcoding.AbstractOIDCAttributeTranscoder.NamingFunction
- net.shibboleth.oidc.attribute.resolver.spring.enc.impl - package net.shibboleth.oidc.attribute.resolver.spring.enc.impl
-
Attribute encoder namespace implementations.
- net.shibboleth.oidc.attribute.transcoding - package net.shibboleth.oidc.attribute.transcoding
-
OIDC Attribute Transcoding base classes.
- net.shibboleth.oidc.attribute.transcoding.impl - package net.shibboleth.oidc.attribute.transcoding.impl
-
Attribute encoder implementations.
- net.shibboleth.oidc.authn.context - package net.shibboleth.oidc.authn.context
-
OIDC/Oauth2 authentication contexts.
- net.shibboleth.oidc.authn.principal - package net.shibboleth.oidc.authn.principal
-
OIDC-specific classes for integration with idp-authn-api packages.
- net.shibboleth.oidc.common - package net.shibboleth.oidc.common
-
Plugin and module information about the OIDC common library.
- net.shibboleth.oidc.jwa.algorithm.descriptors - package net.shibboleth.oidc.jwa.algorithm.descriptors
-
OIDC Signing/Encryption Algorithms.
- net.shibboleth.oidc.jwa.support - package net.shibboleth.oidc.jwa.support
-
Constants related to OIDC crypto features, like signature and ecryption.
- net.shibboleth.oidc.jwk - package net.shibboleth.oidc.jwk
-
Classes related to JSON Web Key (JWK) handling.
- net.shibboleth.oidc.jwk.support - package net.shibboleth.oidc.jwk.support
-
Utility classes related to JSON Web Key (JWK) handling.
- net.shibboleth.oidc.jwt.claims - package net.shibboleth.oidc.jwt.claims
-
Validation functions for JWT claims.
- net.shibboleth.oidc.metadata - package net.shibboleth.oidc.metadata
-
Interfaces and common classes related to resolution of OIDC metadata (or client information).
- net.shibboleth.oidc.metadata.cache - package net.shibboleth.oidc.metadata.cache
-
Metadata cache API.
- net.shibboleth.oidc.metadata.cache.impl - package net.shibboleth.oidc.metadata.cache.impl
-
Metadata cache implementation.
- net.shibboleth.oidc.metadata.context - package net.shibboleth.oidc.metadata.context
-
Metadata cache API contexts.
- net.shibboleth.oidc.metadata.criterion - package net.shibboleth.oidc.metadata.criterion
-
Criteria related to OIDC entity resolution.
- net.shibboleth.oidc.metadata.filter - package net.shibboleth.oidc.metadata.filter
-
Metadata cache filter API.
- net.shibboleth.oidc.metadata.impl - package net.shibboleth.oidc.metadata.impl
-
Implementation classes related to resolution of OIDC metadata (or client information).
- net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider - package net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider
-
Implementation classes related to KeyInfo extensions.
- net.shibboleth.oidc.metadata.policy - package net.shibboleth.oidc.metadata.policy
-
Metadata policy API.
- net.shibboleth.oidc.metadata.policy.impl - package net.shibboleth.oidc.metadata.policy.impl
-
Metadata policy implementation.
- net.shibboleth.oidc.profile.audit - package net.shibboleth.oidc.profile.audit
-
Audit logging related to OIDC functionality.
- net.shibboleth.oidc.profile.audit.impl - package net.shibboleth.oidc.profile.audit.impl
-
Audit extractors .
- net.shibboleth.oidc.profile.config - package net.shibboleth.oidc.profile.config
-
Profile configurations related to OIDC functionality.
- net.shibboleth.oidc.profile.config.impl - package net.shibboleth.oidc.profile.config.impl
-
Profile configuration implementations related to OIDC functionality.
- net.shibboleth.oidc.profile.config.logic - package net.shibboleth.oidc.profile.config.logic
-
Configuration predicates.
- net.shibboleth.oidc.profile.config.navigate - package net.shibboleth.oidc.profile.config.navigate
-
Navigation functions related to OIDC profile configurations.
- net.shibboleth.oidc.profile.core - package net.shibboleth.oidc.profile.core
-
Core profile classes.
- net.shibboleth.oidc.profile.decoding - package net.shibboleth.oidc.profile.decoding
-
OIDC message decoder API.
- net.shibboleth.oidc.profile.decoding.impl - package net.shibboleth.oidc.profile.decoding.impl
-
OIDC message decoders.
- net.shibboleth.oidc.profile.encoding - package net.shibboleth.oidc.profile.encoding
-
OIDC message encoder API.
- net.shibboleth.oidc.profile.encoding.impl - package net.shibboleth.oidc.profile.encoding.impl
-
OIDC message encoders.
- net.shibboleth.oidc.profile.impl - package net.shibboleth.oidc.profile.impl
-
OIDC profile implementation classes.
- net.shibboleth.oidc.profile.logic - package net.shibboleth.oidc.profile.logic
-
OIDC profile logic implementation classes.
- net.shibboleth.oidc.profile.messaging - package net.shibboleth.oidc.profile.messaging
-
OIDC messaging interfaces and classes.
- net.shibboleth.oidc.profile.messaging.context - package net.shibboleth.oidc.profile.messaging.context
-
OIDC messaging contexts.
- net.shibboleth.oidc.profile.oauth2.config - package net.shibboleth.oidc.profile.oauth2.config
-
OAuth2 profile configurations.
- net.shibboleth.oidc.profile.oauth2.config.impl - package net.shibboleth.oidc.profile.oauth2.config.impl
-
OAuth2 profile configuration implementations.
- net.shibboleth.oidc.profile.spring.relyingparty.metadata.filter.impl - package net.shibboleth.oidc.profile.spring.relyingparty.metadata.filter.impl
-
Spring-aware tools for resolving OIDC entities.
- net.shibboleth.oidc.profile.spring.relyingparty.metadata.impl - package net.shibboleth.oidc.profile.spring.relyingparty.metadata.impl
-
Spring-aware tools for resolving OIDC entities.
- net.shibboleth.oidc.saml.xmlobject - package net.shibboleth.oidc.saml.xmlobject
-
Concrete definitions of the objects described in saml-metadata-ext-oidcmd.xsd work.
- net.shibboleth.oidc.saml.xmlobject.impl - package net.shibboleth.oidc.saml.xmlobject.impl
-
Concrete implementations of the objects described in saml-metadata-ext-oidcmd.xsd.
- net.shibboleth.oidc.security - package net.shibboleth.oidc.security
-
OIDC security .
- net.shibboleth.oidc.security.credential - package net.shibboleth.oidc.security.credential
-
JWK Credentials.
- net.shibboleth.oidc.security.credential.impl - package net.shibboleth.oidc.security.credential.impl
-
Credential resolver implementation classes.
- net.shibboleth.oidc.security.impl - package net.shibboleth.oidc.security.impl
-
Utility classes for security related functions.
- net.shibboleth.oidc.security.jose - package net.shibboleth.oidc.security.jose
-
JOSE security API classes.
- net.shibboleth.oidc.security.jose.context - package net.shibboleth.oidc.security.jose.context
-
JOSE security contexts .
- net.shibboleth.oidc.security.jose.criterion - package net.shibboleth.oidc.security.jose.criterion
-
OIDC security criterion.
- net.shibboleth.oidc.security.jose.impl - package net.shibboleth.oidc.security.jose.impl
-
Implementation of cryptographic primitives that support JOSE objects.
- net.shibboleth.oidc.security.jwt.claims.impl - package net.shibboleth.oidc.security.jwt.claims.impl
-
Validation functions for JWT claims.
- newFilterContext() - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
-
Get a new instance of
MetadataFilterContextto be used when filtering metadata. - nextRefresh - Variable in class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver
-
Next time a refresh cycle will occur.
- NimbusSecretCredential - Interface in net.shibboleth.oidc.security.credential
-
Deprecated, for removal: This API element is subject to removal in a future version.
- nonce - Variable in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
-
The nonce.
- NONCE - Enum constant in enum class net.shibboleth.oidc.security.jwt.claims.impl.IDTokenClaims
-
String value used to associate a Client session with an ID Token, and to mitigate replay attacks.
- NONCE - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
-
id_token nonce.
- NonceAuditExtractor - Class in net.shibboleth.oidc.profile.audit.impl
-
Functionthat extracts nonce in theOIDCAuthenticationRequest. - NonceAuditExtractor(Function<ProfileRequestContext, OIDCAuthenticationRequest>) - Constructor for class net.shibboleth.oidc.profile.audit.impl.NonceAuditExtractor
-
Constructor.
- NonceValidationActivationCondition - Class in net.shibboleth.oidc.security.jwt.claims.impl
-
Determines if nonce validation should occur.
- NonceValidationActivationCondition() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.NonceValidationActivationCondition
- noResultIsError - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParameters
-
Whether failure to resolve parameters should be raised as an error.
- noResultIsError - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
-
Whether failure to resolve parameters should be raised as an error.
- NOT_BEFORE_CLAIM - Enum constant in enum class net.shibboleth.oidc.security.jwt.claims.impl.JWTClaims
-
The "nbf" (not before) claim identifies the time before which the JWT MUST NOT be accepted for processing.
- NotBeforeClaimsValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl
-
Iff a not-before-time (nbf) claim is present, makes sure it is before the current time.
- NotBeforeClaimsValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.NotBeforeClaimsValidator
-
Constructor.
- now - Variable in class net.shibboleth.oidc.metadata.cache.ExpirationTimeContext
-
The now time to base computation off.
- NumberOfClaimValuesActivationCondition - Class in net.shibboleth.oidc.security.jwt.claims.impl
-
Activation condition to check the number of values a claim has against a given predicate.
- NumberOfClaimValuesActivationCondition(String, IntPredicate) - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.NumberOfClaimValuesActivationCondition
-
Constructor.
- numberOfValuesPredicate - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.NumberOfClaimValuesActivationCondition
-
The predicate used to determine if the claim has the correct number of values.
O
- OAuth2AccessTokenProducingProfileConfiguration - Interface in net.shibboleth.oidc.profile.oauth2.config
-
Configuration common to OAuth 2.0 access token producing profiles.
- OAuth2AuthorizationCodeProducingProfileConfiguration - Interface in net.shibboleth.oidc.profile.oauth2.config
-
Configuration common to authorizaton code producing profiles.
- OAuth2AuthorizationProfileConfiguration - Interface in net.shibboleth.oidc.profile.oauth2.config
-
Configuration for a generic OAuth 2.0 authorization request.
- OAuth2AuthorizationProfileConfiguration.HttpRequestMethod - Enum Class in net.shibboleth.oidc.profile.oauth2.config
-
Enumeration of the HTTP methods used in various OAuth requests.
- OAuth2ClientAuthenticableClientProfileConfiguration - Interface in net.shibboleth.oidc.profile.oauth2.config
-
OAuth 2.0 profile configurations that support OAuth-defined client authentication methods.
- OAuth2ClientAuthenticableProfileConfiguration - Interface in net.shibboleth.oidc.profile.oauth2.config
-
OAuth 2.0 profile configurations that support OAuth-defined client authentication methods.
- OAuth2ClientAuthenticationContext - Class in net.shibboleth.oidc.authn.context
-
A context containing data about OAuth 2.0 client authentication.
- OAuth2ClientAuthenticationContext() - Constructor for class net.shibboleth.oidc.authn.context.OAuth2ClientAuthenticationContext
- OAuth2DPoPProofValidatingProfileConfiguration - Interface in net.shibboleth.oidc.profile.oauth2.config
-
Profile configuration for validating DPoP proof JWTs.
- OAuth2FlowAwareProfileConfiguration - Interface in net.shibboleth.oidc.profile.oauth2.config
-
Interface for profile configurations that understand OAuth 2.0 authorization grants corresponding to OIDC authentication flows.
- OAuth2InterceptorAwareProfileConfiguration - Interface in net.shibboleth.oidc.profile.oauth2.config
-
Common interface for interceptor-aware OAuth 2.0 Profile Configurations.
- OAuth2ProfileConfiguration - Interface in net.shibboleth.oidc.profile.oauth2.config
-
Common interface for OAuth 2.0 Profile Configurations.
- OAuth2PushedAuthorizationRequestConfiguration - Interface in net.shibboleth.oidc.profile.oauth2.config
-
Profile configuration for OAuth2 Pushed Authorization Requests (PAR).
- OAuth2RefreshTokenProducingProfileConfiguration - Interface in net.shibboleth.oidc.profile.oauth2.config
-
Configuration common to OAuth 2.0 refresh token producing profiles.
- OAuth2ScopeValidatingProfileConfiguration - Interface in net.shibboleth.oidc.profile.oauth2.config
-
Profile configuration for validating scope values.
- OAuth2TokenAudienceConfiguration - Interface in net.shibboleth.oidc.profile.oauth2.config
-
Profile interface for OAuth 2 token "audience" profile configuration.
- OAuth2TokenConfiguration - Interface in net.shibboleth.oidc.profile.oauth2.config
-
OIDC-aware OAuth 2.0 token endpoint profile configuration.
- OAuth2TokenEncryptionProfileConfiguration - Interface in net.shibboleth.oidc.profile.oauth2.config
-
Profile configuration for token endpoints that deal with encryption.
- OAuth2TokenIntrospectionConfiguration - Interface in net.shibboleth.oidc.profile.oauth2.config
-
Profile configuration for OAuth2 Token Introspection.
- OAuth2TokenRevocationConfiguration - Interface in net.shibboleth.oidc.profile.oauth2.config
-
Configuration for the OAuth 2.0 Token Revocation profile.
- OAuth2TokenRevocationConfiguration.OAuth2TokenRevocationMethod - Enum Class in net.shibboleth.oidc.profile.oauth2.config
-
Enumeration of the OAuth2 token revocation methods.
- OAuth2TokenRevocationMethod() - Constructor for enum class net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenRevocationConfiguration.OAuth2TokenRevocationMethod
- OAuth2TokenValidatingProfileConfiguration - Interface in net.shibboleth.oidc.profile.oauth2.config
-
Profile configuration for OIDC-aware OAuth 2.0 token endpoints.
- OAuthAuthorizationRequest - Class in net.shibboleth.oidc.profile.core
-
An OAuth 2.0 authorization request.
- OAuthAuthorizationRequest(ClientID) - Constructor for class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
-
Constructor.
- OAuthAuthorizationRequest.CodeChallengeMethod - Enum Class in net.shibboleth.oidc.profile.core
-
The code challenge method for Proof Key for Code Exchange.
- OAuthRPExtensions - Interface in net.shibboleth.oidc.saml.xmlobject
-
SAML 2.0 Metadata extension OAuthRPExtensions.
- OAuthRPExtensionsBuilder - Class in net.shibboleth.oidc.saml.xmlobject.impl
-
Builder of
OAuthRPExtensionsobjects. - OAuthRPExtensionsBuilder() - Constructor for class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsBuilder
- OAuthRPExtensionsImpl - Class in net.shibboleth.oidc.saml.xmlobject.impl
-
Implementation for
OAuthRPExtensions. - OAuthRPExtensionsImpl(String, String, String) - Constructor for class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Constructor.
- OAuthRPExtensionsMarshaller - Class in net.shibboleth.oidc.saml.xmlobject.impl
-
Marshaller for
OAuthRPExtensionsobjects. - OAuthRPExtensionsMarshaller() - Constructor for class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsMarshaller
- OAuthRPExtensionsUnmarshaller - Class in net.shibboleth.oidc.saml.xmlobject.impl
-
Unmarshaller for
OAuthRPExtensionsobjects. - OAuthRPExtensionsUnmarshaller() - Constructor for class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsUnmarshaller
- objectMapper - Variable in class net.shibboleth.oidc.metadata.cache.impl.DefaultJSONMapParsingStrategy
-
JSON object mapper.
- objectType - Variable in class net.shibboleth.oidc.metadata.AbstractEvaluableMetadataCriterion
-
Object type.
- OIDC_PROTOCOL_URI - Static variable in class net.shibboleth.oidc.saml.xmlobject.Constants
-
OIDC base protocol URI.
- OIDC_SUB_NAMEID_FORMAT_PAIRWISE - Static variable in class net.shibboleth.oidc.saml.xmlobject.Constants
-
Format constant for signaling pairwise "sub" claim in metadata.
- OIDC_SUB_NAMEID_FORMAT_PUBLIC - Static variable in class net.shibboleth.oidc.saml.xmlobject.Constants
-
Format constant for signaling public "sub" claim in metadata.
- OIDCAttributeTranscoder - Interface in net.shibboleth.oidc.attribute.transcoding
-
Marker interface for transcoders that operate on OIDC claims.
- OIDCAuthenticationProfileConfiguration - Interface in net.shibboleth.oidc.profile.config
-
Generic configuration for an OIDC 1.0 authentication request.
- OIDCAuthenticationRelyingPartyProfileConfiguration - Interface in net.shibboleth.oidc.profile.config
-
Configuration of an OIDC 1.0 authentication request.
- OIDCAuthenticationRequest - Class in net.shibboleth.oidc.profile.core
-
OpenID Connect Authentication Request.
- OIDCAuthenticationRequest(ClientID) - Constructor for class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
-
Constructor.
- OIDCAuthorizationConfiguration - Interface in net.shibboleth.oidc.profile.config
-
Configuration of an OIDC 1.0 authentication request.
- OIDCByteAttributeTranscoder - Class in net.shibboleth.oidc.attribute.transcoding.impl
-
Class encoding byte attributes to base64 encoded string json object.
- OIDCByteAttributeTranscoder() - Constructor for class net.shibboleth.oidc.attribute.transcoding.impl.OIDCByteAttributeTranscoder
- OIDCByteEncoderParser - Class in net.shibboleth.oidc.attribute.resolver.spring.enc.impl
-
Spring bean definition parser for
OIDCByteAttributeTranscoder. - OIDCByteEncoderParser() - Constructor for class net.shibboleth.oidc.attribute.resolver.spring.enc.impl.OIDCByteEncoderParser
- oidcClientInformation - Variable in class net.shibboleth.oidc.security.jose.criterion.ClientInformationCriterion
-
Client information.
- oidcClientMetadataContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTDecryptionParameters
-
Strategy used to look up a OIDC client metadata context.
- oidcClientMetadataContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
-
Strategy used to look up a OIDC client metadata context.
- oidcClientMetadataContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParameters
-
Strategy used to look up a OIDC client metadata context.
- oidcClientMetadataContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
-
Strategy used to look up a OIDC client metadata context.
- OIDCCommonModule4 - Class in net.shibboleth.oidc.common
-
OIDC Common module implementation.
- OIDCCommonModule4() - Constructor for class net.shibboleth.oidc.common.OIDCCommonModule4
-
Constructor.
- OIDCCommonModule5 - Class in net.shibboleth.oidc.common
-
OIDC Common module implementation.
- OIDCCommonModule5() - Constructor for class net.shibboleth.oidc.common.OIDCCommonModule5
-
Constructor.
- OIDCCommonModule6 - Class in net.shibboleth.oidc.common
-
OIDC Common module implementation.
- OIDCCommonModule6() - Constructor for class net.shibboleth.oidc.common.OIDCCommonModule6
-
Constructor.
- OIDCCommonPlugin - Class in net.shibboleth.oidc.common
-
OIDC Common plugin implementation.
- OIDCCommonPlugin() - Constructor for class net.shibboleth.oidc.common.OIDCCommonPlugin
-
Constructor.
- OIDCDynamicRegistrationConfiguration - Interface in net.shibboleth.oidc.profile.config
-
Configuration of OpenID Connect Dynamic Client Registration 1.0.
- OidcError - Class in net.shibboleth.oidc.profile.core
-
Supplemental error objects for any missing values in the Nimbus library.
- OidcError() - Constructor for class net.shibboleth.oidc.profile.core.OidcError
-
Constructor.
- OidcEventIds - Class in net.shibboleth.oidc.profile.core
-
OpenID Connect -specific constants to use for
ProfileActionEventContexts. - OidcEventIds() - Constructor for class net.shibboleth.oidc.profile.core.OidcEventIds
-
Constructor.
- OIDCFlowAwareProfileConfiguration - Interface in net.shibboleth.oidc.profile.config
-
Interface for profile configurations that understand OIDC specific authentication flows in addition to the OAuth 2.0 flows described by
OAuth2FlowAwareProfileConfiguration. - OIDCIDTokenProducingProfileConfiguration - Interface in net.shibboleth.oidc.profile.config
-
Configuration common to ID Token producing profiles.
- OIDCLogoutProfileConfiguration - Interface in net.shibboleth.oidc.profile.config
-
Configuration for IdP OpenID Connect Logout.
- OIDCMapBasedMetadataResolver - Class in net.shibboleth.oidc.metadata.impl
-
Concrete metadata resolver for OIDC Provider configuration metadata resolution.
- OIDCMapBasedMetadataResolver(MetadataCache<Map<String, Object>>) - Constructor for class net.shibboleth.oidc.metadata.impl.OIDCMapBasedMetadataResolver
-
Constructor.
- OIDCMessageDecoder - Interface in net.shibboleth.oidc.profile.decoding
-
Marker interface for OIDC Message Decoders.
- OIDCMessageEncoder - Interface in net.shibboleth.oidc.profile.encoding
-
An OIDC message encoder interface which requires implementations to test if the request method is supported by the encoder.
- OIDCMetadataContext - Class in net.shibboleth.oidc.metadata.context
-
Subcontext carrying information on metadata of the relying party.
- OIDCMetadataContext() - Constructor for class net.shibboleth.oidc.metadata.context.OIDCMetadataContext
- oidcMetadataContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.logic.ClientIDFromOIDCMetadataContextLookupFunction
-
Strategy that will return
OIDCMetadataContext. - oidcMetadataContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.logic.IssuerIDFromOIDCProviderMetadataContextLookupFunction
-
Strategy that will return
OIDCProviderMetadataContext. - OIDCMetadataPolicyResolver - Class in net.shibboleth.oidc.metadata.policy.impl
-
Concrete resolver implementation for metadata policy resolution.
- OIDCMetadataPolicyResolver(MetadataCache<Map<String, MetadataPolicy>>) - Constructor for class net.shibboleth.oidc.metadata.policy.impl.OIDCMetadataPolicyResolver
-
Constructor.
- OIDCMetadataResolver<T> - Interface in net.shibboleth.oidc.metadata
-
Generic interface for OIDC Metadata resolvers which process specified criteria and produce some implementation-specific result information.
- OIDCPeerEntityContext - Class in net.shibboleth.oidc.profile.messaging.context
-
Lightweight subcontext that carries information about a OIDC peer entity.
- OIDCPeerEntityContext() - Constructor for class net.shibboleth.oidc.profile.messaging.context.OIDCPeerEntityContext
- OIDCProfileConfiguration - Interface in net.shibboleth.oidc.profile.config
-
Common interface for OpenID Connect 1.0 Profile Configurations.
- OIDCProviderInformationConfiguration - Interface in net.shibboleth.oidc.profile.config
-
Profile configuration for an OpenID Connect Provider Configuration.
- OIDCProviderMetadataContext - Class in net.shibboleth.oidc.metadata.context
-
Subcontext carrying information on metadata of the OpenID Connect Provider.
- OIDCProviderMetadataContext() - Constructor for class net.shibboleth.oidc.metadata.context.OIDCProviderMetadataContext
- oidcProviderMetadataContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
-
Strategy used to look up a OIDC provider metadata context.
- oidcProviderMetadataContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParameters
-
Strategy used to look up a OIDC provider metadata context.
- oidcProviderMetadataContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
-
Strategy used to look up a OIDC provider metadata context.
- OIDCProviderMetadataResolver - Class in net.shibboleth.oidc.metadata.impl
-
Concrete metadata resolver for OIDC Provider configuration metadata resolution.
- OIDCProviderMetadataResolver(MetadataCache<OIDCProviderMetadata>) - Constructor for class net.shibboleth.oidc.metadata.impl.OIDCProviderMetadataResolver
-
Constructor.
- OIDCProviderMetadataResponseHandler() - Constructor for class net.shibboleth.oidc.metadata.impl.HTTPProviderConfigurationFetchingStrategy.OIDCProviderMetadataResponseHandler
- OIDCPublishKeySetConfiguration - Interface in net.shibboleth.oidc.profile.config
-
Configuration of an OpenID published key set document.
- OIDCResponseEncoderFactory - Class in net.shibboleth.oidc.profile.encoding.impl
-
A source of encoders that first verifies a message being an instance of Nimbus
Responseand then returns the attachedMessageEncoder. - OIDCResponseEncoderFactory() - Constructor for class net.shibboleth.oidc.profile.encoding.impl.OIDCResponseEncoderFactory
- OIDCScopedStringAttributeTranscoder - Class in net.shibboleth.oidc.attribute.transcoding.impl
-
Class encoding scoped string attributes to string json object.
- OIDCScopedStringAttributeTranscoder() - Constructor for class net.shibboleth.oidc.attribute.transcoding.impl.OIDCScopedStringAttributeTranscoder
- OIDCScopedStringEncoderParser - Class in net.shibboleth.oidc.attribute.resolver.spring.enc.impl
-
Spring bean definition parser for
OIDCScopedStringAttributeTranscoder. - OIDCScopedStringEncoderParser() - Constructor for class net.shibboleth.oidc.attribute.resolver.spring.enc.impl.OIDCScopedStringEncoderParser
- OIDCSSOProfileConfiguration - Interface in net.shibboleth.oidc.profile.config
-
Profile configuration generic to all OIDC SSO profiles.
- OIDCSSOProviderConfiguration - Interface in net.shibboleth.oidc.profile.config
-
Profile configuration for an OIDC SSO Provider.
- OIDCSSORelyingPartyConfiguration - Interface in net.shibboleth.oidc.profile.config
-
Profile configuration for an OIDC SSO Client or Relying Party.
- OIDCStringAttributeTranscoder - Class in net.shibboleth.oidc.attribute.transcoding.impl
-
Class encoding string attributes to string json object.
- OIDCStringAttributeTranscoder() - Constructor for class net.shibboleth.oidc.attribute.transcoding.impl.OIDCStringAttributeTranscoder
- OIDCStringEncoderParser - Class in net.shibboleth.oidc.attribute.resolver.spring.enc.impl
-
Spring bean definition parser for
OIDCStringAttributeTranscoder. - OIDCStringEncoderParser() - Constructor for class net.shibboleth.oidc.attribute.resolver.spring.enc.impl.OIDCStringEncoderParser
- OIDCUserInfoConfiguration - Interface in net.shibboleth.oidc.profile.config
-
Configuration for an OpenID Connect core protocol UserInfo endpoint.
- oneOfValues - Variable in class net.shibboleth.oidc.metadata.policy.MetadataPolicy.Builder
-
The list of values from which the claim must be one of.
- oneOfValues - Variable in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
-
The list of values from which the claim must be one of.
- orderedEntitiess - Variable in class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver.JsonBackingStore
-
Ordered list of entity information.
- orderedValues - Variable in class net.shibboleth.oidc.metadata.impl.AbstractBackingStore
-
Ordered list of entity descriptors.
- originalValue - Variable in class net.shibboleth.oidc.metadata.impl.DefaultBatchBackingStore
-
The bytes of the original loaded metadata.
- OUTBOUND_MESSAGE_CLASS - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
-
The outbound (Nimbus) message class.
- OutboundMessageClassLookupFunction - Class in net.shibboleth.oidc.profile.audit.impl
-
Looks up the value of the simple class name from the outbound message context's message object.
- OutboundMessageClassLookupFunction() - Constructor for class net.shibboleth.oidc.profile.audit.impl.OutboundMessageClassLookupFunction
-
Constructor.
P
- pairFirstEquals(String, List<Pair<String, String>>) - Method in class net.shibboleth.oidc.profile.encoding.impl.AbstractOIDCMessageEncoder
-
Check if the value is contained (exact string match) in the parameter map as the first item of any pair.
- pairSecondContains(String, String, List<Pair<String, String>>) - Method in class net.shibboleth.oidc.profile.encoding.impl.AbstractOIDCMessageEncoder
-
Check if the value is contained (string containment) in the parameter map as the second item of a pair.
- params - Variable in class net.shibboleth.oidc.security.impl.JWETokenDecrypter
-
The JWT decryption parameters.
- params - Variable in class net.shibboleth.oidc.security.impl.JWSTokenSigner
-
The signature signing parameters.
- params - Variable in class net.shibboleth.oidc.security.jose.criterion.SignatureValidationParametersCriterion
-
The SignatureValidationParameters instance.
- parse(byte[]) - Method in class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver
-
Parses an entity from the byte array.
- parse(byte[]) - Method in class net.shibboleth.oidc.metadata.impl.FilesystemClientInformationResolver
-
Parses an entity from the byte array.
- parse(byte[]) - Method in class net.shibboleth.oidc.metadata.impl.FilesystemProviderMetadataResolver
-
Parses an entity from the byte array.
- parseApplicationType(OAuthRPExtensions) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
-
Parse the
ApplicationTypefrom the given extensions. - parseAudiences(OAuthRPExtensions) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
-
Parse the SAML Audience elements.
- parseClientAuthenticationMethod(OAuthRPExtensions) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
-
Parse the
ClientAuthenticationMethodfrom the given extensions. - parseClientID(SPSSODescriptor) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
-
Converts the entityID of the given
SPSSODescriptorinto aClientID. - parseClientSecret(Iterable<Credential>) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
-
Fetches the client secret from given the set of
Credentials. - parseDefaultAcrValues(OAuthRPExtensions) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
-
Parse the default
ACRvalues from the given extensions. - parseEncryptionMethod(String) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
-
Parse the
EncryptionMethodfrom the given metadata value. - parseGrantTypes(OAuthRPExtensions) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
-
Parse the
GrantTypes from the given extensions. - parseJweAlgorithm(String) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
-
Parse the
JWEAlgorithmfrom the given metadata value. - parseJWK(String) - Method in class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.InlineJwksProvider
-
Parse JWK from a string.
- parseJWKs(String) - Method in class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.InlineJwksProvider
-
Parse JWKs out of a string.
- parseJwkSet(Iterable<Credential>, String) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
-
Convert the given credentials into the Nimbus
JWKSet. - parseJWKSet(String) - Method in class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.InlineJwksProvider
-
Parse JWKSet from a string.
- parseJwkUri(Iterable<Credential>, String) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
-
Convert the given credentials into a JWKS URI.
- parseJwsAlgorithm(String) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
-
Parse the
JWSAlgorithmfrom the given metadata value. - parseLogoutUris(SPSSODescriptor, String) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
-
Parse the single logout URIs from the given role descriptor.
- parseRedirectUris(SPSSODescriptor) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
-
Parse the redirection URIs from the given role descriptor.
- parseResponseTypes(OAuthRPExtensions) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
-
Parse the
ResponseTypes from the given extensions. - parseScopes(OAuthRPExtensions) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
-
Parse the
Scopefrom the given extensions. - parseSubjectType(SPSSODescriptor) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
-
Parse the
SubjectTypefrom the given role descriptor's name ID formats. - parseUris(List<? extends MetadataValueSAMLObject>) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
-
Parse the URIs from the given list of metadata values.
- parsingStrategy - Variable in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
-
How to parse the loaded metadata from the loadingStrategy into a usable metadatatype.
- parsingStrategy - Variable in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCacheBuilderSpec
-
How to parse the loaded metadata from the loadingStrategy into a usable metadatatype.
- parsingStrategy - Variable in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyResponseHandler
-
The parsing strategy used for parsing metadata policies.
- parsingStrategy - Variable in class net.shibboleth.oidc.metadata.policy.impl.MetadataPolicyViaLocationFetchingStrategy
-
The parsing strategy used for parsing metadata policies.
- payloadToEncryptLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.EncryptJWTHandler
-
Strategy used to locate the payload to encrypt.
- peerContext - Variable in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler
-
The context representing the OIDC peer entity.
- PLAIN - Enum constant in enum class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest.CodeChallengeMethod
-
The code_challenge is the same as the code_verifier.
- populateCredentialsFromKeySet(JWKSet, Collection<Credential>) - Method in class net.shibboleth.oidc.security.credential.impl.BasicJOSEObjectCredentialResolver
-
Convert the RSA and EC keys from the given
JWKSetinto the collection of credentials. - PopulateJWTDecryptionParameters - Class in net.shibboleth.oidc.profile.impl
-
Action that resolves and populates
DecryptionParameterson anSecurityParametersContextcreated/accessed via a lookup function, by default on a child of the outbound message context. - PopulateJWTDecryptionParameters() - Constructor for class net.shibboleth.oidc.profile.impl.PopulateJWTDecryptionParameters
-
Constructor.
- PopulateJWTEncryptionParameters - Class in net.shibboleth.oidc.profile.impl
-
Action that resolves and populates
EncryptionParameterson anSecurityParametersContextcreated/accessed via a lookup function, by default on a child of the outbound message context. - PopulateJWTEncryptionParameters() - Constructor for class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
-
Constructor.
- PopulateJWTSignatureSigningParameters - Class in net.shibboleth.oidc.profile.impl
-
Action that resolves and populates
SignatureSigningParameterson aSecurityParametersContextcreated/accessed via a lookup function, by default on the outbound message context. - PopulateJWTSignatureSigningParameters(ContextDataLookupFunction<ProfileRequestContext, MessageContext>) - Constructor for class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParameters
-
Constructor.
- PopulateJWTSignatureSigningParametersHandler - Class in net.shibboleth.oidc.profile.impl
-
Handler that resolves and populates
SignatureSigningParameterson aSecurityParametersContextcreated/accessed via a lookup function, by default as an immediate child context of the targetMessageContext. - PopulateJWTSignatureSigningParametersHandler() - Constructor for class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
-
Constructor.
- PopulateJWTSignatureValidationParameters - Class in net.shibboleth.oidc.profile.impl
-
Action that resolves and populates
SignatureValidationParameterson aSecurityParametersContextcreated/accessed via a lookup function, by default on the inbound message context. - PopulateJWTSignatureValidationParameters(ContextDataLookupFunction<ProfileRequestContext, MessageContext>) - Constructor for class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureValidationParameters
-
Constructor.
- PopulateJWTSignatureValidationParametersHandler - Class in net.shibboleth.oidc.profile.impl
-
Handler that resolves and populates
SignatureValidationParameterson aSecurityParametersContextcreated/accessed via a lookup function, by default as an immediate child context of the targetMessageContext. - PopulateJWTSignatureValidationParametersHandler() - Constructor for class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureValidationParametersHandler
-
Constructor.
- populateMetadata(SPSSODescriptor, Iterable<Credential>, String) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
-
Populates the
OIDCClientMetadatausing the values found from the givenSPSSODescriptor, the set ofCredentials and the client ID. - POST - Enum constant in enum class net.shibboleth.oidc.profile.oauth2.config.OAuth2AuthorizationProfileConfiguration.HttpRequestMethod
-
HTTP POST.
- postAuthenticationFlowsLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Lookup function to supply post authentication flows.
- PostLogoutRedirectUri - Interface in net.shibboleth.oidc.saml.xmlobject
-
SAML2 OIDC metadata extension 'PostLogoutRedirectUri'.
- PostLogoutRedirectUriBuilder - Class in net.shibboleth.oidc.saml.xmlobject.impl
-
Builder of
PostLogoutRedirectUriImpl. - PostLogoutRedirectUriBuilder() - Constructor for class net.shibboleth.oidc.saml.xmlobject.impl.PostLogoutRedirectUriBuilder
- PostLogoutRedirectUriImpl - Class in net.shibboleth.oidc.saml.xmlobject.impl
-
Concrete implementation of
PostLogoutRedirectUri. - PostLogoutRedirectUriImpl(String, String, String) - Constructor for class net.shibboleth.oidc.saml.xmlobject.impl.PostLogoutRedirectUriImpl
-
Constructor.
- postLogoutRedirectUris - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Post logout redirect URIs for this entity.
- postProcess(CriteriaSet, JOSEObject, List<Credential>) - Method in class net.shibboleth.oidc.security.credential.impl.BasicJOSEObjectCredentialResolver
-
Hook for subclasses to do post-processing of the credential set after all JOSE header keys have been processed.
- postProcess(CriteriaSet, JOSEObject, List<Credential>) - Method in class net.shibboleth.oidc.security.credential.impl.LocalJOSEObjectCredentialResolver
- pragma - Variable in class net.shibboleth.oidc.profile.messaging.JSONErrorResponse
-
pragma value.
- pragma - Variable in class net.shibboleth.oidc.profile.messaging.JSONSuccessResponse
-
pragma value.
- PRC_LOOKUP - Static variable in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler
-
Lookup function for parent ProfileRequestContext.
- predicateFilterCandidates(Iterable<MetadataType>, CriteriaSet, boolean) - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver
-
Filter the supplied candidates by resolving predicates from the supplied criteria and applying the predicates to return a filtered
Iterable. - PreferFrontChannelLogoutPredicate - Class in net.shibboleth.oidc.profile.config.logic
-
A predicate implementation that forwards to
OIDCLogoutProfileConfiguration.isPreferFrontChannel(ProfileRequestContext). - PreferFrontChannelLogoutPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.PreferFrontChannelLogoutPredicate
- preferFrontChannelPredicate - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
-
Whether encryption is optional in the face of no key, etc.
- preProcessEntityDescriptor(Value, Key, AbstractOIDCEntityResolver.JsonBackingStore) - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver
-
Pre-process the specified entity descriptor, updating the specified entity backing store instance as necessary.
- principalMappings - Variable in class net.shibboleth.oidc.profile.config.navigate.ProxyAwareDefaultOIDCAuthenticationContextClassRequestLookupFunction
-
Mappings to transform proxied Principals.
- principalMappings - Variable in class net.shibboleth.oidc.profile.config.navigate.ProxyAwareDefaultOIDCAuthenticationContextClassResponseLookupFunction
-
Mappings to transform proxied Principals.
- process(XMLObject) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
- process(KeyInfoCredentialResolver, XMLObject, CriteriaSet, KeyInfoResolutionContext) - Method in class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.ClientSecretProvider
- process(KeyInfoCredentialResolver, XMLObject, CriteriaSet, KeyInfoResolutionContext) - Method in class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.ClientSecretReferenceProvider
- process(KeyInfoCredentialResolver, XMLObject, CriteriaSet, KeyInfoResolutionContext) - Method in class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.InlineJwksProvider
- process(KeyInfoCredentialResolver, XMLObject, CriteriaSet, KeyInfoResolutionContext) - Method in class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.JWKSReferenceProvider
- processAttribute(XMLObject, Attr) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsUnmarshaller
- processChildElement(XMLObject, XMLObject) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsUnmarshaller
- processJWEHeader(JWEHeader) - Method in class net.shibboleth.oidc.security.credential.impl.BasicJOSEObjectCredentialResolver
-
Process JWE header into a list of credentials.
- processJWSHeader(JWSHeader) - Method in class net.shibboleth.oidc.security.credential.impl.BasicJOSEObjectCredentialResolver
-
Process credentials indicated by a JWS header.
- PROFILE_COUNTER - Static variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
OIDC authorization profile counter name.
- PROFILE_COUNTER - Static variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCDynamicRegistrationConfiguration
-
OIDC dynamic registration profile counter name.
- PROFILE_COUNTER - Static variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
-
OIDC Back-Channel Logout profile counter name.
- PROFILE_COUNTER - Static variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCProviderInformationConfiguration
-
OIDC provider information profile counter name.
- PROFILE_COUNTER - Static variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCPublishKeySetConfiguration
-
OIDC keyset profile counter name.
- PROFILE_COUNTER - Static variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCUserInfoConfiguration
-
OIDC UserInfo profile counter name.
- PROFILE_COUNTER - Static variable in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2PushedAuthorizationRequestConfiguration
-
OAuth2 pushed authorization request profile counter name.
- PROFILE_COUNTER - Static variable in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
-
OAuth2 token profile counter name.
- PROFILE_COUNTER - Static variable in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenIntrospectionConfiguration
-
OAuth2 token introspection profile counter name.
- PROFILE_COUNTER - Static variable in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenRevocationConfiguration
-
OAuth2 token revocation profile counter name.
- PROFILE_ID - Static variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCPublishKeySetConfiguration
-
ID for this profile configuration.
- PROFILE_ID - Static variable in interface net.shibboleth.oidc.profile.config.OIDCAuthenticationProfileConfiguration
-
ID for this profile configuration.
- PROFILE_ID - Static variable in interface net.shibboleth.oidc.profile.config.OIDCAuthorizationConfiguration
-
ID for this profile configuration.
- PROFILE_ID - Static variable in interface net.shibboleth.oidc.profile.config.OIDCDynamicRegistrationConfiguration
-
ID for this profile configuration.
- PROFILE_ID - Static variable in interface net.shibboleth.oidc.profile.config.OIDCLogoutProfileConfiguration
-
ID for this profile configuration.
- PROFILE_ID - Static variable in interface net.shibboleth.oidc.profile.config.OIDCProviderInformationConfiguration
-
ID for this profile configuration.
- PROFILE_ID - Static variable in interface net.shibboleth.oidc.profile.config.OIDCPublishKeySetConfiguration
-
ID for this profile configuration.
- PROFILE_ID - Static variable in interface net.shibboleth.oidc.profile.config.OIDCSSOProfileConfiguration
-
ID for this profile configuration.
- PROFILE_ID - Static variable in interface net.shibboleth.oidc.profile.config.OIDCUserInfoConfiguration
-
ID for this profile configuration.
- PROFILE_ID - Static variable in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2PushedAuthorizationRequestConfiguration
-
ID for this profile configuration.
- PROFILE_ID - Static variable in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenAudienceConfiguration
-
ID for this profile configuration.
- PROFILE_ID - Static variable in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenConfiguration
-
ID for this profile configuration.
- PROFILE_ID - Static variable in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenIntrospectionConfiguration
-
ID for this profile configuration.
- PROFILE_ID - Static variable in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenRevocationConfiguration
-
ID for this profile configuration.
- profileConfiguration - Variable in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler
-
Applicable stashed profile configuration appropriate for OAuth clients.
- profileRequestContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.navigate.MessageContextLookupFunctionAdaptor
-
Strategy used to locate the
ProfileRequestContextassociated with a givenMessageContext. - prohibitedClaims - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.ProhibitedClaimsValidator
-
The names of the JWT claims that must not be present, empty set if none.
- ProhibitedClaimsValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl
-
Verify the claims set does not contain any of the described set of claims.
- ProhibitedClaimsValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.ProhibitedClaimsValidator
-
Constructor.
- prompt - Variable in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
-
Space delimited, case sensitive list of ASCII string values that specifies whether the Authorization Server prompts the End-User for reauthentication and consent.
- PROP_ARRAY_AS_STRING - Static variable in interface net.shibboleth.oidc.attribute.transcoding.OIDCAttributeTranscoder
-
Whether to decode a JSON Array into a serialized JSON string.
- PROP_ASARRAY - Static variable in interface net.shibboleth.oidc.attribute.transcoding.OIDCAttributeTranscoder
-
Whether to encode data to JSON array.
- PROP_ASBOOLEAN - Static variable in interface net.shibboleth.oidc.attribute.transcoding.OIDCAttributeTranscoder
-
Whether to encode data to JSON integer.
- PROP_ASINTEGER - Static variable in interface net.shibboleth.oidc.attribute.transcoding.OIDCAttributeTranscoder
-
Whether to encode data to JSON integer.
- PROP_ASOBJECT - Static variable in class net.shibboleth.oidc.attribute.transcoding.impl.OIDCStringAttributeTranscoder
-
Whether to parse the values into and out as a JSON object.
- PROP_BOOLEAN_AS_STRING - Static variable in interface net.shibboleth.oidc.attribute.transcoding.OIDCAttributeTranscoder
-
Whether to decode JSON Booleans to IdP Attribute Strings.
- PROP_NAME - Static variable in interface net.shibboleth.oidc.attribute.transcoding.OIDCAttributeTranscoder
-
The claim name.
- PROP_NAME_FROM_METADATA - Static variable in interface net.shibboleth.oidc.attribute.transcoding.OIDCAttributeTranscoder
-
Flag to signal use of metadata to override name to encode.
- PROP_NUMBER_AS_STRING - Static variable in interface net.shibboleth.oidc.attribute.transcoding.OIDCAttributeTranscoder
-
Whether to decode JSON Numbers to IdP Attribute Strings.
- PROP_SCOPE_DELIMITER - Static variable in class net.shibboleth.oidc.attribute.transcoding.impl.OIDCScopedStringAttributeTranscoder
-
Scope delimiter for combining the data.
- PROP_STRING_DELIMITER - Static variable in interface net.shibboleth.oidc.attribute.transcoding.OIDCAttributeTranscoder
-
Separator to use when not encoding multiple values to array.
- PropertiesClientSecretValueResolver - Class in net.shibboleth.oidc.metadata.impl
-
A client secret value resolver that fetches the values from the given Properties file.
- PropertiesClientSecretValueResolver() - Constructor for class net.shibboleth.oidc.metadata.impl.PropertiesClientSecretValueResolver
- propertiesResource - Variable in class net.shibboleth.oidc.metadata.impl.PropertiesClientSecretValueResolver
-
The properties resource containing client secret values.
- PROTOCOL_URI - Static variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCPublishKeySetConfiguration
-
OIDC base protocol URI.
- PROTOCOL_URI - Static variable in interface net.shibboleth.oidc.profile.config.OIDCDynamicRegistrationConfiguration
-
OIDC base protocol URI.
- PROTOCOL_URI - Static variable in interface net.shibboleth.oidc.profile.config.OIDCProviderInformationConfiguration
-
OIDC base protocol URI.
- PROTOCOL_URI - Static variable in interface net.shibboleth.oidc.profile.config.OIDCPublishKeySetConfiguration
-
OIDC base protocol URI.
- PROTOCOL_URI - Static variable in interface net.shibboleth.oidc.profile.config.OIDCUserInfoConfiguration
-
OIDC base protocol URI.
- PROTOCOL_URI - Static variable in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2PushedAuthorizationRequestConfiguration
-
OAuth2 Pushed Authorization Requests URI.
- PROTOCOL_URI - Static variable in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenAudienceConfiguration
-
OAuth2 Token Revocation URI.
- PROTOCOL_URI - Static variable in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenIntrospectionConfiguration
-
OAuth2 Token Revocation URI.
- PROTOCOL_URI - Static variable in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenRevocationConfiguration
-
OAuth2 Token Revocation URI.
- providerEncryptionMethodsLookupStrategy - Variable in class net.shibboleth.oidc.security.jose.impl.ProviderMetadataDataEncryptionAlgorithmsLookupStrategy
-
A strategy to locate the encryption methods ('enc') appropriate for the JWT to be encrypted.
- providerInformation - Variable in class net.shibboleth.oidc.metadata.context.OIDCProviderMetadataContext
-
The client information.
- providerKeyTransportAlgorithmsLookupStrategy - Variable in class net.shibboleth.oidc.security.jose.impl.ProviderMetadataKeyTransportEncryptionAlgorithmsLookupStrategy
-
A strategy to locate the algorithms ('alg') appropriate for the JWT to be encrypted.
- providerMetadata - Variable in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler
-
The provider metadata found from the lookup strategy.
- providerMetadataAlgorithmLookupStrategy - Variable in class net.shibboleth.oidc.security.jose.impl.RelyingPartySigningParametersResolver
-
A strategy to pull out the correct set of supported algorithms from the
OIDCProviderMetadata. - ProviderMetadataCredentialResolver - Class in net.shibboleth.oidc.security.credential.impl
-
A
LocalJOSEObjectCredentialResolverthat resolves credentials from the jwks_uri of an OpenID Provider. - ProviderMetadataCredentialResolver(RemoteJwkSetCache) - Constructor for class net.shibboleth.oidc.security.credential.impl.ProviderMetadataCredentialResolver
-
Constructor.
- ProviderMetadataCredentialResolver(RemoteJwkSetCache, Duration) - Constructor for class net.shibboleth.oidc.security.credential.impl.ProviderMetadataCredentialResolver
-
Constructor.
- ProviderMetadataCriterion - Class in net.shibboleth.oidc.security.jose.criterion
-
Provider metadata criterion to make decisions based on OpenID Provider information.
- ProviderMetadataCriterion(OIDCProviderMetadata) - Constructor for class net.shibboleth.oidc.security.jose.criterion.ProviderMetadataCriterion
-
Constructor.
- ProviderMetadataDataEncryptionAlgorithmsLookupStrategy - Class in net.shibboleth.oidc.security.jose.impl
-
A lookup strategy that finds data/content encryption algorithms from local configuration that are compatible with those advertised by the OpenID Provider.
- ProviderMetadataDataEncryptionAlgorithmsLookupStrategy(Function<OIDCProviderMetadata, List<String>>) - Constructor for class net.shibboleth.oidc.security.jose.impl.ProviderMetadataDataEncryptionAlgorithmsLookupStrategy
-
Constructor.
- ProviderMetadataDataEncryptionAlgorithmsLookupStrategy(Function<OIDCProviderMetadata, List<String>>, AlgorithmRegistry) - Constructor for class net.shibboleth.oidc.security.jose.impl.ProviderMetadataDataEncryptionAlgorithmsLookupStrategy
-
Constructor.
- ProviderMetadataKeyTransportEncryptionAlgorithmsLookupStrategy - Class in net.shibboleth.oidc.security.jose.impl
-
A lookup strategy that finds key transport algorithms from local configuration that are compatible with those advertised by the downstream OpenID Provider.
- ProviderMetadataKeyTransportEncryptionAlgorithmsLookupStrategy(Function<OIDCProviderMetadata, List<String>>) - Constructor for class net.shibboleth.oidc.security.jose.impl.ProviderMetadataKeyTransportEncryptionAlgorithmsLookupStrategy
-
Constructor.
- ProviderMetadataKeyTransportEncryptionAlgorithmsLookupStrategy(Function<OIDCProviderMetadata, List<String>>, AlgorithmRegistry) - Constructor for class net.shibboleth.oidc.security.jose.impl.ProviderMetadataKeyTransportEncryptionAlgorithmsLookupStrategy
-
Constructor.
- providerMetadataLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler
-
Function that looks up provider metadata from the given message context.
- ProviderMetadataProviderContainer - Class in net.shibboleth.oidc.metadata
-
This class is a sortable container of
ProviderMetadataResolvers, wrapped into a serviceable component. - ProviderMetadataProviderContainer() - Constructor for class net.shibboleth.oidc.metadata.ProviderMetadataProviderContainer
- ProviderMetadataResolver - Interface in net.shibboleth.oidc.metadata
-
A resolver that is capable of resolving
OIDCProviderMetadatainstances which meet certain supplied criteria. - ProviderMetadataResolverServiceStrategy - Class in net.shibboleth.oidc.profile.spring.relyingparty.metadata.impl
-
Strategy for summoning up a
ProviderMetadataResolverfrom a populatedApplicationContext. - ProviderMetadataResolverServiceStrategy() - Constructor for class net.shibboleth.oidc.profile.spring.relyingparty.metadata.impl.ProviderMetadataResolverServiceStrategy
- ProviderMetadataStringValuesLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
Fetches the values for the configured key as
String. - ProviderMetadataStringValuesLookupFunction(String) - Constructor for class net.shibboleth.oidc.profile.config.navigate.ProviderMetadataStringValuesLookupFunction
-
Constructor.
- providerSupportsClaimsParameter - Variable in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
-
Does the OpenID Provider support the claims parameter? Typically taken from its metadata.
- providerSupportsClaimsParameter() - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
-
Does the OpenID Provider support the claims parameter?
- proxiedAuthnInstantPredicate - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Whether authentication results should carry the proxied auth_time in the id_token.
- PROXY_CLIENT_ID - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
-
OIDC proxy client ID.
- PROXY_ISSUER - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
-
OIDC proxy issuer.
- ProxyAwareDefaultOIDCAuthenticationContextClassRequestLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
Implements a set of default logic for determining the custom principals to derive the OIDC ACRs from.
- ProxyAwareDefaultOIDCAuthenticationContextClassRequestLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.ProxyAwareDefaultOIDCAuthenticationContextClassRequestLookupFunction
-
Constructor.
- ProxyAwareDefaultOIDCAuthenticationContextClassResponseLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
Implements a set of logic for determining the principals to use from OIDC 'amr' or 'acr' claims.
- ProxyAwareDefaultOIDCAuthenticationContextClassResponseLookupFunction(Map<String, Collection<Principal>>) - Constructor for class net.shibboleth.oidc.profile.config.navigate.ProxyAwareDefaultOIDCAuthenticationContextClassResponseLookupFunction
-
Constructor.
- ProxyAwareDefaultOIDCAuthenticationContextClassResponseLookupFunction.LookupFunctionWrapper - Class in net.shibboleth.oidc.profile.config.navigate
-
A simple lookup function that returns a singleton function.
- proxyCountLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Lookup function to supply proxyCount property.
- PushedAuthorizationRequestUriClaimsSetManipulationStrategyLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
A function that returns
OAuth2PushedAuthorizationRequestConfiguration.getRequestUriClaimsSetManipulationStrategy(ProfileRequestContext)if such a profile is available from aRelyingPartyContextobtained via a lookup function, by default a child of theProfileRequestContext. - PushedAuthorizationRequestUriClaimsSetManipulationStrategyLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.PushedAuthorizationRequestUriClaimsSetManipulationStrategyLookupFunction
- PushedAuthorizationRequestUriLifetimeLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
A function that returns
OAuth2PushedAuthorizationRequestConfiguration.getRequestUriLifetime(ProfileRequestContext)if such a profile is available from aRelyingPartyContextobtained via a lookup function, by default a child of theProfileRequestContext. - PushedAuthorizationRequestUriLifetimeLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.PushedAuthorizationRequestUriLifetimeLookupFunction
- PushedAuthorizationRequestUriTypeLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
A function that returns
OAuth2PushedAuthorizationRequestConfiguration.getRequestUriType(ProfileRequestContext)if such a profile is available from aRelyingPartyContextobtained via a lookup function, by default a child of theProfileRequestContext. - PushedAuthorizationRequestUriTypeLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.PushedAuthorizationRequestUriTypeLookupFunction
R
- ratioGaugeFetchToGet - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
-
Metrics RatioGauge for count of origin fetches to gets.
- read(MetadataManagementData<IdentifierType>, IdentifierType) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
-
Read metadata from the cache under the lock relating to the Identifier of the metadata to find.
- readWriteLock - Variable in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
-
A lock to use when reading from and loading the cache.
- recordEntityAccess() - Method in class net.shibboleth.oidc.metadata.MetadataManagementData
-
Record access of the entity's backing store data.
- REDIRECT_URI - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
-
The authorization endpoint for the authentication request.
- redirectURI - Variable in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
-
The redirect URI to which the response will be sent.
- RedirectURIAuditExtractor - Class in net.shibboleth.oidc.profile.audit.impl
-
Functionthat extracts the redirect_uri from theOIDCAuthenticationRequest. - RedirectURIAuditExtractor(Function<ProfileRequestContext, OIDCAuthenticationRequest>) - Constructor for class net.shibboleth.oidc.profile.audit.impl.RedirectURIAuditExtractor
-
Constructor.
- redirectUriOverrideLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
An override to specify a specific redirect_uri to use over the normally computed one.
- referenceUri - Variable in class net.shibboleth.oidc.security.credential.BasicJWKReferenceCredential
-
A reference to a JWK.
- refresh() - Method in class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver
-
Refreshes the metadata from its source.
- refresh() - Method in class net.shibboleth.oidc.metadata.impl.ChainingClientInformationResolver
-
Refresh the data exposed by the resolver.
- refresh() - Method in class net.shibboleth.oidc.metadata.impl.ChainingProviderMetadataResolver
-
Refresh the data exposed by the resolver.
- refresh() - Method in interface net.shibboleth.oidc.metadata.RefreshableClientInformationResolver
-
Refresh the data exposed by the resolver.
- refresh() - Method in interface net.shibboleth.oidc.metadata.RefreshableProviderMetadataResolver
-
Refresh the data exposed by the resolver.
- refresh() - Method in class net.shibboleth.oidc.metadata.RelyingPartyClientInformationProvider
-
Refresh the data exposed by the resolver.
- RefreshableClientInformationResolver - Interface in net.shibboleth.oidc.metadata
-
Specialization of
ClientInformationResolverthat supports on-demand refresh. - RefreshableProviderMetadataResolver - Interface in net.shibboleth.oidc.metadata
-
Specialization of
ProviderMetadataResolverthat supports on-demand refresh. - refreshDelayFactor - Variable in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
-
Factor used to compute when the next refresh interval will occur.
- refreshDelayFactor - Variable in class net.shibboleth.oidc.metadata.cache.impl.BaseMetadataCacheBuilderSpec
-
Factor used to compute when the next refresh interval will occur.
- refreshMetadataTask - Variable in class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver
-
Current task to refresh metadata.
- RefreshMetadataTask() - Constructor for class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver.RefreshMetadataTask
- RefreshTokenChainLifetimeLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
A function that returns
OAuth2RefreshTokenProducingProfileConfiguration.getRefreshTokenChainLifetime(ProfileRequestContext)if such a profile is available from aRelyingPartyContextobtained via a lookup function, by default a child of theProfileRequestContext. - RefreshTokenChainLifetimeLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.RefreshTokenChainLifetimeLookupFunction
- refreshTokenChainLifetimeLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Lookup function to supply refresh token chain lifetime.
- RefreshTokenClaimsSetManipulationStrategyLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
A function that returns
OAuth2TokenConfiguration.getRefreshTokenClaimsSetManipulationStrategy(ProfileRequestContext)if such a profile is available from aRelyingPartyContextobtained via a lookup function, by default a child of theProfileRequestContext. - RefreshTokenClaimsSetManipulationStrategyLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.RefreshTokenClaimsSetManipulationStrategyLookupFunction
- refreshTokenClaimsSetManipulationStrategyLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
-
Lookup function to supply strategy bi-function for manipulating refresh token claims set.
- RefreshTokensEnabledPredicate - Class in net.shibboleth.oidc.profile.config.logic
-
A predicate implementation that forwards to
OAuth2FlowAwareProfileConfiguration.isRefreshTokensEnabled(ProfileRequestContext). - RefreshTokensEnabledPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.RefreshTokensEnabledPredicate
- refreshTokensPredicate - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2FlowAwareProfileConfiguration
-
Predicate used to indicate whether refresh tokens are supported by this profile.
- RefreshTokenTimeoutLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
A function that returns
OAuth2RefreshTokenProducingProfileConfiguration.getRefreshTokenTimeout(ProfileRequestContext)if such a profile is available from aRelyingPartyContextobtained via a lookup function, by default a child of theProfileRequestContext. - RefreshTokenTimeoutLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.RefreshTokenTimeoutLookupFunction
- refreshTokenTimeoutLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Lookup function to supply refresh token timeout.
- RefreshTokenTypeLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
A function that returns
OAuth2RefreshTokenProducingProfileConfiguration.getRefreshTokenType(ProfileRequestContext)if such a profile is available from aRelyingPartyContextobtained via a lookup function, by default a child of theProfileRequestContext. - RefreshTokenTypeLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.RefreshTokenTypeLookupFunction
- refreshTokenTypeLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Lookup function to supply refresh token type.
- refreshTriggerTime - Variable in class net.shibboleth.oidc.metadata.MetadataManagementData
-
Time at which should start attempting to refresh the metadata.
- regexp - Variable in class net.shibboleth.oidc.metadata.policy.MetadataPolicy.Builder
-
The regular expression that the claim value must meet.
- regexp - Variable in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
-
The regular expression that the claim value must meet.
- RegistrationMetadataPolicyLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
A function that returns
OIDCDynamicRegistrationConfiguration.getMetadataPolicy(ProfileRequestContext)if such a profile is available from aRelyingPartyContextobtained via a lookup function, by default a child of theProfileRequestContext. - RegistrationMetadataPolicyLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.RegistrationMetadataPolicyLookupFunction
- RegistrationValidityPeriodLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
A function that returns
OIDCDynamicRegistrationConfiguration.getRegistrationValidityPeriod(ProfileRequestContext)if such a profile is available from aRelyingPartyContextobtained via a lookup function, by default a child of theProfileRequestContext. - RegistrationValidityPeriodLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.RegistrationValidityPeriodLookupFunction
- registrationValidityPeriodLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCDynamicRegistrationConfiguration
-
Lookup function to supply registration validity period.
- ReloadingProviderMetadataProvider - Class in net.shibboleth.oidc.metadata.impl
-
This class uses the service interface to implement
ProviderMetadataResolver. - ReloadingProviderMetadataProvider(ReloadableService<ProviderMetadataResolver>) - Constructor for class net.shibboleth.oidc.metadata.impl.ReloadingProviderMetadataProvider
-
Constructor.
- ReloadingRelyingPartyClientInformationProvider - Class in net.shibboleth.oidc.metadata.impl
-
This class uses the service interface to implement
ClientInformationResolver. - ReloadingRelyingPartyClientInformationProvider(ReloadableService<ClientInformationResolver>) - Constructor for class net.shibboleth.oidc.metadata.impl.ReloadingRelyingPartyClientInformationProvider
-
Constructor.
- RelyingPartyClientInformationProvider - Class in net.shibboleth.oidc.metadata
-
This class exists primarily to allow the parsing of relying-party.xml to create a serviceable implementation of
ClientInformationResolver. - RelyingPartyClientInformationProvider() - Constructor for class net.shibboleth.oidc.metadata.RelyingPartyClientInformationProvider
-
Constructor.
- relyingPartyContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.FormOutboundKeySetResponseMessage
-
Strategy used to locate the
RelyingPartyContextassociated with a givenProfileRequestContext. - relyingPartyContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTDecryptionParameters
-
Lookup function for relying party context.
- relyingPartyContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
-
Lookup function for relying party context.
- relyingPartyContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
-
Lookup function for relying party context.
- relyingPartyContextLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler
-
Lookup function for relying party context.
- RelyingPartySigningParametersResolver - Class in net.shibboleth.oidc.security.jose.impl
-
A specialization of
BasicSignatureSigningParametersResolverwhich supports selecting signing credentials from client_secret credential criterion (e.g. - RelyingPartySigningParametersResolver() - Constructor for class net.shibboleth.oidc.security.jose.impl.RelyingPartySigningParametersResolver
-
Constructor.
- remoteJwkSetCache - Variable in class net.shibboleth.oidc.security.credential.impl.ClientInformationCredentialResolver
-
The cache for remote JWK key sets.
- remoteJwkSetCache - Variable in class net.shibboleth.oidc.security.credential.impl.ProviderMetadataCredentialResolver
-
The cache for remote JWK key sets.
- RemoteJwkSetCache - Class in net.shibboleth.oidc.jwk
-
Stores fetched remote key set values for a desired period of time.
- RemoteJwkSetCache() - Constructor for class net.shibboleth.oidc.jwk.RemoteJwkSetCache
- RemoteJwkUtils - Class in net.shibboleth.oidc.jwk.support
-
Generic utility methods related to remote JWK sets.
- RemoteJwkUtils() - Constructor for class net.shibboleth.oidc.jwk.support.RemoteJwkUtils
-
Constructor.
- removeByIdentifier(Key, AbstractOIDCEntityResolver.JsonBackingStore) - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver
-
Remove from the backing store all metadata for the entity with the given identifier.
- removeExpiredAndIdleMetadata() - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache.ExpiredAndIdleMetadataCleanupTask
- removeIdleEntityData - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
-
Flag indicating whether idle entity data should be removed.
- removeIdleEntityData - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
-
Flag indicating whether idle entity data should be removed.
- removeManagementData(I) - Method in interface net.shibboleth.oidc.metadata.DynamicBackingStore
-
Remove the management data for the specified entityID.
- removeManagementData(I) - Method in class net.shibboleth.oidc.metadata.impl.DefaultDynamicBackingStore
-
Remove the management data for the specified entityID.
- replayCache - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierClaimsValidator
-
Message replay cache instance to use.
- replayCacheKeyCalculationStrategy - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierClaimsValidator
-
Optional function to calculate they key used with
ReplayCache. - replayCacheRecordLifetime - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierClaimsValidator
-
Static lifetime to be used in replay cache if claims set doesn't contain expiration value.
- REQUEST_OBJECT_AND_URI - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
-
Both request uri and request object in request.
- REQUEST_OBJECT_ENCRYPTION_ALG_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Attribute local name.
- REQUEST_OBJECT_ENCRYPTION_ENC_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Attribute local name.
- REQUEST_OBJECT_SIGNING_ALG_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Attribute local name.
- requested - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationTimeClaimsValidator
-
Has the auth_time been requested, either explicitly or from the max_age parameter? Defaults to true.
- requestedClaims - Variable in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
-
Individual requested claims.
- RequestedEssentialACRClaimsLookupStrategy - Class in net.shibboleth.oidc.security.jwt.claims.impl
-
Strategy that looks up any requested ACR claims from the requested claims object that have to be contained in the token's claims set.
- RequestedEssentialACRClaimsLookupStrategy(Function<ProfileRequestContext, OIDCAuthenticationRequest>) - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.RequestedEssentialACRClaimsLookupStrategy
-
Constructor.
- requestedEssentialAcrsClaimLookupStrategy - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.ACRClaimsValidator
-
Strategy to find the essential requested ACR claim values.
- requestLookupStrategy - Variable in class net.shibboleth.oidc.profile.audit.impl.AbstractAuthenticationRequestAuditExtractor
-
Lookup strategy to locate the authentication request.
- requestLookupStrategy - Variable in class net.shibboleth.oidc.profile.audit.impl.ForceAuthnAuditExtractor
-
Lookup strategy to locate the authentication request.
- requestObject - Variable in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
-
The request object.
- requestObjectClaimsSet - Variable in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
-
The claims used to build a request object JWT.
- requestObjectEncryptionAlg - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Request object encryption algorithm for this entity.
- requestObjectEncryptionEnc - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Request object encryption encoder for this entity.
- requestObjectSigningAlg - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Request object signing algorithm for this entity.
- requestURI - Variable in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
-
The request URI.
- RequestUri - Interface in net.shibboleth.oidc.saml.xmlobject
-
SAML2 OIDC metadata extension 'RequestUri'.
- RequestUriBuilder - Class in net.shibboleth.oidc.saml.xmlobject.impl
-
Builder of
RequestUriImpl. - RequestUriBuilder() - Constructor for class net.shibboleth.oidc.saml.xmlobject.impl.RequestUriBuilder
- requestUriClaimsSetManipulationStrategyLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2PushedAuthorizationRequestConfiguration
-
Lookup function to supply strategy bi-function for manipulating request URI claims set.
- RequestUriImpl - Class in net.shibboleth.oidc.saml.xmlobject.impl
-
Concrete implementation of
RequestUri. - RequestUriImpl(String, String, String) - Constructor for class net.shibboleth.oidc.saml.xmlobject.impl.RequestUriImpl
-
Constructor.
- requestUriLifetimeLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2PushedAuthorizationRequestConfiguration
-
Lookup function to supply request URI lifetime.
- requestUris - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Request URIs for this entity.
- requestUriTypeLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2PushedAuthorizationRequestConfiguration
-
Lookup function to supply request URI type.
- REQUIRE_AUTH_TIME_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Attribute local name.
- requireAll - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.ChainingJWTClaimsValidator
-
Require all of the validators to be successful.
- RequireAuthenticationRequestPredicate - Class in net.shibboleth.oidc.profile.config.logic
-
A predicate implementation that forwards to
OAuth2AuthorizationProfileConfiguration.isRequireAuthenticationRequest(ProfileRequestContext). - RequireAuthenticationRequestPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.RequireAuthenticationRequestPredicate
- requireAuthenticationRequestPredicateLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Whether client is required to use OIDC authentication request vs plain OAuth2 authorization request.
- requireAuthTime - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Require auth time flag for this entity.
- requiredClaims - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.RequiredClaimsValidator
-
The names of the JWT claims that must be present, if empty no claims are required.
- RequiredClaimsValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl
-
Verify the claims set contains the given set of required claims.
- RequiredClaimsValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.RequiredClaimsValidator
-
Constructor.
- RequireDPoPJktParameterPredicate - Class in net.shibboleth.oidc.profile.config.logic
-
A predicate implementation that forwards to
OAuth2AuthorizationProfileConfiguration.isRequireDpopJkt(ProfileRequestContext). - RequireDPoPJktParameterPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.RequireDPoPJktParameterPredicate
- requireDpopJktPredicate - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Whether client is required to include dpop_jkt in authorization request.
- requireDpopProofPredicate - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Whether client is required to include DPoP Proof JWT in API request.
- RequireDPoPProofPredicate - Class in net.shibboleth.oidc.profile.config.logic
-
A predicate implementation that forwards to
OAuth2DPoPProofValidatingProfileConfiguration.isRequireDpopProof(ProfileRequestContext). - RequireDPoPProofPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.RequireDPoPProofPredicate
- requiredRule - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.IssuedAtClaimsValidator
-
Whether this rule is required to be met.
- requireIdTokenHintPredicate - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
-
Whether to require the use of id_token_hint in RP-initiated logout parameters.
- RequireIdTokenHintPredicate - Class in net.shibboleth.oidc.profile.config.logic
-
A predicate implementation that forwards to
OIDCLogoutProfileConfiguration.isRequireIdTokenHint(ProfileRequestContext). - RequireIdTokenHintPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.RequireIdTokenHintPredicate
- requirePushedAuthorizationRequestPredicate - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Whether client is required to use pushed authorization request.
- RequirePushedAuthorizationRequestPredicate - Class in net.shibboleth.oidc.profile.config.logic
-
A predicate implementation that forwards to
OAuth2AuthorizationProfileConfiguration.isRequirePushedAuthorizationRequest(ProfileRequestContext). - RequirePushedAuthorizationRequestPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.RequirePushedAuthorizationRequestPredicate
- resolve(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver
- resolve(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.ChainingClientInformationResolver
- resolve(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.ChainingProviderMetadataResolver
- resolve(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor.SkeletonEchoingRoleDescriptorResolver
- resolve(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.FilesystemClientInformationResolver
- resolve(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.FilesystemProviderMetadataResolver
- resolve(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.PropertiesClientSecretValueResolver
- resolve(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.ReloadingProviderMetadataProvider
- resolve(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.ReloadingRelyingPartyClientInformationProvider
- resolve(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.ResolverServiceClientSecretValueResolver
- resolve(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.StorageServiceClientInformationResolver
- resolve(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.RelyingPartyClientInformationProvider
- resolve(CriteriaSet) - Method in class net.shibboleth.oidc.security.credential.impl.ReturnAllCollectionJOSEObjectCredentialResolver
- resolve(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver
- resolve(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureValidationParametersResolver
- resolve(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultDecryptionParametersResolver
- resolve(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
- resolveAcceptedAudiences(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AudienceClaimsValidator
-
Resolve the set of accepted audiences.
- resolveAcceptedAudiences(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationAudienceClaimsValidator
-
Resolve the set of accepted audiences.
- resolveAlgorithm(Credential, String) - Method in class net.shibboleth.oidc.security.impl.JWSTokenSigner
-
Resolves JWS algorithm from signature signing parameters.
- resolveAndPopulateCredentialAndSignatureAlgorithm(SignatureSigningParameters, CriteriaSet, Predicate<String>) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver
-
Resolve and populate the signing credential and signature method algorithm URI on the supplied parameters instance.
- resolveAndPopulateCredentialAndSignatureAlgorithm(SignatureSigningParameters, CriteriaSet, Predicate<String>) - Method in class net.shibboleth.oidc.security.jose.impl.RelyingPartySigningParametersResolver
-
Resolve and populate the signing credential and signature method algorithm URI on the supplied parameters instance.
- resolveAndPopulateCredentialsAndAlgorithms(EncryptionParameters, CriteriaSet, Predicate<String>) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
-
Resolve and populate the data encryption and key transport credentials and algorithm URIs.
- resolveAttributesPredicate - Variable in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Whether attributes should be resolved in the course of the profile.
- resolveAttributesPredicate - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCUserInfoConfiguration
-
Whether attributes should be resolved in the course of the profile.
- resolveAttributesPredicate - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
-
Whether attributes should be resolved in the course of the profile.
- resolveContentEncryptionKeyCredentialResolver(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultDecryptionParametersResolver
-
Resolve and return the effective
CredentialResolverused to resolve the content encryption key. - resolveContentEncryptionKeyCredentialResolver(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
-
Resolve and return the effective
CredentialResolverused to resolve the content encryption key. - resolveCredentialForSupportedAlgorithm(CriteriaSet, List<JWEAlgorithm>, List<EncryptionMethod>, EncryptionParameters) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
-
Resolve a credential (key) compatible with one-of the supported algorithms.
- resolveCredentials(SPSSODescriptor) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
-
Get all the credentials attached to the given
SPSSODescriptor. - resolveEncryptionMethod(List<EncryptionMethod>) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
-
Return the first encryption method in the supported list, or null otherwise.
- resolveFromMetadata(CriteriaSet, OIDCProviderMetadata) - Method in class net.shibboleth.oidc.security.credential.impl.ProviderMetadataCredentialResolver
-
Fetch the remote JWK Set from the jwk_uri in the OpenID Provider's metadata.
- resolveFromMetadata(CriteriaSet, OIDCClientInformation) - Method in class net.shibboleth.oidc.security.credential.impl.ClientInformationCredentialResolver
-
Fetch the remote JWK Set from the jwk_uri in the RP/Client metadata.
- resolveFromSource(CriteriaSet) - Method in class net.shibboleth.oidc.security.credential.impl.BasicJOSEObjectCredentialResolver
- resolveFromSource(CriteriaSet) - Method in class net.shibboleth.oidc.security.credential.impl.ClientInformationClientSecretCredentialResolver
- resolveFromSource(CriteriaSet) - Method in class net.shibboleth.oidc.security.credential.impl.ClientInformationCredentialResolver
- resolveFromSource(CriteriaSet) - Method in class net.shibboleth.oidc.security.credential.impl.ClientSecretCriterionCredentialResolver
- resolveFromSource(CriteriaSet) - Method in class net.shibboleth.oidc.security.credential.impl.CollectionJOSEObjectCredentialResolver
- resolveFromSource(CriteriaSet) - Method in class net.shibboleth.oidc.security.credential.impl.ProviderMetadataCredentialResolver
- resolveKEKCredentialResolver(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultDecryptionParametersResolver
-
Resolve and return the effective
CredentialResolverused to decrypt content encryption keys. - resolveKEKCredentialResolver(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
-
Resolve and return the effective
CredentialResolverused to encrypt/wrap content encryption keys. - resolveKeyIdFromJoseHeader(Header) - Method in class net.shibboleth.oidc.security.credential.impl.LocalJOSEObjectCredentialResolver
- resolveKeyUse(Credential) - Static method in class net.shibboleth.oidc.security.CredentialConversionUtil
-
Resolves KeyUse parameter from credential.
- resolveKid(Credential) - Static method in class net.shibboleth.oidc.security.CredentialConversionUtil
-
Resolves kid from key name.
- resolveLocalCredentialsByCriteria(CriteriaSet) - Method in class net.shibboleth.oidc.security.credential.impl.LocalJOSEObjectCredentialResolver
-
Resolve credentials using the
LocalJOSEObjectCredentialResolver.localCredResolverand the supplied criteria. - resolver - Variable in class net.shibboleth.oidc.metadata.ProviderMetadataProviderContainer
-
The embedded resolver.
- resolver - Variable in class net.shibboleth.oidc.metadata.RelyingPartyClientInformationProvider
-
The embedded resolver.
- resolver - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTDecryptionParameters
-
Resolver for parameters to store into context.
- resolver - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParameters
-
Resolver for parameters to store into context.
- resolver - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
-
Resolver for parameters to store into context.
- resolver - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureValidationParameters
-
Resolver for parameters to store into context.
- resolver - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureValidationParametersHandler
-
Resolver for parameters to store into context.
- ResolverBasedRegistrationMetadataPolicyLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
A lookup function for the map of
MetadataPolicyobjects, resolved via configurableMetadataPolicyResolverand optionally configurableCriteriaSet. - ResolverBasedRegistrationMetadataPolicyLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.ResolverBasedRegistrationMetadataPolicyLookupFunction
- ResolverHelper - Class in net.shibboleth.oidc.metadata.impl
-
Helper methods for (OIDC) metadata resolution classes.
- ResolverHelper() - Constructor for class net.shibboleth.oidc.metadata.impl.ResolverHelper
-
Constructor.
- resolvers - Variable in class net.shibboleth.oidc.metadata.impl.ChainingClientInformationResolver
-
Registered resolvers.
- resolvers - Variable in class net.shibboleth.oidc.metadata.impl.ChainingProviderMetadataResolver
-
Registered resolvers.
- ResolverServiceClientSecretValueResolver - Class in net.shibboleth.oidc.metadata.impl
-
A client secret value resolver that fetches the values from the given
AttributeResolverservice. - ResolverServiceClientSecretValueResolver() - Constructor for class net.shibboleth.oidc.metadata.impl.ResolverServiceClientSecretValueResolver
-
Constructor.
- resolveSecretCredentials(CriteriaSet) - Method in class net.shibboleth.oidc.security.credential.impl.AbstractClientInformationCredentialResolver
-
Resolves client secret credential.
- resolveSignatureTrustEngine(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureValidationParametersResolver
-
Resolve and return the effective
SignatureTrustEngine. - resolveSingle(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver
- resolveSingle(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.ChainingClientInformationResolver
- resolveSingle(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.ChainingProviderMetadataResolver
- resolveSingle(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.FilesystemClientInformationResolver
- resolveSingle(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.FilesystemProviderMetadataResolver
- resolveSingle(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.PropertiesClientSecretValueResolver
- resolveSingle(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.ReloadingProviderMetadataProvider
- resolveSingle(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.ReloadingRelyingPartyClientInformationProvider
- resolveSingle(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.ResolverServiceClientSecretValueResolver
- resolveSingle(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.StorageServiceClientInformationResolver
- resolveSingle(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.RelyingPartyClientInformationProvider
- resolveSingle(CriteriaSet) - Method in class net.shibboleth.oidc.security.credential.impl.ReturnAllCollectionJOSEObjectCredentialResolver
- resolveSingle(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver
- resolveSingle(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureValidationParametersResolver
- resolveSingle(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultDecryptionParametersResolver
- resolveSingle(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
- resolveTokenCredentials(SignedJWT) - Method in class net.shibboleth.oidc.security.impl.BaseSignedJWTTrustEngine
-
Resolve any credentials indicated in the token, such as by inline JWK.
- resolveTrustEngine(MessageContext) - Method in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler
- ResourceLocationCriterion - Class in net.shibboleth.oidc.metadata.criterion
-
A
Criterionrepresenting a resource location. - ResourceLocationCriterion(String) - Constructor for class net.shibboleth.oidc.metadata.criterion.ResourceLocationCriterion
-
Constructor.
- responderIdLookupStrategy - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationAudienceClaimsValidator
-
Lookup function for the responder identifier.
- RESPONSE_MODE - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
-
The response_type of the authentication request.
- RESPONSE_TYPE - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
-
The response_type of the authentication request.
- RESPONSE_TYPES_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Attribute local name.
- responseHandler - Variable in class net.shibboleth.oidc.metadata.impl.AbstractDynamicHTTPFetchingStrategy
-
HttpClient ResponseHandler instance to use.
- responseLookupStrategy - Variable in class net.shibboleth.oidc.profile.audit.impl.AbstractAuthenticationResponseAuditExtractor
-
Lookup strategy to locate the authentication response.
- responseMode - Variable in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
-
The response mode.
- ResponseModeAuditExtractor - Class in net.shibboleth.oidc.profile.audit.impl
-
Functionthat extracts response_mode in theOIDCAuthenticationRequest. - ResponseModeAuditExtractor(Function<ProfileRequestContext, OIDCAuthenticationRequest>) - Constructor for class net.shibboleth.oidc.profile.audit.impl.ResponseModeAuditExtractor
-
Constructor.
- responseModeLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Lookup function to override the default response_mode for a given response_type.
- ResponseModesLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
A function that returns
OAuth2AuthorizationProfileConfiguration.getResponseModes(ProfileRequestContext)if such a profile is available from aRelyingPartyContextobtained via a lookup function, by default a child of theProfileRequestContext. - ResponseModesLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.ResponseModesLookupFunction
- responseModesLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Lookup function to supply the response_modes that are allowed to be used in authorization request.
- responseType - Variable in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
-
The authorization processing flow to use.
- ResponseTypeAuditExtractor - Class in net.shibboleth.oidc.profile.audit.impl
-
Functionthat extracts response_type in theOIDCAuthenticationRequest. - ResponseTypeAuditExtractor(Function<ProfileRequestContext, OIDCAuthenticationRequest>) - Constructor for class net.shibboleth.oidc.profile.audit.impl.ResponseTypeAuditExtractor
-
Constructor.
- responseTypeLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Lookup function to retrieve the response_type.
- responseTypes - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Response types for this entity.
- retrieveUserInfoEndpointClaims - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Whether to make a UserInfo Endpoint request for End-User claims.
- ReturnAllCollectionJOSEObjectCredentialResolver - Class in net.shibboleth.oidc.security.credential.impl
-
An implementation of
JOSEObjectCredentialResolverthat uses aCollectionas the underlying credential source. - ReturnAllCollectionJOSEObjectCredentialResolver(List<Credential>) - Constructor for class net.shibboleth.oidc.security.credential.impl.ReturnAllCollectionJOSEObjectCredentialResolver
-
Constructor.
- ReturnAllCollectionJOSEObjectCredentialResolver(Credential) - Constructor for class net.shibboleth.oidc.security.credential.impl.ReturnAllCollectionJOSEObjectCredentialResolver
-
Constructor.
- REVOCATION_FAILED - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
-
The revocation attempt failed.
- revocationCache - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierRevocationValidator
-
Message replay cache instance to use.
- RevocationLifetimeLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
A function that returns
OAuth2TokenRevocationConfiguration.getRevocationLifetime(ProfileRequestContext)if such a profile is available from aRelyingPartyContextobtained via a lookup function, by default a child of theProfileRequestContext. - RevocationLifetimeLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.RevocationLifetimeLookupFunction
- revocationLifetimeLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenRevocationConfiguration
-
Lookup function to supply revocation lifetime.
- RevocationMethodLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
A function that returns
OAuth2TokenRevocationConfiguration.getRevocationMethod(ProfileRequestContext)if such a profile is available from aRelyingPartyContextobtained via a lookup function, by default a child of theProfileRequestContext. - RevocationMethodLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.RevocationMethodLookupFunction
- revocationMethodLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenRevocationConfiguration
-
Which revocation method should be used when revoking a token.
- REVOKED_TOKEN - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
-
Revoked Token.
- RevokeTokensInLogoutPredicate - Class in net.shibboleth.oidc.profile.config.logic
-
A predicate implementation that forwards to
OIDCLogoutProfileConfiguration.isRevokeTokens(ProfileRequestContext). - RevokeTokensInLogoutPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.RevokeTokensInLogoutPredicate
- revokeTokensPredicate - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
-
Whether to revoke the tokens related to the session to be logged out.
- run() - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache.AsynchronousRefreshAHeadTask
- run() - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache.ExpiredAndIdleMetadataCleanupTask
- run() - Method in class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver.RefreshMetadataTask
S
- S256 - Enum constant in enum class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest.CodeChallengeMethod
-
Compute the code_challenge by SHA-256 hashing and base64 URL encoding the code_verifier.
- SAML20MDOIDCMD_NS - Static variable in class net.shibboleth.oidc.saml.xmlobject.Constants
-
SAML 2.0 Metadata extension for OAuth/OIDC descriptors XML namespace.
- SAML20MDOIDCMD_NS - Static variable in interface net.shibboleth.oidc.saml.xmlobject.MetadataValueSAMLObject
-
SAML 2.0 Metadata extension for OAuth/OIDC descriptors XML namespace.
- SAML20MDOIDCMD_PREFIX - Static variable in class net.shibboleth.oidc.saml.xmlobject.Constants
-
SAML 2.0 Metadata extension for OAuth/OIDC descriptors prefi.
- SAML20MDOIDCMD_PREFIX - Static variable in interface net.shibboleth.oidc.saml.xmlobject.MetadataValueSAMLObject
-
SAML 2.0 Metadata extension for OAuth/OIDC descriptors prefi.
- SAML20MDOIDCMD_SCHEMA_LOCATION - Static variable in class net.shibboleth.oidc.saml.xmlobject.Constants
-
SAML 2.0 Metadata extension for OAuth/OIDC descriptors.
- SAML20MDOIDCMD_SCHEMA_LOCATION - Static variable in interface net.shibboleth.oidc.saml.xmlobject.MetadataValueSAMLObject
-
SAML 2.0 Metadata extension for OAuth/OIDC descriptors.
- satisfyAnyPredicates - Variable in class net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver
-
Flag which determines whether predicates used in filtering are connected by a logical 'OR' (true) or by logical 'AND' (false).
- scheduleNextRefresh(Duration) - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
-
Schedules the next refresh.
- scheduleNextRefresh(Duration) - Method in class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver
-
Schedules the next refresh.
- scope - Variable in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
-
The requested scopes.
- SCOPE - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
-
Token scope.
- ScopeAuditExtractor - Class in net.shibboleth.oidc.profile.audit.impl
-
Functionthat extracts scope in theOIDCAuthenticationRequest. - ScopeAuditExtractor(Function<ProfileRequestContext, OIDCAuthenticationRequest>) - Constructor for class net.shibboleth.oidc.profile.audit.impl.ScopeAuditExtractor
-
Constructor.
- scopes - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Scopes for this entity.
- SCOPES_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Attribute local name.
- scopesLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Lookup function to retrieve the scopes requested during authentication.
- secConfiguration - Variable in class net.shibboleth.oidc.profile.impl.FormOutboundKeySetResponseMessage
-
Security configuration we look for keys to publish.
- secret - Variable in class net.shibboleth.oidc.security.credential.BasicClientSecretCredentialFactoryBean
-
The secret to use when creating a BasicJWKCredential.
- secret - Variable in class net.shibboleth.oidc.security.credential.BasicExpiringJWTSharedSecretCredentialFactoryBean
-
The secret to use when creating a BasicJWKCredential.
- SecretExpirationPeriodLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
A function that returns
OIDCDynamicRegistrationConfiguration.getSecretExpirationPeriod(ProfileRequestContext)if such a profile is available from aRelyingPartyContextobtained via a lookup function, by default a child of theProfileRequestContext. - SecretExpirationPeriodLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.SecretExpirationPeriodLookupFunction
- secretExpirationPeriodLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCDynamicRegistrationConfiguration
-
Lookup function to supply client secret expiration period.
- secretKeyName - Variable in class net.shibboleth.oidc.security.credential.DefaultClientSecretCredential
-
The chosen client_secret keyname.
- secretReference - Variable in class net.shibboleth.oidc.metadata.criterion.ClientSecretReferenceCriterion
-
The client secret reference.
- SECTOR_IDENTIFIER_URI_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Attribute local name.
- sectorIdentifierUri - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Sector identifier URI for this entity.
- SecurityParametersContext - Class in net.shibboleth.oidc.security.jose.context
-
A context implementation for storing parameter instances for JWS signature signing and validation, and JWE encryption and decryption.
- SecurityParametersContext() - Constructor for class net.shibboleth.oidc.security.jose.context.SecurityParametersContext
- securityParametersContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTDecryptionParameters
-
Strategy used to look up the
SecurityParametersContextto set the parameters for. - securityParametersContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
-
Strategy used to look up the
SecurityParametersContextto extract parameters from. - securityParametersContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParameters
-
Strategy used to look up the
SecurityParametersContextto set the parameters for. - securityParametersContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
-
Strategy used to look up the
SecurityParametersContextto set the parameters for. - securityParametersContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureValidationParameters
-
Strategy used to look up the
SecurityParametersContextto set the parameters for. - securityParametersContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureValidationParametersHandler
-
Strategy used to look up the
SecurityParametersContextto set the parameters for. - securityParametersContextLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler
-
Strategy used to look up the
SecurityParametersContext. - securityParametersLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.EncryptJWTHandler
-
Strategy used to locate the
SecurityParametersContextto use for signing. - securityParametersLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.SignJWTHandler
-
Strategy used to locate the
SecurityParametersContextto use for signing. - securityParamsLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.DecryptJWE
-
Strategy used to locate the
SecurityParametersContext. - serializeAuthorizationParamsToQueryString(OIDCAuthenticationRequest) - Method in class net.shibboleth.oidc.profile.encoding.impl.AbstractOIDCMessageEncoder
-
Serialize OAuth 2.0 authorization parameters from the authentication request to a query string.
- serializeAuthorizationParamsToUrl(OIDCAuthenticationRequest, URLBuilder) - Method in class net.shibboleth.oidc.profile.encoding.impl.AbstractOIDCMessageEncoder
-
Serialize OAuth 2.0 authorization parameters from the authentication request to the query string of the URL.
- serializeMessageForLogging(Object) - Method in class net.shibboleth.oidc.profile.decoding.impl.HTTPPostAuthnResponseDecoder
- serializeMessageForLogging(Object) - Method in class net.shibboleth.oidc.profile.decoding.impl.HTTPRedirectAuthnResponseDecoder
- serializeMessageForLogging(Object) - Method in class net.shibboleth.oidc.profile.encoding.impl.AbstractOIDCMessageEncoder
- serializeMessageForLogging(Object) - Method in class net.shibboleth.oidc.profile.encoding.impl.SimpleNimbusResponseEncoder
- serialVersionUID - Static variable in exception net.shibboleth.oidc.jwt.claims.JWTValidationException
-
Serial version UID.
- serialVersionUID - Static variable in exception net.shibboleth.oidc.metadata.cache.CacheLoadingException
-
Generated serial UID.
- serialVersionUID - Static variable in exception net.shibboleth.oidc.metadata.cache.MetadataCacheException
-
SerialUID.
- serialVersionUID - Static variable in exception net.shibboleth.oidc.metadata.filter.FilterException
-
Serial version UID.
- serialVersionUID - Static variable in exception net.shibboleth.oidc.security.jose.SignatureException
-
Serial version UID.
- service - Variable in class net.shibboleth.oidc.metadata.impl.ReloadingProviderMetadataProvider
-
The service which managed the reloading.
- service - Variable in class net.shibboleth.oidc.metadata.impl.ReloadingRelyingPartyClientInformationProvider
-
The service which managed the reloading.
- service - Variable in class net.shibboleth.oidc.metadata.impl.ResolverServiceClientSecretValueResolver
-
The attribute resolver service used for the client secret value resolution.
- SESSION_NOT_FOUND - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
-
ID of event returned upon an inability to locate any matching session for a LogoutRequest.
- setAccessTokenClaimsSetManipulationStrategy(BiFunction<ProfileRequestContext, Map<String, Object>, Map<String, Object>>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Set the bi-function for manipulating access token claims set.
- setAccessTokenClaimsSetManipulationStrategy(BiFunction<ProfileRequestContext, Map<String, Object>, Map<String, Object>>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
-
Set the bi-function for manipulating access token claims set.
- setAccessTokenClaimsSetManipulationStrategyLookupStrategy(Function<ProfileRequestContext, BiFunction<ProfileRequestContext, Map<String, Object>, Map<String, Object>>>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Set a lookup strategy for the bi-function for manipulating access token claims set.
- setAccessTokenClaimsSetManipulationStrategyLookupStrategy(Function<ProfileRequestContext, BiFunction<ProfileRequestContext, Map<String, Object>, Map<String, Object>>>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
-
Set a lookup strategy for the bi-function for manipulating access token claims set.
- setAccessTokenLifetime(Duration) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Set the lifetime of an access token.
- setAccessTokenLifetime(Duration) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
-
Set the lifetime of an access token.
- setAccessTokenLifetimeLookupStrategy(Function<ProfileRequestContext, Duration>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Set a lookup strategy for the access token lifetime.
- setAccessTokenLifetimeLookupStrategy(Function<ProfileRequestContext, Duration>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
-
Set a lookup strategy for the access token lifetime.
- setAccessTokenLookupStrategy(Function<ProfileRequestContext, AccessToken>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AccessTokenHashValidator
-
Set the lookup strategy used to locate the access_token.
- setAccessTokenType(String) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Set access token type.
- setAccessTokenType(String) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
-
Set access token type.
- setAccessTokenTypeLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Set lookup strategy for access token type.
- setAccessTokenTypeLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
-
Set lookup strategy for access token type.
- setAcrRequestAlwaysEssential(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set whether all acr claim requests should be treated as Essential.
- setAcrRequestAlwaysEssentialPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set condition for whether all acr claim requests should be treated as Essential.
- setAcrs(List<ACR>) - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
-
Set the ACRs.
- setActivationCondition(BiPredicate<ProfileRequestContext, JWTClaimsSet>) - Method in class net.shibboleth.oidc.jwt.claims.AbstractClaimsValidator
-
Set an activation condition for this validator.
- setAdd(Object) - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
-
Set the value(s) to be added for the claim.
- setAdditionalAudiencesForIdToken(Collection<String>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Set the set of audiences, in addition to the relying party(ies) to which the IdP is issuing the ID Token, with which the token may be shared.
- setAdditionalAudiencesForIdTokenLookupStrategy(Function<ProfileRequestContext, Set<String>>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Set a lookup strategy for the set of audiences, in addition to the relying party(ies) to which the IdP is issuing the ID Token, with which the token may be shared.
- setAdditionalAudiencesLookupStrategy(BiFunction<ProfileRequestContext, JWTClaimsSet, Set<String>>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AudienceClaimsValidator
-
Set the strategy used to lookup the list of additional audiences to find in the 'aud' claim.
- setAlg(Algorithm) - Method in class net.shibboleth.oidc.security.credential.BasicExpiringJWTSharedSecretCredentialFactoryBean
-
Set the algorithm 'alg' associated with this credential.
- setAlgorithm(Algorithm) - Method in class net.shibboleth.oidc.security.credential.BasicJWKCredential
-
Set the algorithm of jwk.
- setAlgorithm(String) - Method in class net.shibboleth.oidc.security.credential.impl.KeyManagmentAlgorithmCriterion
-
Set the algorithm criteria.
- setAlgorithmRegistry(AlgorithmRegistry) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver
-
Set the
AlgorithmRegistryinstance used when resolving algorithm URIs. - setAlgorithmRegistry(AlgorithmRegistry) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
-
Set the
AlgorithmRegistryinstance used when resolving algorithm URIs. - setAllowMissing(boolean) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AccessTokenHashValidator
-
Set whether a missing 'at_hash' claim is valid or not.
- setAllowMissing(boolean) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AudienceClaimsValidator
-
Set whether a missing 'aud' claim is valid or not.
- setAllowPKCEPlain(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Set whether client is allowed to use PKCE code challenge method plain.
- setAllowPKCEPlainPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Set condition for whether client is allowed to use PKCE code challenge method plain.
- setAlwaysIncludedAttributes(Collection<String>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Set the set of attribute IDs which should be included in the ID token regardless of response_type.
- setAlwaysIncludedAttributesLookupStrategy(Function<ProfileRequestContext, Set<String>>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Set a lookup strategy for the attribute IDs which should be included in the ID token regardless of response_type.
- setAlwaysIssueBearerAccessToken(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Set whether the access token to be issued is always a bearer access token.
- setAlwaysIssueBearerAccessToken(boolean) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
-
Set whether the access token to be issued is always a bearer access token.
- setAlwaysIssueBearerAccessTokenPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Set a condition to determine whether the access token to be issued is always a bearer access token.
- setAlwaysIssueBearerAccessTokenPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
-
Set a condition to determine whether the access token to be issued is always a bearer access token.
- setApplicationContext(ApplicationContext) - Method in class net.shibboleth.oidc.metadata.policy.impl.BeanMetadataPolicyOperator
- setApplicationType(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Set the application type.
- setApplicationType(String) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Set the application type.
- setAttributeIds(List<String>) - Method in class net.shibboleth.oidc.metadata.impl.ResolverServiceClientSecretValueResolver
-
Set the list of attribute IDs that may contain the resolved client secret values.
- setAttributeResolver(ReloadableService<AttributeResolver>) - Method in class net.shibboleth.oidc.metadata.impl.ResolverServiceClientSecretValueResolver
-
Set the attribute resolver service used for the client secret value resolution.
- setAudienceLookupStrategy(BiFunction<ProfileRequestContext, JWTClaimsSet, String>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AudienceClaimsValidator
-
Set the audience lookup strategy.
- setAuthenticationContextClassReferenceTranslationStrategyLookupStrategy(Function<ProfileRequestContext, Function<Collection<String>, Collection<Principal>>>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set the lookup function to locate the Authentication Context Class Reference strategy used to translate between an inbound proxied OIDC ACR into an appropriate set of custom
Principalobjects to populate the subject. - setAuthenticationFlows(Collection<String>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Set the authentication flows to use.
- setAuthenticationFlowsLookupStrategy(Function<ProfileRequestContext, Set<String>>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Set a lookup strategy for the authentication flows to use.
- setAuthenticationMethodsReferencesTranslationStrategyLookupStrategy(Function<ProfileRequestContext, Function<Collection<String>, Collection<Principal>>>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set the lookup function to locate the Authentication Methods References strategy used to translate between an inbound proxied OIDC AMR into an appropriate set of custom
Principalobjects to populate the subject. - setAuthnLifetime(Duration) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationTimeClaimsValidator
-
Sets the amount of time for which a token is valid from when the original authentication took place.
- setAuthnLifetimeLookupStrategy(Function<ProfileRequestContext, Duration>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationTimeClaimsValidator
-
Set the lookup strategy used to locate the amount of time for which a token is valid from when the original authentication took place.
- setAuthnRequestTime(Instant) - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
-
Set the time at which this RP sent this authentication request to the OP.
- setAuthnRequestTimeLookupStrategy(Function<ProfileRequestContext, Instant>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationTimeClaimsValidator
-
Set the lookup strategy to find out when the authentication request (if any) was made.
- setAuthorizationCodeClaimsSetManipulationStrategy(BiFunction<ProfileRequestContext, Map<String, Object>, Map<String, Object>>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set the bi-function for manipulating authorization code claims set.
- setAuthorizationCodeClaimsSetManipulationStrategyLookupStrategy(Function<ProfileRequestContext, BiFunction<ProfileRequestContext, Map<String, Object>, Map<String, Object>>>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set a lookup strategy for the bi-function for manipulating authorization code claims set.
- setAuthorizationCodeFlowEnabled(boolean) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2FlowAwareProfileConfiguration
-
Set whether authorization code flow is supported by this profile.
- setAuthorizationCodeFlowEnabledPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2FlowAwareProfileConfiguration
-
Set condition used to indicate whether authorization code flow is supported by this profile.
- setAuthorizationParamsAreValidPredicate(Predicate<List<Pair<String, String>>>) - Method in class net.shibboleth.oidc.profile.encoding.impl.AbstractOIDCMessageEncoder
-
Set a hook that allows the built authorization parameters to be validated before they are used.
- setAuthorizeCodeLifetime(Duration) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set the lifetime of authz code.
- setAuthorizeCodeLifetimeLookupStrategy(Function<ProfileRequestContext, Duration>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set a lookup strategy for the authz code lifetime.
- setBackChannelLogoutSessionRequired(boolean) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Set the flag to require session id in back-channel logout request.
- setBackChannelLogoutSessionRequired(boolean) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Set the flag to require session id in back-channel logout request.
- setBackingStore(AbstractOIDCEntityResolver.JsonBackingStore) - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver
-
Set the entity backing store currently in use by the metadata resolver.
- setCacheId(String) - Method in class net.shibboleth.oidc.metadata.cache.impl.BaseMetadataCacheBuilderSpec
-
Set the cache identifier of the cache this specification builds.
- setClaimName(String) - Method in class net.shibboleth.oidc.profile.audit.impl.AbstractClaimsSetAuditExtractor
-
Set the claim whose value is to be extracted from the id_token claims set.
- setClaimName(String) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ExactMatchClaimsValidator
-
Set the name of the claim to match.
- setClaimsSetLookupStrategy(Function<ProfileRequestContext, ClaimsSet>) - Method in class net.shibboleth.oidc.profile.audit.impl.AbstractClaimsSetAuditExtractor
-
Set the strategy used to lookup the
JWTClaimsSetto look for the claim in. - setClaimsToSignLookupStrategy(Function<MessageContext, JWTClaimsSet>) - Method in class net.shibboleth.oidc.security.impl.SignJWTHandler
-
Set the strategy used to locate the
JWTClaimsSetto sign. - setClaimsValidator(ClaimsValidator) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Set the
ClaimsValidatorto apply to JWT-based client authentication. - setClaimsValidatorLookupStrategy(Function<ProfileRequestContext, ClaimsValidator>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Set a lookup strategy for the
ClaimsValidatorto apply to JWT-based client authentication. - setClaimValidators(List<ClaimsValidator>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ChainingJWTClaimsValidator
-
Set the list of validators to use.
- setCleanupTaskInterval(Duration) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
-
Set the interval at which the cleanup task should run.
- setCleanupTaskInterval(Duration) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
-
Set the interval at which the cleanup task should run.
- setClientAuthentication(ClientAuthentication) - Method in class net.shibboleth.oidc.authn.context.OAuth2ClientAuthenticationContext
-
Set the OAuth 2 client authentication credentials.
- setClientCredential(ClientSecretCredential) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Set a fixed client credential to use no matter what the context/request.
- setClientCredentialLookupStrategy(Function<ProfileRequestContext, ClientSecretCredential>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Set the client credential lookup strategy.
- setClientId(String) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Set a fixed client_id to use no matter what the context/request.
- setClientIdLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Set the strategy to locate a client_id.
- setClientInformation(OIDCClientInformation) - Method in class net.shibboleth.oidc.metadata.context.OIDCMetadataContext
-
Set the client information.
- setClientInformationLookupStrategy(Function<MessageContext, OIDCClientInformation>) - Method in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler
-
Set the lookup strategy to locate the client information.
- setClientInformationLookupStrategy(Function<MessageContext, OIDCClientInformation>) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler
-
Set the lookup strategy to locate the client information.
- setClientInformationLookupStrategy(Function<ProfileRequestContext, OIDCClientInformation>) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration
-
Set the lookup strategy to locate the client information.
- setClientMetadataContextLookupStrategy(Function<MessageContext, OIDCMetadataContext>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
-
Set lookup strategy for
OIDCMetadataContextfor input to resolution. - setClientMetadataContextLookupStrategy(Function<ProfileRequestContext, OIDCMetadataContext>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTDecryptionParameters
-
Set lookup strategy for
OIDCMetadataContextfor input to resolution. - setClientMetadataContextLookupStrategy(Function<ProfileRequestContext, OIDCMetadataContext>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
-
Set lookup strategy for
OIDCMetadataContextfor input to resolution. - setClientMetadataContextLookupStrategy(Function<ProfileRequestContext, OIDCMetadataContext>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParameters
-
Set lookup strategy for
OIDCMetadataContextfor input to resolution. - setClientUri(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Set the client URI.
- setClientUri(String) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Set the client URI.
- setClockSkew(Duration) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationTimeClaimsValidator
-
Set the clock skew.
- setClockSkew(Duration) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ExpiryClaimsValidator
-
Set the clock skew.
- setClockSkew(Duration) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.IssuedAtClaimsValidator
-
Set the clock skew.
- setClockSkew(Duration) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierClaimsValidator
-
Set the clock skew.
- setClockSkew(Duration) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.NotBeforeClaimsValidator
-
Set the clock skew.
- setCodeChallenge(String) - Method in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
-
Get the authorisation code_challenge for Proof Key for Code Exchange.
- setCodeChallengeMethod(OAuthAuthorizationRequest.CodeChallengeMethod) - Method in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
-
Set the code_challenge_method used to transform the code_verifier into a code_challenge.
- setCodeVerifier(String) - Method in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
-
Set the authorisation code_verifier for Proof Key for Code Exchange.
- setConfigurationLookupStrategy(Function<MessageContext, List<SignatureSigningConfiguration>>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
-
Set the strategy used to look up a per-request
SignatureSigningConfigurationlist. - setConfigurationLookupStrategy(Function<MessageContext, List<SignatureValidationConfiguration>>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureValidationParametersHandler
-
Set the strategy used to look up a per-request
SignatureValidationConfigurationlist. - setConfigurationLookupStrategy(Function<ProfileRequestContext, List<DecryptionConfiguration>>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTDecryptionParameters
-
Set the strategy used to look up a per-request
DecryptionConfigurationlist. - setConfigurationLookupStrategy(Function<ProfileRequestContext, List<EncryptionConfiguration>>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
-
Set the strategy used to look up a per-request
EncryptionConfigurationlist. - setConfigurationLookupStrategy(Function<ProfileRequestContext, List<SignatureSigningConfiguration>>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParameters
-
Set the strategy used to look up a per-request
SignatureSigningConfigurationlist. - setConfigurationLookupStrategy(Function<ProfileRequestContext, List<SignatureValidationConfiguration>>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureValidationParameters
-
Set the strategy used to look up a per-request
SignatureValidationConfigurationlist. - setContentEncryptionKeyCredentialResolver(JOSEObjectCredentialResolver) - Method in class net.shibboleth.oidc.security.jose.DecryptionParameters
-
Set the KeyInfoCredentialResolver to use when processing the encrypted content.
- setContentEncryptionKeyCredentialResolver(JOSEObjectCredentialResolver) - Method in class net.shibboleth.oidc.security.jose.impl.BasicDecryptionConfiguration
-
Set the KeyInfoCredentialResolver to use when processing the encrypted content.
- setContentEncryptionKeyCredentialResolver(CredentialResolver) - Method in class net.shibboleth.oidc.security.jose.impl.BasicEncryptionConfiguration
-
Set the CredentialResolver to resolve the content encryption key.
- setContext(String) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierRevocationValidator
-
Set the revocation cache context that partitions entries.
- setCredentialExpiresAt(Duration) - Method in class net.shibboleth.oidc.security.credential.BasicExpiringJWKCredential
-
Set the expiry.
- setCredentialExpiresAt(Duration) - Method in class net.shibboleth.oidc.security.credential.BasicExpiringJWTSharedSecretCredentialFactoryBean
-
Set the expiry in seconds since 1970-01-01T0:0:0Z.
- setCredentialsToPublishLookupStrategy(Function<JSONSecurityConfiguration, List<Credential>>) - Method in class net.shibboleth.oidc.profile.impl.FormOutboundKeySetResponseMessage
-
Set the strategy used to locate the credentials to publish at the KeySet endpoint.
- setCriteriaSetLookupStrategy(Function<ProfileRequestContext, CriteriaSet>) - Method in class net.shibboleth.oidc.profile.config.navigate.ResolverBasedRegistrationMetadataPolicyLookupFunction
-
Set the lookup strategy for the criteria set used for the metadata policy resolver.
- setCriteriaToIdentifierStrategy(Function<CriteriaSet, IdentifierType>) - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
-
Set the
CriteriaSetto IdentifierType strategy. - setCriteriaToIdentifierStrategy(Function<CriteriaSet, IdentifierType>) - Method in class net.shibboleth.oidc.metadata.cache.impl.BaseMetadataCacheBuilderSpec
-
Set the criteria set to identifier lookup strategy.
- setCriterionPredicateRegistry(CriterionPredicateRegistry<MetadataType>) - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver
-
Set the registry used in resolving predicates from criteria.
- setCSPDigester(StringDigester) - Method in class net.shibboleth.oidc.profile.encoding.impl.HTTPPostAuthnRequestEncoder
-
Sets a
StringDigesterto use in computing CSP digests in views. - setCSPNonceGenerator(IdentifierGenerationStrategy) - Method in class net.shibboleth.oidc.profile.encoding.impl.HTTPPostAuthnRequestEncoder
-
Sets an
IdentifierGenerationStrategyto use in computing CSP nonces in views. - setCustomMetadataPolicyOperators(Map<String, CustomMetadataPolicyOperator>) - Method in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyEnforcer
-
Set the map of custom metadata policy operators that are applied after the standard operators.
- setCustomMetadataPolicyOperators(Map<String, CustomMetadataPolicyOperator>) - Method in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyValidator
-
Set the map of custom metadata policy operators that are applied after the standard operators.
- setCustomOperator(String, Object) - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
-
Add a custom operator to the map of custom operators.
- setCustomRedirectUriValidationStrategy(BiPredicate<URI, ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Set the bi-predicate for custom validation of redirect URI in the request.
- setCustomRedirectUriValidationStrategyLookupStrategy(Function<ProfileRequestContext, BiPredicate<URI, ProfileRequestContext>>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Set a lookup strategy for the bi-predicate for custom validation of redirect URI in the request.
- setDataEncryptionAlgorithm(String) - Method in class net.shibboleth.oidc.security.jose.EncryptionParameters
-
Set the encryption algorithm URI to use when encrypting the EncryptedData.
- setDataEncryptionAlgorithmLookupStrategy(Function<OIDCClientInformation, String>) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration
-
Set the strategy used to look up the data encryption algorithm in the client metadata.
- setDataEncryptionAlgorithms(List<String>) - Method in class net.shibboleth.oidc.security.jose.impl.BasicEncryptionConfiguration
-
Set the data encryption algorithms to use.
- setDataEncryptionAlgorithmsLookupStrategy(BiFunction<CriteriaSet, Predicate<String>, List<String>>) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
-
Set the data encryption algorithms lookup strategy to use.
- setDataEncryptionCredential(Credential) - Method in class net.shibboleth.oidc.security.jose.EncryptionParameters
-
Set the encryption credential to use when encrypting the EncryptedData.
- setDateTimeFormat(String) - Method in class net.shibboleth.oidc.profile.audit.impl.DateBasedJWTClaimAuditExtractor
-
Set the formatting string to apply when extracting date/time fields.
- setDecryptionParameters(DecryptionParameters) - Method in class net.shibboleth.oidc.security.jose.context.SecurityParametersContext
-
Set the parameters to use for decryption operations.
- setDecryptionParametersResolver(DecryptionParametersResolver) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTDecryptionParameters
-
Set the resolver to use for the parameters to store into the context.
- setDefaultAlgorithmValue(String) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler
-
Set the default algorithm value used if lookup strategy returned null.
- setDefaultAuthenticationMethods(Collection<Principal>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Set the default authentication contexts to use, expressed as custom principals.
- setDefaultAuthenticationMethodsLookupStrategy(Function<ProfileRequestContext, Collection<Principal>>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Set a lookup strategy for the authentication contexts to use, expressed as custom principals.
- setDefaultCode(String) - Method in class net.shibboleth.oidc.profile.impl.AbstractBuildErrorResponseFromEvent
-
Set the code for unmapped events.
- setDefaultMaxAge(int) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Set the value for default max age.
- setDefaultMaxAge(int) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Set the value for default max age.
- setDefaultResponseMode(ResponseMode) - Method in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
-
Set the default response_mode for the given response_type.
- setDefaultStatusCode(int) - Method in class net.shibboleth.oidc.profile.impl.AbstractBuildErrorResponseFromEvent
-
Set the status code for unmapped events.
- setDefaultValue(Object) - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
-
Set the default value for the claim to be used in case none is specified.
- setDeniedUserInfoAttributes(Collection<String>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set the set of attribute IDs which should be omitted from the UserInfo token.
- setDeniedUserInfoAttributes(Collection<String>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCUserInfoConfiguration
-
Set the set of attribute IDs which should be omitted from the UserInfo token.
- setDeniedUserInfoAttributesLookupStrategy(Function<ProfileRequestContext, Set<String>>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set a lookup strategy for the set of attribute IDs which should be omitted from the UserInfo token.
- setDeniedUserInfoAttributesLookupStrategy(Function<ProfileRequestContext, Set<String>>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCUserInfoConfiguration
-
Set a lookup strategy for the set of attribute IDs which should be omitted from the UserInfo token.
- setDisplay(Display) - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
-
Set the display.
- setDisplay(String) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set the display parameter value to use.
- setDisplayLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set the lookup strategy to determine the display parameter value for authorization requests.
- setDpopProofClaimsValidator(ClaimsValidator) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Set the
ClaimsValidatorto apply to DPoP Proof JWT. - setDpopProofClaimsValidatorLookupStrategy(Function<ProfileRequestContext, ClaimsValidator>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Set a lookup strategy for the
ClaimsValidatorto apply to DPoP Proof JWT. - setDpopProofNonceGenerator(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Set the
Functionto create nonces to be used with DPoP Proof JWTs. - setDpopProofNonceGeneratorLookupStrategy(Function<ProfileRequestContext, Function<ProfileRequestContext, String>>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Set a lookup strategy for the
Functionto create nonces to be used with DPoP Proof JWTs. - setDpopProofSignatureValidationConfiguration(SignatureValidationConfiguration) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Set the
SignatureValidationConfigurationto validate the DPoP Proof JWT signatures. - setDpopProofSignatureValidationConfigurationLookupStrategy(Function<ProfileRequestContext, SignatureValidationConfiguration>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Set a lookup strategy for the
SignatureValidationConfigurationto validate the DPoP Proof JWT signatures. - setEmbeddedResolver(ClientInformationResolver) - Method in class net.shibboleth.oidc.metadata.RelyingPartyClientInformationProvider
-
Set the
ClientInformationResolverto embed. - setEmbeddedResolver(ProviderMetadataResolver) - Method in class net.shibboleth.oidc.metadata.ProviderMetadataProviderContainer
-
Set the
ProviderMetadataResolverto embed. - setEncAlgorithm(String) - Method in class net.shibboleth.oidc.security.credential.impl.DataEncryptionAlgorithmCriterion
-
Set the encryption algorithm criteria.
- setEncodeConsentInTokens(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set whether to encode consent in authorization code and access/refresh tokens.
- setEncodeConsentInTokensPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set condition for whether to encode consent in authorization code and access/refresh tokens.
- setEncodedAttributes(Collection<String>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set the set of attribute IDs which should be encoded in encrypted form into the authorization code and/or access/refresh tokens to enable recovery on the back-channel.
- setEncodedAttributesLookupStrategy(Function<ProfileRequestContext, Set<String>>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set a lookup strategy for the attribute IDs which should be encoded in encrypted form into the authorization code and/or access/refresh tokens to enable recovery on the back-channel.
- setEncryptionOptional(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Set whether encryption is optional in the face of a missing key, etc.
- setEncryptionOptional(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
-
Set whether encryption is optional in the face of a missing key, etc.
- setEncryptionOptional(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCUserInfoConfiguration
-
Set whether encryption is optional in the face of a missing key, etc.
- setEncryptionOptional(boolean) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
-
Sets the boolean condition to apply to determine how to proceed if encryption parameter resolution fails.
- setEncryptionOptional(boolean) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
-
Set whether encryption is optional in the face of a missing key, etc.
- setEncryptionOptionalPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Set a condition to determine whether encryption is optional in the face of a missing key, etc.
- setEncryptionOptionalPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
-
Set a condition to determine whether encryption is optional in the face of a missing key, etc.
- setEncryptionOptionalPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCUserInfoConfiguration
-
Set a condition to determine whether encryption is optional in the face of a missing key, etc.
- setEncryptionOptionalPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
-
Sets the condition to apply to determine how to proceed if encryption parameter resolution fails.
- setEncryptionOptionalPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
-
Set a condition to determine whether encryption is optional in the face of a missing key, etc.
- setEncryptionOptionalPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration
-
Sets the condition to apply to determine how to proceed if encryption parameter resolution fails.
- setEncryptionParameters(EncryptionParameters) - Method in class net.shibboleth.oidc.security.jose.context.SecurityParametersContext
-
Set the parameters to use for encryption operations.
- setEncryptionParametersResolver(EncryptionParametersResolver) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
-
Set the encParamsresolver to use for the parameters to store into the context.
- setEncryptRequestObject(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set whether the RequestObject should be encrypted.
- setEncryptRequestObjectPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set the predicate to determine if the RequestObject should be encrypted.
- setEndpointReplacement(String) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationAudienceClaimsValidator
-
Set the replacement substring for the endpoint containing any ones configured at
AuthenticationAudienceClaimsValidator.endpointTargets. - setEndpointTargets(List<String>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationAudienceClaimsValidator
-
Set the substrings to replace from resolved endpoint with one configured at
AuthenticationAudienceClaimsValidator.endpointReplacement. - setEndpointURI(URI) - Method in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
-
Set the endpoint_uri.
- setEnforceRefreshTokenRotation(boolean) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
-
Set whether always revoke the refresh_token after it's used.
- setEnforceRefreshTokenRotationPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
-
Set condition for whether always revoke the refresh_token after it's used.
- setErrorEventId(String) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration
-
Sets the event identifier to publish if token parameters are not compliant with the configuration.
- setErrorEventId(String) - Method in class net.shibboleth.oidc.security.impl.DecryptJWE
-
Sets the event identifier to publish in the case of decryption errors.
- setEssential(Boolean) - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
-
Set the flag indicating that the claim must have a value.
- setEventContextLookupStrategy(Function<ProfileRequestContext, EventContext>) - Method in class net.shibboleth.oidc.profile.impl.AbstractBuildErrorResponseFromEvent
-
Set lookup strategy for
EventContextto check. - setExistingParametersContextLookupStrategy(Function<MessageContext, SecurityParametersContext>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
-
Set the strategy used to look up an existing
SecurityParametersContextto copy instead of actually resolving the parameters to set. - setExistingParametersContextLookupStrategy(Function<ProfileRequestContext, SecurityParametersContext>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParameters
-
Set the strategy used to look up an existing
SecurityParametersContextto copy instead of actually resolving the parameters to set. - setExpirationTime(Instant) - Method in class net.shibboleth.oidc.metadata.MetadataManagementData
-
Set the expiration time of the metadata.
- setExtraAudienceValidation(boolean) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AudienceClaimsValidator
-
Set whether to enable extra audience validation.
- setFailFastInitialization(boolean) - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver
-
Sets whether problems during initialization should cause the provider to fail or go on without metadata.
- setFailFastInitialization(boolean) - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver
-
Sets whether problems during initialization should cause the provider to fail or go on without metadata.
- setFailIfResourceIsNull(boolean) - Method in class net.shibboleth.oidc.security.credential.BasicJWKCredentialFactoryBean
-
Should the factory throw an exeception if the resource is null?
- setFetchStrategy(Function<CriteriaSet, MetadataType>) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
-
Set the metadata fetching strategy.
- setFetchStrategy(Function<CriteriaSet, MetadataType>) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
-
Set the metadata fetching strategy.
- setFetchStrategy(Function<CriteriaSet, MetadataType>) - Method in class net.shibboleth.oidc.metadata.cache.impl.FetchThroughMetadataCache
-
Set the metadata fetching strategy.
- setFetchStrategy(Function<CriteriaSet, MetadataType>) - Method in class net.shibboleth.oidc.metadata.cache.impl.FetchThroughMetadataCacheBuilderSpec
-
Set the metadata fetching strategy.
- setForceAuthn(boolean) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Set whether a fresh user presence proof should be required for this request.
- setForceAuthnPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Set a condition to determine whether a fresh user presence proof should be required for this request.
- setForcePKCE(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Set whether client is required to use PKCE.
- setForcePKCEPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Set condition for whether client is required to use PKCE.
- setForFriendlyName(String) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
-
Set the friendly name to log as the subject of encryption parameter resolution.
- setFrontChannelLogoutSessionRequired(boolean) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Set the flag to require session id in front-channel logout request.
- setFrontChannelLogoutSessionRequired(boolean) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Set the flag to require session id in front-channel logout request.
- setFrontChannelSuccess(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
-
Set whether to consider front-channel logout propagation successful.
- setFrontChannelSuccessPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
-
Set a condition to determine whether to consider front-channel logout propagation successful.
- setGrantTypes(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Set the whitespace-delimited list of grant types.
- setGrantTypes(String) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Set the whitespace-delimited list of grant types.
- setGrantTypes(Collection<String>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
-
Set the enabled grant types.
- setGrantTypesLookupStrategy(Function<ProfileRequestContext, Set<String>>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
-
Set a lookup strategy for the enabled grant types.
- setHttpClient(HttpClient) - Method in class net.shibboleth.oidc.jwk.RemoteJwkSetCache
-
Set the
HttpClientto use. - setHttpClientSecurityParameters(HttpClientSecurityParameters) - Method in class net.shibboleth.oidc.jwk.RemoteJwkSetCache
-
Set the optional client security parameters.
- setHttpClientSecurityParameters(HttpClientSecurityParameters) - Method in class net.shibboleth.oidc.metadata.impl.AbstractDynamicHTTPFetchingStrategy
-
Set an instance of
HttpClientSecurityParameterswhich provides various parameters to influence the security behavior of the HttpClient instance. - setHttpRequestMethod(OAuth2AuthorizationProfileConfiguration.HttpRequestMethod) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set the HTTP request method for an authentication request.
- setHttpRequestMethodLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set a lookup strategy to determine the HTTP request method for an authentication request.
- setHybridFlowEnabled(boolean) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2FlowAwareProfileConfiguration
-
Set whether implicit flow is supported by this profile.
- setHybridFlowEnabledPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2FlowAwareProfileConfiguration
-
Set condition used to indicate whether implicit flow is supported by this profile.
- setIdentifier(String) - Method in class net.shibboleth.oidc.profile.messaging.context.AbstractOIDCEntityContext
-
Sets the identifier of the OIDC entity e.g.
- setIdentifierExtractionStrategy(Function<MetadataType, IdentifierType>) - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
-
Set the MetadataType to IdentifierType extraction time strategy.
- setIdentifierExtractionStrategy(Function<MetadataType, IdentifierType>) - Method in class net.shibboleth.oidc.metadata.cache.impl.BaseMetadataCacheBuilderSpec
-
Set the identifier extraction strategy.
- setIdTokenEncryptedResponseAlg(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Set the JWE alg algorithm for ID token encryption.
- setIdTokenEncryptedResponseAlg(String) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Set the JWE alg algorithm for ID token encryption.
- setIdTokenEncryptedResponseEnc(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Set the JWE enc algorithm for ID token encryption.
- setIdTokenEncryptedResponseEnc(String) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Set the JWE enc algorithm for ID token encryption.
- setIDTokenLifetime(Duration) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Set the lifetime of an id token.
- setIDTokenLifetimeLookupStrategy(Function<ProfileRequestContext, Duration>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Set a lookup strategy for the ID token lifetime.
- setIDTokenManipulationStrategy(BiFunction<ProfileRequestContext, Map<String, Object>, Map<String, Object>>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Set the bi-function for manipulating id_token claims.
- setIDTokenManipulationStrategyLookupStrategy(Function<ProfileRequestContext, BiFunction<ProfileRequestContext, Map<String, Object>, Map<String, Object>>>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Set a lookup strategy for the bi-function for manipulating id_token claims.
- setIdTokenSignedResponseAlg(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Set the JWS alg algorithm for ID token signature.
- setIdTokenSignedResponseAlg(String) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Set the JWS alg algorithm for ID token signature.
- setImplicitFlowEnabled(boolean) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2FlowAwareProfileConfiguration
-
Set whether hybrid flow is supported by this profile.
- setImplicitFlowEnabledPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2FlowAwareProfileConfiguration
-
Set condition used to indicate whether hybrid flow is supported by this profile.
- setIncludeIssuerInResponse(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set whether to include iss parameter in the authentication response.
- setIncludeIssuerInResponsePredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set condition for whether to include iss parameter in the authentication response.
- setInitialCleanupTaskDelay(Duration) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
-
Set the initial cleanup task delay.
- setInitialCleanupTaskDelay(Duration) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
-
Set the initial cleanup task delay.
- setInitiateLoginUri(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Set the URI for initiating login.
- setInitiateLoginUri(String) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Set the URI for initiating login.
- setIssuedClaimsValidator(ClaimsValidator) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2TokenValidatingConfiguration
-
Set the
ClaimsValidatorto apply to issued JWT-based tokens being validated by this profile. - setIssuedClaimsValidatorLookupStrategy(Function<ProfileRequestContext, ClaimsValidator>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2TokenValidatingConfiguration
-
Set a lookup strategy for the
ClaimsValidatorto apply to issued JWT-based tokens being validated by this profile. - setIssueIdTokenViaRefreshToken(boolean) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
-
Set whether the id_token is issued when refresh token grant is used.
- setIssueIdTokenViaRefreshTokenPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
-
Set condition for whether the id_token is issued when refresh token grant is used.
- setIssuer(String) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Set overridden issuer value.
- setIssuer(String) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCDynamicRegistrationConfiguration
-
Set overridden issuer value.
- setIssuer(String) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
-
Set overridden issuer value.
- setIssuer(String) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCProviderInformationConfiguration
-
Set overridden issuer value.
- setIssuer(String) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2TokenValidatingConfiguration
-
Set overridden issuer value.
- setIssuer(String) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2PushedAuthorizationRequestConfiguration
-
Set overridden issuer value.
- setIssuer(String) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
-
Set overridden issuer value.
- setIssuerLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Sets lookup strategy for overridden issuer value.
- setIssuerLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCDynamicRegistrationConfiguration
-
Sets lookup strategy for overridden issuer value.
- setIssuerLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
-
Sets lookup strategy for overridden issuer value.
- setIssuerLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCProviderInformationConfiguration
-
Sets lookup strategy for overridden issuer value.
- setIssuerLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2TokenValidatingConfiguration
-
Sets lookup strategy for overridden issuer value.
- setIssuerLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2PushedAuthorizationRequestConfiguration
-
Sets lookup strategy for overridden issuer value.
- setIssuerLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
-
Sets lookup strategy for overridden issuer value.
- setJcaAlg(String) - Method in class net.shibboleth.oidc.security.credential.BasicExpiringJWTSharedSecretCredentialFactoryBean
-
Set the JCA Algorithm to associate with this credential.
- setJoseHeaderLookupStrategy(Function<ProfileRequestContext, JWSHeader>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AccessTokenHashValidator
-
Set the lookup strategy used to locate the JWS header of the id_token.
- setJOSEObject(JOSEObject) - Method in class net.shibboleth.oidc.security.jose.criterion.JOSEObjectCriterion
-
Sets the JOSEObject which is the source of credential criteria.
- setJWKSet(JWKSet) - Method in class net.shibboleth.oidc.security.jose.criterion.JWKSetCriterion
-
Sets the JWKSet which is the source of credentials.
- setJwtDecryptionConfiguration(DecryptionConfiguration) - Method in class net.shibboleth.oidc.profile.config.JSONSecurityConfiguration
-
Set the configuration used to decrypt JWE tokens.
- setJwtEncryptionConfiguration(EncryptionConfiguration) - Method in class net.shibboleth.oidc.profile.config.JSONSecurityConfiguration
-
Set the configuration used to encrypt JWE tokens.
- setJwtSignatureSigningConfiguration(SignatureSigningConfiguration) - Method in class net.shibboleth.oidc.profile.config.JSONSecurityConfiguration
-
Set the configuration used when signing JWS tokens.
- setJwtSignatureValidationConfiguration(SignatureValidationConfiguration) - Method in class net.shibboleth.oidc.profile.config.JSONSecurityConfiguration
-
Set the configuration used when validating JWS tokens.
- setJwtTokenLookupStrategy(Function<MessageContext, SignedJWT>) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler
-
Set the strategy used to look up a
SignedJWT. - setJwtTokenLookupStrategy(Function<MessageContext, SignedJWT>) - Method in class net.shibboleth.oidc.security.impl.JWTMessageSignatureSecurityHandler
-
Set the strategy used to look up a
signed JWT token. - setJwtTokenLookupStrategy(Function<ProfileRequestContext, EncryptedJWT>) - Method in class net.shibboleth.oidc.security.impl.DecryptJWE
-
Set the strategy used to look up a
encrypted JWT token. - setJwtTokenLookupStrategy(Function<ProfileRequestContext, JWT>) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration
-
Set the strategy used to look up a
JWT. - setJwtUpdateConsumer(BiConsumer<JWT, MessageContext>) - Method in class net.shibboleth.oidc.security.impl.EncryptJWTHandler
-
Set the consumer used to update the MessageContext with the supplied EncryptedJWT.
- setJwtUpdateConsumer(BiConsumer<JWT, MessageContext>) - Method in class net.shibboleth.oidc.security.impl.SignJWTHandler
-
Set the consumer used to update the MessageContext with the supplied EncryptedJWT.
- setJwtUpdateStrategy(BiConsumer<ProfileRequestContext, JWT>) - Method in class net.shibboleth.oidc.security.impl.DecryptJWE
-
Set the strategy used to update the profile request context with the JWT produced as a result of this decryption operation.
- setKEKCredentialResolver(JOSEObjectCredentialResolver) - Method in class net.shibboleth.oidc.security.jose.DecryptionParameters
-
Set the CredentialResolver to use when processing the EncryptedKey (the Key Encryption Key or KEK).
- setKEKCredentialResolver(JOSEObjectCredentialResolver) - Method in class net.shibboleth.oidc.security.jose.impl.BasicDecryptionConfiguration
-
Set the CredentialResolver to use when processing the EncryptedKey (the Key Encryption Key or KEK).
- setKEKCredentialResolver(CredentialResolver) - Method in class net.shibboleth.oidc.security.jose.impl.BasicEncryptionConfiguration
-
Set the CredentialResolver to resolve the key encryption or key wrapping key.
- setKeyId(String) - Method in class net.shibboleth.oidc.security.jose.criterion.KeyIdCriterion
-
Set the key ID criteria.
- setKeyTransportEncryptionAlgorithm(String) - Method in class net.shibboleth.oidc.security.jose.EncryptionParameters
-
Set the encryption algorithm URI to use when encrypting the EncryptedKey.
- setKeyTransportEncryptionAlgorithmLookupStrategy(Function<OIDCClientInformation, String>) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration
-
Set the strategy used to look up the data encryption algorithm in the client metadata.
- setKeyTransportEncryptionAlgorithms(List<String>) - Method in class net.shibboleth.oidc.security.jose.impl.BasicEncryptionConfiguration
-
Set the key transport encryption algorithms to use.
- setKeyTransportEncryptionAlgorithmsLookupStrategy(BiFunction<CriteriaSet, Predicate<String>, List<String>>) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
-
Set the key transport encryption algorithms lookup strategy to use.
- setKeyTransportEncryptionCredential(Credential) - Method in class net.shibboleth.oidc.security.jose.EncryptionParameters
-
Set the encryption credential to use when encrypting the EncryptedKey.
- setKid(String) - Method in class net.shibboleth.oidc.security.credential.BasicJWKCredential
-
Set the kid of jwk.
- setLastRefresh(Instant) - Method in interface net.shibboleth.oidc.metadata.BatchBackingStore
-
Set the time at which the last refresh was attempted.
- setLastRefresh(Instant) - Method in class net.shibboleth.oidc.metadata.impl.DefaultBatchBackingStore
- setLastUpdate(Instant) - Method in interface net.shibboleth.oidc.metadata.BatchBackingStore
-
Set the time at which this batch backing store was successfully reloaded/updated.
- setLastUpdate(Instant) - Method in class net.shibboleth.oidc.metadata.impl.DefaultBatchBackingStore
- setLastUpdateTime(Instant) - Method in class net.shibboleth.oidc.metadata.MetadataManagementData
-
Set the last update time of the metadata.
- setLimitInitialAccessTokenToSelf(boolean) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
-
Set whether the initial access token audience is solely to self (i.e.
- setLimitInitialAccessTokenToSelfPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
-
Set condition for whether initial access token audience is solely to self (i.e.
- setLoadingStrategy(LoadingStrategy) - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
-
Set the strategy used to batch load metadata from a source.
- setLoadingStrategy(LoadingStrategy) - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCacheBuilderSpec
-
Set the batch metadata loading strategy, applies to the
BatchMetadataCachetype. - setLoginHint(String) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set a fixed login_hint.
- setLoginHint(String) - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
-
Sets the login_hint authorisation request parameter.
- setLoginHintLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set the lookup strategy for setting the login_hint.
- setLogName(String) - Method in class net.shibboleth.oidc.security.impl.EncryptJWTHandler
-
Set the friendly name to log as the subject of encryption.
- setLogName(String) - Method in class net.shibboleth.oidc.security.impl.SignJWTHandler
-
Set the friendly name to log as the subject of signing.
- setLogoutHintMatchingStrategy(BiPredicate<String, SPSession>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
-
Set a bi-predicate for matching logout hint to an existing session in an OIDC RP-initiated logout sequence.
- setLogoutHintMatchingStrategyLookupStrategy(Function<ProfileRequestContext, BiPredicate<String, SPSession>>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
-
Set a lookup strategy for the bi-predicate for matching logout hint to an existing session in an OIDC RP-initiated logout sequence.
- setMappedErrors(Map<String, ErrorObject>) - Method in class net.shibboleth.oidc.profile.impl.AbstractBuildErrorResponseFromEvent
-
Set map of eventIds to pre-configured error objects.
- setMappings(Map<Principal, Collection<Principal>>) - Method in class net.shibboleth.oidc.profile.config.navigate.ProxyAwareDefaultOIDCAuthenticationContextClassRequestLookupFunction
-
Sets the mappings from input/proxied Principals to zero or more equivalent values to use.
- setMatchOnIdentifierRequired(boolean) - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
-
Set if a match on identifier is required in order to return results.
- setMatchRequired(boolean) - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCacheBuilderSpec
-
Set if a match on identifier is required in order to return results.
- setMaxAge(Duration) - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
-
Set the max age.
- setMaxAuthenticationAge(Duration) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set the max authentication age.
- setMaxAuthenticationAgeLookupStrategy(Function<ProfileRequestContext, Duration>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set a lookup strategy for the max authentication age.
- setMaxCacheDuration(Duration) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
-
Set the maximum cache duration for metadata.
- setMaxCacheDuration(Duration) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
-
Set the maximum cache duration for metadata.
- setMaxIdleEntityData(Duration) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
-
Set the maximum idle time for which the resolver will keep data for a given entityID, before it is removed.
- setMaxIdleEntityData(Duration) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
-
Set the maximum idle time for which the resolver will keep data for before it is removed.
- setMaxRefreshDelay(Duration) - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
-
Sets the maximum amount of time between refresh intervals.
- setMaxRefreshDelay(Duration) - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCacheBuilderSpec
-
Sets the maximum amount of time between refresh intervals.
- setMaxRefreshDelay(Duration) - Method in class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver
-
Sets the maximum amount of time between refresh intervals.
- setMaxReplayCacheRecordLifetime(Duration) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierClaimsValidator
-
Set the maximum lifetime to be used in replay cache when 'exp' claim is exploited.
- setMessageEncoder(MessageEncoder) - Method in class net.shibboleth.oidc.profile.encoding.impl.OIDCResponseEncoderFactory
-
Set the message encoder to be returned by this factory.
- setMessageHandler(Function<MessageContext, Exception>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2InterceptorAwareProfileConfiguration
-
Set a handler for the message.
- setMessageHandlerLookupStrategy(Function<MessageContext, Function<MessageContext, Exception>>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2InterceptorAwareProfileConfiguration
-
Set a lookup strategy for the handler for the message.
- setMessageLifetime(Duration) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.IssuedAtClaimsValidator
-
Sets the amount of time for which a message is valid.
- setMetadataBeforeRemovalHook(BiConsumer<List<MetadataType>, IdentifierType>) - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
-
Set a hook to run before a metadata cache entry is removed from the cache.
- setMetadataBeforeRemovalHook(BiConsumer<List<MetadataType>, IdentifierType>) - Method in class net.shibboleth.oidc.metadata.cache.impl.BaseMetadataCacheBuilderSpec
-
Set a hook to run before a metadata cache entry is removed from the cache.
- setMetadataContextLookupStrategy(Function<MessageContext, SAMLMetadataContext>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
-
Set lookup strategy for
SAMLMetadataContextfor input to resolution. - setMetadataExpirationTimeStrategy(Function<ExpirationTimeContext<MetadataType>, Instant>) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
-
Set the metadata expiration time strategy.
- setMetadataExpirationTimeStrategy(Function<ExpirationTimeContext<MetadataType>, Instant>) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
-
Set the metadata expiration time strategy.
- setMetadataFile(File) - Method in class net.shibboleth.oidc.metadata.impl.AbstractFileOIDCEntityResolver
-
Sets the file from which metadata is read.
- setMetadataFilterStrategy(BiFunction<MetadataType, MetadataFilterContext, MetadataType>) - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
-
Set the metadata filtering strategy.
- setMetadataFilterStrategy(BiFunction<MetadataType, MetadataFilterContext, MetadataType>) - Method in class net.shibboleth.oidc.metadata.cache.impl.BaseMetadataCacheBuilderSpec
-
Set the metadata filtering strategy.
- setMetadataPolicy(Map<String, MetadataPolicy>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCDynamicRegistrationConfiguration
-
Sets the metadata policy.
- setMetadataPolicyLookupStrategy(Function<ProfileRequestContext, Map<String, MetadataPolicy>>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCDynamicRegistrationConfiguration
-
Set a lookup strategy for the metadata policy.
- setMetadataPolicyResolver(MetadataPolicyResolver) - Method in class net.shibboleth.oidc.profile.config.navigate.ResolverBasedRegistrationMetadataPolicyLookupFunction
-
Set the metadata policy resolver.
- setMetadataValidPredicate(Predicate<MetadataType>) - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
-
Set the predicate which determines if a piece of metadata is valid or not.
- setMetadataValidPredicate(Predicate<MetadataType>) - Method in class net.shibboleth.oidc.metadata.cache.impl.BaseMetadataCacheBuilderSpec
-
Set the predicate which determines if a piece of metadata is valid or not.
- setMetricsBaseName(String) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
-
Set the base name for Metrics instrumentation.
- setMinCacheDuration(Duration) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
-
Set the minimum cache duration for metadata.
- setMinCacheDuration(Duration) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
-
Set the minimum cache duration for metadata.
- setMinRefreshDelay(Duration) - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
-
Sets the minimum amount of time between refreshes.
- setMinRefreshDelay(Duration) - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCacheBuilderSpec
-
Sets the minimum amount of time between refreshes.
- setMinRefreshDelay(Duration) - Method in class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver
-
Sets the minimum amount of time between refreshes.
- setNameFromMetadataLookupStrategy(Function<ProfileRequestContext, Set<String>>) - Method in class net.shibboleth.oidc.attribute.transcoding.AbstractOIDCAttributeTranscoder
-
Sets lookup strategy for obtaining tag-based naming overrides from metadata.
- setNonce(Nonce) - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
-
Set the nonce.
- setNoResultIsError(boolean) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParameters
-
Set whether a failure to resolve any parameters should be raised as an exception.
- setNoResultIsError(boolean) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
-
Set whether a failure to resolve any parameters should be raised as an exception.
- setOIDCMetadataContextLookupStrategy(Function<ProfileRequestContext, OIDCMetadataContext>) - Method in class net.shibboleth.oidc.profile.logic.ClientIDFromOIDCMetadataContextLookupFunction
-
Set the strategy used to return the
OIDCMetadataContext. - setOIDCMetadataContextLookupStrategy(Function<ProfileRequestContext, OIDCProviderMetadataContext>) - Method in class net.shibboleth.oidc.profile.logic.IssuerIDFromOIDCProviderMetadataContextLookupFunction
-
Set the strategy used to return the
OIDCProviderMetadataContext. - setOneOfValues(List<Object>) - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
-
Set the list of values from which the claim must be one of.
- setOriginalValue(byte[]) - Method in interface net.shibboleth.oidc.metadata.BatchBackingStore
-
Sets the source bytes of the source before it was parsed.
- setOriginalValue(byte[]) - Method in class net.shibboleth.oidc.metadata.impl.DefaultBatchBackingStore
- setParsingStrategy(Function<byte[], List<Map<String, MetadataPolicy>>>) - Method in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyResponseHandler
-
Set the parsing strategy used for parsing metadata policies.
- setParsingStrategy(Function<byte[], List<Map<String, MetadataPolicy>>>) - Method in class net.shibboleth.oidc.metadata.policy.impl.MetadataPolicyViaLocationFetchingStrategy
-
Set the parsing strategy used for parsing metadata policies.
- setParsingStrategy(Function<byte[], List<MetadataType>>) - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
-
Set the strategy used to convert raw metadata in bytes to the given metadata type.
- setParsingStrategy(Function<byte[], List<MetadataType>>) - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCacheBuilderSpec
-
Set he raw batch metadata to metadata type parsing strategy.
- setPayloadToEncryptLookupStrategy(Function<MessageContext, Payload>) - Method in class net.shibboleth.oidc.security.impl.EncryptJWTHandler
-
Set the strategy used to locate the
Payloadto encrypt. - setPostAuthenticationFlows(Collection<String>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Set the ordered collection of post-authentication interceptor flows to enable.
- setPostAuthenticationFlowsLookupStrategy(Function<ProfileRequestContext, Collection<String>>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Set a lookup strategy for the post-authentication interceptor flows to enable.
- setPreferFrontChannel(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
-
Set whether to prefer front-channel if both are defined for the RP.
- setPreferFrontChannelPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
-
Set a condition to determine whether to prefer front-channel if both are defined for the RP.
- setProfileRequestContextLookupStrategy(Function<MessageContext, ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.navigate.MessageContextLookupFunctionAdaptor
-
Set the strategy used to locate the
ProfileRequestContextassociated with a givenMessageContext. - setProhibitedClaims(Collection<String>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ProhibitedClaimsValidator
-
Set the prohibited claims.
- setPrompt(Prompt) - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
-
Set the prompt.
- setProviderInformation(OIDCProviderMetadata) - Method in class net.shibboleth.oidc.metadata.context.OIDCProviderMetadataContext
-
Set the provider information.
- setProviderMetadataAlgorithmLookupStrategy(Function<OIDCProviderMetadata, List<String>>) - Method in class net.shibboleth.oidc.security.jose.impl.RelyingPartySigningParametersResolver
-
Set the strategy used to locate the supported signing algorithms from the OP's metadata for this resolver instance.
- setProviderMetadataContextLookupStrategy(Function<MessageContext, OIDCProviderMetadataContext>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
-
Set lookup strategy for
OIDCProviderMetadataContextfor input to resolution. - setProviderMetadataContextLookupStrategy(Function<ProfileRequestContext, OIDCProviderMetadataContext>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
-
Set lookup strategy for
OIDCProviderMetadataContextfor input to resolution. - setProviderMetadataContextLookupStrategy(Function<ProfileRequestContext, OIDCProviderMetadataContext>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParameters
-
Set lookup strategy for
OIDCProviderMetadataContextfor input to resolution. - setProviderMetadataLookupStrategy(Function<MessageContext, OIDCProviderMetadata>) - Method in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler
-
Set the lookup strategy to locate the OpenID providers metadata.
- setProviderSupportsClaimsParameter(boolean) - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
-
Sets the support for the
claimsauthorisation request parameter. - setProxiedAuthnInstant(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Sets whether authentication results produced by use of this profile should carry the proxied assertion's auth_time from the id_token, rather than the current time.
- setProxyCount(Integer) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Sets the maximum number of times an assertion may be proxied outbound and/or the maximum number of hops between the relying party and a proxied authentication authority inbound.
- setProxyCountLookupStrategy(Function<ProfileRequestContext, Integer>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Set a lookup strategy for the maximum number of times an assertion may be proxied outbound and/or the maximum number of hops between the relying party and a proxied authentication authority inbound.
- setRedirectURI(URI) - Method in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
-
Set the redirect_uri.
- setRedirectUriOverride(String) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set the override redirect_uri.
- setRedirectUriOverrideLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set the redirect_uri lookup strategy used to locate an overridden redirect.
- setReferenceURI(URI) - Method in class net.shibboleth.oidc.security.credential.BasicJWKReferenceCredential
-
Deprecated, for removal: This API element is subject to removal in a future version.
- setRefreshDelayFactor(Float) - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
-
Sets the delay factor used to compute the next refresh time.
- setRefreshDelayFactor(Float) - Method in class net.shibboleth.oidc.metadata.cache.impl.BaseMetadataCacheBuilderSpec
-
Sets the delay factor used to compute the next refresh time.
- setRefreshTokenChainLifetime(Duration) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Set the lifetime of refresh token chain.
- setRefreshTokenChainLifetimeLookupStrategy(Function<ProfileRequestContext, Duration>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Set a lookup strategy for the refresh token chain lifetime.
- setRefreshTokenClaimsSetManipulationStrategy(BiFunction<ProfileRequestContext, Map<String, Object>, Map<String, Object>>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
-
Set the bi-function for manipulating refresh token claims set.
- setRefreshTokenClaimsSetManipulationStrategyLookupStrategy(Function<ProfileRequestContext, BiFunction<ProfileRequestContext, Map<String, Object>, Map<String, Object>>>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
-
Set a lookup strategy for the bi-function for manipulating refresh token claims set.
- setRefreshTokensEnabled(boolean) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2FlowAwareProfileConfiguration
-
Set whether refresh tokens are supported by this profile.
- setRefreshTokensEnabledPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2FlowAwareProfileConfiguration
-
Set condition used to indicate whether refresh tokens are supported by this profile.
- setRefreshTokenTimeout(Duration) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Set the timeout of refresh token.
- setRefreshTokenTimeoutLookupStrategy(Function<ProfileRequestContext, Duration>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Set a lookup strategy for the refresh token timeout.
- setRefreshTokenType(String) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Set refresh token type.
- setRefreshTokenTypeLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Set lookup strategy for token token type.
- setRefreshTriggerTime(Instant) - Method in class net.shibboleth.oidc.metadata.MetadataManagementData
-
Set the refresh trigger time of the metadata.
- setRegexp(String) - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
-
Set the regular expression that the claim value must meet.
- setRegistrationValidityPeriod(Duration) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCDynamicRegistrationConfiguration
-
Sets the registration validity period.
- setRegistrationValidityPeriodLookupStrategy(Function<ProfileRequestContext, Duration>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCDynamicRegistrationConfiguration
-
Set a lookup strategy for the registration validity period.
- setRelyingPartyContextLookupStrategy(Function<MessageContext, RelyingPartyContext>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
-
Set lookup strategy for relying party context.
- setRelyingPartyContextLookupStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.oidc.profile.impl.FormOutboundKeySetResponseMessage
-
Set the strategy used to locate the
RelyingPartyContextassociated with a givenProfileRequestContext. - setRelyingPartyContextLookupStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTDecryptionParameters
-
Set lookup strategy for relying party context.
- setRelyingPartyContextLookupStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
-
Set lookup strategy for relying party context.
- setRelyingPartyContextLookupStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler
-
Set lookup strategy for relying party context.
- setRemoveIdleEntityData(boolean) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
-
Set the flag indicating whether idle entity data should be removed.
- setRemoveIdleEntityData(boolean) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
-
Set the flag indicating whether idle entity data should be removed.
- setReplayCache(ReplayCache) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierClaimsValidator
-
Set the replay cache instance to use.
- setReplayCacheKeyCalculationStrategy(Function<String, String>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierClaimsValidator
-
Set the function to calculate they key used with
ReplayCache. - setReplayCacheRecordLifetime(Duration) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierClaimsValidator
-
Set the static lifetime to be used in replay cache if claims set doesn't contain expiration value.
- setRequested(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationTimeClaimsValidator
-
Deprecated, for removal: This API element is subject to removal in a future version.use the activation condition in the base class instead.
- setRequestedClaims(OIDCClaimsRequest) - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
-
Set any individual requested claims.
- setRequestedEssentialAcrsClaimLookupStrategy(BiFunction<ProfileRequestContext, JWTClaimsSet, List<String>>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ACRClaimsValidator
-
Set the strategy to locate the requested ACR claim values, if any.
- setRequestObject(JWT) - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
-
Set the request object.
- setRequestObjectClaimsSet(ClaimsSet) - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
-
Set the request object claims set.
- setRequestObjectEncryptionAlg(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Set the JWE alg algorithm for request object encryption.
- setRequestObjectEncryptionAlg(String) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Set the JWE alg algorithm for request object encryption.
- setRequestObjectEncryptionEnc(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Set the JWE enc algorithm for request object encryption.
- setRequestObjectEncryptionEnc(String) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Set the JWE enc algorithm for request object encryption.
- setRequestObjectSigningAlg(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Set the JWS alg algorithm for request object signature.
- setRequestObjectSigningAlg(String) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Set the JWS alg algorithm for request object signature.
- setRequestURI(URI) - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
-
Set the URI to fetch the request object from.
- setRequestUriClaimsSetManipulationStrategy(BiFunction<ProfileRequestContext, Map<String, Object>, Map<String, Object>>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2PushedAuthorizationRequestConfiguration
-
Set the bi-function for manipulating request URI claims set.
- setRequestUriClaimsSetManipulationStrategyLookupStrategy(Function<ProfileRequestContext, BiFunction<ProfileRequestContext, Map<String, Object>, Map<String, Object>>>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2PushedAuthorizationRequestConfiguration
-
Set a lookup strategy for the bi-function for manipulating request URI claims set.
- setRequestUriLifetime(Duration) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2PushedAuthorizationRequestConfiguration
-
Set the lifetime of an request URI.
- setRequestUriLifetimeLookupStrategy(Function<ProfileRequestContext, Duration>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2PushedAuthorizationRequestConfiguration
-
Set a lookup strategy for the request URI lifetime.
- setRequestUriType(String) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2PushedAuthorizationRequestConfiguration
-
Set request URI type.
- setRequestUriTypeLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2PushedAuthorizationRequestConfiguration
-
Set lookup strategy for request URI type.
- setRequireAll(boolean) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ChainingJWTClaimsValidator
-
Set whether to require all validators to be successful.
- setRequireAuthenticationRequest(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set whether client is required to use OIDC authentication request vs plain OAuth2 authorization request.
- setRequireAuthenticationRequestPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set condition for whether client is required to use OIDC authentication request vs plain OAuth2 authorization request.
- setRequireAuthenticationRequestPredicateLookupStrategy(Function<ProfileRequestContext, Predicate<ProfileRequestContext>>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set the lookup strategy to determine whether client is required to use OIDC authentication request vs plain OAuth2 authorization request.
- setRequireAuthTime(boolean) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Set the flag to require authentication time.
- setRequireAuthTime(boolean) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Set the flag to require authentication time.
- setRequiredClaims(Collection<String>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.RequiredClaimsValidator
-
Set the required claims.
- setRequireDpopJkt(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set whether client is required to include dpop_jkt in authorization request.
- setRequireDpopJktPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set condition for whether client is required to include dpop_jkt in authorization request.
- setRequireDpopProof(boolean) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Set whether client is required to include DPoP proof in request.
- setRequireDpopProofPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Set condition for whether client is required to include DPoP proof in request.
- setRequiredRule(boolean) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.IssuedAtClaimsValidator
-
Sets whether this rule is required to be met.
- setRequireIdTokenHint(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
-
Set whether to to require the use of id_token_hint in an OIDC RP-initiated logout sequence.
- setRequireIdTokenHintPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
-
Set a condition to determine whether to to require the use of id_token_hint in an OIDC RP-initiated logout sequence.
- setRequirePushedAuthorizationRequest(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set whether client is required to use pushed authorization request.
- setRequirePushedAuthorizationRequestPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set condition for whether client is required to use pushed authorization request.
- setRequireValidMetadata(boolean) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor.SkeletonEchoingRoleDescriptorResolver
- setResolveAttributes(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Set whether attributes should be resolved during the profile.
- setResolveAttributes(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCUserInfoConfiguration
-
Set whether attributes should be resolved during the profile.
- setResolveAttributes(boolean) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
-
Set whether attributes should be resolved during the profile.
- setResolveAttributesPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Set a condition to determine whether attributes should be resolved during the profile.
- setResolveAttributesPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCUserInfoConfiguration
-
Set a condition to determine whether attributes should be resolved during the profile.
- setResolveAttributesPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
-
Set a condition to determine whether attributes should be resolved during the profile.
- setResolvers(List<? extends ClientInformationResolver>) - Method in class net.shibboleth.oidc.metadata.impl.ChainingClientInformationResolver
-
Set the registered client information resolvers.
- setResolvers(List<? extends ProviderMetadataResolver>) - Method in class net.shibboleth.oidc.metadata.impl.ChainingProviderMetadataResolver
-
Set the registered provider metadata resolvers.
- setResource(Resource) - Method in class net.shibboleth.oidc.metadata.impl.PropertiesClientSecretValueResolver
-
Set the properties resource containing client secret values.
- setResource(Resource) - Method in class net.shibboleth.oidc.security.credential.BasicJWKCredentialFactoryBean
-
Set the resource containing the private key.
- setResponderIdLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationAudienceClaimsValidator
-
Set the lookup function for the responder identifier.
- setResponseMode(ResponseMode) - Method in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
-
Set the response mode to be used with the ongoing authentication request.
- setResponseMode(String) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set the response_mode to use for authorization requests.
- setResponseModeLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set the lookup strategy to determine the response_mode for authorization requests.
- setResponseModes(Collection<String>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set the set of response modes that are allowed to be used in authorization request.
- setResponseModesLookupStrategy(Function<ProfileRequestContext, Set<String>>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set a lookup strategy for the set of response modes that are allowed to be used in authorization request.
- setResponseType(ResponseType) - Method in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
-
Set the response type.
- setResponseType(String) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set the response_type to use for authentication requests.
- setResponseTypeLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set the lookup strategy to determine the response_type for authentication requests.
- setResponseTypes(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Set the whitespace-delimited list of response types.
- setResponseTypes(String) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Set the whitespace-delimited list of response types.
- setRetrieveUserInfoEndpointClaims(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set whether to make a request to the UserInfo Endpoint to obtain authenticated End-User claims.
- setRetrieveUserInfoEndpointClaims(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set condition for whether to make a request to the UserInfo Endpoint to obtain authenticated End-User claims.
- setRevocationCache(RevocationCache) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierRevocationValidator
-
Set the revocation cache instance to use.
- setRevocationLifetime(Duration) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenRevocationConfiguration
-
Set the lifetime of revocation.
- setRevocationLifetimeLookupStrategy(Function<ProfileRequestContext, Duration>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenRevocationConfiguration
-
Set a lookup strategy for the revocation lifetime.
- setRevocationMethod(OAuth2TokenRevocationConfiguration.OAuth2TokenRevocationMethod) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenRevocationConfiguration
-
Set which revocation method should be used when revoking a token.
- setRevocationMethodLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenRevocationConfiguration
-
Set strategy for looking up which revocation method should be used when revoking a token.
- setRevokeTokens(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
-
Set whether to revoke the tokens related to the session to be logged out.
- setRevokeTokensPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
-
Set a condition to determine whether to revoke the tokens related to the session to be logged out.
- setSatisfyAnyPredicates(boolean) - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver
-
Set the flag indicating whether resolved credentials may satisfy any predicates (i.e.
- setScopes(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Set the whitespace-delimited list of scopes.
- setScopes(String) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Set the whitespace-delimited list of scopes.
- setScopes(Set<String>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set the scopes to use for authentication requests.
- setScopesLookupStrategy(Function<ProfileRequestContext, Set<String>>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set the lookup strategy to determine the scopes to use for authentication requests.
- setSecret(Secret) - Method in class net.shibboleth.oidc.security.credential.BasicNimbusSecretCredential
-
Deprecated, for removal: This API element is subject to removal in a future version.
- setSecret(String) - Method in class net.shibboleth.oidc.security.credential.BasicClientSecretCredentialFactoryBean
-
Set the secret to use.
- setSecret(String) - Method in class net.shibboleth.oidc.security.credential.BasicExpiringJWTSharedSecretCredentialFactoryBean
-
Set the secret to use.
- setSecretExpirationPeriod(Duration) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCDynamicRegistrationConfiguration
-
Sets the client secret expiration period.
- setSecretExpirationPeriodLookupStrategy(Function<ProfileRequestContext, Duration>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCDynamicRegistrationConfiguration
-
Set a lookup strategy for the client secret expiration period.
- setSectorIdentifierUri(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Set the sector identifier URI.
- setSectorIdentifierUri(String) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Set the sector identifier URI.
- setSecurityParametersContextLookupStrategy(Function<MessageContext, SecurityParametersContext>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
-
Set the strategy used to look up the
SecurityParametersContextto set the parameters for. - setSecurityParametersContextLookupStrategy(Function<MessageContext, SecurityParametersContext>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureValidationParametersHandler
-
Set the strategy used to look up the
SecurityParametersContextto set the parameters for. - setSecurityParametersContextLookupStrategy(Function<MessageContext, SecurityParametersContext>) - Method in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler
-
Set the strategy used to look up the
SecurityParametersContextto set the parameters for. - setSecurityParametersContextLookupStrategy(Function<ProfileRequestContext, SecurityParametersContext>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTDecryptionParameters
-
Set the strategy used to look up the
SecurityParametersContextto set the parameters for. - setSecurityParametersContextLookupStrategy(Function<ProfileRequestContext, SecurityParametersContext>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
-
Set the lookup strategy to locate the security parameters context.
- setSecurityParametersContextLookupStrategy(Function<ProfileRequestContext, SecurityParametersContext>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParameters
-
Set the strategy used to look up the
SecurityParametersContextto set the parameters for. - setSecurityParametersContextLookupStrategy(Function<ProfileRequestContext, SecurityParametersContext>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureValidationParameters
-
Set the strategy used to look up the
SecurityParametersContextto set the parameters for. - setSecurityParametersContextLookupStrategy(Function<ProfileRequestContext, SecurityParametersContext>) - Method in class net.shibboleth.oidc.security.impl.DecryptJWE
-
Set the strategy used to locate the
SecurityParametersContextassociated with a givenProfileRequestContext. - setSecurityParametersLookupStrategy(Function<MessageContext, SecurityParametersContext>) - Method in class net.shibboleth.oidc.security.impl.EncryptJWTHandler
-
Set the strategy used to locate the
SecurityParametersContextto use. - setSecurityParametersLookupStrategy(Function<MessageContext, SecurityParametersContext>) - Method in class net.shibboleth.oidc.security.impl.SignJWTHandler
-
Set the strategy used to locate the
SecurityParametersContextto use. - setSignatureAlgorithm(String) - Method in class net.shibboleth.oidc.security.jose.SignatureSigningParameters
-
Set the signature algorithm URI to use when signing.
- setSignatureAlgorithmLookupStrategy(Function<OIDCClientInformation, String>) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler
-
Set the strategy used to look up the signature algorithm in the client metadata.
- setSignatureAlgorithms(List<String>) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningConfiguration
-
Set the signature algorithms to use when signing.
- setSignatureSigningParameters(SignatureSigningParameters) - Method in class net.shibboleth.oidc.security.jose.context.SecurityParametersContext
-
Set the parameters to use for signature signing operations.
- setSignatureSigningParametersResolver(SignatureSigningParametersResolver) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParameters
-
Set the resolver to use for the parameters to store into the context.
- setSignatureSigningParametersResolver(SignatureSigningParametersResolver) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
-
Set the resolver to use for the parameters to store into the context.
- setSignatureTrustEngine(TrustEngine<SignedJWT>) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureValidationConfiguration
-
Set the signature trust engine to use.
- setSignatureTrustEngine(TrustEngine<SignedJWT>) - Method in class net.shibboleth.oidc.security.jose.SignatureValidationParameters
-
Set the signature trust engine to use.
- setSignatureValidationParameters(SignatureValidationParameters) - Method in class net.shibboleth.oidc.security.jose.context.SecurityParametersContext
-
Set the parameters to use for signature validation operations.
- setSignatureValidationParametersResolver(SignatureValidationParametersResolver) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureValidationParameters
-
Set the resolver to use for the parameters to store into the context.
- setSignatureValidationParametersResolver(SignatureValidationParametersResolver) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureValidationParametersHandler
-
Set the resolver to use for the parameters to store into the context.
- setSigningCredential(Credential) - Method in class net.shibboleth.oidc.security.jose.SignatureSigningParameters
-
Set the signing credential to use when signing.
- setSigningCredentials(List<Credential>) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningConfiguration
-
Set the signing credentials to use when signing.
- setSignRequestObject(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set whether the RequestObject should be signed.
- setSignRequestObjectPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set the predicate to determine if the RequestObject should be signed.
- setSoftwareId(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Set the software identifier.
- setSoftwareId(String) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Set the software identifier.
- setSoftwareVersion(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Set the software version.
- setSoftwareVersion(String) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Set the software version.
- setSortKey(int) - Method in class net.shibboleth.oidc.metadata.ProviderMetadataProviderContainer
-
Set the sort key.
- setSortKey(int) - Method in class net.shibboleth.oidc.metadata.RelyingPartyClientInformationProvider
-
Set the sort key.
- setSourceId(String) - Method in class net.shibboleth.oidc.metadata.filter.MetadataSource
-
Set identifier of the metadata source.
- setSourceMetadataExpiryStrategy(Function<byte[], Instant>) - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
-
Set a strategy to find the metadata expiry date from a source metadata document as bytes.
- setSourceMetadataExpiryStrategy(Function<byte[], Instant>) - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCacheBuilderSpec
-
Set a strategy to find the metadata expiry date from a source metadata document as bytes.
- setSourceMetadataValidPredicate(Predicate<byte[]>) - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
-
Set the predicate which determines if the source metadata is valid or not.
- setSourceMetadataValidPredicate(Predicate<byte[]>) - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCacheBuilderSpec
-
Set the predicate which determines if the source metadata is valid or not.
- setState(State) - Method in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
-
Set the state.
- setStorage(StorageService) - Method in class net.shibboleth.oidc.jwk.RemoteJwkSetCache
-
Set the backing store for the remote JWK set contents.
- setStorageService(StorageService) - Method in class net.shibboleth.oidc.metadata.impl.BaseStorageServiceClientInformationComponent
-
Set the
StorageServiceback-end to use. - setStrictScopeValidation(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Set whether scope validation is strict, i.e.
- setStrictScopeValidationPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Set a condition to determine whether scope validation is strict, i.e.
- setSubsetOfValues(List<Object>) - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
-
Set the list of value(s) from which the claim must be subset of.
- setSupersetOfValues(List<Object>) - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
-
Set the list of value(s) from which the claim must be superset of.
- setSupportedContentTypes(List<String>) - Method in class net.shibboleth.oidc.metadata.impl.AbstractDynamicHTTPFetchingStrategy
-
Set the list of supported MIME types for use in Accept request header and validation of response Content-Type header.
- setSymmetricKeyAlgorithm(String) - Method in class net.shibboleth.oidc.security.credential.BasicJWKCredentialFactoryBean
-
Set the JCA algorithm name to use if the key to be converted is a symmetric key.
- setTlsServerValidationSufficient(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set whether TLS server validation alone is sufficient to verify the id_token (true), or whether the id_token's signature should be validated (false).
- setTlsServerValidationSufficient(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set the predicate to determine whether TLS server validation alone is sufficient to verify the id_token (true), or whether the id_token's signature should be validated (false).
- setTokenEndpointAuthMethod(String) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Set the enabled token endpoint authentication method to use with an upstream OpenID Provider.
- setTokenEndpointAuthMethod(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Set the token endpoint authentication method.
- setTokenEndpointAuthMethod(String) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Set the token endpoint authentication method.
- setTokenEndpointAuthMethodLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Set a lookup strategy to find the enabled token endpoint authentication method to use with an upstream OpenID Provider.
- setTokenEndpointAuthMethods(Collection<String>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Set the enabled token endpoint authentication methods.
- setTokenEndpointAuthMethodsLookupStrategy(Function<ProfileRequestContext, Set<String>>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Set a lookup strategy for the enabled token endpoint authentication methods.
- setTokenEndpointAuthSigningAlg(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Set the JWS alg algorithm for token endpoint authentication signature.
- setTokenEndpointAuthSigningAlg(String) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Set the JWS alg algorithm for token endpoint authentication signature.
- setTrusted(boolean) - Method in class net.shibboleth.oidc.metadata.filter.MetadataSource
-
Set whether the metadata source is trusted.
- setTypeHeader(String) - Method in class net.shibboleth.oidc.security.impl.SignJWTHandler
-
Sets the value to be inserted as a "typ" header for the JWS.
- setTypeHeaderLookupStrategy(Function<MessageContext, String>) - Method in class net.shibboleth.oidc.security.impl.SignJWTHandler
-
Sets the strategy used to locate the optional "typ" header to insert while signing
- setUnregisteredClientPolicy(Map<String, UnregisteredClientPolicy>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Sets the policy for validating unregistered clients.
- setUnregisteredClientPolicyLookupStrategy(Function<ProfileRequestContext, Map<String, UnregisteredClientPolicy>>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Set a lookup strategy for the policy for validating unregistered clients.
- setUseActiveProfileOnly(boolean) - Method in class net.shibboleth.oidc.profile.config.navigate.RevocationLifetimeLookupFunction
-
Set the flag for using active profile only.
- setUseRequestObject(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set whether the authentication request parameters should be passed in a single, self contained, JWT.
- setUseRequestObjectPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set condition for whether the authentication request parameters should be passed in a single, self contained, JWT.
- setUserInfoEncryptedResponseAlg(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Set the JWE alg algorithm for UserInfo response encryption.
- setUserInfoEncryptedResponseAlg(String) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Set the JWE alg algorithm for UserInfo response encryption.
- setUserInfoEncryptedResponseEnc(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Set the JWE enc algorithm for UserInfo response encryption.
- setUserInfoEncryptedResponseEnc(String) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Set the JWE enc algorithm for UserInfo response encryption.
- setUserInfoHttpRequestMethod(OAuth2AuthorizationProfileConfiguration.HttpRequestMethod) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set the HTTP request method for an UserInfo request.
- setUserInfoHttpRequestMethodLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Set a lookup strategy to determine the HTTP request method for an UserInfo request.
- setUserInfoSignedResponseAlg(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Set the JWS alg algorithm for UserInfo response signature.
- setUserInfoSignedResponseAlg(String) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Set the JWS alg algorithm for UserInfo response signature.
- setValidator(BiFunction<JWTClaimsSet, ProfileRequestContext, JWTValidationException>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.FunctionClaimsValidator
-
Set the function to run.
- setValidator(Predicate<MetadataPolicy>) - Method in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyOperator
-
Set the metadata policy validator.
- setValue(Object) - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
-
Set the (forced) value for the claim.
- setValue(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.AbstractMetadataValueSAMLObject
-
Set the value for this metadata object.
- setValue(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.JwksUriImpl
-
Set the value for this metadata object.
- setValue(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.PostLogoutRedirectUriImpl
-
Set the value for this metadata object.
- setValue(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.RequestUriImpl
-
Set the value for this metadata object.
- setValue(String) - Method in interface net.shibboleth.oidc.saml.xmlobject.MetadataValueSAMLObject
-
Deprecated, for removal: This API element is subject to removal in a future version.
- setValueOperator(BiFunction<Object, MetadataPolicy, Object>) - Method in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyOperator
-
Set the metadata policy operator.
- setValueToMatchLookupStrategy(BiFunction<ProfileRequestContext, JWTClaimsSet, String>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ExactMatchClaimsValidator
-
Set the value to match lookup strategy.
- setVelocityEngine(VelocityEngine) - Method in class net.shibboleth.oidc.profile.encoding.impl.HTTPPostAuthnRequestEncoder
-
Set the VelocityEngine instance.
- setVelocityTemplateId(String) - Method in class net.shibboleth.oidc.profile.encoding.impl.HTTPPostAuthnRequestEncoder
-
Set the Velocity template id.
- setWellKnownLocationCompositionStrategy(BiFunction<Issuer, String, String>) - Method in class net.shibboleth.oidc.metadata.impl.HTTPProviderConfigurationFetchingStrategy
-
Set the well-known location composition strategy.
- setWellKnownPath(String) - Method in class net.shibboleth.oidc.metadata.impl.HTTPProviderConfigurationFetchingStrategy
-
Set the well-known URL path component.
- shouldAttemptRefresh(MetadataManagementData<IdentifierType>) - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
-
Determine if the metadata should be refreshed based on stored refresh trigger time.
- shouldGenerateId() - Method in class net.shibboleth.oidc.profile.spring.relyingparty.metadata.filter.impl.ClientInformationParser
- sign(JWTClaimsSet, String) - Method in class net.shibboleth.oidc.security.impl.JWSTokenSigner
-
Sign the given JWT claims set using the signing parameters.
- SIGNATURE_RSASSA_PSS - Static variable in class net.shibboleth.oidc.jwa.support.JCAConstantExtension
-
RSASSA-PSS which uses SHA256/384/512 and MGF1 functions.
- signatureAlgorithmLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler
-
A lookup function for the signature algorithm in the client metadata.
- signatureAlgorithmLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.ClientInformationJWTTrustEngine
-
A lookup function for the signature algorithm in the client metadata.
- signatureAlgorithmLookupStrategy - Variable in class net.shibboleth.oidc.security.jose.impl.ClientInformationSignatureSigningParametersResolver
-
A lookup function for the signature algorithm.
- signatureAlgorithms - Variable in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningConfiguration
-
Signature method algorithm URIs.
- signatureAlgorithmURI - Variable in class net.shibboleth.oidc.security.jose.SignatureSigningParameters
-
The signature algorithm URI.
- SignatureConstants - Class in net.shibboleth.oidc.jwa.support
-
Algorithm Header Parameter Values for JWS.
- SignatureConstants() - Constructor for class net.shibboleth.oidc.jwa.support.SignatureConstants
-
Constructor.
- SignatureES256 - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
-
Algorithm descriptor for signature algorithm: ES256.
- SignatureES256() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureES256
- SignatureES384 - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
-
Algorithm descriptor for signature algorithm: ES384.
- SignatureES384() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureES384
- SignatureES512 - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
-
Algorithm descriptor for signature algorithm: ES512.
- SignatureES512() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureES512
- SignatureException - Exception in net.shibboleth.oidc.security.jose
-
Exception thrown when an error occurs during JWS signature operations.
- SignatureException() - Constructor for exception net.shibboleth.oidc.security.jose.SignatureException
-
Constructor.
- SignatureException(Exception) - Constructor for exception net.shibboleth.oidc.security.jose.SignatureException
-
Constructor.
- SignatureException(String) - Constructor for exception net.shibboleth.oidc.security.jose.SignatureException
-
Constructor.
- SignatureException(String, Exception) - Constructor for exception net.shibboleth.oidc.security.jose.SignatureException
-
Constructor.
- SignatureHS256 - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
-
Algorithm descriptor for HMAC algorithm: HS256.
- SignatureHS256() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureHS256
- SignatureHS384 - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
-
Algorithm descriptor for HMAC algorithm: HS384.
- SignatureHS384() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureHS384
- SignatureHS512 - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
-
Algorithm descriptor for HMAC algorithm: HS512.
- SignatureHS512() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureHS512
- SignaturePS256 - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
-
Algorithm descriptor for signature algorithm: PS256.
- SignaturePS256() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.SignaturePS256
- SignaturePS384 - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
-
Algorithm descriptor for signature algorithm: PS384.
- SignaturePS384() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.SignaturePS384
- SignaturePS512 - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
-
Algorithm descriptor for signature algorithm: PS512.
- SignaturePS512() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.SignaturePS512
- SignatureRS256 - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
-
Algorithm descriptor for signature algorithm: RS256.
- SignatureRS256() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureRS256
- SignatureRS384 - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
-
Algorithm descriptor for signature algorithm: RS384.
- SignatureRS384() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureRS384
- SignatureRS512 - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
-
Algorithm descriptor for signature algorithm: RS512.
- SignatureRS512() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureRS512
- SignatureSigningConfiguration - Interface in net.shibboleth.oidc.security.jose
-
The configuration information to use when generating a signed JWT.
- SignatureSigningConfigurationCriterion - Class in net.shibboleth.oidc.security.jose.criterion
-
Criterion which holds one or more instances of
SignatureSigningConfigurationCriterion. - SignatureSigningConfigurationCriterion(List<SignatureSigningConfiguration>) - Constructor for class net.shibboleth.oidc.security.jose.criterion.SignatureSigningConfigurationCriterion
-
Constructor.
- SignatureSigningConfigurationCriterion(SignatureSigningConfiguration...) - Constructor for class net.shibboleth.oidc.security.jose.criterion.SignatureSigningConfigurationCriterion
-
Constructor.
- signatureSigningParameters - Variable in class net.shibboleth.oidc.security.jose.context.SecurityParametersContext
-
Signature signing parameters.
- SignatureSigningParameters - Class in net.shibboleth.oidc.security.jose
-
The effective parameters to use when generating a JWS.
- SignatureSigningParameters() - Constructor for class net.shibboleth.oidc.security.jose.SignatureSigningParameters
- SignatureSigningParametersResolver - Interface in net.shibboleth.oidc.security.jose
-
An interface for components which resolve
SignatureSigningParametersbased on aCriteriaSet. - signatureTrustEngine - Variable in class net.shibboleth.oidc.security.jose.impl.BasicSignatureValidationConfiguration
-
The signature trust engine to use.
- signatureTrustEngine - Variable in class net.shibboleth.oidc.security.jose.SignatureValidationParameters
-
The signature trust engine to use.
- SignatureValidationConfiguration - Interface in net.shibboleth.oidc.security.jose
-
The configuration information to use when validating a JWS.
- SignatureValidationConfigurationCriterion - Class in net.shibboleth.oidc.security.jose.criterion
-
Criterion which holds one or more instances of
SignatureValidationConfigurationforsigned JWTs. - SignatureValidationConfigurationCriterion(List<SignatureValidationConfiguration>) - Constructor for class net.shibboleth.oidc.security.jose.criterion.SignatureValidationConfigurationCriterion
-
Constructor.
- SignatureValidationConfigurationCriterion(SignatureValidationConfiguration...) - Constructor for class net.shibboleth.oidc.security.jose.criterion.SignatureValidationConfigurationCriterion
-
Constructor.
- signatureValidationParameters - Variable in class net.shibboleth.oidc.security.jose.context.SecurityParametersContext
-
Signature validation parameters.
- SignatureValidationParameters - Class in net.shibboleth.oidc.security.jose
-
The effective parameters to use when validating a JWS.
- SignatureValidationParameters() - Constructor for class net.shibboleth.oidc.security.jose.SignatureValidationParameters
- SignatureValidationParametersCriterion - Class in net.shibboleth.oidc.security.jose.criterion
-
Criterion which holds an instance of
SignatureValidationParameters. - SignatureValidationParametersCriterion(SignatureValidationParameters) - Constructor for class net.shibboleth.oidc.security.jose.criterion.SignatureValidationParametersCriterion
-
Constructor.
- SignatureValidationParametersResolver - Interface in net.shibboleth.oidc.security.jose
-
An interface for components which resolve
SignatureValidationParametersbased on aCriteriaSet. - signedJwt - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler
-
The extracted signed JWT that is to be validated.
- signedJwt - Variable in class net.shibboleth.oidc.security.impl.JWTMessageSignatureSecurityHandler
-
The extracted signed JWT that is to be validated.
- signer - Variable in class net.shibboleth.oidc.security.impl.SignJWTHandler
-
The signing engine used to sign the JWT claims set.
- signingCredential - Variable in class net.shibboleth.oidc.security.jose.SignatureSigningParameters
-
The signing credential.
- signingCredentials - Variable in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningConfiguration
-
Signing credentials.
- SignJWTHandler - Class in net.shibboleth.oidc.security.impl
-
Message handler that signs a JWT and sets it back to the message context via an update consumer.
- SignJWTHandler() - Constructor for class net.shibboleth.oidc.security.impl.SignJWTHandler
-
Constructor.
- signRequestObjectPredicate - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Predicate used to determine if the generated request object should be signed.
- SignRequestObjectPredicate - Class in net.shibboleth.oidc.profile.config.logic
-
A predicate that determines if the RequestObject JWT should be signed based on the profile configuration.
- SignRequestObjectPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.SignRequestObjectPredicate
- SimpleNimbusResponseEncoder - Class in net.shibboleth.oidc.profile.encoding.impl
-
A message encodes that encodes the Nimbus a
Responsein the message context inside the attachedHttpServletResponseby calling itsResponse.toHTTPResponse()method. - SimpleNimbusResponseEncoder() - Constructor for class net.shibboleth.oidc.profile.encoding.impl.SimpleNimbusResponseEncoder
-
Constructor.
- SkeletonEchoingRoleDescriptorResolver() - Constructor for class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor.SkeletonEchoingRoleDescriptorResolver
- SOFTWARE_ID_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Attribute local name.
- SOFTWARE_VERSION_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Attribute local name.
- softwareId - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Software identifier for this entity.
- softwareVersion - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Software version for this entity.
- sortKey - Variable in class net.shibboleth.oidc.metadata.ProviderMetadataProviderContainer
-
The key by which we sort the provider.
- sortKey - Variable in class net.shibboleth.oidc.metadata.RelyingPartyClientInformationProvider
-
The key by which we sort the provider.
- sortKeyValue - Static variable in class net.shibboleth.oidc.metadata.ProviderMetadataProviderContainer
-
If we autogenerate a sort key it comes from this count.
- sortKeyValue - Static variable in class net.shibboleth.oidc.metadata.RelyingPartyClientInformationProvider
-
If we autogenerate a sort key it comes from this count.
- sourceId - Variable in class net.shibboleth.oidc.metadata.filter.MetadataSource
-
An identifier for the source of the metadata, typically the resolver ID.
- sourceMetadataExpiryStrategy - Variable in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
-
Determine the expiration time of the source batch loaded metadata.
- sourceMetadataExpiryStrategy - Variable in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCacheBuilderSpec
-
Determine the expiration time of the source batch loaded metadata.
- sourceMetadataValidPredicate - Variable in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
-
Is the raw metadata bytes from the source valid?
- sourceMetadataValidPredicate - Variable in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCacheBuilderSpec
-
Is the raw metadata bytes from the source valid?
- state - Variable in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
-
The state.
- stmpLock - Variable in class net.shibboleth.oidc.metadata.MetadataManagementData
-
Read-write stamped lock which governs access to the metadata's backing store data.
- storage - Variable in class net.shibboleth.oidc.jwk.RemoteJwkSetCache
-
Backing storage for the remote JWK set contents.
- storageService - Variable in class net.shibboleth.oidc.metadata.impl.BaseStorageServiceClientInformationComponent
-
The
StorageServiceback-end to use. - StorageServiceClientInformationManager - Class in net.shibboleth.oidc.metadata.impl
-
A
ClientInformationManagerexploitingStorageServicefor storing the data. - StorageServiceClientInformationManager() - Constructor for class net.shibboleth.oidc.metadata.impl.StorageServiceClientInformationManager
- StorageServiceClientInformationResolver - Class in net.shibboleth.oidc.metadata.impl
-
A
ClientInformationResolverexploitingStorageServicefor fetching the stored data. - StorageServiceClientInformationResolver() - Constructor for class net.shibboleth.oidc.metadata.impl.StorageServiceClientInformationResolver
- storeClientInformation(OIDCClientInformation, Instant) - Method in interface net.shibboleth.oidc.metadata.ClientInformationManager
-
Deprecated, for removal: This API element is subject to removal in a future version.
- storeClientInformation(OIDCClientInformation, Instant) - Method in class net.shibboleth.oidc.metadata.impl.StorageServiceClientInformationManager
-
Deprecated.
- storeClientInformation(OIDCClientInformation, Instant, boolean) - Method in interface net.shibboleth.oidc.metadata.ClientInformationManager
-
Store a
ClientInformationobject. - storeClientInformation(OIDCClientInformation, Instant, boolean) - Method in class net.shibboleth.oidc.metadata.impl.StorageServiceClientInformationManager
-
Store a
ClientInformationobject. - storeNewMetadata(MetadataManagementData<IdentifierType>, MetadataType, IdentifierType) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
-
Process the new metadata as follows: Apply the metadata filtering strategy configured. Check the fetched metadata's identifier matches that expected. Write the metadata to the backing store (cache). Update the metadata's management information with new refresh information.
- strictScopeValidationPredicate - Variable in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
-
Whether scope validation is strict, i.e.
- StrictScopeValidationPredicate - Class in net.shibboleth.oidc.profile.config.logic
-
A predicate implementation that forwards to
OAuth2ScopeValidatingProfileConfiguration.isStrictScopeValidation(ProfileRequestContext). - StrictScopeValidationPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.StrictScopeValidationPredicate
- StringBasedJWTClaimAuditExtractor - Class in net.shibboleth.oidc.profile.audit.impl
-
A JWT claim extractor function that returns String objects.
- StringBasedJWTClaimAuditExtractor() - Constructor for class net.shibboleth.oidc.profile.audit.impl.StringBasedJWTClaimAuditExtractor
- StringListBasedJWTClaimAuditExtractor - Class in net.shibboleth.oidc.profile.audit.impl
-
A JWT claim extractor function that returns lists of string objects.
- StringListBasedJWTClaimAuditExtractor() - Constructor for class net.shibboleth.oidc.profile.audit.impl.StringListBasedJWTClaimAuditExtractor
- SUB_FORMAT - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
-
The subject format (public/pairwise).
- SUB_VALUE - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
-
The subject value.
- SUBJECT_CLAIM - Enum constant in enum class net.shibboleth.oidc.security.jwt.claims.impl.JWTClaims
-
Subject Identifier.
- subsetOfValues - Variable in class net.shibboleth.oidc.metadata.policy.MetadataPolicy.Builder
-
The list of value(s) from which the claim must be subset of.
- subsetOfValues - Variable in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
-
The list of value(s) from which the claim must be subset of.
- supersetOfValues - Variable in class net.shibboleth.oidc.metadata.policy.MetadataPolicy.Builder
-
The list of value(s) from which the claim must be superset of.
- supersetOfValues - Variable in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
-
The list of value(s) from which the claim must be superset of.
- supportedContentTypes - Variable in class net.shibboleth.oidc.metadata.impl.AbstractDynamicHTTPFetchingStrategy
-
List of supported MIME types for use in Accept request header and validation of response Content-Type header.
- supportedContentTypesValue - Variable in class net.shibboleth.oidc.metadata.impl.AbstractDynamicHTTPFetchingStrategy
-
Generated Accept request header value.
- supportedMediaTypes - Variable in class net.shibboleth.oidc.metadata.impl.AbstractDynamicHTTPFetchingStrategy
-
Supported
MediaTypeinstances, constructed from theAbstractDynamicHTTPFetchingStrategy.supportedContentTypeslist. - symmetricKeyAlgorithm - Variable in class net.shibboleth.oidc.security.credential.BasicJWKCredentialFactoryBean
-
The JCA algorithm name to use if the key to be converted is a symmetric key.
- SymmetricKeyWrapA128GCMKW - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
-
Algorithm descriptor for JWE key management algorithm: AES128GCMKW.
- SymmetricKeyWrapA128GCMKW() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA128GCMKW
- SymmetricKeyWrapA128KW - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
-
Algorithm descriptor for JWE key management algorithm: AES128KW.
- SymmetricKeyWrapA128KW() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA128KW
- SymmetricKeyWrapA192GCMKW - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
-
Algorithm descriptor for JWE key management algorithm: AES192GCMKW.
- SymmetricKeyWrapA192GCMKW() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA192GCMKW
- SymmetricKeyWrapA192KW - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
-
Algorithm descriptor for JWE key management algorithm: AES192KW.
- SymmetricKeyWrapA192KW() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA192KW
- SymmetricKeyWrapA256GCMKW - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
-
Algorithm descriptor for JWE key management algorithm: AES256GCMKW.
- SymmetricKeyWrapA256GCMKW() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA256GCMKW
- SymmetricKeyWrapA256KW - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
-
Algorithm descriptor for JWE key management algorithm: AES256KW.
- SymmetricKeyWrapA256KW() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA256KW
T
- taskTimer - Variable in class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver
-
Timer used to schedule background metadata update tasks.
- test(Map<String, MetadataPolicy>) - Method in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyValidator
- test(OAuth2AuthorizationProfileConfiguration.HttpRequestMethod) - Method in class net.shibboleth.oidc.profile.encoding.impl.HTTPPostAuthnRequestEncoder
- test(OAuth2AuthorizationProfileConfiguration.HttpRequestMethod) - Method in class net.shibboleth.oidc.profile.encoding.impl.HTTPRedirectAuthnRequestEncoder
- test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.AllowPKCEPlainPredicate
- test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.AlwaysIssueBearerAccessTokenPredicate
- test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.AttributeConsentFlowEnabledPredicate
- test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.AuthorizationCodeFlowEnabledPredicate
- test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.EncodeConsentPredicate
- test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.EncryptionOptionalPredicate
- test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.EncryptRequestObjectPredicate
- test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.EnforceRefreshTokenRotationPredicate
- test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.ForcePKCEPredicate
- test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.FrontChannelLogoutSuccessPredicate
- test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.HybridFlowEnabledPredicate
- test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.ImplicitFlowEnabledPredicate
- test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.IncludeIssuerInAuthenticationResponsePredicate
- test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.IssueIdTokenViaRefreshTokenPredicate
- test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.LimitInitialAccessTokenToSelfPredicate
- test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.PreferFrontChannelLogoutPredicate
- test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.RefreshTokensEnabledPredicate
- test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.RequireAuthenticationRequestPredicate
- test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.RequireDPoPJktParameterPredicate
- test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.RequireDPoPProofPredicate
- test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.RequireIdTokenHintPredicate
- test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.RequirePushedAuthorizationRequestPredicate
- test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.RevokeTokensInLogoutPredicate
- test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.SignRequestObjectPredicate
- test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.StrictScopeValidationPredicate
- test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.UseRequestObjectPredicate
- test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.AcrClaimAlwaysEssentialLookupFunction
- test(ProfileRequestContext, JWTClaimsSet) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AuthTimeRequestedActivationCondition
- test(ProfileRequestContext, JWTClaimsSet) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ClaimExistsActivationCondition
- test(ProfileRequestContext, JWTClaimsSet) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ForcedAuthenticationActivationCondition
- test(ProfileRequestContext, JWTClaimsSet) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.NonceValidationActivationCondition
- test(ProfileRequestContext, JWTClaimsSet) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.NumberOfClaimValuesActivationCondition
- test(Credential) - Method in class net.shibboleth.oidc.security.credential.impl.EvaluableKeyIDCredentialCriterion
- test(Credential) - Method in class net.shibboleth.oidc.security.credential.impl.EvaluableMACKeyLengthCredentialCriterion
- test(T) - Method in class net.shibboleth.oidc.metadata.AbstractEvaluableMetadataCriterion
- timerFetchFromSource - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
-
Metrics Timer for
DynamicMetadataCache.fetch(MetadataManagementData, Object, CriteriaSet). - timerGet - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
-
Metrics Timer for
DynamicMetadataCache.get(CriteriaSet). - tlsServerValidationOnlyPredicate - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Whether TLS server validation alone is sufficient to verify the id_token (true), or whether the id_token's signature should be validated (false).
- toEncryptionCredential(JWEAlgorithm, EncryptionMethod) - Method in interface net.shibboleth.oidc.security.credential.ClientSecretCredential
-
Create a symmetric encryption key derived from the client_secret and compatible with the key management mode and encryption algorithm specified.
- toEncryptionCredential(JWEAlgorithm, EncryptionMethod) - Method in class net.shibboleth.oidc.security.credential.DefaultClientSecretCredential
-
Create a symmetric encryption key derived from the client_secret and compatible with the key management mode and encryption algorithm specified.
- toHTTPResponse() - Method in class net.shibboleth.oidc.profile.messaging.JSONErrorResponse
- toHTTPResponse() - Method in class net.shibboleth.oidc.profile.messaging.JSONSuccessResponse
- toJSONObject(String) - Method in class net.shibboleth.oidc.attribute.transcoding.impl.OIDCStringAttributeTranscoder
-
Parses string as JSONObject.
- TOKEN - Enum constant in enum class net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenRevocationConfiguration.OAuth2TokenRevocationMethod
-
Revoke single access or refresh token.
- TOKEN_ENDPOINT_AUTH_METHOD_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Attribute local name.
- TOKEN_ENDPOINT_AUTH_SIGNING_ALG_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Attribute local name.
- TokenAsymmetricKeyTrustEngine - Class in net.shibboleth.oidc.security.impl
-
A
TrustEngineimplementation for Signed JSON Web Tokens. - TokenAsymmetricKeyTrustEngine(JOSEObjectCredentialResolver) - Constructor for class net.shibboleth.oidc.security.impl.TokenAsymmetricKeyTrustEngine
-
Constructor.
- tokenEndpointAuthMethod - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Token endpoint authentication method for this entity.
- TokenEndpointAuthMethodLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
A function that obtains
OAuth2ClientAuthenticableProfileConfiguration.getTokenEndpointAuthMethods(ProfileRequestContext)if such a profile is available from aRelyingPartyContextobtained via a lookup function, by default a child of theProfileRequestContext. - TokenEndpointAuthMethodLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.TokenEndpointAuthMethodLookupFunction
- tokenEndpointAuthMethodLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
The token endpoint authentication method to use with an upstream OpenID Provider.
- tokenEndpointAuthMethodsLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Enabled token endpoint authentication methods.
- tokenEndpointAuthSigningAlg - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
Token endpoint authentication signing algorithm for this entity.
- toSigningCredential() - Method in interface net.shibboleth.oidc.security.credential.ClientSecretCredential
-
Create a MAC singing key from the client_secret.
- toSigningCredential() - Method in class net.shibboleth.oidc.security.credential.DefaultClientSecretCredential
-
Create a MAC singing key from the client_secret.
- toString() - Method in class net.shibboleth.oidc.authn.principal.AuthenticationContextClassReferencePrincipal
- toString() - Method in class net.shibboleth.oidc.metadata.criterion.ClientIDCriterion
- toString() - Method in class net.shibboleth.oidc.metadata.criterion.ClientSecretReferenceCriterion
- toString() - Method in class net.shibboleth.oidc.metadata.criterion.IssuerIDCriterion
- toString() - Method in class net.shibboleth.oidc.metadata.criterion.ResourceLocationCriterion
- toString() - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
- toString() - Method in class net.shibboleth.oidc.profile.messaging.JSONSuccessResponse
- toString() - Method in class net.shibboleth.oidc.security.credential.impl.DataEncryptionAlgorithmCriterion
- toString() - Method in class net.shibboleth.oidc.security.credential.impl.EvaluableKeyIDCredentialCriterion
- toString() - Method in class net.shibboleth.oidc.security.credential.impl.EvaluableMACKeyLengthCredentialCriterion
- toString() - Method in class net.shibboleth.oidc.security.credential.impl.KeyManagmentAlgorithmCriterion
- toString() - Method in class net.shibboleth.oidc.security.jose.criterion.ClientSecretCredentialCriterion
- toString() - Method in class net.shibboleth.oidc.security.jose.criterion.DecryptionConfigurationCriterion
- toString() - Method in class net.shibboleth.oidc.security.jose.criterion.EncryptionConfigurationCriterion
- toString() - Method in class net.shibboleth.oidc.security.jose.criterion.JOSEObjectCriterion
- toString() - Method in class net.shibboleth.oidc.security.jose.criterion.JWKSetCriterion
- toString() - Method in class net.shibboleth.oidc.security.jose.criterion.KeyIdCriterion
- toString() - Method in class net.shibboleth.oidc.security.jose.criterion.ProviderMetadataCriterion
- toString() - Method in class net.shibboleth.oidc.security.jose.criterion.SignatureSigningConfigurationCriterion
- toString() - Method in class net.shibboleth.oidc.security.jose.criterion.SignatureValidationConfigurationCriterion
- toString() - Method in class net.shibboleth.oidc.security.jose.criterion.SignatureValidationParametersCriterion
- transformValues(TranscodingRule, Stream<String>) - Method in class net.shibboleth.oidc.attribute.transcoding.impl.OIDCStringAttributeTranscoder
-
Converts string values to List of Integer, String or Boolean depending on rule.
- trusted - Variable in class net.shibboleth.oidc.metadata.filter.MetadataSource
-
Flag indicating whether the metadata source is trusted.
- TYPE_LOCAL_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Local name of the XSI type.
- TYPE_NAME - Static variable in class net.shibboleth.oidc.attribute.resolver.spring.enc.impl.OIDCByteEncoderParser
-
Schema type name:.
- TYPE_NAME - Static variable in class net.shibboleth.oidc.attribute.resolver.spring.enc.impl.OIDCScopedStringEncoderParser
-
Schema type name.
- TYPE_NAME - Static variable in class net.shibboleth.oidc.attribute.resolver.spring.enc.impl.OIDCStringEncoderParser
-
Schema type name:.
- TYPE_NAME - Static variable in class net.shibboleth.oidc.profile.spring.relyingparty.metadata.filter.impl.ClientInformationParser
-
Element name.
- TYPE_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.ClientSecret
-
QName of the XSI type.
- TYPE_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.ClientSecretKeyReference
-
QName of the XSI type.
- TYPE_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.DefaultAcrValue
-
QName of the XSI type.
- TYPE_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.JwksData
-
QName of the XSI type.
- TYPE_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.JwksUri
-
QName of the XSI type.
- TYPE_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
QName of the XSI type.
- TYPE_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.PostLogoutRedirectUri
-
QName of the XSI type.
- TYPE_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.RequestUri
-
QName of the XSI type.
- typeHeaderLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.SignJWTHandler
-
Strategy used to locate the optional "typ" header to insert while signing.
U
- unknownAttributes - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
"anyAttribute" attributes.
- unknownChildren - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
"any" children.
- UnregisteredClientPolicy - Class in net.shibboleth.oidc.metadata.policy
-
The policy used for validating single claim of an unregistered client.
- UnregisteredClientPolicy() - Constructor for class net.shibboleth.oidc.metadata.policy.UnregisteredClientPolicy
-
Constructor.
- UnregisteredClientPolicy(MetadataPolicy) - Constructor for class net.shibboleth.oidc.metadata.policy.UnregisteredClientPolicy
-
Constructor.
- UnregisteredClientPolicyLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
-
A function that obtains
OAuth2ClientAuthenticableProfileConfiguration.getUnregisteredClientPolicy(ProfileRequestContext)if such a profile is available from aRelyingPartyContextobtained via a lookup function, by default a child of theProfileRequestContext. - UnregisteredClientPolicyLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.UnregisteredClientPolicyLookupFunction
- unregisteredClientPolicyLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
-
Lookup function to retrieve the policy for validating claims of an unregistered client.
- UNSPECIFIED - Static variable in class net.shibboleth.oidc.authn.principal.AuthenticationContextClassReferencePrincipal
-
unspecified auth ctx class.
- updateKeys(List<OIDCClientInformation>) - Method in class net.shibboleth.oidc.metadata.impl.FilesystemClientInformationResolver
-
Updates the key set in the given list of OIDC client informations.
- useRequestObjectPredicate - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Whether to encode authentication request parameters inside a JWT request object .
- UseRequestObjectPredicate - Class in net.shibboleth.oidc.profile.config.logic
-
A predicate that determines if a RequestObject JWT should be used based on the profile configuration.
- UseRequestObjectPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.UseRequestObjectPredicate
- USERINFO_ENCRYPTED_RESPONSE_ALG_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Attribute local name.
- USERINFO_ENCRYPTED_RESPONSE_ENC_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Attribute local name.
- USERINFO_SIGNED_RESPONSE_ALG_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
-
Attribute local name.
- userInfoEncryptedResponseAlg - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
User info encrypted response algorithm for this entity.
- userInfoEncryptedResponseEnc - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
User info encrypted response encoder for this entity.
- userInfoHttpRequestMethodLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
-
Which HTTP method should be used to issue the UserInfo requests.
- userInfoSignedResponseAlg - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
-
User info signed response algorithm for this entity.
V
- validate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.jwt.claims.AbstractClaimsValidator
-
Validate all, or part of, the given JWT claims set.
- validate(JWTClaimsSet, ProfileRequestContext) - Method in interface net.shibboleth.oidc.jwt.claims.ClaimsValidator
-
Validate all, or part of, the given JWT claims set.
- validate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ChainingJWTClaimsValidator
-
Validate all, or part of, the given JWT claims set.
- validate(SignedJWT, CriteriaSet) - Method in class net.shibboleth.oidc.security.impl.BaseSignedJWTTrustEngine
- validate(SignedJWT, TrustBasisType) - Method in class net.shibboleth.oidc.security.impl.BaseSignedJWTTrustEngine
-
Attempt to establish trust by resolving token verification credentials from the token itself.
- validate(Key, Iterable<Key>) - Method in class net.shibboleth.oidc.security.impl.ExplicitKeyTrustEvaluator
-
Evaluate trust.
- validate(Key, Key) - Method in class net.shibboleth.oidc.security.impl.ExplicitKeyTrustEvaluator
-
Evaluate trust.
- validate(MetadataPolicy) - Method in class net.shibboleth.oidc.metadata.policy.impl.BeanMetadataPolicyOperator
- validate(MetadataPolicy) - Method in interface net.shibboleth.oidc.metadata.policy.impl.CustomMetadataPolicyOperator
-
Validate whether the operator is compatible with the other operators in the policy.
- validate(MetadataPolicy) - Method in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyOperator
- validate(EncryptionParameters, boolean) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
-
Validate that the
EncryptionParametersinstance has all the required properties populated. - validate(SignatureSigningParameters) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver
-
Validate that the
SignatureSigningParametersinstance has all the required properties populated. - validate(Credential, Iterable<Credential>) - Method in class net.shibboleth.oidc.security.impl.ExplicitKeyTrustEvaluator
-
Evaluate trust.
- validate(Credential, Credential) - Method in class net.shibboleth.oidc.security.impl.ExplicitKeyTrustEvaluator
-
Evaluate trust.
- validateAlgorithmURI(String) - Method in class net.shibboleth.oidc.security.impl.JWETokenDecrypter
-
Validate the supplied algorithm URI against the configured include and exclude lists.
- validateContentEncryptionAlgorithm(EncryptedJWT) - Method in class net.shibboleth.oidc.security.impl.JWETokenDecrypter
-
Validates the 'enc' algorithm in the header against the include and exclude algorithm URI lists.
- validateContentEncryptionAlgorithm(EncryptedJWT, JWKCredential) - Method in class net.shibboleth.oidc.security.impl.JWETokenDecrypter
-
Validates the 'enc' algorithm in the header matches the encryption algorithm specified for the credential, and validates against the include and exclude algorithm URI lists.
- validateHttpResponse(ClassicHttpResponse) - Method in class net.shibboleth.oidc.metadata.impl.HTTPProviderConfigurationFetchingStrategy.OIDCProviderMetadataResponseHandler
-
Validate the received HTTP response instance, such as checking for supported content types.
- validateKeyManagmentAlgorithm(EncryptedJWT, JWKCredential) - Method in class net.shibboleth.oidc.security.impl.JWETokenDecrypter
-
If the credential contains algorithm 'alg' information, validate the 'alg' algorithm in the JWT JOSE header matches the algorithm specified for the credential.
- validateMetadataFile(File) - Static method in class net.shibboleth.oidc.metadata.impl.ResolverHelper
-
Validate the basic properties of the specified metadata file, for example that it exists; that it is a file; and that it is readable.
- validateParams(List<Pair<String, String>>) - Method in class net.shibboleth.oidc.profile.encoding.impl.AbstractOIDCMessageEncoder
-
Ensure the authorization parameters are valid.
- validateSignatureEx(Collection<? extends Credential>, SignedJWT, String) - Static method in class net.shibboleth.oidc.security.impl.JWTSignatureValidationUtil
-
Validates the signature of the given JWS against the given list of credentials.
- validator - Variable in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyOperator
-
The metadata policy validator.
- validator - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.FunctionClaimsValidator
-
The function to run.
- value - Variable in enum class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest.CodeChallengeMethod
-
The value.
- value - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.AbstractMetadataValueSAMLObject
-
The value for this metadata object.
- valueOf(String) - Static method in enum class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest.CodeChallengeMethod
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class net.shibboleth.oidc.profile.oauth2.config.OAuth2AuthorizationProfileConfiguration.HttpRequestMethod
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenRevocationConfiguration.OAuth2TokenRevocationMethod
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class net.shibboleth.oidc.security.jwt.claims.impl.IDTokenClaims
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class net.shibboleth.oidc.security.jwt.claims.impl.JWTClaims
-
Returns the enum constant of this class with the specified name.
- valueOperator - Variable in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyOperator
-
The metadata policy operator.
- values() - Static method in enum class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest.CodeChallengeMethod
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class net.shibboleth.oidc.profile.oauth2.config.OAuth2AuthorizationProfileConfiguration.HttpRequestMethod
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenRevocationConfiguration.OAuth2TokenRevocationMethod
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class net.shibboleth.oidc.security.jwt.claims.impl.IDTokenClaims
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class net.shibboleth.oidc.security.jwt.claims.impl.JWTClaims
-
Returns an array containing the constants of this enum class, in the order they are declared.
- valueToMatchLookupStrategy - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.ExactMatchClaimsValidator
-
Strategy to retrieve the value to match to an ID Token claim.
- velocityEngine - Variable in class net.shibboleth.oidc.profile.encoding.impl.HTTPPostAuthnRequestEncoder
-
Velocity engine used to evaluate the template when using FORM POST response mode.
- velocityTemplateId - Variable in class net.shibboleth.oidc.profile.encoding.impl.HTTPPostAuthnRequestEncoder
-
ID of the Velocity template used when using FORM POST response mode.
- verifyRegexp(Object, String) - Method in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyEnforcer
-
Verifies that the given candidate meets the regular expression.
- verifySignature(SignedJWT, Credential) - Method in class net.shibboleth.oidc.security.impl.BaseSignedJWTTrustEngine
-
Attempt to verify a signature using the key from the supplied credential.
- verifyValue(String, Pair<String, Object>, List<Object>, List<Object>, List<Object>) - Method in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyValidator
-
Verifies the value against the following rules:
W
- wellKnownLocationCompositionStrategy - Variable in class net.shibboleth.oidc.metadata.impl.HTTPProviderConfigurationFetchingStrategy
-
Strategy for composing an issuer with the well-known configuration path.
- wellKnownPath - Variable in class net.shibboleth.oidc.metadata.impl.HTTPProviderConfigurationFetchingStrategy
-
The well-known path for OpenID Provider metadata.
- withAdd(Object) - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy.Builder
-
Set the value(s) to be added for the claim.
- withCustomOperator(String, Object) - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy.Builder
-
Add a custom operator to the map of custom operators.
- withDefaultValue(Object) - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy.Builder
-
Set the default value for the claim to be used in case none is specified.
- withEssential(Boolean) - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy.Builder
-
Set the flag indicating that the claim must have a value.
- withOneOfValues(List<Object>) - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy.Builder
-
Set the list of values from which the claim must be one of.
- withRegexp(String) - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy.Builder
-
Set the regular expression that the claim value must meet.
- withSubsetOfValues(List<Object>) - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy.Builder
-
Set the list of value(s) from which the claim must be subset of.
- withSupersetOfValues(List<Object>) - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy.Builder
-
Set the list of value(s) from which the claim must be superset of.
- withValue(Object) - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy.Builder
-
Set the (forced) value for the claim.
- writeToBackingStore(MetadataType) - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
-
Write the given metadata to the backing store index.
X
- XMLObjectProviderInitializer - Class in net.shibboleth.oidc.saml.xmlobject.impl
-
XMLObject provider initializer for the metadata extension.
- XMLObjectProviderInitializer() - Constructor for class net.shibboleth.oidc.saml.xmlobject.impl.XMLObjectProviderInitializer
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form
ClientSecretCredential