Index

A B C D E F G H I J K L M N O P R S T U V W X 
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form

A

AbstractAuthenticationRequestAuditExtractor<T> - Class in net.shibboleth.oidc.profile.audit.impl
A base class for audit extractors that lookup the OIDCAuthenticationRequest.
AbstractAuthenticationRequestAuditExtractor(Function<ProfileRequestContext, OIDCAuthenticationRequest>) - Constructor for class net.shibboleth.oidc.profile.audit.impl.AbstractAuthenticationRequestAuditExtractor
Constructor.
AbstractAuthenticationResponseAuditExtractor<T> - Class in net.shibboleth.oidc.profile.audit.impl
A base class for audit extractors that lookup the AuthenticationResponse.
AbstractAuthenticationResponseAuditExtractor(Function<ProfileRequestContext, AuthenticationResponse>) - Constructor for class net.shibboleth.oidc.profile.audit.impl.AbstractAuthenticationResponseAuditExtractor
Constructor.
AbstractBackingStore<I,T> - Class in net.shibboleth.oidc.metadata.impl
A base backing store implementation.
AbstractBackingStore() - Constructor for class net.shibboleth.oidc.metadata.impl.AbstractBackingStore
Constructor.
AbstractBuildErrorResponseFromEvent<T extends ErrorResponse> - Class in net.shibboleth.oidc.profile.impl
This action is extended by error response actions.
AbstractBuildErrorResponseFromEvent() - Constructor for class net.shibboleth.oidc.profile.impl.AbstractBuildErrorResponseFromEvent
Constructor.
AbstractClaimsSetAuditExtractor<T> - Class in net.shibboleth.oidc.profile.audit.impl
An abstract audit extractor function to extract claims from the located claims set.
AbstractClaimsSetAuditExtractor() - Constructor for class net.shibboleth.oidc.profile.audit.impl.AbstractClaimsSetAuditExtractor
 
AbstractClaimsValidator - Class in net.shibboleth.oidc.jwt.claims
Base class for claims validators.
AbstractClaimsValidator() - Constructor for class net.shibboleth.oidc.jwt.claims.AbstractClaimsValidator
Constructor.
AbstractClientInformationCredentialResolver - Class in net.shibboleth.oidc.security.credential.impl
Base class for resolving credentials from OIDCClientInformation.
AbstractClientInformationCredentialResolver() - Constructor for class net.shibboleth.oidc.security.credential.impl.AbstractClientInformationCredentialResolver
 
AbstractClientSecretValueResolver - Class in net.shibboleth.oidc.metadata.impl
Base class for ClientSecretValueResolvers.
AbstractClientSecretValueResolver() - Constructor for class net.shibboleth.oidc.metadata.impl.AbstractClientSecretValueResolver
 
AbstractDynamicHTTPFetchingStrategy<MetadataType> - Class in net.shibboleth.oidc.metadata.impl
Abstract strategy for fetching metadata dynamically over HTTP.
AbstractDynamicHTTPFetchingStrategy(HttpClient, HttpClientResponseHandler<MetadataType>) - Constructor for class net.shibboleth.oidc.metadata.impl.AbstractDynamicHTTPFetchingStrategy
Constructor.
AbstractEncryptionAlgorithmsLookupStrategy - Class in net.shibboleth.oidc.security.impl
A base class for lookup strategies that return encryption algorithms and make use of the AlgorithmRegistry.
AbstractEncryptionAlgorithmsLookupStrategy(AlgorithmRegistry) - Constructor for class net.shibboleth.oidc.security.impl.AbstractEncryptionAlgorithmsLookupStrategy
Constructor.
AbstractEvaluableMetadataCriterion<T> - Class in net.shibboleth.oidc.metadata
Base class for all metadata criterion classes.
AbstractEvaluableMetadataCriterion(Class<T>, boolean) - Constructor for class net.shibboleth.oidc.metadata.AbstractEvaluableMetadataCriterion
Constructor.
AbstractFileOIDCEntityResolver<Key extends Identifier,Value> - Class in net.shibboleth.oidc.metadata.impl
AbstractFileOIDCEntityResolver(Timer, Resource) - Constructor for class net.shibboleth.oidc.metadata.impl.AbstractFileOIDCEntityResolver
Constructor.
AbstractFileOIDCEntityResolver(Resource) - Constructor for class net.shibboleth.oidc.metadata.impl.AbstractFileOIDCEntityResolver
Constructor.
AbstractMetadataCache<IdentifierType,MetadataType> - Class in net.shibboleth.oidc.metadata.cache.impl
A base MetadataCache implementation.
AbstractMetadataCache(BackingStore<IdentifierType, MetadataType>) - Constructor for class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
Package private constructor.
AbstractMetadataCache(BackingStore<IdentifierType, MetadataType>, ScheduledExecutorService) - Constructor for class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
Package private constructor.
AbstractMetadataValueSAMLObject - Class in net.shibboleth.oidc.saml.xmlobject.impl
Base implementation for all simple metadata objects containing String value inside the element.
AbstractMetadataValueSAMLObject(String, String, String) - Constructor for class net.shibboleth.oidc.saml.xmlobject.impl.AbstractMetadataValueSAMLObject
Constructor.
AbstractOAuth2ClientAuthenticableProfileConfiguration - Class in net.shibboleth.oidc.profile.oauth2.config.impl
Base class for OAuth profile configurations that support OAuth-defined client authentication methods.
AbstractOAuth2ClientAuthenticableProfileConfiguration(String) - Constructor for class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Constructor.
AbstractOAuth2FlowAwareProfileConfiguration - Class in net.shibboleth.oidc.profile.oauth2.config.impl
Base class for OIDC protocol configuration, containing configuration bits shared by all flow aware OIDC protocol configurations.
AbstractOAuth2FlowAwareProfileConfiguration(String) - Constructor for class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2FlowAwareProfileConfiguration
Constructor.
AbstractOAuth2InterceptorAwareProfileConfiguration - Class in net.shibboleth.oidc.profile.oauth2.config.impl
Abstract profile configuration implementation for interceptor flow aware OAuth2 profile configurations.
AbstractOAuth2InterceptorAwareProfileConfiguration(String) - Constructor for class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2InterceptorAwareProfileConfiguration
Constructor.
AbstractOAuth2TokenValidatingConfiguration - Class in net.shibboleth.oidc.profile.oauth2.config.impl
Base class for profile configurations that validate previously issued OAuth2 tokens.
AbstractOAuth2TokenValidatingConfiguration(String) - Constructor for class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2TokenValidatingConfiguration
Creates a new configuration instance.
AbstractOIDCAttributeTranscoder - Class in net.shibboleth.oidc.attribute.transcoding
Abstract class for OIDC attribute encoders.
AbstractOIDCAttributeTranscoder() - Constructor for class net.shibboleth.oidc.attribute.transcoding.AbstractOIDCAttributeTranscoder
 
AbstractOIDCAttributeTranscoder.NamingFunction - Class in net.shibboleth.oidc.attribute.transcoding
A function to produce a "canonical" name for an OIDC claim for transcoding rules.
AbstractOIDCEntityContext - Class in net.shibboleth.oidc.profile.messaging.context
Abstract base class for subcontexts that carry information about a OIDC entity.
AbstractOIDCEntityContext() - Constructor for class net.shibboleth.oidc.profile.messaging.context.AbstractOIDCEntityContext
 
AbstractOIDCEntityResolver<Key extends Identifier,Value> - Class in net.shibboleth.oidc.metadata.impl
A base class for Resolvers used for resolving entities containing identifiers based on Identifier.
AbstractOIDCEntityResolver() - Constructor for class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver
Constructor.
AbstractOIDCEntityResolver.JsonBackingStore - Class in net.shibboleth.oidc.metadata.impl
The collection of data which provides the backing store for the processed metadata.
AbstractOIDCMessageEncoder - Class in net.shibboleth.oidc.profile.encoding.impl
Base class for OIDC message encoders.
AbstractOIDCMessageEncoder() - Constructor for class net.shibboleth.oidc.profile.encoding.impl.AbstractOIDCMessageEncoder
Constructor.
AbstractOIDCMetadataResolver<MetadataIdentifier,MetadataType> - Class in net.shibboleth.oidc.metadata.impl
An abstract metadata resolver which supports any type of metadata.
AbstractOIDCMetadataResolver(MetadataCache<MetadataType>) - Constructor for class net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver
Constructor.
AbstractOIDCSSOConfiguration - Class in net.shibboleth.oidc.profile.config.impl
Base class for profiles that support OIDC's concept of SSO, which spans multiple endpoints.
AbstractOIDCSSOConfiguration(String) - Constructor for class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Creates a new configuration instance.
AbstractReloadingOIDCEntityResolver<Key extends Identifier,Value> - Class in net.shibboleth.oidc.metadata.impl
Base class for metadata providers that cache and periodically refresh their entities.
AbstractReloadingOIDCEntityResolver() - Constructor for class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver
Constructor.
AbstractReloadingOIDCEntityResolver(Timer) - Constructor for class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver
Constructor.
AbstractReloadingOIDCEntityResolver.RefreshMetadataTask - Class in net.shibboleth.oidc.metadata.impl
Background task that refreshes metadata.
AccessTokenClaimsSetManipulationStrategyLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
A function that returns (ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
AccessTokenClaimsSetManipulationStrategyLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.AccessTokenClaimsSetManipulationStrategyLookupFunction
 
accessTokenClaimsSetManipulationStrategyLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Lookup function to supply strategy bi-function for manipulating access token claims set.
accessTokenClaimsSetManipulationStrategyLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
Lookup function to supply strategy bi-function for manipulating access token claims set.
AccessTokenHashValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl
A validator that checks the access_token value matches its encoded at_hash representation in the id_token.
AccessTokenHashValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.AccessTokenHashValidator
 
AccessTokenLifetimeLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
A function that returns OAuth2AccessTokenProducingProfileConfiguration.getAccessTokenLifetime(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
AccessTokenLifetimeLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.AccessTokenLifetimeLookupFunction
 
accessTokenLifetimeLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Lookup function to supply access token lifetime.
accessTokenLifetimeLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
Lookup function to supply access token lifetime.
accessTokenLookupStrategy - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AccessTokenHashValidator
Strategy to find the access_token.
AccessTokenTypeLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
A function that returns OAuth2AccessTokenProducingProfileConfiguration.getAccessTokenType(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
AccessTokenTypeLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.AccessTokenTypeLookupFunction
 
accessTokenTypeLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Lookup function to supply access token type.
accessTokenTypeLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
Lookup functioon to supply access token type.
ACR - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
The authentication context reference value.
AcrClaimAlwaysEssentialLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
A predicate that returns OIDCAuthorizationConfiguration.isAcrRequestAlwaysEssential(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
AcrClaimAlwaysEssentialLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.AcrClaimAlwaysEssentialLookupFunction
 
ACRClaimsValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl
Check the ACR values requested were received.
ACRClaimsValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.ACRClaimsValidator
 
acrRequestAlwaysEssentialPredicate - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Whether all acr claim requests should be treated as Essential.
acrs - Variable in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
List of requested authentication context class reference values.
ACRS - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
The authentication context class references for the authentication request.
acrTranslationStrategyLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Lookup function to supply the strategy function for translating OIDC ACR claims.
activationCondition - Variable in class net.shibboleth.oidc.jwt.claims.AbstractClaimsValidator
Does this validator apply to this request? Default is true.
activeProfileOnly - Variable in class net.shibboleth.oidc.profile.config.navigate.RevocationLifetimeLookupFunction
The flag whether to use active profile only.
adapt(Function<ProfileRequestContext, T>) - Method in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler
Adapt a ProfileRequestContext function to a MessageContext function via composing with a lookup function.
adaptedFunction - Variable in class net.shibboleth.oidc.profile.config.navigate.MessageContextLookupFunctionAdaptor
The adapted function.
add - Variable in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
The value(s) to be added for the claim.
add - Variable in class net.shibboleth.oidc.metadata.policy.MetadataPolicy.Builder
The value(s) to be added for the claim.
additionalAudiencesLookupStrategy - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AudienceClaimsValidator
A strategy to lookup a list of additional audiences expected in the 'aud' claim.
additionalCriteria - Variable in class net.shibboleth.oidc.security.jose.DecryptionParameters
Carries additional criterion made available to the resolvers at runtime.
alg - Variable in class net.shibboleth.oidc.security.credential.BasicExpiringJWTSharedSecretCredentialFactoryBean
The key management algorithm ('alg') this credential supports.
alg - Variable in class net.shibboleth.oidc.security.credential.impl.EvaluableMACKeyLengthCredentialCriterion
Base criteria.
ALGO_ID_ALG_AES_128_GCM_KW - Static variable in class net.shibboleth.oidc.jwa.support.KeyManagementConstants
Encryption - Optional key wrapping with AES GCM using 128-bit key.
ALGO_ID_ALG_AES_128_KW - Static variable in class net.shibboleth.oidc.jwa.support.KeyManagementConstants
Encryption - Recommended AES Key Wrap with default initial value using 128-bit key.
ALGO_ID_ALG_AES_192_GCM_KW - Static variable in class net.shibboleth.oidc.jwa.support.KeyManagementConstants
Encryption - Optional key wrapping with AES GCM using 192-bit key.
ALGO_ID_ALG_AES_192_KW - Static variable in class net.shibboleth.oidc.jwa.support.KeyManagementConstants
Encryption - Optional AES Key Wrap with default initial value using 192-bit key.
ALGO_ID_ALG_AES_256_GCM_KW - Static variable in class net.shibboleth.oidc.jwa.support.KeyManagementConstants
Encryption - Optional key wrapping with AES GCM using 256-bit key.
ALGO_ID_ALG_AES_256_KW - Static variable in class net.shibboleth.oidc.jwa.support.KeyManagementConstants
Encryption - Recommended AES Key Wrap with default initial value using 256-bit key.
ALGO_ID_ALG_DIR - Static variable in class net.shibboleth.oidc.jwa.support.KeyManagementConstants
Encryption - Recommended Direct use of a shared symmetric key as the CEK.
ALGO_ID_ALG_ECDH_ES - Static variable in class net.shibboleth.oidc.jwa.support.KeyManagementConstants
Encryption - Recommended+ Elliptic Curve Diffie-Helman Ephemeral Static key agreement.
ALGO_ID_ALG_ECDH_ES_AES_128_KW - Static variable in class net.shibboleth.oidc.jwa.support.KeyManagementConstants
Encryption - Recommended ECDH-ES using Concat KDF and CEK wrapped with A128KW.
ALGO_ID_ALG_ECDH_ES_AES_192_KW - Static variable in class net.shibboleth.oidc.jwa.support.KeyManagementConstants
Encryption - Optional ECDH-ES using Concat KDF and CEK wrapped with A192KW.
ALGO_ID_ALG_ECDH_ES_AES_256_KW - Static variable in class net.shibboleth.oidc.jwa.support.KeyManagementConstants
Encryption - Recommended ECDH-ES using Concat KDF and CEK wrapped with A256KW.
ALGO_ID_ALG_PBES2_HS_256_AES_128_KW - Static variable in class net.shibboleth.oidc.jwa.support.KeyManagementConstants
Encryption - Optional PBES2 with HMAC SHA-256 and A128KW wrapping.
ALGO_ID_ALG_PBES2_HS_384_AES_192_KW - Static variable in class net.shibboleth.oidc.jwa.support.KeyManagementConstants
Encryption - Optional PBES2 with HMAC SHA-538 and A192KW wrapping.
ALGO_ID_ALG_PBES2_HS_512_AES_256_KW - Static variable in class net.shibboleth.oidc.jwa.support.KeyManagementConstants
Encryption - Optional PBES2 with HMAC SHA-512 and A256KW wrapping.
ALGO_ID_ALG_RSA_1_5 - Static variable in class net.shibboleth.oidc.jwa.support.KeyManagementConstants
Encryption - Recommended- RSAES-PKCS1-v1_5.
ALGO_ID_ALG_RSA_OAEP - Static variable in class net.shibboleth.oidc.jwa.support.KeyManagementConstants
Encryption - Recommended+ RSAES OAEP using default parameters.
ALGO_ID_ALG_RSA_OAEP_256 - Static variable in class net.shibboleth.oidc.jwa.support.KeyManagementConstants
Encryption - Optional RSAES OAEP using SHA-256 and MGF1 with SHA-256.
ALGO_ID_ALG_RSA_OAEP_384 - Static variable in class net.shibboleth.oidc.jwa.support.KeyManagementConstants
Encryption - Optional RSAES OAEP using SHA-256 and MGF1 with SHA-384.
ALGO_ID_ALG_RSA_OAEP_512 - Static variable in class net.shibboleth.oidc.jwa.support.KeyManagementConstants
Encryption - Optional RSAES OAEP using SHA-256 and MGF1 with SHA-512.
ALGO_ID_ENC_ALG_A128CBC_HS256 - Static variable in class net.shibboleth.oidc.jwa.support.EncryptionConstants
Encryption - Required- A128CBC-HS256.
ALGO_ID_ENC_ALG_A128GCM - Static variable in class net.shibboleth.oidc.jwa.support.EncryptionConstants
Encryption -Recommended- A128GCM.
ALGO_ID_ENC_ALG_A192CBC_HS384 - Static variable in class net.shibboleth.oidc.jwa.support.EncryptionConstants
Encryption - Optional- A192CBC-HS384.
ALGO_ID_ENC_ALG_A192GCM - Static variable in class net.shibboleth.oidc.jwa.support.EncryptionConstants
Encryption -Optional- A192GCM.
ALGO_ID_ENC_ALG_A256CBC_HS512 - Static variable in class net.shibboleth.oidc.jwa.support.EncryptionConstants
Encryption -Required- A256CBC-HS512.
ALGO_ID_ENC_ALG_A256GCM - Static variable in class net.shibboleth.oidc.jwa.support.EncryptionConstants
Encryption -Recommended- A256GCM.
ALGO_ID_SIGNATURE_ES_256 - Static variable in class net.shibboleth.oidc.jwa.support.SignatureConstants
Signature - Recommended+ ES256.
ALGO_ID_SIGNATURE_ES_384 - Static variable in class net.shibboleth.oidc.jwa.support.SignatureConstants
Signature - Optional ES384.
ALGO_ID_SIGNATURE_ES_512 - Static variable in class net.shibboleth.oidc.jwa.support.SignatureConstants
Signature - Optional ES512.
ALGO_ID_SIGNATURE_HS_256 - Static variable in class net.shibboleth.oidc.jwa.support.SignatureConstants
Signature - Required HS256.
ALGO_ID_SIGNATURE_HS_384 - Static variable in class net.shibboleth.oidc.jwa.support.SignatureConstants
Signature - Optional HS384.
ALGO_ID_SIGNATURE_HS_512 - Static variable in class net.shibboleth.oidc.jwa.support.SignatureConstants
Signature - Optional HS512.
ALGO_ID_SIGNATURE_NONE - Static variable in class net.shibboleth.oidc.jwa.support.SignatureConstants
No Signature.
ALGO_ID_SIGNATURE_PS_256 - Static variable in class net.shibboleth.oidc.jwa.support.SignatureConstants
Signature - Optional PS256.
ALGO_ID_SIGNATURE_PS_384 - Static variable in class net.shibboleth.oidc.jwa.support.SignatureConstants
Signature - Optional PS384.
ALGO_ID_SIGNATURE_PS_512 - Static variable in class net.shibboleth.oidc.jwa.support.SignatureConstants
Signature - Optional PS512.
ALGO_ID_SIGNATURE_RS_256 - Static variable in class net.shibboleth.oidc.jwa.support.SignatureConstants
Signature - Recommended RS256.
ALGO_ID_SIGNATURE_RS_384 - Static variable in class net.shibboleth.oidc.jwa.support.SignatureConstants
Signature - Optional RS384.
ALGO_ID_SIGNATURE_RS_512 - Static variable in class net.shibboleth.oidc.jwa.support.SignatureConstants
Signature - Optional RS512.
algorithmName - Variable in class net.shibboleth.oidc.security.credential.impl.KeyManagmentAlgorithmCriterion
Key algorithm type of resolved credentials.
algorithmRegistry - Variable in class net.shibboleth.oidc.security.impl.AbstractEncryptionAlgorithmsLookupStrategy
The AlgorithmRegistry used when processing algorithm URIs.
algorithmRegistry - Variable in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver
The AlgorithmRegistry used when processing algorithm URIs.
algorithmRegistry - Variable in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
The AlgorithmRegistry used when processing algorithm URIs.
allowMissing - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AccessTokenHashValidator
Allow a missing at_hash claim.
allowMissing - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AudienceClaimsValidator
Allow a missing aud claim.
allowPKCEPlainPredicate - Variable in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Whether client is allowed to use PKCE code challenge method plain.
AllowPKCEPlainPredicate - Class in net.shibboleth.oidc.profile.config.logic
A predicate implementation that forwards to OIDCSSOProfileConfiguration.isAllowPKCEPlain(ProfileRequestContext).
AllowPKCEPlainPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.AllowPKCEPlainPredicate
 
AlwaysIncludedAttributesLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
A function that obtains OIDCIDTokenProducingProfileConfiguration.getAlwaysIncludedAttributes(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
AlwaysIncludedAttributesLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.AlwaysIncludedAttributesLookupFunction
 
alwaysIncludedAttributesLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Lookup function to supply attribute IDs to include in ID token regardless of response_type.
alwaysIssueBearerAccessTokenPredicate - Variable in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Whether the access token to be issued is always a bearer access token.
alwaysIssueBearerAccessTokenPredicate - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
Whether the access token to be issued is always a bearer access token.
AlwaysIssueBearerAccessTokenPredicate - Class in net.shibboleth.oidc.profile.config.logic
AlwaysIssueBearerAccessTokenPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.AlwaysIssueBearerAccessTokenPredicate
 
amrTranslationStrategyLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Lookup function to supply the strategy function for translating OIDC ACR claims.
APPLICATION_TYPE_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Attribute local name.
applicationContext - Variable in class net.shibboleth.oidc.metadata.policy.impl.BeanMetadataPolicyOperator
The application context from where to fetch the custom policy operators.
applicationType - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Application type for this entity.
apply(byte[]) - Method in class net.shibboleth.oidc.metadata.cache.impl.DefaultJSONMapParsingStrategy
apply(byte[]) - Method in class net.shibboleth.oidc.metadata.cache.impl.DefaultOIDCProviderMetadataParsingStrategy
apply(byte[]) - Method in class net.shibboleth.oidc.metadata.cache.impl.DefaultSourceMetadataExpirationTimeStrategy
apply(Issuer, String) - Method in class net.shibboleth.oidc.metadata.impl.HTTPProviderConfigurationFetchingStrategy.DefaultWellKnownPathCompositionStrategy
apply(OIDCProviderMetadata) - Method in class net.shibboleth.oidc.metadata.cache.impl.DefaultOIDCProviderMetadataIdentifierExtractionStrategy
apply(OIDCProviderMetadata) - Method in class net.shibboleth.oidc.profile.config.navigate.ProviderMetadataStringValuesLookupFunction
apply(OIDCClientInformation) - Method in class net.shibboleth.oidc.profile.config.navigate.ClientInformationStringValueLookupFunction
apply(Object, MetadataPolicy) - Method in class net.shibboleth.oidc.metadata.policy.impl.BeanMetadataPolicyOperator
 
apply(Object, MetadataPolicy) - Method in interface net.shibboleth.oidc.metadata.policy.impl.CustomMetadataPolicyOperator
Apply the operator for the given input that has the given metadata policy attached.
apply(Object, MetadataPolicy) - Method in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyEnforcer
apply(Object, MetadataPolicy) - Method in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyOperator
 
apply(String) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.CalculateSha256DigestForLongKeyFunction
apply(Collection<String>) - Method in class net.shibboleth.oidc.profile.config.navigate.ProxyAwareDefaultOIDCAuthenticationContextClassResponseLookupFunction
apply(JSONObject) - Method in class net.shibboleth.oidc.attribute.transcoding.AbstractOIDCAttributeTranscoder.NamingFunction
apply(ExpirationTimeContext<OIDCProviderMetadata>) - Method in class net.shibboleth.oidc.metadata.cache.impl.DefaultOIDCProviderMetadataExpirationTimeStrategy
apply(JSONSecurityConfiguration) - Method in class net.shibboleth.oidc.profile.config.navigate.JWKCredentialsToPublishLookupStrategy
apply(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.cache.impl.DefaultOIDCProviderMetadataCriteriaToIdentifierStrategy
apply(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.AbstractDynamicHTTPFetchingStrategy
apply(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.policy.impl.MetadataPolicyViaLocationFetchingStrategy
apply(CriteriaSet, Predicate<String>) - Method in class net.shibboleth.oidc.security.jose.impl.ClientInformationDataEncryptionAlgorithmsLookupStrategy
apply(CriteriaSet, Predicate<String>) - Method in class net.shibboleth.oidc.security.jose.impl.ClientInformationKeyTransportEncryptionAlgorithmsLookupStrategy
apply(CriteriaSet, Predicate<String>) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultDataEncryptionAlgorithmsLookupStrategy
apply(CriteriaSet, Predicate<String>) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultKeyTransportEncryptionAlgorithmsLookupStrategy
apply(CriteriaSet, Predicate<String>) - Method in class net.shibboleth.oidc.security.jose.impl.ProviderMetadataDataEncryptionAlgorithmsLookupStrategy
apply(CriteriaSet, Predicate<String>) - Method in class net.shibboleth.oidc.security.jose.impl.ProviderMetadataKeyTransportEncryptionAlgorithmsLookupStrategy
apply(MessageContext) - Method in class net.shibboleth.oidc.profile.config.navigate.MessageContextLookupFunctionAdaptor
 
apply(MessageContext) - Method in class net.shibboleth.oidc.profile.config.navigate.MessageHandlerLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.audit.impl.AbstractClaimsSetAuditExtractor
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.audit.impl.AuthenticationContextClassReferencesAuditExtractor
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.audit.impl.AuthenticationResponseStatusAuditExtractor
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.audit.impl.AuthorizationEndpointAuditExtractor
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.audit.impl.ClaimSetFromJWTLookupStrategy
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.audit.impl.ForceAuthnAuditExtractor
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.audit.impl.InboundMessageClassLookupFunction
The simple name of the message class in the inbound message context.
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.audit.impl.NonceAuditExtractor
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.audit.impl.OutboundMessageClassLookupFunction
The simple name of the message class in the outbound message context.
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.audit.impl.RedirectURIAuditExtractor
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.audit.impl.ResponseModeAuditExtractor
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.audit.impl.ResponseTypeAuditExtractor
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.audit.impl.ScopeAuditExtractor
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.AccessTokenClaimsSetManipulationStrategyLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.AccessTokenLifetimeLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.AccessTokenTypeLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.AlwaysIncludedAttributesLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.AudienceRestrictionsLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.AuthorizationCodeClaimsSetManipulationStrategyLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.AuthzCodeLifetimeLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.ClaimsValidatorLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.CustomRedirectUriValidationStrategyLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.DeniedUserInfoAttributesLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.DPoPProofClaimsValidatorLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.DPoPProofNonceGeneratorLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.DPoPProofSignatureValidationConfigurationLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.EncodedAttributesLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.GrantTypesLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.IDTokenLifetimeLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.IDTokenManipulationStrategyLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.IssuedClaimsValidatorLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.JWEDataEncryptionAlgorithmsLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.JWEKeyTransportEncryptionAlgorithmsLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.JWSSignatureAlgorithmsLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.JWTDecryptionConfigurationLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.JWTEncryptionConfigurationLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.JWTSignatureSigningConfigurationLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.JWTSignatureValidationConfigurationLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.LogoutHintMatchingStrategyLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.ProxyAwareDefaultOIDCAuthenticationContextClassRequestLookupFunction
 
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.ProxyAwareDefaultOIDCAuthenticationContextClassResponseLookupFunction.LookupFunctionWrapper
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.PushedAuthorizationRequestUriClaimsSetManipulationStrategyLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.PushedAuthorizationRequestUriLifetimeLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.PushedAuthorizationRequestUriTypeLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.RefreshTokenChainLifetimeLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.RefreshTokenClaimsSetManipulationStrategyLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.RefreshTokenTimeoutLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.RefreshTokenTypeLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.RegistrationMetadataPolicyLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.RegistrationValidityPeriodLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.ResolverBasedRegistrationMetadataPolicyLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.ResponseModesLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.RevocationLifetimeLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.RevocationMethodLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.SecretExpirationPeriodLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.TokenEndpointAuthMethodLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.UnregisteredClientPolicyLookupFunction
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.encoding.impl.OIDCResponseEncoderFactory
apply(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.impl.AuthenticationRequestMessageEncoderFactory
apply(ProfileRequestContext, JWTClaimsSet) - Method in class net.shibboleth.oidc.profile.logic.ClientIDFromOIDCMetadataContextLookupFunction
apply(ProfileRequestContext, JWTClaimsSet) - Method in class net.shibboleth.oidc.profile.logic.IssuerIDFromOIDCProviderMetadataContextLookupFunction
apply(ProfileRequestContext, JWTClaimsSet) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.RequestedEssentialACRClaimsLookupStrategy
 
apply(ApplicationContext) - Method in class net.shibboleth.oidc.profile.spring.relyingparty.metadata.impl.ClientInformationResolverServiceStrategy
apply(ApplicationContext) - Method in class net.shibboleth.oidc.profile.spring.relyingparty.metadata.impl.ProviderMetadataResolverServiceStrategy
applyAddOperator(Object, Object) - Method in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyEnforcer
Applies the given add value modifier for the given candidate and returns the result of the operation.
applyCustomOperators(Object, MetadataPolicy) - Method in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyEnforcer
Applies the custom operators attached to this enforcer.
assembleMacJws(JWSAlgorithm, JWTClaimsSet, byte[]) - Static method in class net.shibboleth.oidc.security.JWSAssemblyUtils
Assemble a HMAC based JSON Web Signature token (JWS) using the given algorithm, claims, and secret.
assembleMacJwsAsString(JWSAlgorithm, JWTClaimsSet, byte[]) - Static method in class net.shibboleth.oidc.security.JWSAssemblyUtils
Assemble a HMAC based JSON Web Signature token using the given algorithm, claims, and secret, and return its JSON compact serialized form.
assertionAudiencesLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Lookup function to supply additional audiences for ID token.
AsynchronousRefreshAHeadTask() - Constructor for class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache.AsynchronousRefreshAHeadTask
 
AttributeConsentFlowEnabledPredicate - Class in net.shibboleth.oidc.profile.config.logic
A predicate implementation that checks if attribute-release is included in the list of post authentication flows returned by PostAuthenticationFlowsLookupFunction.
AttributeConsentFlowEnabledPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.AttributeConsentFlowEnabledPredicate
 
AttributeEncoderNamespaceHandler - Class in net.shibboleth.oidc.attribute.resolver.spring.enc.impl
Namespace handler for the oidc attribute resolver.
AttributeEncoderNamespaceHandler() - Constructor for class net.shibboleth.oidc.attribute.resolver.spring.enc.impl.AttributeEncoderNamespaceHandler
 
attributeIds - Variable in class net.shibboleth.oidc.metadata.impl.ResolverServiceClientSecretValueResolver
The list of attribute IDs that may contain the resolved client secret values.
AUDIENCE - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
Token audience.
AUDIENCE_CLAIM - Enum constant in enum class net.shibboleth.oidc.security.jwt.claims.impl.JWTClaims
Audience(s) that this ID Token is intended for.
AudienceClaimsValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl
Verifies the Audience (aud) claim contains the appropriate value.
AudienceClaimsValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.AudienceClaimsValidator
Constructor.
audienceLookupStrategy - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AudienceClaimsValidator
Strategy to find the audience value from the context.
AudienceRestrictionsLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
A function that returns the effective audience restrictions to include in ID tokens, based on combining a relying party's entityID with the result of OIDCIDTokenProducingProfileConfiguration.getAdditionalAudiencesForIdToken(ProfileRequestContext), if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
AudienceRestrictionsLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.AudienceRestrictionsLookupFunction
 
AuditFields - Class in net.shibboleth.oidc.profile.audit
Constants to use for audit logging fields stored in an AuditContext.
AuditFields() - Constructor for class net.shibboleth.oidc.profile.audit.AuditFields
Constructor.
AUTHENTICATION_CONTEXT_CLASS_REFERENCE - Enum constant in enum class net.shibboleth.oidc.security.jwt.claims.impl.IDTokenClaims
Authentication Context Class Reference.
AUTHENTICATION_FLOW_STEP - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
The authentication flow step e.g.
AUTHENTICATION_METHODS_REFERENCES - Enum constant in enum class net.shibboleth.oidc.security.jwt.claims.impl.IDTokenClaims
Authentication Methods References.
AUTHENTICATION_RESULT - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
The authentication response result, including any error code if there are any.
AUTHENTICATION_TIME - Enum constant in enum class net.shibboleth.oidc.security.jwt.claims.impl.IDTokenClaims
Time when the End-User authentication occurred.
AuthenticationAudienceClaimsValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl
Verifies the Audience (aud) claim contains the appropriate value in JWT authentication.
AuthenticationAudienceClaimsValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationAudienceClaimsValidator
Constructor.
AuthenticationContextClassReferencePrincipal - Class in net.shibboleth.oidc.authn.principal
Principal based on a OIDC Authentication Context Class Reference.
AuthenticationContextClassReferencePrincipal(String) - Constructor for class net.shibboleth.oidc.authn.principal.AuthenticationContextClassReferencePrincipal
Constructor.
AuthenticationContextClassReferencesAuditExtractor - Class in net.shibboleth.oidc.profile.audit.impl
Function that extracts the ACRs from the OIDCAuthenticationRequest.
AuthenticationContextClassReferencesAuditExtractor(Function<ProfileRequestContext, OIDCAuthenticationRequest>) - Constructor for class net.shibboleth.oidc.profile.audit.impl.AuthenticationContextClassReferencesAuditExtractor
Constructor.
AuthenticationContextClassReferenceSupport - Class in net.shibboleth.oidc.profile.encoding
Support class for ACR operations.
AuthenticationContextClassReferenceSupport() - Constructor for class net.shibboleth.oidc.profile.encoding.AuthenticationContextClassReferenceSupport
Private constructor.
authenticationFlowsLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Lookup function to supply authentication flows.
authenticationRequestLookupStrategy - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AuthTimeRequestedActivationCondition
Strategy to find the authentication request.
authenticationRequestLookupStrategy - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.RequestedEssentialACRClaimsLookupStrategy
Strategy to find the authentication request.
AuthenticationRequestMessageEncoderFactory - Class in net.shibboleth.oidc.profile.impl
Message encoder factory function that returns the first encoder suitable for the given request method found in the profile configuration.
AuthenticationRequestMessageEncoderFactory(List<OIDCMessageEncoder>) - Constructor for class net.shibboleth.oidc.profile.impl.AuthenticationRequestMessageEncoderFactory
Constructor.
AuthenticationResponseStatusAuditExtractor - Class in net.shibboleth.oidc.profile.audit.impl
Function that extracts the status of an authentication response i.e.
AuthenticationResponseStatusAuditExtractor(Function<ProfileRequestContext, AuthenticationResponse>) - Constructor for class net.shibboleth.oidc.profile.audit.impl.AuthenticationResponseStatusAuditExtractor
Constructor.
AuthenticationTimeClaimsValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl
Verifies the auth_time (when the End-User authentication took place): If the authnLifetimeLookup returns 0 seconds (e.g.
AuthenticationTimeClaimsValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationTimeClaimsValidator
Constructor.
AUTHN_INSTANT - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
auth_time value.
authnContextClassReference - Variable in class net.shibboleth.oidc.authn.principal.AuthenticationContextClassReferencePrincipal
The class ref.
authnLifetimeLookupStrategy - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationTimeClaimsValidator
Lookup strategy to find the amount of time for which a token is valid after if it was first issued.
authnRequestTime - Variable in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
The time at which the RP made the authentication request to the OP.
authnRequestTimeLookupStrategy - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationTimeClaimsValidator
Lookup strategy to find the time at which the authentication request was made.
AUTHORIZATION_ENDPOINT - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
The authorization endpoint for the authentication request.
AuthorizationCodeClaimsSetManipulationStrategyLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
A function that returns (ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
AuthorizationCodeClaimsSetManipulationStrategyLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.AuthorizationCodeClaimsSetManipulationStrategyLookupFunction
 
authorizationCodeClaimsSetManipulationStrategyLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Lookup function to supply strategy bi-function for manipulating authorization code claims set.
AuthorizationCodeFlowEnabledPredicate - Class in net.shibboleth.oidc.profile.config.logic
AuthorizationCodeFlowEnabledPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.AuthorizationCodeFlowEnabledPredicate
 
authorizationCodeFlowPredicate - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2FlowAwareProfileConfiguration
Predicate used to indicate whether authorization code flow is supported by this profile.
AuthorizationEndpointAuditExtractor - Class in net.shibboleth.oidc.profile.audit.impl
Function that extracts the authorization endpoint from the OIDCAuthenticationRequest.
AuthorizationEndpointAuditExtractor(Function<ProfileRequestContext, OIDCAuthenticationRequest>) - Constructor for class net.shibboleth.oidc.profile.audit.impl.AuthorizationEndpointAuditExtractor
Constructor.
authorizationParamsAreValidPredicate - Variable in class net.shibboleth.oidc.profile.encoding.impl.AbstractOIDCMessageEncoder
A hook to allow additional checking of the authorization parameters after it is built.
authorizeCodeLifetimeLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Lookup function to supply lifetime of authz code.
AUTHORIZED_PARTY - Enum constant in enum class net.shibboleth.oidc.security.jwt.claims.impl.IDTokenClaims
Authorized party - the party to which the ID Token was issued.
AuthTimeRequestedActivationCondition - Class in net.shibboleth.oidc.security.jwt.claims.impl
Has the auth_time claim been requested?
AuthTimeRequestedActivationCondition(Function<ProfileRequestContext, OIDCAuthenticationRequest>) - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.AuthTimeRequestedActivationCondition
Constructor.
AuthzCodeLifetimeLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
A function that returns OAuth2AuthorizationCodeProducingProfileConfiguration.getAuthorizeCodeLifetime(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
AuthzCodeLifetimeLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.AuthzCodeLifetimeLookupFunction
 

B

BACK_CHANNEL_LOGOUT_SESSION_REQUIRED_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Attribute local name.
backChannelLogoutSessionRequired - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Require back-channel logout session id flag for this entity.
backingStore - Variable in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
Backing store for runtime metadata.
BackingStore<I,T> - Interface in net.shibboleth.oidc.metadata
A backing store that holds cached objects.
BaseJWTSignatureSecurityHandler - Class in net.shibboleth.oidc.security.impl
Base class for security message handlers which evaluate a JWT signature with a signature trust engine.
BaseJWTSignatureSecurityHandler() - Constructor for class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler
Constructor.
BaseMetadataCacheBuilderSpec<IdentifierType,MetadataType> - Class in net.shibboleth.oidc.metadata.cache.impl
A based metadata cache builder specification.
BaseMetadataCacheBuilderSpec() - Constructor for class net.shibboleth.oidc.metadata.cache.impl.BaseMetadataCacheBuilderSpec
Constructor.
BaseOIDCAttributeEncoderParser - Class in net.shibboleth.oidc.attribute.resolver.spring.enc.impl
Base class for Spring bean definition parser for OIDC attribute encoders.
BaseOIDCAttributeEncoderParser() - Constructor for class net.shibboleth.oidc.attribute.resolver.spring.enc.impl.BaseOIDCAttributeEncoderParser
 
BaseSignedJWTTrustEngine<TrustBasisType> - Class in net.shibboleth.oidc.security.impl
A TrustEngine implementation for Signed JSON Web Tokens.
BaseSignedJWTTrustEngine(JOSEObjectCredentialResolver) - Constructor for class net.shibboleth.oidc.security.impl.BaseSignedJWTTrustEngine
Constructor.
BaseStorageServiceClientInformationComponent - Class in net.shibboleth.oidc.metadata.impl
A base class for ClientInformationManager and ClientInformationResolver implementations exploiting StorageService for storing the OIDC client information.
BaseStorageServiceClientInformationComponent() - Constructor for class net.shibboleth.oidc.metadata.impl.BaseStorageServiceClientInformationComponent
 
BasicClientSecretCredentialFactoryBean - Class in net.shibboleth.oidc.security.credential
Factory to generate a ClientSecretCredential from a client_secret string.
BasicClientSecretCredentialFactoryBean() - Constructor for class net.shibboleth.oidc.security.credential.BasicClientSecretCredentialFactoryBean
 
BasicDecryptionConfiguration - Class in net.shibboleth.oidc.security.jose.impl
Basic implementation of DecryptionConfiguration for handling JWEs.
BasicDecryptionConfiguration() - Constructor for class net.shibboleth.oidc.security.jose.impl.BasicDecryptionConfiguration
 
BasicEncryptionConfiguration - Class in net.shibboleth.oidc.security.jose.impl
Basic implementation of EncryptionConfiguration for handling JWE encryption.
BasicEncryptionConfiguration() - Constructor for class net.shibboleth.oidc.security.jose.impl.BasicEncryptionConfiguration
Constructor.
BasicExpiringJWKCredential - Class in net.shibboleth.oidc.security.credential
Basic implementation of an ExpiringJWKCredential.
BasicExpiringJWKCredential() - Constructor for class net.shibboleth.oidc.security.credential.BasicExpiringJWKCredential
 
BasicExpiringJWTSharedSecretCredentialFactoryBean - Class in net.shibboleth.oidc.security.credential
A factory bean for creating a BasicExpiringJWKCredential from an injected secret.
BasicExpiringJWTSharedSecretCredentialFactoryBean() - Constructor for class net.shibboleth.oidc.security.credential.BasicExpiringJWTSharedSecretCredentialFactoryBean
Constructor.
BasicJOSEObjectCredentialResolver - Class in net.shibboleth.oidc.security.credential.impl
A basic implementation of JOSEObjectCredentialResolver.
BasicJOSEObjectCredentialResolver() - Constructor for class net.shibboleth.oidc.security.credential.impl.BasicJOSEObjectCredentialResolver
 
BasicJWKCredential - Class in net.shibboleth.oidc.security.credential
A basic implementation of JWKCredential.
BasicJWKCredential() - Constructor for class net.shibboleth.oidc.security.credential.BasicJWKCredential
 
BasicJWKCredentialFactoryBean - Class in net.shibboleth.oidc.security.credential
Factory bean for Basic JSON Web Keys (JWK).
BasicJWKCredentialFactoryBean() - Constructor for class net.shibboleth.oidc.security.credential.BasicJWKCredentialFactoryBean
Constructor.
BasicJWKReferenceCredential - Class in net.shibboleth.oidc.security.credential
A basic implementation of JWKReferenceCredential.
BasicJWKReferenceCredential() - Constructor for class net.shibboleth.oidc.security.credential.BasicJWKReferenceCredential
Deprecated, for removal: This API element is subject to removal in a future version.
BasicJWKReferenceCredential(URI) - Constructor for class net.shibboleth.oidc.security.credential.BasicJWKReferenceCredential
Constructor.
BasicNimbusSecretCredential - Class in net.shibboleth.oidc.security.credential
Deprecated, for removal: This API element is subject to removal in a future version.
BasicNimbusSecretCredential() - Constructor for class net.shibboleth.oidc.security.credential.BasicNimbusSecretCredential
Deprecated, for removal: This API element is subject to removal in a future version.
BasicNimbusSecretCredential(Secret) - Constructor for class net.shibboleth.oidc.security.credential.BasicNimbusSecretCredential
Deprecated.
Constructor.
BasicSignatureSigningConfiguration - Class in net.shibboleth.oidc.security.jose.impl
The configuration information to use when generating an signed JWT.
BasicSignatureSigningConfiguration() - Constructor for class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningConfiguration
Constructor.
BasicSignatureSigningParametersResolver - Class in net.shibboleth.oidc.security.jose.impl
Basic implementation of an SignatureSigningParametersResolver.
BasicSignatureSigningParametersResolver() - Constructor for class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver
Constructor.
BasicSignatureValidationConfiguration - Class in net.shibboleth.oidc.security.jose.impl
Basic implementation of SignatureValidationConfiguration for signed JWTs.
BasicSignatureValidationConfiguration() - Constructor for class net.shibboleth.oidc.security.jose.impl.BasicSignatureValidationConfiguration
 
BasicSignatureValidationParametersResolver - Class in net.shibboleth.oidc.security.jose.impl
Basic implementation of SignatureValidationParametersResolver.
BasicSignatureValidationParametersResolver() - Constructor for class net.shibboleth.oidc.security.jose.impl.BasicSignatureValidationParametersResolver
 
BatchBackingStore<I,T> - Interface in net.shibboleth.oidc.metadata
A specialisation of a BackingStore that deals with batch metadata.
BatchMetadataCache<IdentifierType,MetadataType> - Class in net.shibboleth.oidc.metadata.cache.impl
A metadata cache implementation that supports 'refresh-ahead' semantics for batch cache updates.
BatchMetadataCache(BatchBackingStore<IdentifierType, MetadataType>) - Constructor for class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
Constructor.
BatchMetadataCache(BatchBackingStore<IdentifierType, MetadataType>, ScheduledExecutorService) - Constructor for class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
Protected constructor.
BatchMetadataCache.AsynchronousRefreshAHeadTask - Class in net.shibboleth.oidc.metadata.cache.impl
A runnable that triggers a cache reload.
BatchMetadataCacheBuilderSpec<IdentifierType,MetadataType> - Class in net.shibboleth.oidc.metadata.cache.impl
A specification for building a batch read-ahead metadata cache.
BatchMetadataCacheBuilderSpec() - Constructor for class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCacheBuilderSpec
Constructor.
BEAN_OPERATOR_NAME - Static variable in class net.shibboleth.oidc.metadata.policy.impl.BeanMetadataPolicyOperator
The operator name to be used within MetadataPolicy custom operators.
BeanMetadataPolicyOperator - Class in net.shibboleth.oidc.metadata.policy.impl
A custom metadata policy operator that fetches a bean from ApplicationContext and uses it for as CustomMetadataPolicyOperator.
BeanMetadataPolicyOperator() - Constructor for class net.shibboleth.oidc.metadata.policy.impl.BeanMetadataPolicyOperator
 
BINDING_ID_BACK_SLO_URI - Static variable in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
The SLO binding identifier matching to the back-channel uri.
BINDING_ID_FRONT_SLO_URI - Static variable in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
The SLO binding identifier matching to the front-channel uri.
BINDING_ID_REDIRECT_URI - Static variable in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
The ACS binding identifier matching to the redirect_uri.
build() - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy.Builder
Build the metadata policy corresponding to the current builder state.
build(MetadataCacheBuilderSpec<IdentifierType, MetadataType>) - Method in class net.shibboleth.oidc.metadata.cache.impl.MetadataCacheBuilder.Builder
Build the metadata cache from the given specification.
buildACRClaimsRequest(OIDCAuthenticationRequest) - Static method in class net.shibboleth.oidc.profile.encoding.AuthenticationContextClassReferenceSupport
Build an ID Token requested claims request with any ACR values in the authentication request.
buildClaim(ProfileRequestContext, IdPAttribute, TranscodingRule, Object) - Method in class net.shibboleth.oidc.attribute.transcoding.AbstractOIDCAttributeTranscoder
Builds an OIDC claim structure with the given values.
buildContentEncryptionKeyAlgorithmCriteria(CriteriaSet, EncryptedJWT) - Method in class net.shibboleth.oidc.security.impl.JWETokenDecrypter
Optionally build decryption key 'enc' (encryption key algorithm) credential criteria according to information in the encrypted object.
buildCredential(JWK, KeyInfoResolutionContext) - Method in class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.InlineJwksProvider
Build a JWKCredential.
buildCriteria(EncryptedJWT, List<Criterion>) - Method in class net.shibboleth.oidc.security.impl.JWETokenDecrypter
Build a criteria set using the additional criteria in the params, those supplied, and those that relate to the encrypted JWT.
buildCriteriaSet(String, MessageContext) - Method in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler
buildCriteriaSet(ProfileRequestContext, List<DecryptionConfiguration>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTDecryptionParameters
Build the criteria used as input to the DecryptionParametersResolver.
buildCriteriaSet(ProfileRequestContext, List<EncryptionConfiguration>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
Build the criteria used as input to the EncryptionParametersResolver.
buildDirectEncryptionParameters(EncryptionParameters, CriteriaSet, List<EncryptionMethod>, JWEAlgorithm) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
Build direct encryption parameters from the data encryption credentials input.
buildEncryptionKeyAlgorithmCriteria(CriteriaSet, JWEAlgorithm, EncryptionMethod) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
Build criterion for credential resolvers from the JWE 'enc' header.
Builder() - Constructor for class net.shibboleth.oidc.metadata.cache.impl.MetadataCacheBuilder.Builder
 
Builder() - Constructor for class net.shibboleth.oidc.metadata.policy.MetadataPolicy.Builder
Constructor.
buildErrorResponse(ErrorObject, ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.impl.AbstractBuildErrorResponseFromEvent
Method implemented by the extending class to create ErrorResponse.
buildErrorResponse(ErrorObject, ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.impl.BuildJSONErrorResponseFromEvent
Method implemented by the extending class to create ErrorResponse.
buildFileLoadingMetadataPolicyResolver(String, BatchMetadataCacheBuilderSpec<String, Map<String, MetadataPolicy>>, Function<ProfileRequestContext, CriteriaSet>, String) - Method in class net.shibboleth.oidc.metadata.cache.impl.MetadataPolicyLookupStrategyFactory
Build a Function that maps a profile request context to a map of metadata policies.
buildFileLoadingMetadataPolicyResolver(String, BatchMetadataCacheBuilderSpec<String, Map<String, MetadataPolicy>>, Function<ProfileRequestContext, CriteriaSet>, String, String) - Method in class net.shibboleth.oidc.metadata.cache.impl.MetadataPolicyLookupStrategyFactory
Build a Function that maps a profile request context to a map of metadata policies.
buildHttpClientContext(ClassicHttpRequest) - Method in class net.shibboleth.oidc.metadata.impl.AbstractDynamicHTTPFetchingStrategy
Build the HttpClientContext instance which will be used to invoke the HttpClient request.
buildHttpRequest(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.AbstractDynamicHTTPFetchingStrategy
Build an appropriate instance of ClassicHttpRequest based on the input criteria set.
buildIdPAttribute(ProfileRequestContext, JSONObject, TranscodingRule, List<IdPAttributeValue>) - Method in class net.shibboleth.oidc.attribute.transcoding.AbstractOIDCAttributeTranscoder
Builds an IdPAttribute from the given values.
BuildJSONErrorResponseFromEvent - Class in net.shibboleth.oidc.profile.impl
This action reads an event from the configured EventContext lookup strategy, constructs a json error response message and attaches it as the outbound message.
BuildJSONErrorResponseFromEvent() - Constructor for class net.shibboleth.oidc.profile.impl.BuildJSONErrorResponseFromEvent
 
buildJWKCredential(JWK, String) - Method in class net.shibboleth.oidc.security.credential.impl.BasicJOSEObjectCredentialResolver
Build JWK credential.
buildKeyAlgorithmCriteria(String) - Method in class net.shibboleth.oidc.security.impl.JWETokenDecrypter
Dynamically construct key algorithm credential criteria based on the specified algorithm URI.
buildKeyEncryptionOrAgreementParameters(EncryptionParameters, CriteriaSet, List<EncryptionMethod>, JWEAlgorithm) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
Build key encryption parameters from the key transport encryption credentials input.
buildKeyLengthCriteria(String) - Method in class net.shibboleth.oidc.security.impl.JWETokenDecrypter
Dynamically construct key length credential criteria based on the specified algorithm URI.
buildKeyManagementAlgorithmCriteria(CriteriaSet, EncryptedJWT) - Method in class net.shibboleth.oidc.security.impl.JWETokenDecrypter
Optionally build decryption key 'alg' (key management algorithm) credential criteria according to information in the encrypted object.
buildKeyManagmentAlgorithmCriteria(CriteriaSet, JWEAlgorithm, EncryptionMethod) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
Build criterion for credential resolvers from the JWE 'alg' header.
buildKeyWrappingParameters(EncryptionParameters, CriteriaSet, List<EncryptionMethod>, JWEAlgorithm) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
Build key wrapping encryption parameters from the key transport encryption credentials input.
buildMetadataPolicyResolver(LoadingStrategy, BatchMetadataCacheBuilderSpec<String, Map<String, MetadataPolicy>>, Function<ProfileRequestContext, CriteriaSet>, String) - Method in class net.shibboleth.oidc.metadata.cache.impl.MetadataPolicyLookupStrategyFactory
Build a Function that maps a profile request context to a map of metadata policies.
buildObject() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.ClientSecretBuilder
buildObject() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.ClientSecretKeyReferenceBuilder
buildObject() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.DefaultAcrValueBuilder
buildObject() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.JwksDataBuilder
buildObject() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.JwksUriBuilder
buildObject() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsBuilder
buildObject() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.PostLogoutRedirectUriBuilder
buildObject() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.RequestUriBuilder
buildObject(String, String, String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.ClientSecretBuilder
buildObject(String, String, String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.ClientSecretKeyReferenceBuilder
buildObject(String, String, String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.DefaultAcrValueBuilder
buildObject(String, String, String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.JwksDataBuilder
buildObject(String, String, String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.JwksUriBuilder
buildObject(String, String, String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsBuilder
buildObject(String, String, String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.PostLogoutRedirectUriBuilder
buildObject(String, String, String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.RequestUriBuilder
buildRedirectURL(MessageContext, OIDCAuthenticationRequest) - Method in class net.shibboleth.oidc.profile.encoding.impl.HTTPRedirectAuthnRequestEncoder
Build the URL to redirect the client to using parameters in the authentication request.
buildRequestURL(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.AbstractDynamicHTTPFetchingStrategy
Build the request URL based on the input criteria set.
buildRequestURL(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.HTTPProviderConfigurationFetchingStrategy
Build the request URL based on the input criteria set.
buildRequestURL(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.policy.impl.MetadataPolicyViaLocationFetchingStrategy
Build the request URL based on the input criteria set.
buildResourceLoadingMetadataPolicyResolver(Resource, BatchMetadataCacheBuilderSpec<String, Map<String, MetadataPolicy>>, Function<ProfileRequestContext, CriteriaSet>, String) - Method in class net.shibboleth.oidc.metadata.cache.impl.MetadataPolicyLookupStrategyFactory
Build a Function that maps a profile request context to a map of metadata policies.
buildTranscoder() - Method in class net.shibboleth.oidc.attribute.resolver.spring.enc.impl.OIDCByteEncoderParser
buildTranscoder() - Method in class net.shibboleth.oidc.attribute.resolver.spring.enc.impl.OIDCScopedStringEncoderParser
buildTranscoder() - Method in class net.shibboleth.oidc.attribute.resolver.spring.enc.impl.OIDCStringEncoderParser

C

cache - Variable in class net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver
The metadata cache.
cacheControl - Variable in class net.shibboleth.oidc.profile.messaging.JSONErrorResponse
cache control value.
cacheControl - Variable in class net.shibboleth.oidc.profile.messaging.JSONSuccessResponse
cache control value.
cacheId - Variable in class net.shibboleth.oidc.metadata.cache.impl.BaseMetadataCacheBuilderSpec
An identifier to give the cache this specification builds.
CacheLoadingContext - Class in net.shibboleth.oidc.metadata.cache
Context to hold information pertaining to a cache loading event.
CacheLoadingContext(Instant, Instant) - Constructor for class net.shibboleth.oidc.metadata.cache.CacheLoadingContext
Constructor.
CacheLoadingException - Exception in net.shibboleth.oidc.metadata.cache
Exception to catch cache loading errors.
CacheLoadingException() - Constructor for exception net.shibboleth.oidc.metadata.cache.CacheLoadingException
Constructor.
CacheLoadingException(Exception) - Constructor for exception net.shibboleth.oidc.metadata.cache.CacheLoadingException
Constructor.
CacheLoadingException(String) - Constructor for exception net.shibboleth.oidc.metadata.cache.CacheLoadingException
Constructor.
CacheLoadingException(String, Exception) - Constructor for exception net.shibboleth.oidc.metadata.cache.CacheLoadingException
Constructor.
CalculateSha256DigestForLongKeyFunction - Class in net.shibboleth.oidc.security.jwt.claims.impl
A function that calculates the SHA-256 digest and returns the value as a hex string, if the input length is more than 64 characters.
CalculateSha256DigestForLongKeyFunction() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.CalculateSha256DigestForLongKeyFunction
 
CHAIN - Enum constant in enum class net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenRevocationConfiguration.OAuth2TokenRevocationMethod
Revoke full chain of tokens (from authorization code (or initial access token) onwards).
ChainingClientInformationResolver - Class in net.shibboleth.oidc.metadata.impl
A client information provider that uses registered resolvers, in turn, to answer queries.
ChainingClientInformationResolver() - Constructor for class net.shibboleth.oidc.metadata.impl.ChainingClientInformationResolver
Constructor.
ChainingJOSEObjectCredentialResolver - Class in net.shibboleth.oidc.security.credential.impl
A concrete implementation of AbstractChainingCredentialResolver which is scoped to the simple JOSEObjectCredentialResolver type.
ChainingJOSEObjectCredentialResolver(List<JOSEObjectCredentialResolver>) - Constructor for class net.shibboleth.oidc.security.credential.impl.ChainingJOSEObjectCredentialResolver
Constructor.
ChainingJWTClaimsValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl
A ClaimsValidator implementation that validates a JWT claims set from a chain of configured validators.
ChainingJWTClaimsValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.ChainingJWTClaimsValidator
Constructor.
ChainingProviderMetadataResolver - Class in net.shibboleth.oidc.metadata.impl
A provider metadata provider that uses registered resolvers, in turn, to answer queries.
ChainingProviderMetadataResolver() - Constructor for class net.shibboleth.oidc.metadata.impl.ChainingProviderMetadataResolver
Constructor.
CheckClientJWTDecryptionConfiguration - Class in net.shibboleth.oidc.security.impl
An action that uses a OIDCClientInformation to verify the encryption parameters of an incoming encrypted JWT are compliant with configuration in the client metadata.
CheckClientJWTDecryptionConfiguration() - Constructor for class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration
 
CheckClientJWTSignatureAlgorithmHandler - Class in net.shibboleth.oidc.security.impl
A MessageHandler that uses a OIDCClientInformation to verify the signature of a signed JWT uses expected algorithm.
CheckClientJWTSignatureAlgorithmHandler() - Constructor for class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler
 
checkCredentialSupportsAlgorithm(Credential, JWEAlgorithm) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
Determine if the given credential matches the given algorithm.
checkCredentialSupportsEncryptionMethod(Credential, EncryptionMethod) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
Determine if the given credential supports the given encryption method.
checkKeyAlgorithmAndLength(Credential, String) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
Evaluate whether the specified credential is supported for use with the specified algorithm URI and the key length matches.
checkKeyWithAlgorithm(JWKCredential, JWEAlgorithm) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
Check the credential supports the algorithm given.
checkParams(SignedJWT, CriteriaSet) - Method in class net.shibboleth.oidc.security.impl.BaseSignedJWTTrustEngine
Check the signed JWT and supplied criteria for required values.
CIPHER_PADDING_OAEP - Static variable in class net.shibboleth.oidc.jwa.support.JCAConstantExtension
Cipher padding "OAEP".
CIPHER_PADDING_OAEP_256 - Static variable in class net.shibboleth.oidc.jwa.support.JCAConstantExtension
Cipher padding "OAEP-256".
CIPHER_PADDING_OAEP_384 - Static variable in class net.shibboleth.oidc.jwa.support.JCAConstantExtension
Cipher padding "OAEP-384".
CIPHER_PADDING_OAEP_512 - Static variable in class net.shibboleth.oidc.jwa.support.JCAConstantExtension
Cipher padding "OAEP-512".
CIPHER_PADDING_PKCS5 - Static variable in class net.shibboleth.oidc.jwa.support.JCAConstantExtension
Cipher padding: "PKCS5Padding".
ClaimExistsActivationCondition - Class in net.shibboleth.oidc.security.jwt.claims.impl
Activation condition to check a claim exists in the claims set.
ClaimExistsActivationCondition(String) - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.ClaimExistsActivationCondition
Constructor.
claimName - Variable in class net.shibboleth.oidc.profile.audit.impl.AbstractClaimsSetAuditExtractor
The name of the claim to extract from the ID token.
claimName - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.ExactMatchClaimsValidator
The name of the claim to match from the ID token.
claimName - Variable in enum class net.shibboleth.oidc.security.jwt.claims.impl.IDTokenClaims
The registered claim name.
claimName - Variable in enum class net.shibboleth.oidc.security.jwt.claims.impl.JWTClaims
The IANA registered claim name.
ClaimSetFromJWTLookupStrategy - Class in net.shibboleth.oidc.profile.audit.impl
Strategy to pull out a ClaimsSet from a located JWT.
ClaimSetFromJWTLookupStrategy(Function<ProfileRequestContext, JWT>) - Constructor for class net.shibboleth.oidc.profile.audit.impl.ClaimSetFromJWTLookupStrategy
Constructor.
claimsSetLookupStrategy - Variable in class net.shibboleth.oidc.profile.audit.impl.AbstractClaimsSetAuditExtractor
Strategy to retrieve the JWT ClaimSet to extract the claim from.
claimsToSignLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.SignJWTHandler
Strategy used to locate the payload to encrypt.
ClaimsValidator - Interface in net.shibboleth.oidc.jwt.claims
High-level API for validating a JWT's claims set.
ClaimsValidatorLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
A function that obtains OAuth2ClientAuthenticableProfileConfiguration.getClaimsValidator(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
ClaimsValidatorLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.ClaimsValidatorLookupFunction
 
claimsValidatorLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Validation of JWT claims for subset of client auth methods.
claimToCheck - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.ClaimExistsActivationCondition
The name of the claim to check exists in the claims set.
claimToCheck - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.NumberOfClaimValuesActivationCondition
The name of the claim to check exists in the claims set.
claimValidators - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.ChainingJWTClaimsValidator
List of claim validators.
cleanupTaskInterval - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
The interval at which the cleanup task should run.
cleanupTaskInterval - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
The interval at which the cleanup task should run.
CLIENT_ID - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
OIDC client ID.
CLIENT_URI_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Attribute local name.
clientAuthentication - Variable in class net.shibboleth.oidc.authn.context.OAuth2ClientAuthenticationContext
Client authentication abstraction.
clientCredentialLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Lookup function to retrieve a client credential from the given profile request context.
clientEncryptionMethodLookupStrategy - Variable in class net.shibboleth.oidc.security.jose.impl.ClientInformationDataEncryptionAlgorithmsLookupStrategy
A strategy to locate the encryption method ('enc') appropriate for the JWT to be encrypted.
clientID - Variable in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
The client identifier.
ClientIDCriterion - Class in net.shibboleth.oidc.metadata.criterion
A Criterion representing an OIDC client ID.
ClientIDCriterion(ClientID) - Constructor for class net.shibboleth.oidc.metadata.criterion.ClientIDCriterion
Constructor.
ClientIDFromOIDCMetadataContextLookupFunction - Class in net.shibboleth.oidc.profile.logic
A function that returns client_id via client information stored in OIDCMetadataContext.
ClientIDFromOIDCMetadataContextLookupFunction() - Constructor for class net.shibboleth.oidc.profile.logic.ClientIDFromOIDCMetadataContextLookupFunction
Constructor.
clientIdLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Lookup function to retrieve the client_id from the given profile request context.
clientInformation - Variable in class net.shibboleth.oidc.metadata.context.OIDCMetadataContext
The client information.
clientInformation - Variable in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler
The client information found from the lookup strategy.
ClientInformationClientSecretCredentialResolver - Class in net.shibboleth.oidc.security.credential.impl
A JOSEObjectCredentialResolver that resolves client secret from of a ClientInformation.
ClientInformationClientSecretCredentialResolver() - Constructor for class net.shibboleth.oidc.security.credential.impl.ClientInformationClientSecretCredentialResolver
 
ClientInformationCredentialResolver - Class in net.shibboleth.oidc.security.credential.impl
A JOSEObjectCredentialResolver that resolves credentials from the jwks or contents of jwks_uri of a ClientInformation.
ClientInformationCredentialResolver(RemoteJwkSetCache) - Constructor for class net.shibboleth.oidc.security.credential.impl.ClientInformationCredentialResolver
Constructor.
ClientInformationCredentialResolver(RemoteJwkSetCache, Duration) - Constructor for class net.shibboleth.oidc.security.credential.impl.ClientInformationCredentialResolver
Constructor.
ClientInformationCriterion - Class in net.shibboleth.oidc.security.jose.criterion
Client information criterion to make decisions based on client information.
ClientInformationCriterion(OIDCClientInformation) - Constructor for class net.shibboleth.oidc.security.jose.criterion.ClientInformationCriterion
Constructor.
ClientInformationDataEncryptionAlgorithmsLookupStrategy - Class in net.shibboleth.oidc.security.jose.impl
A lookup strategy that finds data/content encryption algorithms from local configuration that are compatible with those advertised by the RP/client information.
ClientInformationDataEncryptionAlgorithmsLookupStrategy(Function<OIDCClientInformation, String>) - Constructor for class net.shibboleth.oidc.security.jose.impl.ClientInformationDataEncryptionAlgorithmsLookupStrategy
Constructor.
ClientInformationDataEncryptionAlgorithmsLookupStrategy(Function<OIDCClientInformation, String>, AlgorithmRegistry) - Constructor for class net.shibboleth.oidc.security.jose.impl.ClientInformationDataEncryptionAlgorithmsLookupStrategy
Constructor.
ClientInformationJWTTrustEngine - Class in net.shibboleth.oidc.security.impl
An implementation of SignatureTrustEngine which evaluates the validity and trustworthiness of JWT signatures.
ClientInformationJWTTrustEngine(CredentialResolver, JOSEObjectCredentialResolver, Function<OIDCClientInformation, String>, String) - Constructor for class net.shibboleth.oidc.security.impl.ClientInformationJWTTrustEngine
Constructor.
ClientInformationKeyTransportEncryptionAlgorithmsLookupStrategy - Class in net.shibboleth.oidc.security.jose.impl
A lookup strategy that finds key transport algorithms from local configuration that are compatible with those configured to RP.
ClientInformationKeyTransportEncryptionAlgorithmsLookupStrategy(Function<OIDCClientInformation, String>) - Constructor for class net.shibboleth.oidc.security.jose.impl.ClientInformationKeyTransportEncryptionAlgorithmsLookupStrategy
Constructor.
ClientInformationKeyTransportEncryptionAlgorithmsLookupStrategy(Function<OIDCClientInformation, String>, AlgorithmRegistry) - Constructor for class net.shibboleth.oidc.security.jose.impl.ClientInformationKeyTransportEncryptionAlgorithmsLookupStrategy
Constructor.
clientInformationLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler
Function that looks up client information from the given message context.
clientInformationLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration
Function that looks up client information from the given profile context.
clientInformationLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler
Function that looks up client information from the given message context.
ClientInformationManager - Interface in net.shibboleth.oidc.metadata
A manager that is capable of managing ClientInformation instances.
ClientInformationManagerException - Exception in net.shibboleth.oidc.metadata
Exception indicating a problem managing client information.
ClientInformationManagerException() - Constructor for exception net.shibboleth.oidc.metadata.ClientInformationManagerException
Constructor.
ClientInformationManagerException(Exception) - Constructor for exception net.shibboleth.oidc.metadata.ClientInformationManagerException
Constructor.
ClientInformationManagerException(String) - Constructor for exception net.shibboleth.oidc.metadata.ClientInformationManagerException
Constructor.
ClientInformationManagerException(String, Exception) - Constructor for exception net.shibboleth.oidc.metadata.ClientInformationManagerException
Constructor.
ClientInformationNodeProcessor - Class in net.shibboleth.oidc.metadata.impl
An implementation of MetadataNodeProcessor which supports adding an instance of OIDCClientInformation to the object metadata of SPSSODescriptor.
ClientInformationNodeProcessor(List<KeyInfoProvider>) - Constructor for class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
Constructor.
ClientInformationNodeProcessor.SkeletonEchoingRoleDescriptorResolver - Class in net.shibboleth.oidc.metadata.impl
Abstract base class that fills in some operations.
ClientInformationParser - Class in net.shibboleth.oidc.profile.spring.relyingparty.metadata.filter.impl
Parser for a <ClientInformation> node processor.
ClientInformationParser() - Constructor for class net.shibboleth.oidc.profile.spring.relyingparty.metadata.filter.impl.ClientInformationParser
 
ClientInformationResolver - Interface in net.shibboleth.oidc.metadata
A resolver that is capable of resolving ClientInformation instances which meet certain supplied criteria.
ClientInformationResolverServiceStrategy - Class in net.shibboleth.oidc.profile.spring.relyingparty.metadata.impl
Strategy for summoning up a ClientInformationResolver from a populated ApplicationContext.
ClientInformationResolverServiceStrategy() - Constructor for class net.shibboleth.oidc.profile.spring.relyingparty.metadata.impl.ClientInformationResolverServiceStrategy
 
ClientInformationSignatureSigningParametersResolver - Class in net.shibboleth.oidc.security.jose.impl
An implementation of an SignatureSigningParametersResolver that extends the BasicSignatureSigningParametersResolver functionality by adding a configurable lookup strategy for fetching the desired algorithm value from OIDCClientInformation.
ClientInformationSignatureSigningParametersResolver(Function<OIDCClientInformation, String>, String) - Constructor for class net.shibboleth.oidc.security.jose.impl.ClientInformationSignatureSigningParametersResolver
Constructor.
ClientInformationStringValueLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
Fetches the value for the configured key as String.
ClientInformationStringValueLookupFunction(String) - Constructor for class net.shibboleth.oidc.profile.config.navigate.ClientInformationStringValueLookupFunction
Constructor.
clientKeyTransportAlgorithmLookupStrategy - Variable in class net.shibboleth.oidc.security.jose.impl.ClientInformationKeyTransportEncryptionAlgorithmsLookupStrategy
A strategy to locate the algorithm ('alg') appropriate for the JWT to be encrypted.
clientSecret - Variable in class net.shibboleth.oidc.security.credential.BasicNimbusSecretCredential
Deprecated.
The client secret.
clientSecret - Variable in class net.shibboleth.oidc.security.credential.DefaultClientSecretCredential
The client_secret.
ClientSecret - Interface in net.shibboleth.oidc.saml.xmlobject
SAML2 OIDC metadata extension 'ClientSecret'.
ClientSecretBuilder - Class in net.shibboleth.oidc.saml.xmlobject.impl
Builder of ClientSecretImpl.
ClientSecretBuilder() - Constructor for class net.shibboleth.oidc.saml.xmlobject.impl.ClientSecretBuilder
 
ClientSecretCredential - Interface in net.shibboleth.oidc.security.credential
Credential wrapping a client_secret.
ClientSecretCredentialCriterion - Class in net.shibboleth.oidc.security.jose.criterion
A Criterion that holds a single, fixed, client_secret credential.
ClientSecretCredentialCriterion(ClientSecretCredential) - Constructor for class net.shibboleth.oidc.security.jose.criterion.ClientSecretCredentialCriterion
Constructor.
ClientSecretCriterionCredentialResolver - Class in net.shibboleth.oidc.security.credential.impl
Extracts a credential held inside the ClientSecretCredentialCriterion from the given criteria set.
ClientSecretCriterionCredentialResolver() - Constructor for class net.shibboleth.oidc.security.credential.impl.ClientSecretCriterionCredentialResolver
 
ClientSecretImpl - Class in net.shibboleth.oidc.saml.xmlobject.impl
Concrete implementation of ClientSecret.
ClientSecretImpl(String, String, String) - Constructor for class net.shibboleth.oidc.saml.xmlobject.impl.ClientSecretImpl
Constructor.
ClientSecretKeyReference - Interface in net.shibboleth.oidc.saml.xmlobject
SAML2 OIDC metadata extension 'ClientSecretReferenceKey'.
ClientSecretKeyReferenceBuilder - Class in net.shibboleth.oidc.saml.xmlobject.impl
ClientSecretKeyReferenceBuilder() - Constructor for class net.shibboleth.oidc.saml.xmlobject.impl.ClientSecretKeyReferenceBuilder
 
ClientSecretKeyReferenceImpl - Class in net.shibboleth.oidc.saml.xmlobject.impl
Concrete implementation of ClientSecretKeyReference.
ClientSecretKeyReferenceImpl(String, String, String) - Constructor for class net.shibboleth.oidc.saml.xmlobject.impl.ClientSecretKeyReferenceImpl
Constructor.
ClientSecretProvider - Class in net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider
Implementation of KeyInfoProvider which provides basic support for extracting a NimbusSecretCredential child of KeyInfo.
ClientSecretProvider() - Constructor for class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.ClientSecretProvider
 
ClientSecretReferenceCriterion - Class in net.shibboleth.oidc.metadata.criterion
A Criterion representing a reference to a client secret.
ClientSecretReferenceCriterion(String) - Constructor for class net.shibboleth.oidc.metadata.criterion.ClientSecretReferenceCriterion
Constructor.
ClientSecretReferenceProvider - Class in net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider
Implementation of KeyInfoProvider which provides basic support for extracting a NimbusSecretCredential child of KeyInfo.
ClientSecretReferenceProvider(Collection<ClientSecretValueResolver>) - Constructor for class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.ClientSecretReferenceProvider
Constructor.
ClientSecretValueResolver - Interface in net.shibboleth.oidc.metadata
A resolver that is capable of resolving client secret values (as Strings) which meet certain supplied criteria.
clientSecretValueResolvers - Variable in class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.ClientSecretReferenceProvider
The list of resolvers for resolving the values for client secrets.
clientUri - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Client URI for this entity.
clockSkew - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationTimeClaimsValidator
Positive clock skew adjustment to consider when checking auth_time is not in the future or has expired.
clockSkew - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.ExpiryClaimsValidator
Positive clock skew adjustment to consider when checking JWT expiration (Default value: 60 seconds).
clockSkew - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.IssuedAtClaimsValidator
Clock skew adjustment in both directions to consider still acceptable (Default value: 1 minute).
clockSkew - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierClaimsValidator
Clock skew adjustment in both directions to consider still acceptable (Default value: 1 minute).
clockSkew - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.NotBeforeClaimsValidator
Positive clock skew adjustment to consider when checking JWT not before and expiration (Default value: 60 seconds).
clone() - Method in class net.shibboleth.oidc.authn.principal.AuthenticationContextClassReferencePrincipal
codeChallenge - Variable in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
The authorisation code_challenge for Proof Key for Code Exchange.
codeChallengeMethod - Variable in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
The authorisation code_challenge_method used for Proof Key for Code Exchange.
CodeChallengeMethod(String) - Constructor for enum class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest.CodeChallengeMethod
Constructor.
codeVerifier - Variable in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
The authorisation code_verifier for Proof Key for Code Exchange.
collection - Variable in class net.shibboleth.oidc.security.credential.impl.CollectionJOSEObjectCredentialResolver
List of credentials held by this resolver.
collection - Variable in class net.shibboleth.oidc.security.credential.impl.ReturnAllCollectionJOSEObjectCredentialResolver
List of credentials held by this resolver.
CollectionJOSEObjectCredentialResolver - Class in net.shibboleth.oidc.security.credential.impl
An implementation of BasicJOSEObjectCredentialResolver that uses a Collection as the underlying credential source.
CollectionJOSEObjectCredentialResolver(List<Credential>) - Constructor for class net.shibboleth.oidc.security.credential.impl.CollectionJOSEObjectCredentialResolver
Constructor.
CollectionJOSEObjectCredentialResolver(Credential) - Constructor for class net.shibboleth.oidc.security.credential.impl.CollectionJOSEObjectCredentialResolver
Constructor.
compareTo(ProviderMetadataProviderContainer) - Method in class net.shibboleth.oidc.metadata.ProviderMetadataProviderContainer
compareTo(RelyingPartyClientInformationProvider) - Method in class net.shibboleth.oidc.metadata.RelyingPartyClientInformationProvider
composeSigningInput(JWSHeader, Payload) - Static method in class net.shibboleth.oidc.security.JWSAssemblyUtils
Compose the message that is to be signed.
computeManagementDataIfAbsent(I, Function<I, MetadataManagementData<I>>) - Method in interface net.shibboleth.oidc.metadata.DynamicBackingStore
Get the management data for the specified identifier.
computeManagementDataIfAbsent(I, Function<I, MetadataManagementData<I>>) - Method in class net.shibboleth.oidc.metadata.impl.DefaultDynamicBackingStore
Get the management data for the specified identifier.
computeNextRefreshDelay(Instant) - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
Computes the delay until the next refresh time based on the current metadata's expiration time and the refresh interval floor.
computeRefreshTriggerTime(Instant, Instant) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
Compute the refresh trigger time.
configs - Static variable in class net.shibboleth.oidc.saml.xmlobject.impl.XMLObjectProviderInitializer
Config resources.
configs - Variable in class net.shibboleth.oidc.security.jose.criterion.DecryptionConfigurationCriterion
The list of configuration instances.
configs - Variable in class net.shibboleth.oidc.security.jose.criterion.EncryptionConfigurationCriterion
The list of configuration instances.
configs - Variable in class net.shibboleth.oidc.security.jose.criterion.SignatureSigningConfigurationCriterion
The list of configuration instances.
configs - Variable in class net.shibboleth.oidc.security.jose.criterion.SignatureValidationConfigurationCriterion
The list of configuration instances.
configurationLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTDecryptionParameters
Strategy used to lookup a per-request DecryptionConfiguration list.
configurationLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
Strategy used to look up a per-request EncryptionConfiguration list.
configurationLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParameters
Strategy used to look up a per-request SignatureSigningConfiguration list.
configurationLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
Strategy used to look up a per-request SignatureSigningConfiguration list.
configurationLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureValidationParameters
Strategy used to lookup a per-request SignatureValidationConfiguration list.
configurationLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureValidationParametersHandler
Strategy used to lookup a per-request SignatureValidationConfiguration list.
Constants - Class in net.shibboleth.oidc.saml.xmlobject
Constants related to SAML 2.0 Metadata extension OAuthRPRoleDescriptorType.
Constants() - Constructor for class net.shibboleth.oidc.saml.xmlobject.Constants
Constructor.
content - Variable in class net.shibboleth.oidc.profile.messaging.JSONSuccessResponse
JSON content.
CONTENT_TYPE - Static variable in class net.shibboleth.oidc.metadata.impl.HTTPProviderConfigurationFetchingStrategy
The returned content_type, must be application/json see openid-connect-discovery section 4.
contentEncryptionKeyCredentialResolver - Variable in class net.shibboleth.oidc.security.jose.DecryptionParameters
The content encryption key (CEK) resolver.
contentEncryptionKeyCredentialResolver - Variable in class net.shibboleth.oidc.security.jose.impl.BasicDecryptionConfiguration
The content encryption key (CEK) resolver.
contentEncryptionKeyCredentialResolver - Variable in class net.shibboleth.oidc.security.jose.impl.BasicEncryptionConfiguration
The content encryption key (CEK) resolver.
context - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierRevocationValidator
Context in revocation cache.
CONTEXT_NAME - Static variable in class net.shibboleth.oidc.jwk.RemoteJwkSetCache
The context name in the StorageService.
CONTEXT_NAME - Static variable in class net.shibboleth.oidc.metadata.impl.BaseStorageServiceClientInformationComponent
The context name in the StorageService.
convertAndPublishToList(List<Credential>, List<JWK>) - Method in class net.shibboleth.oidc.profile.impl.FormOutboundKeySetResponseMessage
Converts the given credentials into JWK and adds all the successfully converted JWKs to the given list.
convertIntoListIfEnabled(String, List<String>) - Method in class net.shibboleth.oidc.security.jose.impl.ClientInformationSignatureSigningParametersResolver
Returns the given algorithm in a List if it was enabled in the list of enabled algorithms.
convertStringAlgorithmURIsToJwkAlgorithms(List<String>) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
Convert the algorithms represented as Strings into Nimbus Algorithms for later comparison.
convertStringEncryptionMethodURIsToEncryptionMethods(List<String>) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
Convert the encryption methods represented as Strings into Nimbus EncryptionMethods for later comparison.
copySymmetricCredentialWithNewSecret(JWKCredential, String, SecretKey) - Static method in class net.shibboleth.oidc.security.CredentialConversionUtil
Create a shallow copy of the input credential, replacing the secrete key and keyID with those supplied.
countClients(ClientInformationResolver) - Method in class net.shibboleth.oidc.metadata.impl.ChainingClientInformationResolver
Counts the clients found from the given resolver.
countClients(ProviderMetadataResolver) - Method in class net.shibboleth.oidc.metadata.impl.ChainingProviderMetadataResolver
Counts the clients found from the given resolver.
createdOwnTaskTimer - Variable in class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver
Whether we created our own task timer during object construction.
createExpirationTimeContext(MetadataType, Instant) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
Create an expiration time context from the given metadata, the min and max cache durations, and the instant representing 'now'.
createInstance() - Method in class net.shibboleth.oidc.profile.config.CredentialsListFactory
createLoadingContext() - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
Create a cache loading context based on the last refresh and last update time of the backing store.
createNewBackingStore() - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver
Create a new backing store instance for entity data.
createOwnSchedular - Variable in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
Whether we created our own schedular during object construction.
createParametersFromRequest(OIDCAuthenticationRequest) - Method in class net.shibboleth.oidc.profile.encoding.impl.AbstractOIDCMessageEncoder
Create a list of OAuth 2.0 authorization parameters from the OIDCAuthenticationRequest object.
createParametersFromRequestWithoutRequestObject(List<Pair<String, String>>, OIDCAuthenticationRequest) - Method in class net.shibboleth.oidc.profile.encoding.impl.AbstractOIDCMessageEncoder
Create the set of OAuth2.0 authorization and and OIDC authentication request parameters when no RequestObject has been built.
createParametersFromRequestWithRequestObject(List<Pair<String, String>>, OIDCAuthenticationRequest) - Method in class net.shibboleth.oidc.profile.encoding.impl.AbstractOIDCMessageEncoder
Create the set of OAuth2.0 authorization and and OIDC authentication request parameters when a RequestObject is present.
createStandardOAuthParameters(List<Pair<String, String>>, OIDCAuthenticationRequest) - Method in class net.shibboleth.oidc.profile.encoding.impl.AbstractOIDCMessageEncoder
Add the standard set of OAuth2 2.0 authorization parameters to the params list using the OAuth 2.0 request syntax.
credential - Variable in class net.shibboleth.oidc.security.jose.criterion.ClientSecretCredentialCriterion
The credential to hold.
CredentialConversionUtil - Class in net.shibboleth.oidc.security
Generic tool methods related to converting Credential to JWK.
CredentialConversionUtil() - Constructor for class net.shibboleth.oidc.security.CredentialConversionUtil
Private constructor.
credentialExpiresAt - Variable in class net.shibboleth.oidc.security.credential.BasicExpiringJWKCredential
When the credential expires in seconds since 1970-01-01T0:0:0Z.
credentialExpiresAt - Variable in class net.shibboleth.oidc.security.credential.BasicExpiringJWTSharedSecretCredentialFactoryBean
When the credential expires in seconds since 1970-01-01T0:0:0Z.
credentialResolver - Variable in class net.shibboleth.oidc.security.impl.ExplicitKeySignedJWTTrustEngine
Resolver used for resolving trusted credentials.
credentials - Variable in class net.shibboleth.oidc.profile.config.CredentialsListFactory
The credentials which may contain null elements.
CredentialsListFactory - Class in net.shibboleth.oidc.profile.config
A factory that returns a list of credentials which does not contain any null elements.
CredentialsListFactory(List<Credential>) - Constructor for class net.shibboleth.oidc.profile.config.CredentialsListFactory
Constructor.
credentialsToPublishLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.FormOutboundKeySetResponseMessage
Strategy used to locate the list of credentials to publish.
credentialSupportsAlgorithm(Credential, String) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
Evaluate whether the specified credential is supported for use with the specified algorithm URI.
credentialSupportsSigningAlgorithm(Credential, String) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver
Evaluate whether the specified credential is supported for use with the specified signing algorithm.
credentialToKey(Credential) - Static method in class net.shibboleth.oidc.security.CredentialConversionUtil
Converts credential to JWK with only *public* components.
criteriaSetLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.navigate.ResolverBasedRegistrationMetadataPolicyLookupFunction
The lookup strategy for the criteria set used for the metadata policy resolver.
criteriaToIdentifierStrategy - Variable in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
Map criteria to identifiers to use as keys to the backing store.
criteriaToIdentifierStrategy - Variable in class net.shibboleth.oidc.metadata.cache.impl.BaseMetadataCacheBuilderSpec
Map criteria to identifiers to use as keys to the backing store.
criterionPredicateRegistry - Variable in class net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver
Registry used in resolving predicates from criteria.
cspDigester - Variable in class net.shibboleth.oidc.profile.encoding.impl.HTTPPostAuthnRequestEncoder
CSP digester for generating CSP hashes.
cspNonceGenerator - Variable in class net.shibboleth.oidc.profile.encoding.impl.HTTPPostAuthnRequestEncoder
CSP nonce generator.
CustomMetadataPolicyOperator - Interface in net.shibboleth.oidc.metadata.policy.impl
Interface describing a custom policy operator to be used with MetadataPolicy objects.
customOperators - Variable in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyEnforcer
Map of custom metadata policy operators that are applied after the standard operators.
customOperators - Variable in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyValidator
Map of custom metadata policy operators that are applied after the standard operators.
customOperators - Variable in class net.shibboleth.oidc.metadata.policy.MetadataPolicy.Builder
The map of any other operators not directly mapped.
customOperators - Variable in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
The map of any other operators not directly mapped.
CustomRedirectUriValidationStrategyLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
A function that returns OIDCSSOProfileConfiguration.getCustomRedirectUriValidationStrategy(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
CustomRedirectUriValidationStrategyLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.CustomRedirectUriValidationStrategyLookupFunction
 
customRedirectUriValidationStrategyLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Lookup function to supply strategy bi-predicate for custom valdation of redirect URI in the request.

D

DataEncryptionAlgorithmCriterion - Class in net.shibboleth.oidc.security.credential.impl
An implementation of an Criterion which specifies content encryption algorithm criteria.
DataEncryptionAlgorithmCriterion(String) - Constructor for class net.shibboleth.oidc.security.credential.impl.DataEncryptionAlgorithmCriterion
Constructor.
dataEncryptionAlgorithmLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration
A lookup function for the data encryption algorithm in the client metadata.
dataEncryptionAlgorithms - Variable in class net.shibboleth.oidc.security.jose.impl.BasicEncryptionConfiguration
Data encryption algorithm URIs.
dataEncryptionAlgorithmsLookupStrategy - Variable in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
A lookup strategy to locate data encryption algorithms from the given criteria set and includesExcludes predicate.
dataEncryptionAlgorithmURI - Variable in class net.shibboleth.oidc.security.jose.EncryptionParameters
The EncryptedData encryption algorithm URI.
dataEncryptionCredential - Variable in class net.shibboleth.oidc.security.jose.EncryptionParameters
The EncryptedData encryption credential.
DateBasedJWTClaimAuditExtractor - Class in net.shibboleth.oidc.profile.audit.impl
A JWT claim extractor function that returns a formatted String representation of the JSON Date.
DateBasedJWTClaimAuditExtractor() - Constructor for class net.shibboleth.oidc.profile.audit.impl.DateBasedJWTClaimAuditExtractor
Constructor.
dateTimeFormatter - Variable in class net.shibboleth.oidc.profile.audit.impl.DateBasedJWTClaimAuditExtractor
Formatter for date/time fields.
decodeValues(ProfileRequestContext, Object, TranscodingRule) - Method in class net.shibboleth.oidc.attribute.transcoding.AbstractOIDCAttributeTranscoder
Subclasses should override this method to perform specific claim value decoding into IdPAttributeValue objects.
decodeValues(ProfileRequestContext, Object, TranscodingRule) - Method in class net.shibboleth.oidc.attribute.transcoding.impl.OIDCByteAttributeTranscoder
Subclasses should override this method to perform specific claim value decoding into IdPAttributeValue objects.
decodeValues(ProfileRequestContext, Object, TranscodingRule) - Method in class net.shibboleth.oidc.attribute.transcoding.impl.OIDCScopedStringAttributeTranscoder
Subclasses should override this method to perform specific claim value decoding into IdPAttributeValue objects.
decodeValues(ProfileRequestContext, Object, TranscodingRule) - Method in class net.shibboleth.oidc.attribute.transcoding.impl.OIDCStringAttributeTranscoder
Subclasses should override this method to perform specific claim value decoding into IdPAttributeValue objects.
decrypt(EncryptedJWT) - Method in class net.shibboleth.oidc.security.impl.JWETokenDecrypter
Decrypt a JWE object using credentials resolved from the CEK and KEK resolvers inside the decryption parameters.
decrypter - Variable in class net.shibboleth.oidc.security.impl.DecryptJWE
The decryption object.
DecryptionConfiguration - Interface in net.shibboleth.oidc.security.jose
The configuration information to use when decrypting JWEs.
DecryptionConfigurationCriterion - Class in net.shibboleth.oidc.security.jose.criterion
Criterion which holds one or more instances of a DecryptionConfiguration.
DecryptionConfigurationCriterion(List<DecryptionConfiguration>) - Constructor for class net.shibboleth.oidc.security.jose.criterion.DecryptionConfigurationCriterion
Constructor.
DecryptionConfigurationCriterion(DecryptionConfiguration...) - Constructor for class net.shibboleth.oidc.security.jose.criterion.DecryptionConfigurationCriterion
Constructor.
decryptionParameters - Variable in class net.shibboleth.oidc.security.jose.context.SecurityParametersContext
Decryption parameters.
DecryptionParameters - Class in net.shibboleth.oidc.security.jose
Describes the decryption parameters the system is required to use to decrypt a JWE.
DecryptionParameters() - Constructor for class net.shibboleth.oidc.security.jose.DecryptionParameters
Constructor .
DecryptionParametersResolver - Interface in net.shibboleth.oidc.security.jose
An interface for components which resolve DecryptionParameters based on a CriteriaSet.
DecryptJWE - Class in net.shibboleth.oidc.security.impl
Decrypt the located JWE using the decryption parameters stored in the security context.
DecryptJWE() - Constructor for class net.shibboleth.oidc.security.impl.DecryptJWE
Constructor.
decryptUsingDirectEncryption(EncryptedJWT) - Method in class net.shibboleth.oidc.security.impl.JWETokenDecrypter
Decrypt the encrypted JWT using direct encryption.
decryptUsingKeyAgreement(EncryptedJWT) - Method in class net.shibboleth.oidc.security.impl.JWETokenDecrypter
Decrypt the encrypted JWT by computing the content encryption key using Elliptic Curve Diffie-Hellman key agreement.
decryptUsingKeyEncryption(EncryptedJWT) - Method in class net.shibboleth.oidc.security.impl.JWETokenDecrypter
Decrypt the encrypted JWT by first decrypting the content encryption key using one of the (asymmetric) key encryption keys resolved by the DecryptionParameters.getKEKCredentialResolver() resolver.
decryptUsingKeyWrapping(EncryptedJWT) - Method in class net.shibboleth.oidc.security.impl.JWETokenDecrypter
Decrypt the encrypted JWT by first decrypting the wrapped content encryption key using one of the shared key wrapping keys derived from a symmetric key resolved by the DecryptionParameters.getKEKCredentialResolver() resolver.
DEFAULT_CONTENT_TYPES - Static variable in class net.shibboleth.oidc.metadata.impl.AbstractDynamicHTTPFetchingStrategy
Default list of supported content MIME types.
DEFAULT_ELEMENT_LOCAL_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.ClientSecret
Element name, no namespace.
DEFAULT_ELEMENT_LOCAL_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.ClientSecretKeyReference
Element name, no namespace.
DEFAULT_ELEMENT_LOCAL_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.DefaultAcrValue
Element name, no namespace.
DEFAULT_ELEMENT_LOCAL_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.JwksData
Element name, no namespace.
DEFAULT_ELEMENT_LOCAL_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.JwksUri
Element name, no namespace.
DEFAULT_ELEMENT_LOCAL_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.PostLogoutRedirectUri
Element name, no namespace.
DEFAULT_ELEMENT_LOCAL_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.RequestUri
Element name, no namespace.
DEFAULT_ELEMENT_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.ClientSecret
Default element name.
DEFAULT_ELEMENT_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.ClientSecretKeyReference
Default element name.
DEFAULT_ELEMENT_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.DefaultAcrValue
Default element name.
DEFAULT_ELEMENT_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.JwksData
Default element name.
DEFAULT_ELEMENT_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.JwksUri
Default element name.
DEFAULT_ELEMENT_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.PostLogoutRedirectUri
Default element name.
DEFAULT_ELEMENT_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.RequestUri
Default element name.
DEFAULT_ERROR_CODE - Static variable in class net.shibboleth.oidc.profile.impl.AbstractBuildErrorResponseFromEvent
Default value for the error code in the error response messages.
DEFAULT_HTTP_STATUS_CODE - Static variable in class net.shibboleth.oidc.profile.impl.AbstractBuildErrorResponseFromEvent
Default value for the HTTP response status code in the HTTP responses.
DEFAULT_MAX_AGE_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Attribute local name.
DEFAULT_OPENID_PROVIDER_WELL_KNOWN_PATH - Static variable in class net.shibboleth.oidc.metadata.impl.HTTPProviderConfigurationFetchingStrategy
The default well-known path for OpenID Provider metadata.
DEFAULT_OPENID_SCOPE - Static variable in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
The default OpenID scope.
DEFAULT_SECRET_KEY_NAME - Static variable in class net.shibboleth.oidc.security.credential.DefaultClientSecretCredential
Default client_secret keyname.
DEFAULT_TEMPLATE_ID - Static variable in class net.shibboleth.oidc.profile.encoding.impl.HTTPPostAuthnRequestEncoder
Default template ID for using FORM POST request type.
DefaultAcrValue - Interface in net.shibboleth.oidc.saml.xmlobject
SAML2 OIDC metadata extension 'DefaultAcrValue'.
DefaultAcrValueBuilder - Class in net.shibboleth.oidc.saml.xmlobject.impl
DefaultAcrValueBuilder() - Constructor for class net.shibboleth.oidc.saml.xmlobject.impl.DefaultAcrValueBuilder
 
DefaultAcrValueImpl - Class in net.shibboleth.oidc.saml.xmlobject.impl
Concrete implementation of DefaultAcrValue.
DefaultAcrValueImpl(String, String, String) - Constructor for class net.shibboleth.oidc.saml.xmlobject.impl.DefaultAcrValueImpl
Constructor.
defaultAcrValues - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Default ACR values for this entity.
defaultAlgorithmValue - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler
The default algorithm value used if lookup strategy returned null.
defaultAlgorithmValue - Variable in class net.shibboleth.oidc.security.impl.ClientInformationJWTTrustEngine
The default algorithm value used if lookup strategy returned null.
defaultAlgorithmValue - Variable in class net.shibboleth.oidc.security.jose.impl.ClientInformationSignatureSigningParametersResolver
The default algorithm value used if lookup strategy returned null.
defaultAuthenticationContextsLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Lookup function to supply default authentication methods.
DefaultBatchBackingStore<I,T> - Class in net.shibboleth.oidc.metadata.impl
Default implementation of a BatchBackingStore.
DefaultBatchBackingStore() - Constructor for class net.shibboleth.oidc.metadata.impl.DefaultBatchBackingStore
 
DefaultClientSecretCredential - Class in net.shibboleth.oidc.security.credential
A basic implementation of ClientSecretCredential.
DefaultClientSecretCredential(String) - Constructor for class net.shibboleth.oidc.security.credential.DefaultClientSecretCredential
Constructor.
DefaultClientSecretCredential(String, String) - Constructor for class net.shibboleth.oidc.security.credential.DefaultClientSecretCredential
Constructor.
defaultCode - Variable in class net.shibboleth.oidc.profile.impl.AbstractBuildErrorResponseFromEvent
The code for unmapped events.
DefaultDataEncryptionAlgorithmsLookupStrategy - Class in net.shibboleth.oidc.security.jose.impl
A BiFunction which pulls data encryption (content encryption) algorithms to use from the encryption configuration and filters them.
DefaultDataEncryptionAlgorithmsLookupStrategy(AlgorithmRegistry) - Constructor for class net.shibboleth.oidc.security.jose.impl.DefaultDataEncryptionAlgorithmsLookupStrategy
Constructor.
DefaultDecryptionParametersResolver - Class in net.shibboleth.oidc.security.jose.impl
Basic implementation of DecryptionParametersResolver.
DefaultDecryptionParametersResolver() - Constructor for class net.shibboleth.oidc.security.jose.impl.DefaultDecryptionParametersResolver
 
DefaultDynamicBackingStore<I,T> - Class in net.shibboleth.oidc.metadata.impl
Default implementation of a DynamicBackingStore.
DefaultDynamicBackingStore() - Constructor for class net.shibboleth.oidc.metadata.impl.DefaultDynamicBackingStore
Constructor.
DefaultEncryptionParametersResolver - Class in net.shibboleth.oidc.security.jose.impl
Default implementation of an EncryptionParametersResolver.
DefaultEncryptionParametersResolver() - Constructor for class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
Constructor.
DefaultFileLoadingStrategy - Class in net.shibboleth.oidc.metadata.cache.impl
Default strategy for loading information from a file.
DefaultFileLoadingStrategy(Resource) - Constructor for class net.shibboleth.oidc.metadata.cache.impl.DefaultFileLoadingStrategy
Constructor.
DefaultJSONMapParsingStrategy<V> - Class in net.shibboleth.oidc.metadata.cache.impl
Deserializes a UTF-8 JSON string into a Map.
DefaultJSONMapParsingStrategy(ObjectMapper, Class<V>) - Constructor for class net.shibboleth.oidc.metadata.cache.impl.DefaultJSONMapParsingStrategy
Constructor.
DefaultJSONMapParsingStrategy(Class<V>) - Constructor for class net.shibboleth.oidc.metadata.cache.impl.DefaultJSONMapParsingStrategy
Constructor.
DefaultKeyTransportEncryptionAlgorithmsLookupStrategy - Class in net.shibboleth.oidc.security.jose.impl
A BiFunction that retrieves and filters the key transport encryption algorithms from the EncryptionConfiguration inside the criteria set.
DefaultKeyTransportEncryptionAlgorithmsLookupStrategy(AlgorithmRegistry) - Constructor for class net.shibboleth.oidc.security.jose.impl.DefaultKeyTransportEncryptionAlgorithmsLookupStrategy
Constructor.
defaultMaxAge - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Default max age for this entity.
DefaultMetadataPolicyEnforcer - Class in net.shibboleth.oidc.metadata.policy.impl
A function that applies the given MetadataPolicy to the given object.
DefaultMetadataPolicyEnforcer() - Constructor for class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyEnforcer
Constructor.
DefaultMetadataPolicyOperator - Class in net.shibboleth.oidc.metadata.policy.impl
A CustomMetadataPolicyOperator implementation that uses customizable Predicate for validating the metadata policy and BiFunction for performing the operation.
DefaultMetadataPolicyOperator() - Constructor for class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyOperator
 
DefaultMetadataPolicyResponseHandler - Class in net.shibboleth.oidc.metadata.policy.impl
The response handler for parsing the metadata policy document into a map.
DefaultMetadataPolicyResponseHandler() - Constructor for class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyResponseHandler
 
DefaultMetadataPolicyValidator - Class in net.shibboleth.oidc.metadata.policy.impl
A function that verifies that the map of MetadataPolicy entries meets the restrictions defined in the OIDC federation specification 1.0 (draft 17 / September 2021):
DefaultMetadataPolicyValidator() - Constructor for class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyValidator
Constructor.
DefaultOAuth2PushedAuthorizationRequestConfiguration - Class in net.shibboleth.oidc.profile.oauth2.config.impl
Implementation of a profile configuration for the OAuth2 Pushed Authorization Requests (PAR).
DefaultOAuth2PushedAuthorizationRequestConfiguration() - Constructor for class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2PushedAuthorizationRequestConfiguration
Constructor.
DefaultOAuth2PushedAuthorizationRequestConfiguration(String) - Constructor for class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2PushedAuthorizationRequestConfiguration
Creates a new configuration instance.
DefaultOAuth2TokenAudienceConfiguration - Class in net.shibboleth.oidc.profile.oauth2.config.impl
Implementation of an OAuth 2.0 token "audience" profile configuration.
DefaultOAuth2TokenAudienceConfiguration() - Constructor for class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
Constructor.
DefaultOAuth2TokenAudienceConfiguration(String) - Constructor for class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
Creates a new configuration instance.
DefaultOAuth2TokenConfiguration - Class in net.shibboleth.oidc.profile.oauth2.config.impl
Implementation of an OIDC-aware OAuth 2 token endpoint profile configuration.
DefaultOAuth2TokenConfiguration() - Constructor for class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
Constructor.
DefaultOAuth2TokenConfiguration(String) - Constructor for class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
Creates a new configuration instance.
DefaultOAuth2TokenIntrospectionConfiguration - Class in net.shibboleth.oidc.profile.oauth2.config.impl
Implementation of a profile configuration for the OAuth2 Token Introspection.
DefaultOAuth2TokenIntrospectionConfiguration() - Constructor for class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenIntrospectionConfiguration
Constructor.
DefaultOAuth2TokenIntrospectionConfiguration(String) - Constructor for class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenIntrospectionConfiguration
Creates a new configuration instance.
DefaultOAuth2TokenRevocationConfiguration - Class in net.shibboleth.oidc.profile.oauth2.config.impl
Implementation of a profile configuration for OAuth2 Token Revocation.
DefaultOAuth2TokenRevocationConfiguration() - Constructor for class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenRevocationConfiguration
Constructor.
DefaultOAuth2TokenRevocationConfiguration(String) - Constructor for class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenRevocationConfiguration
Creates a new configuration instance.
DefaultOIDCAuthorizationConfiguration - Class in net.shibboleth.oidc.profile.config.impl
Implementation of a profile configuration for the OpenID Connect authorization endpoint.
DefaultOIDCAuthorizationConfiguration() - Constructor for class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Constructor.
DefaultOIDCAuthorizationConfiguration(String) - Constructor for class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Creates a new configuration instance.
DefaultOIDCDynamicRegistrationConfiguration - Class in net.shibboleth.oidc.profile.config.impl
Implemenation of a profile configuration for the OpenID Connect dynamic client registration.
DefaultOIDCDynamicRegistrationConfiguration() - Constructor for class net.shibboleth.oidc.profile.config.impl.DefaultOIDCDynamicRegistrationConfiguration
Constructor.
DefaultOIDCDynamicRegistrationConfiguration(String) - Constructor for class net.shibboleth.oidc.profile.config.impl.DefaultOIDCDynamicRegistrationConfiguration
Creates a new configuration instance.
DefaultOIDCLogoutConfiguration - Class in net.shibboleth.oidc.profile.config.impl
Implementation of a profile configuration for the OpenID Connect logout.
DefaultOIDCLogoutConfiguration() - Constructor for class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
Constructor.
DefaultOIDCLogoutConfiguration(String) - Constructor for class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
Creates a new configuration instance.
DefaultOIDCProviderInformationConfiguration - Class in net.shibboleth.oidc.profile.config.impl
Implementation of a profile configuration for the OpenID Connect Provider Configuration.
DefaultOIDCProviderInformationConfiguration() - Constructor for class net.shibboleth.oidc.profile.config.impl.DefaultOIDCProviderInformationConfiguration
Constructor.
DefaultOIDCProviderInformationConfiguration(String) - Constructor for class net.shibboleth.oidc.profile.config.impl.DefaultOIDCProviderInformationConfiguration
Creates a new configuration instance.
DefaultOIDCProviderMetadataCriteriaToIdentifierStrategy - Class in net.shibboleth.oidc.metadata.cache.impl
Strategy for extracting the IssuerIDCriterion from a CriteriaSet.
DefaultOIDCProviderMetadataCriteriaToIdentifierStrategy() - Constructor for class net.shibboleth.oidc.metadata.cache.impl.DefaultOIDCProviderMetadataCriteriaToIdentifierStrategy
 
DefaultOIDCProviderMetadataExpirationTimeStrategy - Class in net.shibboleth.oidc.metadata.cache.impl
Strategy for computing an expiry time for OIDCProviderMetadata.
DefaultOIDCProviderMetadataExpirationTimeStrategy() - Constructor for class net.shibboleth.oidc.metadata.cache.impl.DefaultOIDCProviderMetadataExpirationTimeStrategy
 
DefaultOIDCProviderMetadataIdentifierExtractionStrategy - Class in net.shibboleth.oidc.metadata.cache.impl
Strategy for finding the Issuer of the given OIDCProviderMetadata.
DefaultOIDCProviderMetadataIdentifierExtractionStrategy() - Constructor for class net.shibboleth.oidc.metadata.cache.impl.DefaultOIDCProviderMetadataIdentifierExtractionStrategy
 
DefaultOIDCProviderMetadataParsingStrategy - Class in net.shibboleth.oidc.metadata.cache.impl
Parse a raw byte array into a *single* OIDCProviderMetadata object.
DefaultOIDCProviderMetadataParsingStrategy() - Constructor for class net.shibboleth.oidc.metadata.cache.impl.DefaultOIDCProviderMetadataParsingStrategy
 
DefaultOIDCPublishKeySetConfiguration - Class in net.shibboleth.oidc.profile.config.impl
Implementation of a profile configuration for publishing OP key set.
DefaultOIDCPublishKeySetConfiguration() - Constructor for class net.shibboleth.oidc.profile.config.impl.DefaultOIDCPublishKeySetConfiguration
Constructor.
DefaultOIDCPublishKeySetConfiguration(String) - Constructor for class net.shibboleth.oidc.profile.config.impl.DefaultOIDCPublishKeySetConfiguration
Creates a new configuration instance.
DefaultOIDCUserInfoConfiguration - Class in net.shibboleth.oidc.profile.config.impl
Implementation of a profile configuration for the OpenID Connect core protocol userinfo endpoint.
DefaultOIDCUserInfoConfiguration() - Constructor for class net.shibboleth.oidc.profile.config.impl.DefaultOIDCUserInfoConfiguration
Constructor.
DefaultOIDCUserInfoConfiguration(String) - Constructor for class net.shibboleth.oidc.profile.config.impl.DefaultOIDCUserInfoConfiguration
Creates a new configuration instance.
DefaultResourceLoadingStrategy - Class in net.shibboleth.oidc.metadata.cache.impl
Default strategy for loading information from a resource.
DefaultResourceLoadingStrategy(Resource) - Constructor for class net.shibboleth.oidc.metadata.cache.impl.DefaultResourceLoadingStrategy
Constructor.
defaultResponseMode - Variable in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
The default response mode for the given response_type.
defaultResultOnWrongType - Variable in class net.shibboleth.oidc.metadata.AbstractEvaluableMetadataCriterion
What should the default return type be if the wrong type is supplied.
DefaultSourceMetadataExpirationTimeStrategy - Class in net.shibboleth.oidc.metadata.cache.impl
Simple strategy for computing an expiry time by adding an expiry duration to the current time.
DefaultSourceMetadataExpirationTimeStrategy(Duration) - Constructor for class net.shibboleth.oidc.metadata.cache.impl.DefaultSourceMetadataExpirationTimeStrategy
Constructor.
defaultStatusCode - Variable in class net.shibboleth.oidc.profile.impl.AbstractBuildErrorResponseFromEvent
The status code for unmapped events.
defaultValue - Variable in class net.shibboleth.oidc.metadata.policy.MetadataPolicy.Builder
The default value for the claim to be used in case none is specified.
defaultValue - Variable in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
The default value for the claim to be used in case none is specified.
DefaultWellKnownPathCompositionStrategy() - Constructor for class net.shibboleth.oidc.metadata.impl.HTTPProviderConfigurationFetchingStrategy.DefaultWellKnownPathCompositionStrategy
 
DeniedUserInfoAttributesLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
DeniedUserInfoAttributesLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.DeniedUserInfoAttributesLookupFunction
 
deniedUserInfoAttributesLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Lookup function to supply attribute IDs to omit from UserInfo token.
deniedUserInfoAttributesLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCUserInfoConfiguration
Lookup function to supply attribute IDs to omit from UserInfo token.
deriveClientSecretCredential(ClientSecretCredential, CriteriaSet) - Method in class net.shibboleth.oidc.security.credential.impl.BasicJOSEObjectCredentialResolver
Use the usage type and algorithm information in the criteria to build a suitable signing or encryption credential.
deriveSymmetricKeyForAlgAndEnc(JWKCredential, JWEAlgorithm, EncryptionMethod) - Static method in class net.shibboleth.oidc.security.credential.JWKCredentialSupport
Derive a *new* symmetric key credential suitable for the given 'alg' and 'enc' algorithms.
destroyClientInformation(ClientID) - Method in interface net.shibboleth.oidc.metadata.ClientInformationManager
Invalidates or otherwise removes a ClientInformation from persistent storage.
destroyClientInformation(ClientID) - Method in class net.shibboleth.oidc.metadata.impl.StorageServiceClientInformationManager
Invalidates or otherwise removes a ClientInformation from persistent storage.
display - Variable in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
ASCII string value that specifies how the Authorization Server displays the authentication and consent user interface pages to the End-User.
displayLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Lookup function to determine the optional display parameter value of an authentication request.
doCreateInstance() - Method in class net.shibboleth.oidc.security.credential.BasicClientSecretCredentialFactoryBean
doCreateInstance() - Method in class net.shibboleth.oidc.security.credential.BasicExpiringJWTSharedSecretCredentialFactoryBean
doCreateInstance() - Method in class net.shibboleth.oidc.security.credential.BasicJWKCredentialFactoryBean
doDecode() - Method in class net.shibboleth.oidc.profile.decoding.impl.HTTPPostAuthnResponseDecoder
 
doDecode() - Method in class net.shibboleth.oidc.profile.decoding.impl.HTTPRedirectAuthnResponseDecoder
 
doDecode(ProfileRequestContext, JSONObject, TranscodingRule) - Method in class net.shibboleth.oidc.attribute.transcoding.AbstractOIDCAttributeTranscoder
doDestroy() - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
 
doDestroy() - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
doDestroy() - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver
 
doDestroy() - Method in class net.shibboleth.oidc.metadata.impl.ChainingClientInformationResolver
doDestroy() - Method in class net.shibboleth.oidc.metadata.impl.ChainingProviderMetadataResolver
doDestroy() - Method in class net.shibboleth.oidc.metadata.impl.PropertiesClientSecretValueResolver
doDestroy() - Method in class net.shibboleth.oidc.metadata.impl.ResolverServiceClientSecretValueResolver
doEncode() - Method in class net.shibboleth.oidc.profile.encoding.impl.HTTPPostAuthnRequestEncoder
doEncode() - Method in class net.shibboleth.oidc.profile.encoding.impl.HTTPRedirectAuthnRequestEncoder
doEncode() - Method in class net.shibboleth.oidc.profile.encoding.impl.SimpleNimbusResponseEncoder
doEncode(ProfileRequestContext, IdPAttribute, Class<? extends JSONObject>, TranscodingRule) - Method in class net.shibboleth.oidc.attribute.transcoding.AbstractOIDCAttributeTranscoder
doExecute(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.impl.AbstractBuildErrorResponseFromEvent
doExecute(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.impl.FormOutboundKeySetResponseMessage
 
doExecute(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTDecryptionParameters
 
doExecute(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
 
doExecute(ProfileRequestContext) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration
doExecute(ProfileRequestContext) - Method in class net.shibboleth.oidc.security.impl.DecryptJWE
doInitialize() - Method in class net.shibboleth.oidc.jwk.RemoteJwkSetCache
doInitialize() - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
 
doInitialize() - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
 
doInitialize() - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
 
doInitialize() - Method in class net.shibboleth.oidc.metadata.cache.impl.FetchThroughMetadataCache
doInitialize() - Method in class net.shibboleth.oidc.metadata.impl.AbstractDynamicHTTPFetchingStrategy
doInitialize() - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver
doInitialize() - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver
doInitialize() - Method in class net.shibboleth.oidc.metadata.impl.BaseStorageServiceClientInformationComponent
This method checks to ensure that the StorageService back-end is not null.
doInitialize() - Method in class net.shibboleth.oidc.metadata.impl.ChainingClientInformationResolver
doInitialize() - Method in class net.shibboleth.oidc.metadata.impl.ChainingProviderMetadataResolver
doInitialize() - Method in class net.shibboleth.oidc.metadata.impl.FilesystemClientInformationResolver
doInitialize() - Method in class net.shibboleth.oidc.metadata.impl.PropertiesClientSecretValueResolver
doInitialize() - Method in class net.shibboleth.oidc.metadata.impl.ResolverServiceClientSecretValueResolver
doInitialize() - Method in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyOperator
 
doInitialize() - Method in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyResponseHandler
doInitialize() - Method in class net.shibboleth.oidc.metadata.policy.impl.MetadataPolicyViaLocationFetchingStrategy
doInitialize() - Method in class net.shibboleth.oidc.metadata.ProviderMetadataProviderContainer
doInitialize() - Method in class net.shibboleth.oidc.metadata.RelyingPartyClientInformationProvider
doInitialize() - Method in class net.shibboleth.oidc.profile.audit.impl.AbstractClaimsSetAuditExtractor
doInitialize() - Method in class net.shibboleth.oidc.profile.encoding.impl.OIDCResponseEncoderFactory
doInitialize() - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTDecryptionParameters
doInitialize() - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
 
doInitialize() - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParameters
doInitialize() - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
doInitialize() - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureValidationParameters
doInitialize() - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureValidationParametersHandler
doInitialize() - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration
doInitialize() - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler
doInitialize() - Method in class net.shibboleth.oidc.security.impl.DecryptJWE
doInitialize() - Method in class net.shibboleth.oidc.security.impl.EncryptJWTHandler
 
doInitialize() - Method in class net.shibboleth.oidc.security.impl.JWTMessageSignatureSecurityHandler
doInitialize() - Method in class net.shibboleth.oidc.security.impl.SignJWTHandler
 
doInitialize() - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AccessTokenHashValidator
 
doInitialize() - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ACRClaimsValidator
 
doInitialize() - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AudienceClaimsValidator
doInitialize() - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ChainingJWTClaimsValidator
doInitialize() - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ExactMatchClaimsValidator
doInitialize() - Method in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierClaimsValidator
doInitialize() - Method in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierRevocationValidator
doInvoke(MessageContext) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
doInvoke(MessageContext) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureValidationParametersHandler
doInvoke(MessageContext) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler
doInvoke(MessageContext) - Method in class net.shibboleth.oidc.security.impl.EncryptJWTHandler
 
doInvoke(MessageContext) - Method in class net.shibboleth.oidc.security.impl.JWTMessageSignatureSecurityHandler
doInvoke(MessageContext) - Method in class net.shibboleth.oidc.security.impl.SignJWTHandler
 
doLookup(ClaimsSet) - Method in class net.shibboleth.oidc.profile.audit.impl.AbstractClaimsSetAuditExtractor
Implemented to perform the actual lookup.
doLookup(ClaimsSet) - Method in class net.shibboleth.oidc.profile.audit.impl.DateBasedJWTClaimAuditExtractor
Implemented to perform the actual lookup.
doLookup(ClaimsSet) - Method in class net.shibboleth.oidc.profile.audit.impl.StringBasedJWTClaimAuditExtractor
Implemented to perform the actual lookup.
doLookup(ClaimsSet) - Method in class net.shibboleth.oidc.profile.audit.impl.StringListBasedJWTClaimAuditExtractor
Implemented to perform the actual lookup.
doMergeForTwoLists(List<?>, List<?>, boolean) - Static method in class net.shibboleth.oidc.metadata.policy.impl.MetadataPolicyHelper
Merges two metadata policy list values.
doMergeForTwoObjects(Object, Object, boolean) - Static method in class net.shibboleth.oidc.metadata.policy.impl.MetadataPolicyHelper
Merges two metadata policy values that can be either single valued or lists.
doParse(Element, ParserContext, Map<String, Object>) - Method in class net.shibboleth.oidc.attribute.resolver.spring.enc.impl.BaseOIDCAttributeEncoderParser
doParse(Element, ParserContext, Map<String, Object>) - Method in class net.shibboleth.oidc.attribute.resolver.spring.enc.impl.OIDCScopedStringEncoderParser
doParse(Element, ParserContext, Map<String, Object>) - Method in class net.shibboleth.oidc.attribute.resolver.spring.enc.impl.OIDCStringEncoderParser
doParse(Element, ParserContext, BeanDefinitionBuilder) - Method in class net.shibboleth.oidc.profile.spring.relyingparty.metadata.filter.impl.ClientInformationParser
doPostEncode(OIDCAuthenticationRequest, HttpServletResponse) - Method in class net.shibboleth.oidc.profile.encoding.impl.HTTPPostAuthnRequestEncoder
Construct form POST.
doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.impl.AbstractBuildErrorResponseFromEvent
doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.impl.FormOutboundKeySetResponseMessage
 
doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
 
doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParameters
doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration
doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.oidc.security.impl.DecryptJWE
doPreInvoke(MessageContext) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
doPreInvoke(MessageContext) - Method in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler
doPreInvoke(MessageContext) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler
doPreInvoke(MessageContext) - Method in class net.shibboleth.oidc.security.impl.EncryptJWTHandler
 
doPreInvoke(MessageContext) - Method in class net.shibboleth.oidc.security.impl.JWTMessageSignatureSecurityHandler
doPreInvoke(MessageContext) - Method in class net.shibboleth.oidc.security.impl.SignJWTHandler
doTest(T) - Method in class net.shibboleth.oidc.metadata.AbstractEvaluableMetadataCriterion
Evaluates the predicate on the given argument.
doValidate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.jwt.claims.AbstractClaimsValidator
Perform validation of the given claims supported by the supplied context.
doValidate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AccessTokenHashValidator
 
doValidate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ACRClaimsValidator
 
doValidate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AudienceClaimsValidator
Perform validation of the given claims supported by the supplied context.
doValidate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationTimeClaimsValidator
 
doValidate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ExactMatchClaimsValidator
Perform validation of the given claims supported by the supplied context.
doValidate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ExpiryClaimsValidator
Perform validation of the given claims supported by the supplied context.
doValidate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.FunctionClaimsValidator
Perform validation of the given claims supported by the supplied context.
doValidate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.IssuedAtClaimsValidator
Perform validation of the given claims supported by the supplied context.
doValidate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierClaimsValidator
Perform validation of the given claims supported by the supplied context.
doValidate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierRevocationValidator
Perform validation of the given claims supported by the supplied context.
doValidate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.NotBeforeClaimsValidator
Perform validation of the given claims supported by the supplied context.
doValidate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ProhibitedClaimsValidator
Perform validation of the given claims supported by the supplied context.
doValidate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.RequiredClaimsValidator
Perform validation of the given claims supported by the supplied context.
doValidate(SignedJWT, CriteriaSet) - Method in class net.shibboleth.oidc.security.impl.BaseSignedJWTTrustEngine
Validate the signed JWT using the supplied trust criteria.
doValidate(SignedJWT, CriteriaSet) - Method in class net.shibboleth.oidc.security.impl.ClientInformationJWTTrustEngine
Validate the signed JWT using the supplied trust criteria.
doValidate(SignedJWT, CriteriaSet) - Method in class net.shibboleth.oidc.security.impl.ExplicitKeySignedJWTTrustEngine
Validate the signed JWT using the supplied trust criteria.
doValidate(SignedJWT, CriteriaSet) - Method in class net.shibboleth.oidc.security.impl.TokenAsymmetricKeyTrustEngine
 
doValueChecks(Object, MetadataPolicy) - Method in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyEnforcer
Runs the value check operators for the candidate.
DPoPProofClaimsValidatorLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
A function that obtains OAuth2DPoPProofValidatingProfileConfiguration.getDpopProofClaimsValidator(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
DPoPProofClaimsValidatorLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.DPoPProofClaimsValidatorLookupFunction
 
dpopProofClaimsValidatorLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Validation of JWT claims for DPoP proofs.
DPoPProofNonceGeneratorLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
A function that obtains OAuth2DPoPProofValidatingProfileConfiguration.getDpopProofNonceGenerator(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
DPoPProofNonceGeneratorLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.DPoPProofNonceGeneratorLookupFunction
 
dpopProofNonceGeneratorLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Lookup function to retrieve nonce generator for DPoP proofs.
DPoPProofSignatureValidationConfigurationLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
A function that obtains OAuth2DPoPProofValidatingProfileConfiguration.getDpopProofSignatureValidationConfiguration(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
DPoPProofSignatureValidationConfigurationLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.DPoPProofSignatureValidationConfigurationLookupFunction
 
dpopSignatureValidationConfigurationLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Validation of JWT signature of DPoP proofs.
DynamicBackingStore<I,T> - Interface in net.shibboleth.oidc.metadata
A dynamic version of a BackingStore.
DynamicMetadataCache<IdentifierType,MetadataType> - Class in net.shibboleth.oidc.metadata.cache.impl
A metadata cache implementation that supports 'read-through' semantics.
DynamicMetadataCache(DynamicBackingStore<IdentifierType, MetadataType>) - Constructor for class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
Constructor.
DynamicMetadataCache(DynamicBackingStore<IdentifierType, MetadataType>, ScheduledExecutorService) - Constructor for class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
Protected constructor.
DynamicMetadataCache.ExpiredAndIdleMetadataCleanupTask - Class in net.shibboleth.oidc.metadata.cache.impl
Cleanup task that removes expired and idle metadata from the backing store.
DynamicMetadataCacheBuilderSpec<IdentifierType,MetadataType> - Class in net.shibboleth.oidc.metadata.cache.impl
A specification for building a dynamic read-through metadata cache.
DynamicMetadataCacheBuilderSpec() - Constructor for class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
Constructor.
DynamicOIDCMetadataResolver<T> - Interface in net.shibboleth.oidc.metadata
Marker interface for OIDCMetadataResolver implementations which resolve metadata by dynamically querying for the requested data individually at the time of the resolution operation, for example by invoking a request to the well-known provider configuration endpoint.

E

EmptyBackingStore<I,T> - Class in net.shibboleth.oidc.metadata.impl
A backing store which provides no functionality other than to return empty unmodifiable lists.
EmptyBackingStore() - Constructor for class net.shibboleth.oidc.metadata.impl.EmptyBackingStore
 
encAlgorithm - Variable in class net.shibboleth.oidc.security.credential.impl.DataEncryptionAlgorithmCriterion
Key algorithm type of resolved credentials.
encodeConsentInTokensPredicate - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Whether to encode consent in authorization code and access/refresh tokens.
EncodeConsentPredicate - Class in net.shibboleth.oidc.profile.config.logic
EncodeConsentPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.EncodeConsentPredicate
 
EncodedAttributesLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
A function that obtains OIDCAuthorizationConfiguration.getEncodedAttributes(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
EncodedAttributesLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.EncodedAttributesLookupFunction
 
encodedAttributesLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Lookup function to supply attribute IDs to embed in authorization code or access token.
encoders - Variable in class net.shibboleth.oidc.profile.impl.AuthenticationRequestMessageEncoderFactory
The list of message encoders to choose from.
encodeValues(ProfileRequestContext, IdPAttribute, TranscodingRule) - Method in class net.shibboleth.oidc.attribute.transcoding.AbstractOIDCAttributeTranscoder
Performs encoding of IdPAttribute's values based on rule into a claim value.
encodeValues(ProfileRequestContext, IdPAttribute, TranscodingRule) - Method in class net.shibboleth.oidc.attribute.transcoding.impl.OIDCByteAttributeTranscoder
Performs encoding of IdPAttribute's values based on rule into a claim value.
encodeValues(ProfileRequestContext, IdPAttribute, TranscodingRule) - Method in class net.shibboleth.oidc.attribute.transcoding.impl.OIDCScopedStringAttributeTranscoder
Performs encoding of IdPAttribute's values based on rule into a claim value.
encodeValues(ProfileRequestContext, IdPAttribute, TranscodingRule) - Method in class net.shibboleth.oidc.attribute.transcoding.impl.OIDCStringAttributeTranscoder
Performs encoding of IdPAttribute's values based on rule into a claim value.
encParamsresolver - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
Resolver for parameters to store into context.
ENCRYPTED_ID_TOKEN - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
The flag whether the id_token is encrypted.
encryptedJwt - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration
The extracted encrypted JWT that is to be processed.
encryptedJwt - Variable in class net.shibboleth.oidc.security.impl.DecryptJWE
The extracted encrypted JWT that is to be validated.
EncryptionA128CBCHS256 - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
Algorithm descriptor for block encryption algorithm: A128CBC-HS256.
EncryptionA128CBCHS256() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA128CBCHS256
 
EncryptionA128GCM - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
Algorithm descriptor for block encryption algorithm: 128GCM.
EncryptionA128GCM() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA128GCM
 
EncryptionA192CBCHS384 - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
Algorithm descriptor for block encryption algorithm: A192CBC-HS384.
EncryptionA192CBCHS384() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA192CBCHS384
 
EncryptionA192GCM - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
Algorithm descriptor for block encryption algorithm: 192GCM.
EncryptionA192GCM() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA192GCM
 
EncryptionA256CBCHS512 - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
Algorithm descriptor for block encryption algorithm: A256CBC-HS512.
EncryptionA256CBCHS512() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA256CBCHS512
 
EncryptionA256GCM - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
Algorithm descriptor for block encryption algorithm: 256GCM.
EncryptionA256GCM() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA256GCM
 
EncryptionConfiguration - Interface in net.shibboleth.oidc.security.jose
The configuration information to use when generating a JWE.
EncryptionConfigurationCriterion - Class in net.shibboleth.oidc.security.jose.criterion
Criterion which holds one or more instances of EncryptionConfigurationCriterion.
EncryptionConfigurationCriterion(List<EncryptionConfiguration>) - Constructor for class net.shibboleth.oidc.security.jose.criterion.EncryptionConfigurationCriterion
Constructor.
EncryptionConfigurationCriterion(EncryptionConfiguration...) - Constructor for class net.shibboleth.oidc.security.jose.criterion.EncryptionConfigurationCriterion
Constructor.
EncryptionConstants - Class in net.shibboleth.oidc.jwa.support
Algorithm Header Parameter 'enc' Values for JWE as defined by RFC 7518.
EncryptionConstants() - Constructor for class net.shibboleth.oidc.jwa.support.EncryptionConstants
Constructor.
encryptionContext - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
Context to populate.
encryptionOptional - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
Whether encryption is optional.
encryptionOptional - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration
Whether encryption is optional.
encryptionOptionalPredicate - Variable in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Whether encryption is optional in the face of no key, etc.
encryptionOptionalPredicate - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
Whether encryption is optional in the face of no key, etc.
encryptionOptionalPredicate - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCUserInfoConfiguration
Whether encryption is optional in the face of no key, etc.
encryptionOptionalPredicate - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
Predicate to determine how to proceed if no encryption parameters are resolved.
encryptionOptionalPredicate - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
Whether encryption is optional in the face of no key, etc.
encryptionOptionalPredicate - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration
Predicate to determine how to proceed if JWT token was not encrypted.
EncryptionOptionalPredicate - Class in net.shibboleth.oidc.profile.config.logic
EncryptionOptionalPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.EncryptionOptionalPredicate
 
encryptionParameters - Variable in class net.shibboleth.oidc.security.impl.EncryptJWTHandler
The signature signing parameters.
encryptionParameters - Variable in class net.shibboleth.oidc.security.jose.context.SecurityParametersContext
Encryption parameters.
EncryptionParameters - Class in net.shibboleth.oidc.security.jose
The effective parameters to use when generating encrypted JWTs.
EncryptionParameters() - Constructor for class net.shibboleth.oidc.security.jose.EncryptionParameters
 
EncryptionParametersResolver - Interface in net.shibboleth.oidc.security.jose
An interface for components which resolve EncryptionParameters based on a CriteriaSet.
EncryptJWTHandler - Class in net.shibboleth.oidc.security.impl
A MessageHandler that encrypts a JWT using the EncryptionParameters found in the SecurityParametersContext.
EncryptJWTHandler() - Constructor for class net.shibboleth.oidc.security.impl.EncryptJWTHandler
Constructor.
encryptRequestObjectPredicate - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Predicate used to determine if the generated request object should be encrypted.
EncryptRequestObjectPredicate - Class in net.shibboleth.oidc.profile.config.logic
A predicate that determines if the RequestObject JWT should be encrypted based on the profile configuration.
EncryptRequestObjectPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.EncryptRequestObjectPredicate
 
endpointReplacement - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationAudienceClaimsValidator
The replacement substring for the endpoint containing any ones configured at AuthenticationAudienceClaimsValidator.endpointTargets.
endpointTargets - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationAudienceClaimsValidator
The substrings to replace from resolved endpoint with one configured at AuthenticationAudienceClaimsValidator.endpointReplacement.
endpointURI - Variable in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
The request endpoint.
enforceRefreshTokenRotationPredicate - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
Whether always revoke the refresh_token after it's used.
EnforceRefreshTokenRotationPredicate - Class in net.shibboleth.oidc.profile.config.logic
EnforceRefreshTokenRotationPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.EnforceRefreshTokenRotationPredicate
 
equals(Object) - Method in class net.shibboleth.oidc.authn.principal.AuthenticationContextClassReferencePrincipal
equals(Object) - Method in class net.shibboleth.oidc.metadata.criterion.ClientIDCriterion
equals(Object) - Method in class net.shibboleth.oidc.metadata.criterion.ClientSecretReferenceCriterion
equals(Object) - Method in class net.shibboleth.oidc.metadata.criterion.IssuerIDCriterion
equals(Object) - Method in class net.shibboleth.oidc.metadata.criterion.ResourceLocationCriterion
equals(Object) - Method in class net.shibboleth.oidc.metadata.ProviderMetadataProviderContainer
.
equals(Object) - Method in class net.shibboleth.oidc.metadata.RelyingPartyClientInformationProvider
.
equals(Object) - Method in class net.shibboleth.oidc.security.credential.impl.DataEncryptionAlgorithmCriterion
equals(Object) - Method in class net.shibboleth.oidc.security.credential.impl.EvaluableKeyIDCredentialCriterion
equals(Object) - Method in class net.shibboleth.oidc.security.credential.impl.EvaluableMACKeyLengthCredentialCriterion
equals(Object) - Method in class net.shibboleth.oidc.security.credential.impl.KeyManagmentAlgorithmCriterion
equals(Object) - Method in class net.shibboleth.oidc.security.jose.criterion.ClientSecretCredentialCriterion
equals(Object) - Method in class net.shibboleth.oidc.security.jose.criterion.DecryptionConfigurationCriterion
equals(Object) - Method in class net.shibboleth.oidc.security.jose.criterion.EncryptionConfigurationCriterion
equals(Object) - Method in class net.shibboleth.oidc.security.jose.criterion.JOSEObjectCriterion
equals(Object) - Method in class net.shibboleth.oidc.security.jose.criterion.JWKSetCriterion
equals(Object) - Method in class net.shibboleth.oidc.security.jose.criterion.KeyIdCriterion
equals(Object) - Method in class net.shibboleth.oidc.security.jose.criterion.ProviderMetadataCriterion
equals(Object) - Method in class net.shibboleth.oidc.security.jose.criterion.SignatureSigningConfigurationCriterion
equals(Object) - Method in class net.shibboleth.oidc.security.jose.criterion.SignatureValidationConfigurationCriterion
equals(Object) - Method in class net.shibboleth.oidc.security.jose.criterion.SignatureValidationParametersCriterion
error - Variable in class net.shibboleth.oidc.profile.messaging.JSONErrorResponse
Error object.
errorEventId - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration
Event identifier to publish if token parameters are not compliant with the configuration.
errorEventId - Variable in class net.shibboleth.oidc.security.impl.DecryptJWE
Event identifier to publish in the case of decryption errors.
errorHandlingWrapper(Runnable) - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
Create a wrapper for runnables that catches any throwable and logs it.
essential - Variable in class net.shibboleth.oidc.metadata.policy.MetadataPolicy.Builder
The flag indicating that the claim must have a value.
essential - Variable in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
The flag indicating that the claim must have a value.
EvaluableKeyIDCredentialCriterion - Class in net.shibboleth.oidc.security.credential.impl
Instance of evaluable credential criteria for evaluating credential key IDs.
EvaluableKeyIDCredentialCriterion(String) - Constructor for class net.shibboleth.oidc.security.credential.impl.EvaluableKeyIDCredentialCriterion
Constructor.
EvaluableKeyIDCredentialCriterion(KeyIdCriterion) - Constructor for class net.shibboleth.oidc.security.credential.impl.EvaluableKeyIDCredentialCriterion
Constructor.
EvaluableMACKeyLengthCredentialCriterion - Class in net.shibboleth.oidc.security.credential.impl
Instance of evaluable credential criteria for evaluating if the key length of the secret key inside the credential is compatible with the MAC algorithm given.
EvaluableMACKeyLengthCredentialCriterion(JWSAlgorithm) - Constructor for class net.shibboleth.oidc.security.credential.impl.EvaluableMACKeyLengthCredentialCriterion
Constructor.
evaluateTrust(Credential, Iterable<Credential>) - Method in class net.shibboleth.oidc.security.impl.ExplicitKeySignedJWTTrustEngine
Evaluate the untrusted KeyInfo-derived credential with respect to the specified trusted information.
evaluateTrust(Credential, Credential) - Method in class net.shibboleth.oidc.security.impl.TokenAsymmetricKeyTrustEngine
 
evaluateTrust(Credential, TrustBasisType) - Method in class net.shibboleth.oidc.security.impl.BaseSignedJWTTrustEngine
Evaluate the untrusted KeyInfo-derived credential with respect to the specified trusted information.
eventContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.AbstractBuildErrorResponseFromEvent
Strategy function for access to EventContext to check.
ExactMatchClaimsValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl
Validator that checks a JWT claim exactly matches (by Object equality) a value returned by a lookup strategy.
ExactMatchClaimsValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.ExactMatchClaimsValidator
 
executorService - Variable in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
A single threaded executor service for running background cache tasks.
existingParametersContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParameters
Strategy used to look up an existing SecurityParametersContext to copy.
existingParametersContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
Strategy used to look up an existing SecurityParametersContext to copy.
EXPIRATION_TIME_CLAIM - Enum constant in enum class net.shibboleth.oidc.security.jwt.claims.impl.JWTClaims
Expiration time on or after which the ID Token MUST NOT be accepted for processing.
expirationTime - Variable in class net.shibboleth.oidc.metadata.MetadataManagementData
Expiration time of the associated metadata.
ExpirationTimeContext<T> - Class in net.shibboleth.oidc.metadata.cache
Context to hold information pertaining to the computation of a metadata's expiration time.
ExpirationTimeContext(T, Duration, Duration, Instant) - Constructor for class net.shibboleth.oidc.metadata.cache.ExpirationTimeContext
Constructor.
ExpiredAndIdleMetadataCleanupTask() - Constructor for class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache.ExpiredAndIdleMetadataCleanupTask
 
ExpiringJWKCredential - Interface in net.shibboleth.oidc.security.credential
A credential that expires at some duration in seconds after 1970-01-01T0:0:0Z.
ExpiryClaimsValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl
Iff an expiration time (exp) claim is present, verifies that it is ahead of the current time, else the JWT claims set is rejected.
ExpiryClaimsValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.ExpiryClaimsValidator
Constructor.
expiryDuration - Variable in class net.shibboleth.oidc.metadata.cache.impl.DefaultSourceMetadataExpirationTimeStrategy
How long after now should the metadata expire.
ExplicitKeySignedJWTTrustEngine - Class in net.shibboleth.oidc.security.impl
An implementation of SignatureTrustEngine which evaluates the validity and trustworthiness of JWT signatures.
ExplicitKeySignedJWTTrustEngine(CredentialResolver, JOSEObjectCredentialResolver) - Constructor for class net.shibboleth.oidc.security.impl.ExplicitKeySignedJWTTrustEngine
Constructor.
ExplicitKeyTrustEvaluator - Class in net.shibboleth.oidc.security.impl
Auxillary trust evaluator for evaluating an untrusted key or credential against a trusted key or credential.
ExplicitKeyTrustEvaluator() - Constructor for class net.shibboleth.oidc.security.impl.ExplicitKeyTrustEvaluator
 
extraAudienceValidation - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AudienceClaimsValidator
If enabled, any extra audience must be contained in the List returned from the additionalAudiencesLookupStrategy.
extractKeyIdFromCriteria(CriteriaSet) - Method in class net.shibboleth.oidc.security.credential.impl.BasicJOSEObjectCredentialResolver
Extract a KeyId from the criteria set if one exists.

F

failFastInitialization - Variable in class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver
Whether problems during initialization should cause the provider to fail or go on without metadata.
failFastInitialization - Variable in class net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver
Whether problems during initialization should cause the provider to fail or go on without metadata.
failIfResourceIsNull - Variable in class net.shibboleth.oidc.security.credential.BasicJWKCredentialFactoryBean
Should the factory throw an exception if the resource is null?.
fetch(String, URI, String, Instant) - Method in class net.shibboleth.oidc.jwk.RemoteJwkSetCache
Returns remote JWK set if found from the cache, otherwise fetches and stores it.
fetch(String, URI, Instant) - Method in class net.shibboleth.oidc.jwk.RemoteJwkSetCache
Returns remote JWK set if found from the cache, otherwise fetches and stores it.
fetch(URI, String, Instant) - Method in class net.shibboleth.oidc.jwk.RemoteJwkSetCache
Returns remote JWK set if found from the cache, otherwise fetches and stores it.
fetch(URI, Instant) - Method in class net.shibboleth.oidc.jwk.RemoteJwkSetCache
Returns remote JWK set if found from the cache, otherwise fetches and stores it.
fetch(MetadataManagementData<IdentifierType>, IdentifierType, CriteriaSet) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
Fetch metadata using the supplied fetch function, then save it to the backing store.
fetchAndStore(String, String, URI, Instant) - Method in class net.shibboleth.oidc.jwk.RemoteJwkSetCache
Fetches the remote JWK set from the given URI and stores it in the storage service.
fetchMetadata() - Method in class net.shibboleth.oidc.metadata.impl.AbstractFileOIDCEntityResolver
Fetches metadata from a source.
fetchMetadata() - Method in class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver
Fetches metadata from a source.
fetchPolicyOperatorBean(MetadataPolicy) - Method in class net.shibboleth.oidc.metadata.policy.impl.BeanMetadataPolicyOperator
Fetch the bean from ApplicationContext via identifier set in the given policy.
fetchRemoteJwkSet(String, URI, HttpClient, HttpClientSecurityParameters) - Static method in class net.shibboleth.oidc.jwk.support.RemoteJwkUtils
Fetches the JWK set from the given URI using the given client and security parameters.
fetchStrategy - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
The function to use to fetch/load metadata if either none exists, or the existing is stale.
fetchStrategy - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
The function to use to fetch metadata if either none exists, or the existing is stale.
fetchStrategy - Variable in class net.shibboleth.oidc.metadata.cache.impl.FetchThroughMetadataCache
The function to use to fetch/load metadata entries.
fetchStrategy - Variable in class net.shibboleth.oidc.metadata.cache.impl.FetchThroughMetadataCacheBuilderSpec
The function to use to fetch metadata if either none exists, or the existing is stale.
FetchThroughMetadataCache<IdentifierType,MetadataType> - Class in net.shibboleth.oidc.metadata.cache.impl
A metadata cache implementation that does not support reading and writing to a backing store.
FetchThroughMetadataCache() - Constructor for class net.shibboleth.oidc.metadata.cache.impl.FetchThroughMetadataCache
Constructor.
FetchThroughMetadataCacheBuilderSpec<IdentifierType,MetadataType> - Class in net.shibboleth.oidc.metadata.cache.impl
A specification for building a fetch-through metadata cache.
FetchThroughMetadataCacheBuilderSpec() - Constructor for class net.shibboleth.oidc.metadata.cache.impl.FetchThroughMetadataCacheBuilderSpec
Constructor.
FilesystemClientInformationResolver - Class in net.shibboleth.oidc.metadata.impl
An OIDC metadata provider that pulls client metadata from a file on the local filesystem.
FilesystemClientInformationResolver(Timer, Resource) - Constructor for class net.shibboleth.oidc.metadata.impl.FilesystemClientInformationResolver
Constructor.
FilesystemClientInformationResolver(Resource) - Constructor for class net.shibboleth.oidc.metadata.impl.FilesystemClientInformationResolver
Constructor.
FilesystemProviderMetadataResolver - Class in net.shibboleth.oidc.metadata.impl
An OIDC metadata provider that pulls provider metadata from a file on the local filesystem.
FilesystemProviderMetadataResolver(Timer, Resource) - Constructor for class net.shibboleth.oidc.metadata.impl.FilesystemProviderMetadataResolver
Constructor.
FilesystemProviderMetadataResolver(Resource) - Constructor for class net.shibboleth.oidc.metadata.impl.FilesystemProviderMetadataResolver
Constructor.
filter(T, MetadataFilterContext) - Method in interface net.shibboleth.oidc.metadata.filter.MetadataFilter
Filters the given metadata, perhaps to remove elements that are not wanted.
FilterException - Exception in net.shibboleth.oidc.metadata.filter
An exception thrown during the evaluation of a MetadataFilter.
FilterException() - Constructor for exception net.shibboleth.oidc.metadata.filter.FilterException
Constructor.
FilterException(Exception) - Constructor for exception net.shibboleth.oidc.metadata.filter.FilterException
Constructor.
FilterException(String) - Constructor for exception net.shibboleth.oidc.metadata.filter.FilterException
Constructor.
FilterException(String, Exception) - Constructor for exception net.shibboleth.oidc.metadata.filter.FilterException
Constructor.
filterForProviderSupportedAlgorithms(CriteriaSet, List<String>) - Method in class net.shibboleth.oidc.security.jose.impl.RelyingPartySigningParametersResolver
Filter the set of algorithms against the set supported by the OpenID Provider.
findAlgorithmIntersection(List<String>, List<String>) - Method in class net.shibboleth.oidc.security.impl.AbstractEncryptionAlgorithmsLookupStrategy
Return a new list of algorithms that represents the set intersection of the two input algorithm lists.
findCompatibleAlgorithmAndCredential(List<String>, List<Credential>, SignatureSigningParameters) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver
Loop through the algorithms and find the first compatible credential.
FORCE_AUTHN - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
prompt=login requested field.
ForceAuthnAuditExtractor - Class in net.shibboleth.oidc.profile.audit.impl
Function that returns true if the OIDC prompt is set as 'login' in the authentication request.
ForceAuthnAuditExtractor(Function<ProfileRequestContext, Object>) - Constructor for class net.shibboleth.oidc.profile.audit.impl.ForceAuthnAuditExtractor
Constructor.
forceAuthnPredicate - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Whether to mandate forced authentication for the request.
ForcedAuthenticationActivationCondition - Class in net.shibboleth.oidc.security.jwt.claims.impl
Has forced authentication been requested?
ForcedAuthenticationActivationCondition() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.ForcedAuthenticationActivationCondition
 
forcedValue - Variable in class net.shibboleth.oidc.metadata.policy.MetadataPolicy.Builder
The (forced) value for the claim.
forcedValue - Variable in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
The (forced) value for the claim.
forcePKCEPredicate - Variable in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Whether client is required to use PKCE.
ForcePKCEPredicate - Class in net.shibboleth.oidc.profile.config.logic
A predicate implementation that forwards to OIDCSSOProfileConfiguration.isForcePKCE(ProfileRequestContext).
ForcePKCEPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.ForcePKCEPredicate
 
forFriendlyName - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
A friendly name to log as the subject of encryption parameter resolution.
FormOutboundKeySetResponseMessage - Class in net.shibboleth.oidc.profile.impl
Action that forms outbound message containing keyset.
FormOutboundKeySetResponseMessage() - Constructor for class net.shibboleth.oidc.profile.impl.FormOutboundKeySetResponseMessage
Constructor.
freshLoad(List<MetadataType>) - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
Clear the backing store and load each metadata entry one at a time.
FRONT_CHANNEL_LOGOUT_SESSION_REQUIRED_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Attribute local name.
frontChannelLogoutSessionRequired - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Require front-channel logout session id flag for this entity.
FrontChannelLogoutSuccessPredicate - Class in net.shibboleth.oidc.profile.config.logic
FrontChannelLogoutSuccessPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.FrontChannelLogoutSuccessPredicate
 
frontChannelSuccessPredicate - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
Whether to consider front-channel logout propagation successful.
function - Variable in class net.shibboleth.oidc.profile.config.navigate.ProxyAwareDefaultOIDCAuthenticationContextClassResponseLookupFunction.LookupFunctionWrapper
A function used to map OIDC ACR/AMRs to Principals.
FunctionClaimsValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl
A ClaimsValidator that relies on an injected BiFunction.
FunctionClaimsValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.FunctionClaimsValidator
 

G

gaugeNumLiveIndexedMetadata - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
Metrics Gauge for the number of live indexed metadata.
generateSymmetricKey(byte[], JWEAlgorithm, EncryptionMethod) - Static method in class net.shibboleth.oidc.security.credential.JWKCredentialSupport
Generate symmetric key from client_secret using the algorithms supplied.
generateSymmetricKey(Secret, JWEAlgorithm, EncryptionMethod) - Static method in class net.shibboleth.oidc.security.credential.JWKCredentialSupport
Generate symmetric key from client_secret using the algorithms supplied.
get(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
Get the list of metadata matching the given identifier.
get(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
 
get(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.cache.impl.FetchThroughMetadataCache
Get the list of metadata matching the given identifier.
get(CriteriaSet) - Method in interface net.shibboleth.oidc.metadata.cache.MetadataCache
Get the list of metadata matching the given identifier.
GET - Enum constant in enum class net.shibboleth.oidc.profile.oauth2.config.OAuth2AuthorizationProfileConfiguration.HttpRequestMethod
HTTP GET.
getAccessTokenClaimsSetManipulationStrategy(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Get the bi-function for manipulating access token claims set.
getAccessTokenClaimsSetManipulationStrategy(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
Get the bi-function for manipulating access token claims set.
getAccessTokenClaimsSetManipulationStrategy(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2AccessTokenProducingProfileConfiguration
Get the bi-function for manipulating access token claims set.
getAccessTokenLifetime(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Get access token lifetime.
getAccessTokenLifetime(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
Get access token lifetime.
getAccessTokenLifetime(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2AccessTokenProducingProfileConfiguration
Get access token lifetime.
getAccessTokenType(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Get access token type.
getAccessTokenType(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
Get access token type.
getAccessTokenType(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2AccessTokenProducingProfileConfiguration
Get access token type.
getAcrs() - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
Get the ACRs.
getAdd() - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
Get the value(s) to be added for the claim.
getAdditionalAudiencesForIdToken(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Get the set of audiences, in addition to the relying party(ies) to which the IdP is issuing the ID Token, with which the token may be shared.
getAdditionalAudiencesForIdToken(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCIDTokenProducingProfileConfiguration
Get the set of audiences, in addition to the relying party(ies) to which the IdP is issuing the ID Token, with which the token may be shared.
getAdditionalCriteria() - Method in class net.shibboleth.oidc.security.jose.DecryptionParameters
Get the criteria set to add additional criterion too.
getAlgorithm() - Method in class net.shibboleth.oidc.security.credential.BasicJWKCredential
Get algorithm of JWK.
getAlgorithm() - Method in class net.shibboleth.oidc.security.credential.impl.KeyManagmentAlgorithmCriterion
Get the algorithm criteria.
getAlgorithm() - Method in interface net.shibboleth.oidc.security.credential.JWKCredential
Get algorithm of JWK.
getAlgorithmRegistry() - Method in class net.shibboleth.oidc.security.impl.AbstractEncryptionAlgorithmsLookupStrategy
Get the algorithm registry.
getAlgorithmRegistry() - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver
Get the AlgorithmRegistry instance used when resolving algorithm URIs.
getAlgorithmRegistry() - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
Get the AlgorithmRegistry instance used when resolving algorithm URIs.
getAlgorithmRuntimeSupportedPredicate() - Method in class net.shibboleth.oidc.security.impl.AbstractEncryptionAlgorithmsLookupStrategy
Get a predicate which evaluates whether a cryptographic algorithm is supported by the runtime environment.
getAlgorithmRuntimeSupportedPredicate() - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver
Get a predicate which evaluates whether a cryptographic algorithm is supported by the runtime environment.
getAlgorithmRuntimeSupportedPredicate() - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
Get a predicate which evaluates whether a cryptographic algorithm is supported by the runtime environment.
getAlwaysIncludedAttributes(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Get the set of attribute IDs which should be included in the ID token regardless of response_type.
getAlwaysIncludedAttributes(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCIDTokenProducingProfileConfiguration
Get the set of attribute IDs which should be included in the ID token regardless of response_type.
getApplicationType() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Get the application type.
getApplicationType() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Get the application type.
getAttributeIds() - Method in class net.shibboleth.oidc.metadata.impl.ResolverServiceClientSecretValueResolver
Get the list of attribute IDs that may contain the resolved client secret values.
getAttributeResolver() - Method in class net.shibboleth.oidc.metadata.impl.ResolverServiceClientSecretValueResolver
Get the attribute resolver service used for the client secret value resolution.
getAuthenticationContextClassReferenceTranslationStrategy(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Get the function used to translate ACRs in the id_token into an appropriate set of custom Principal objects to populate into the subject.
getAuthenticationContextClassReferenceTranslationStrategy(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCAuthenticationProfileConfiguration
Get the function used to translate ACRs in the id_token into an appropriate set of custom Principal objects to populate into the subject.
getAuthenticationFlows(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
getAuthenticationMethodsReferencesTranslationStrategy(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Get the function used to translate AMRs in the id_token into an appropriate set of custom Principal objects to populate into the subject.
getAuthenticationMethodsReferencesTranslationStrategy(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCAuthenticationProfileConfiguration
Get the function used to translate AMRs in the id_token into an appropriate set of custom Principal objects to populate into the subject.
getAuthnRequestTime() - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
Get the time at which this RP sent this authentication request to the OP.
getAuthorizationCodeClaimsSetManipulationStrategy(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Get the bi-function for manipulating authorization code claims set.
getAuthorizationCodeClaimsSetManipulationStrategy(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2AuthorizationCodeProducingProfileConfiguration
Get the bi-function for manipulating authorization code claims set.
getAuthorizeCodeLifetime(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Get authz code lifetime.
getAuthorizeCodeLifetime(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2AuthorizationCodeProducingProfileConfiguration
Get authz code lifetime.
getBackingStore() - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
Get the backing store.
getBackingStore() - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
Get the backing store.
getBackingStore() - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
Get the backing store.
getBackingStore() - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver
Get the entity backing store currently in use by the metadata resolver.
getBeanClass(Element) - Method in class net.shibboleth.oidc.profile.spring.relyingparty.metadata.filter.impl.ClientInformationParser
getCache() - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver
Get the metadata cache currently in use by the metadata resolver.
getCacheId() - Method in class net.shibboleth.oidc.metadata.cache.impl.BaseMetadataCacheBuilderSpec
Get the cache identifier.
getCipherMode() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA128CBCHS256
getCipherMode() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA128GCM
getCipherMode() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA192CBCHS384
getCipherMode() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA192GCM
getCipherMode() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA256CBCHS512
getCipherMode() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA256GCM
getCipherMode() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSA15
getCipherMode() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP
getCipherMode() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP256
getCipherMode() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP384
getCipherMode() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP512
getClaimName() - Method in class net.shibboleth.oidc.profile.audit.impl.AbstractClaimsSetAuditExtractor
Get the claim name to extract.
getClaimName() - Method in enum class net.shibboleth.oidc.security.jwt.claims.impl.IDTokenClaims
Get the registered claim name.
getClaimName() - Method in enum class net.shibboleth.oidc.security.jwt.claims.impl.JWTClaims
Get the IANA registered claim name.
getClaimsSetLookupStrategy() - Method in class net.shibboleth.oidc.profile.audit.impl.AbstractClaimsSetAuditExtractor
Get the claims set lookup strategy.
getClaimsValidator(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Get the ClaimsValidator to apply to JWT-based client authentication.
getClaimsValidator(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2ClientAuthenticableProfileConfiguration
Get the ClaimsValidator to apply to JWT-based client authentication.
getCleanupTaskInterval() - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
Get the interval at which the cleanup task should run.
getClientAuthentication() - Method in class net.shibboleth.oidc.authn.context.OAuth2ClientAuthenticationContext
Get the OAuth 2 client authentication credentials.
getClientCredential(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Get the client credential for the given context.
getClientCredential(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2ClientAuthenticableClientProfileConfiguration
Get the client credential for the given context.
getClientId(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Get the client_id appropriate for the given context.
getClientId(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2ClientAuthenticableClientProfileConfiguration
Get the client_id appropriate for the given context.
getClientID() - Method in class net.shibboleth.oidc.metadata.criterion.ClientIDCriterion
Gets the client ID.
getClientID() - Method in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
Get the client ID.
getClientInformation() - Method in class net.shibboleth.oidc.metadata.context.OIDCMetadataContext
Get the client information.
getClientInformation(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.ClientInformationSignatureSigningParametersResolver
Returns the client information from the given criteria set, if one was found.
getClientSecret(XMLObject) - Method in class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.ClientSecretProvider
Get the ClientSecret from the passed XML object.
getClientSecret(XMLObject) - Method in class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.ClientSecretReferenceProvider
Get the ClientSecretReferenceKey from the passed XML object.
getClientUri() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Get the client URI.
getClientUri() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Get the client URI.
getCodeChallenge() - Method in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
Get the authorisation code_challenge (which was derived from the code_verifier) for Proof Key for Code Exchange.
getCodeChallengeMethod() - Method in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
Get the code_challenge_method used to transform the code_verifier into a code_challenge.
getCodeVerifier() - Method in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
Get the authorisation code_verifier for Proof Key for Code Exchange.
getComponent() - Method in class net.shibboleth.oidc.metadata.ProviderMetadataProviderContainer
getComponent() - Method in class net.shibboleth.oidc.metadata.RelyingPartyClientInformationProvider
getConfigResources() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.XMLObjectProviderInitializer
getConfigurations() - Method in class net.shibboleth.oidc.security.jose.criterion.DecryptionConfigurationCriterion
Get the list of configuration instances.
getConfigurations() - Method in class net.shibboleth.oidc.security.jose.criterion.EncryptionConfigurationCriterion
Get the list of configuration instances.
getConfigurations() - Method in class net.shibboleth.oidc.security.jose.criterion.SignatureSigningConfigurationCriterion
Get the list of configuration instances.
getConfigurations() - Method in class net.shibboleth.oidc.security.jose.criterion.SignatureValidationConfigurationCriterion
Get the list of configuration instances.
getContent() - Method in class net.shibboleth.oidc.profile.messaging.JSONErrorResponse
Error content as json.
getContentEncryptionKeyCredentialResolver() - Method in interface net.shibboleth.oidc.security.jose.DecryptionConfiguration
Get the CredentialResolver to use when processing the encrypted content.
getContentEncryptionKeyCredentialResolver() - Method in class net.shibboleth.oidc.security.jose.DecryptionParameters
Get the CredentialResolver to use when processing the encrypted content.
getContentEncryptionKeyCredentialResolver() - Method in interface net.shibboleth.oidc.security.jose.EncryptionConfiguration
Get the CredentialResolver to resolve the content encryption key.
getContentEncryptionKeyCredentialResolver() - Method in class net.shibboleth.oidc.security.jose.impl.BasicDecryptionConfiguration
 
getContentEncryptionKeyCredentialResolver() - Method in class net.shibboleth.oidc.security.jose.impl.BasicEncryptionConfiguration
 
getCredential() - Method in class net.shibboleth.oidc.security.jose.criterion.ClientSecretCredentialCriterion
The held credential.
getCredentialExpiresAt() - Method in class net.shibboleth.oidc.security.credential.BasicExpiringJWKCredential
Time at which the client_secret will expire or 0 if it will not expire.
getCredentialExpiresAt() - Method in interface net.shibboleth.oidc.security.credential.ExpiringJWKCredential
Time at which the client_secret will expire or 0 if it will not expire.
getCredentialResolver() - Method in class net.shibboleth.oidc.security.impl.ExplicitKeySignedJWTTrustEngine
getCredentialType() - Method in class net.shibboleth.oidc.security.credential.BasicJWKReferenceCredential
getCredentialType() - Method in class net.shibboleth.oidc.security.credential.BasicNimbusSecretCredential
Deprecated.
getCriteriaToIdentifierStrategy() - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
Get the identifier from criteria set extraction strategy.
getCriteriaToIdentifierStrategy() - Method in class net.shibboleth.oidc.metadata.cache.impl.BaseMetadataCacheBuilderSpec
Get the criteria set to identifier lookup strategy.
getCriterionPredicateRegistry() - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver
Get the registry used in resolving predicates from criteria.
getCustomOperators() - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
Get the map of custom operators.
getCustomRedirectUriValidationStrategy(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Get the bi-predicate for validating redirect URI in request to the current profile request context state.
getCustomRedirectUriValidationStrategy(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCSSOProfileConfiguration
Get the bi-predicate for validating redirect URI in request to the current profile request context state.
getDataEncryptionAlgorithm() - Method in class net.shibboleth.oidc.security.jose.EncryptionParameters
Get the encryption algorithm URI to use when encrypting the EncryptedData.
getDataEncryptionAlgorithms() - Method in interface net.shibboleth.oidc.security.jose.EncryptionConfiguration
Get the list of preferred data encryption algorithm URIs, in preference order.
getDataEncryptionAlgorithms() - Method in class net.shibboleth.oidc.security.jose.impl.BasicEncryptionConfiguration
Get the list of preferred data encryption algorithm URIs, in preference order.
getDataEncryptionAlgorithmsFromConfiguration(CriteriaSet, Predicate<String>) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultDataEncryptionAlgorithmsLookupStrategy
Get the data encryption 'enc' algorithms from the EncryptionConfiguration inside the criteria set.
getDataEncryptionCredential() - Method in class net.shibboleth.oidc.security.jose.EncryptionParameters
Get the encryption credential to use when encrypting the EncryptedData.
getDecryptionParameters() - Method in class net.shibboleth.oidc.security.jose.context.SecurityParametersContext
Get the parameters to use for decryption operations.
getDefaultAcrValues() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Get the list of default ACR values.
getDefaultAcrValues() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Get the list of default ACR values.
getDefaultAuthenticationMethods(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
getDefaultMaxAge() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Get the value for default max age.
getDefaultMaxAge() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Get the value for default max age.
getDefaultResponseMode() - Method in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
Get the response_mode to use with this authentication request.
getDefaultValue() - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
Get the default value for the claim to be used in case none is specified.
getDeniedUserInfoAttributes(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Get the set of attribute IDs which should be omitted from the UserInfo token.
getDeniedUserInfoAttributes(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCUserInfoConfiguration
 
getDeniedUserInfoAttributes(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCAuthorizationConfiguration
Get the set of attribute IDs which should be omitted from the UserInfo token.
getDeniedUserInfoAttributes(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCUserInfoConfiguration
Get the set of attribute IDs which should be omitted from the UserInfo token.
getDigest() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureES256
getDigest() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureES384
getDigest() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureES512
getDigest() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureHS256
getDigest() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureHS384
getDigest() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureHS512
getDigest() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignaturePS256
 
getDigest() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignaturePS384
 
getDigest() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignaturePS512
 
getDigest() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureRS256
getDigest() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureRS384
getDigest() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureRS512
getDisplay() - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
Get the display.
getDisplay(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Get the display parameter to use.
getDisplay(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCAuthenticationProfileConfiguration
Get the display parameter to use.
getDpopProofClaimsValidator(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Get the ClaimsValidator to apply to DPoP Proof JWTs being validated by this profile.
getDpopProofClaimsValidator(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2DPoPProofValidatingProfileConfiguration
Get the ClaimsValidator to apply to DPoP Proof JWTs being validated by this profile.
getDpopProofNonceGenerator(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Get the Function to create nonces to be used with DPoP Proof JWTs.
getDpopProofNonceGenerator(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2DPoPProofValidatingProfileConfiguration
Get the Function to create nonces to be used with DPoP Proof JWTs.
getDpopProofSignatureValidationConfiguration(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Get the SignatureValidationConfiguration to be used for DPoP Proof JWT signature validation.
getDpopProofSignatureValidationConfiguration(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2DPoPProofValidatingProfileConfiguration
Get the SignatureValidationConfiguration to be used for DPoP Proof JWT signature validation.
getEffectiveDataEncryptionCredentials(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
Get the effective list of data/content encryption credentials to consider.
getEffectiveKeyTransportCredentials(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
Get the effective list of key transport credentials to consider.
getEffectiveSignatureAlgorithms(CriteriaSet, Predicate<String>) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver
Get the effective list of signature algorithm URIs to consider, including application of include/exclude policy.
getEffectiveSignatureAlgorithms(CriteriaSet, Predicate<String>) - Method in class net.shibboleth.oidc.security.jose.impl.ClientInformationSignatureSigningParametersResolver
Get the effective list of signature algorithm URIs to consider, including application of include/exclude policy.
getEffectiveSigningCredentials(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver
Get the effective list of signing credentials to consider.
getEffectiveSigningCredentials(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.ClientInformationSignatureSigningParametersResolver
Get the effective list of signing credentials to consider.
getEmbeddedResolver() - Method in class net.shibboleth.oidc.metadata.ProviderMetadataProviderContainer
Return what we are build around.
getEmbeddedResolver() - Method in class net.shibboleth.oidc.metadata.RelyingPartyClientInformationProvider
Return what we are build around.
getEncAlgorithm() - Method in class net.shibboleth.oidc.security.credential.impl.DataEncryptionAlgorithmCriterion
Get the encryption algorithm criteria.
getEncodedAttributes(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Get the set of attribute IDs which should be encoded in encrypted form into the authorization code and/or access/refresh tokens to enable recovery on the back-channel.
getEncodedAttributes(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCAuthorizationConfiguration
Get the set of attribute IDs which should be encoded in encrypted form into the authorization code and/or access/refresh tokens to enable recovery on the back-channel.
getEncodedName(TranscodingRule) - Method in class net.shibboleth.oidc.attribute.transcoding.AbstractOIDCAttributeTranscoder
getEncodedName(ProfileRequestContext, IdPAttribute, TranscodingRule) - Method in class net.shibboleth.oidc.attribute.transcoding.AbstractOIDCAttributeTranscoder
Get the encoded name for the attribute via SAML metadata (if enabled) or rule's name property.
getEncodedType() - Method in class net.shibboleth.oidc.attribute.transcoding.AbstractOIDCAttributeTranscoder
getEncryptionParameters() - Method in class net.shibboleth.oidc.security.jose.context.SecurityParametersContext
Get the parameters to use for encryption operations.
getEndpointURI() - Method in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
Get the endpoint_uri.
getErrorObject() - Method in class net.shibboleth.oidc.profile.messaging.JSONErrorResponse
getEssential() - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
Get the flag indicating that the claim must have a value.
getExecutorService() - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
Get the background executor service.
getExpectedAlgorithm(OIDCClientInformation) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler
Fetches the expected signature algorithm from the OIDCClientInformation.
getExpectedAlgorithm(ClientInformationCriterion) - Method in class net.shibboleth.oidc.security.impl.ClientInformationJWTTrustEngine
Fetches the expected signature algorithm from the OIDCClientInformation.
getExpirationTime() - Method in class net.shibboleth.oidc.metadata.MetadataManagementData
Get the expiration time of the metadata.
getFetchStrategy() - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
Get the metadata fetching strategy.
getFetchStrategy() - Method in class net.shibboleth.oidc.metadata.cache.impl.FetchThroughMetadataCacheBuilderSpec
Get the metadata fetching strategy.
getGrantTypes() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Get the whitespace-delimited list of grant types.
getGrantTypes() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Get the whitespace-delimited list of grant types.
getGrantTypes(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
 
getGrantTypes(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenConfiguration
Get the enabled grant types.
getHttpRequestMethod(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Get the HTTP request method for an authentication request.
getHttpRequestMethod(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2AuthorizationProfileConfiguration
Get the HTTP request method for an authentication request.
getId() - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor.SkeletonEchoingRoleDescriptorResolver
getID() - Method in class net.shibboleth.oidc.metadata.MetadataManagementData
Get the entity ID managed by this instance.
getIdentifier() - Method in class net.shibboleth.oidc.profile.messaging.context.AbstractOIDCEntityContext
Gets the identifier of the OIDC entity.
getIdentifierExtractionStrategy() - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
Get the identifier extraction strategy.
getIdentifierExtractionStrategy() - Method in class net.shibboleth.oidc.metadata.cache.impl.BaseMetadataCacheBuilderSpec
Get the identifier extraction strategy.
getIdTokenEncryptedResponseAlg() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Get the JWE alg algorithm for ID token encryption.
getIdTokenEncryptedResponseAlg() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Get the JWE alg algorithm for ID token encryption.
getIdTokenEncryptedResponseEnc() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Get the JWE enc algorithm for ID token encryption.
getIdTokenEncryptedResponseEnc() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Get the JWE enc algorithm for ID token encryption.
getIDTokenLifetime(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Get ID token lifetime.
getIDTokenLifetime(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCIDTokenProducingProfileConfiguration
Get ID token lifetime.
getIDTokenManipulationStrategy(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Get the bi-function for manipulating id_token claims.
getIDTokenManipulationStrategy(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCIDTokenProducingProfileConfiguration
Get the bi-function for manipulating id_token claims.
getIdTokenSignedResponseAlg() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Get the JWS alg algorithm for ID token signature.
getIdTokenSignedResponseAlg() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Get the JWS alg algorithm for ID token signature.
getIncludeExcludePredicate(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver
Get a predicate which implements the effective configured include/exclude policy.
getIncludeExcludePredicate(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
Get a predicate which implements the effective configured include/exclude policy.
getIndexedInformation() - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver.JsonBackingStore
Get the entity information index.
getIndexedValues() - Method in interface net.shibboleth.oidc.metadata.BackingStore
Get the index - mapping keys to values.
getIndexedValues() - Method in class net.shibboleth.oidc.metadata.impl.AbstractBackingStore
 
getIndexedValues() - Method in class net.shibboleth.oidc.metadata.impl.EmptyBackingStore
 
getInitialCleanupTaskDelay() - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
Get the initial cleanup task delay.
getInitiateLoginUri() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Get the URI for initiating login.
getInitiateLoginUri() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Get the URI for initiating login.
getIssuedClaimsValidator(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2TokenValidatingConfiguration
Get the ClaimsValidator to apply to issued JWT-based tokens being validated by this profile.
getIssuedClaimsValidator(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenValidatingProfileConfiguration
Get the ClaimsValidator to apply to issued JWT-based tokens being validated by this profile.
getIssuer(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
getIssuer(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCDynamicRegistrationConfiguration
getIssuer(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
 
getIssuer(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCProviderInformationConfiguration
getIssuer(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2TokenValidatingConfiguration
getIssuer(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2PushedAuthorizationRequestConfiguration
getIssuer(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
getIssuerID() - Method in class net.shibboleth.oidc.metadata.criterion.IssuerIDCriterion
Get the issuer ID.
getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA128CBCHS256
getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA128GCM
getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA192CBCHS384
getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA192GCM
getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA256CBCHS512
getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA256GCM
getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyAgreementECDHES
getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyAgreementECDHESA128KW
getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyAgreementECDHESA192KW
getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyAgreementECDHESA256KW
getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSA15
getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP
getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP256
getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP384
getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP512
getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureES256
getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureES384
getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureES512
getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureHS256
getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureHS384
getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureHS512
getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignaturePS256
 
getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignaturePS384
 
getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignaturePS512
 
getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureRS256
getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureRS384
getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureRS512
getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA128GCMKW
getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA128KW
getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA192GCMKW
getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA192KW
getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA256GCMKW
getJCAAlgorithmID() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA256KW
getJCAAlgorithmName(JWSAlgorithm) - Static method in class net.shibboleth.oidc.security.JWSAssemblyUtils
Gets the matching Java Cryptography Architecture (JCA) algorithm name for the specified HMAC-based JSON Web Algorithm (JWA).
getJOSEObject() - Method in class net.shibboleth.oidc.security.jose.criterion.JOSEObjectCriterion
Gets the JOSEObject which is the source of credential criteria.
getJwksData(XMLObject) - Method in class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.InlineJwksProvider
Get the JwksData from the passed XML object.
getJWKSet() - Method in class net.shibboleth.oidc.security.jose.criterion.JWKSetCriterion
Gets the JWKSet which is the source of credentials.
getJwksUri(XMLObject) - Method in class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.JWKSReferenceProvider
Get the JwksUri from the passed XML object.
getJwtDecryptionConfiguration() - Method in class net.shibboleth.oidc.profile.config.JSONSecurityConfiguration
Get the configuration used when decrypting JWE tokens.
getJwtEncryptionConfiguration() - Method in class net.shibboleth.oidc.profile.config.JSONSecurityConfiguration
Get the configuration used when encrypting JWE tokens.
getJwtSignatureSigningConfiguration() - Method in class net.shibboleth.oidc.profile.config.JSONSecurityConfiguration
Get the configuration used when signing JWS tokens.
getJwtSignatureValidationConfiguration() - Method in class net.shibboleth.oidc.profile.config.JSONSecurityConfiguration
Get the configuration used when validating JWS tokens.
getKEKCredentialResolver() - Method in interface net.shibboleth.oidc.security.jose.DecryptionConfiguration
Get the CredentialResolver to use when processing the EncryptedKey (the Key Encryption Key or KEK).
getKEKCredentialResolver() - Method in class net.shibboleth.oidc.security.jose.DecryptionParameters
Get the CredentialResolver to use when processing the EncryptedKey (the Key Encryption Key or KEK).
getKEKCredentialResolver() - Method in interface net.shibboleth.oidc.security.jose.EncryptionConfiguration
Get the CredentialResolver to resolve the key encryption or key wrapping key.
getKEKCredentialResolver() - Method in class net.shibboleth.oidc.security.jose.impl.BasicDecryptionConfiguration
 
getKEKCredentialResolver() - Method in class net.shibboleth.oidc.security.jose.impl.BasicEncryptionConfiguration
 
getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA128CBCHS256
getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA128GCM
getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA192CBCHS384
getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA192GCM
getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA256CBCHS512
getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA256GCM
getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSA15
getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP
getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP256
getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP384
getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP512
getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureES256
getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureES384
getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureES512
getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignaturePS256
 
getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignaturePS384
 
getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignaturePS512
 
getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureRS256
getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureRS384
getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureRS512
getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA128GCMKW
getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA128KW
getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA192GCMKW
getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA192KW
getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA256GCMKW
getKey() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA256KW
getKey(OIDCProviderMetadata) - Method in class net.shibboleth.oidc.metadata.impl.FilesystemProviderMetadataResolver
Gets the identifier for the given entity.
getKey(OIDCClientInformation) - Method in class net.shibboleth.oidc.metadata.impl.FilesystemClientInformationResolver
Gets the identifier for the given entity.
getKey(Value) - Method in class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver
Gets the identifier for the given entity.
getKeyId() - Method in class net.shibboleth.oidc.security.credential.impl.EvaluableKeyIDCredentialCriterion
Get the keyId.
getKeyId() - Method in class net.shibboleth.oidc.security.jose.criterion.KeyIdCriterion
Get the key ID criteria.
getKeyLength() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA128CBCHS256
getKeyLength() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA128GCM
getKeyLength() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA192CBCHS384
getKeyLength() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA192GCM
getKeyLength() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA256CBCHS512
getKeyLength() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA256GCM
getKeyLength() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA128GCMKW
getKeyLength() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA128KW
getKeyLength() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA192GCMKW
getKeyLength() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA192KW
getKeyLength() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA256GCMKW
getKeyLength() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA256KW
getKeyTransportAlgorithmsFromConfiguration(CriteriaSet, Predicate<String>) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultKeyTransportEncryptionAlgorithmsLookupStrategy
Get the key transport algorithms from the EncryptionConfiguration inside the criteria set.
getKeyTransportEncryptionAlgorithm() - Method in class net.shibboleth.oidc.security.jose.EncryptionParameters
Get the encryption algorithm URI to use when encrypting the EncryptedKey.
getKeyTransportEncryptionAlgorithms() - Method in interface net.shibboleth.oidc.security.jose.EncryptionConfiguration
Get the list of preferred key transport encryption algorithm URIs, in preference order.
getKeyTransportEncryptionAlgorithms() - Method in class net.shibboleth.oidc.security.jose.impl.BasicEncryptionConfiguration
Get the list of preferred key transport encryption algorithm URIs, in preference order.
getKeyTransportEncryptionCredential() - Method in class net.shibboleth.oidc.security.jose.EncryptionParameters
Get the encryption credential to use when encrypting the EncryptedKey.
getKid() - Method in class net.shibboleth.oidc.security.credential.BasicJWKCredential
Get kid of JWK.
getKid() - Method in interface net.shibboleth.oidc.security.credential.JWKCredential
Get kid of JWK.
getLastAccessedTime() - Method in class net.shibboleth.oidc.metadata.MetadataManagementData
Get the last time at which the entity's backing store data was accessed.
getLastRefresh() - Method in interface net.shibboleth.oidc.metadata.BatchBackingStore
Get the time the last refresh of this backing store was attempted.
getLastRefresh() - Method in class net.shibboleth.oidc.metadata.cache.CacheLoadingContext
Get the last refresh time.
getLastRefresh() - Method in class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver
Get last refresh of resolver.
getLastRefresh() - Method in class net.shibboleth.oidc.metadata.impl.ChainingClientInformationResolver
Gets the time the last refresh cycle occurred.
getLastRefresh() - Method in class net.shibboleth.oidc.metadata.impl.ChainingProviderMetadataResolver
Gets the time the last refresh cycle occurred.
getLastRefresh() - Method in class net.shibboleth.oidc.metadata.impl.DefaultBatchBackingStore
 
getLastRefresh() - Method in interface net.shibboleth.oidc.metadata.RefreshableClientInformationResolver
Gets the time the last refresh cycle occurred.
getLastRefresh() - Method in interface net.shibboleth.oidc.metadata.RefreshableProviderMetadataResolver
Gets the time the last refresh cycle occurred.
getLastRefresh() - Method in class net.shibboleth.oidc.metadata.RelyingPartyClientInformationProvider
Gets the time the last refresh cycle occurred.
getLastUpdate() - Method in interface net.shibboleth.oidc.metadata.BatchBackingStore
Get the time at which this batch backing store was successfully reloaded.
getLastUpdate() - Method in class net.shibboleth.oidc.metadata.cache.CacheLoadingContext
Get the last successful update time.
getLastUpdate() - Method in class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver
Get last update of resolver.
getLastUpdate() - Method in class net.shibboleth.oidc.metadata.impl.ChainingClientInformationResolver
Get the time that the currently available client information was last updated.
getLastUpdate() - Method in class net.shibboleth.oidc.metadata.impl.ChainingProviderMetadataResolver
Get the time that the currently available metadata was last updated.
getLastUpdate() - Method in class net.shibboleth.oidc.metadata.impl.DefaultBatchBackingStore
 
getLastUpdate() - Method in interface net.shibboleth.oidc.metadata.RefreshableClientInformationResolver
Get the time that the currently available client information was last updated.
getLastUpdate() - Method in interface net.shibboleth.oidc.metadata.RefreshableProviderMetadataResolver
Get the time that the currently available metadata was last updated.
getLastUpdate() - Method in class net.shibboleth.oidc.metadata.RelyingPartyClientInformationProvider
Get the time that the currently available client information was last updated.
getLastUpdateTime() - Method in class net.shibboleth.oidc.metadata.MetadataManagementData
Get the last update time of the metadata.
getListValues(String) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
Parse an XML value list from a metadata value object into a collection of strings.
getLoadingStrategy() - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
Get the loading strategy.
getLoadingStrategy() - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCacheBuilderSpec
Get the batch metadata loading strategy.
getLocalCredentialResolver() - Method in class net.shibboleth.oidc.security.credential.impl.LocalJOSEObjectCredentialResolver
Get the resolver for local credentials.
getLoginHint() - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
Get the login_hint parameter.
getLoginHint(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Get the login_hint to use.
getLoginHint(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCAuthenticationProfileConfiguration
Get the login_hint to use.
getLogoutHintMatchingStrategy(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
 
getLogoutHintMatchingStrategy(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCLogoutProfileConfiguration
Get the bi-predicate for matching logout hint to an existing session in an OIDC RP-initiated logout sequence.
getLogPrefix() - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
Return a prefix for logging messages for this component.
getLogPrefix() - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver
Return a prefix for logging messages for this component.
getLogPrefix() - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver
Return a prefix for logging messages for this component.
getManagementData(I) - Method in interface net.shibboleth.oidc.metadata.DynamicBackingStore
Get the management data for the specified identifier.
getManagementData(I) - Method in class net.shibboleth.oidc.metadata.impl.DefaultDynamicBackingStore
Get the management data for the specified identifier.
getManagementDataIdentifiers() - Method in interface net.shibboleth.oidc.metadata.DynamicBackingStore
Get the set of entityIDs which currently have management data.
getManagementDataIdentifiers() - Method in class net.shibboleth.oidc.metadata.impl.DefaultDynamicBackingStore
Get the set of entityIDs which currently have management data.
getMaxAge() - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
Get the max age.
getMaxAuthenticationAge(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Get the max authentication age.
getMaxAuthenticationAge(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCAuthenticationProfileConfiguration
Get the max authentication age.
getMaxCacheDuration() - Method in class net.shibboleth.oidc.metadata.cache.ExpirationTimeContext
Get the maximum cache duration.
getMaxCacheDuration() - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
Get the maximum cache duration for metadata.
getMaxIdleEntityData() - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
Get the maximum idle time for which the resolver will keep data for before it is removed.
getMaxRefreshDelay() - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
Get the maximum amount of time between refresh intervals.
getMaxRefreshDelay() - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCacheBuilderSpec
Get the max delay to wait before refreshing metadata.
getMessageHandler(MessageContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2InterceptorAwareProfileConfiguration
Get a custom handler for a message produced or consumed by this profile.
getMessageHandler(MessageContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2InterceptorAwareProfileConfiguration
Get a custom handler for a message produced or consumed by this profile.
getMetadata() - Method in class net.shibboleth.oidc.metadata.cache.ExpirationTimeContext
Get the metadata.
getMetadata() - Method in class net.shibboleth.oidc.security.jose.criterion.ProviderMetadataCriterion
Gets the OIDC provider metadata.
getMetadataBeforeRemovalHook() - Method in class net.shibboleth.oidc.metadata.cache.impl.BaseMetadataCacheBuilderSpec
Get the metadata before removal hook.
getMetadataExpirationTimeStrategy() - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
Get the metadata expiration time strategy.
getMetadataExpirationTimeStrategy() - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
Get the metadata expiration time strategy.
getMetadataFilterStrategy() - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
Get the metadata filtering strategy.
getMetadataFilterStrategy() - Method in class net.shibboleth.oidc.metadata.cache.impl.BaseMetadataCacheBuilderSpec
Get the metadata filter strategy.
getMetadataIdentifier() - Method in class net.shibboleth.oidc.metadata.impl.AbstractFileOIDCEntityResolver
Gets an identifier which may be used to distinguish this metadata in logging statements.
getMetadataIdentifier() - Method in class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver
Gets an identifier which may be used to distinguish this metadata in logging statements.
getMetadataPolicy(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCDynamicRegistrationConfiguration
Get the metadata policy.
getMetadataPolicy(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCDynamicRegistrationConfiguration
Get the metadata policy.
getMetadataUpdateTime() - Method in class net.shibboleth.oidc.metadata.cache.impl.DefaultFileLoadingStrategy
Get the time for the last update/modification of the metadata file.
getMetadataUpdateTime() - Method in class net.shibboleth.oidc.metadata.cache.impl.DefaultResourceLoadingStrategy
Get the time for the last update/modification of the metadata resource.
getMetadataUpdateTime() - Method in class net.shibboleth.oidc.metadata.impl.AbstractFileOIDCEntityResolver
Get the time for the last update/modification of the metadata file.
getMetadataValidPredicate() - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
Get the predicate which determines if a piece of metadata is valid or not.
getMetadataValidPredicate() - Method in class net.shibboleth.oidc.metadata.cache.impl.BaseMetadataCacheBuilderSpec
Get the predicate which determines if a piece of metadata is valid or not.
getMinCacheDuration() - Method in class net.shibboleth.oidc.metadata.cache.ExpirationTimeContext
Get the minimum cache duration.
getMinCacheDuration() - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
Get the minimum cache duration for metadata.
getMinRefreshDelay() - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
Get the minimum amount of time between refreshes.
getMinRefreshDelay() - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCacheBuilderSpec
Get the min delay to wait before refreshing metadata.
getName() - Method in class net.shibboleth.oidc.authn.principal.AuthenticationContextClassReferencePrincipal
getNameFromMetadata(ProfileRequestContext, String) - Method in class net.shibboleth.oidc.attribute.transcoding.AbstractOIDCAttributeTranscoder
If enabled, search metadata for a tag value prefixed by the input attribute ID followed by a space character.
getNonce() - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
Get the nonce.
getNow() - Method in class net.shibboleth.oidc.metadata.cache.ExpirationTimeContext
Get the time to use a 'now'.
getOAuthRPExtensions(SPSSODescriptor) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
Get the OAuthRPExtensions from the given SPSSODescriptor, it it was found from its extensions.
getObjectType() - Method in class net.shibboleth.oidc.profile.config.CredentialsListFactory
getObjectType() - Method in class net.shibboleth.oidc.security.credential.BasicClientSecretCredentialFactoryBean
getObjectType() - Method in class net.shibboleth.oidc.security.credential.BasicExpiringJWTSharedSecretCredentialFactoryBean
getObjectType() - Method in class net.shibboleth.oidc.security.credential.BasicJWKCredentialFactoryBean
getOidcClientInformation() - Method in class net.shibboleth.oidc.security.jose.criterion.ClientInformationCriterion
Get client information.
getOIDCPeerEntityContext() - Method in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler
Get the OIDCPeerEntityContext associated with the message.
getOneOfValues() - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
Get the list of values from which the claim must be one of.
getOrderedChildren() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.AbstractMetadataValueSAMLObject
getOrderedChildren() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
getOrderedInformation() - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver.JsonBackingStore
Get the ordered entity information.
getOrderedValues() - Method in interface net.shibboleth.oidc.metadata.BackingStore
Get the list of ordered values.
getOrderedValues() - Method in class net.shibboleth.oidc.metadata.impl.AbstractBackingStore
 
getOrderedValues() - Method in class net.shibboleth.oidc.metadata.impl.EmptyBackingStore
 
getOriginalValue() - Method in interface net.shibboleth.oidc.metadata.BatchBackingStore
Gets the source bytes of the source before it was parsed.
getOriginalValue() - Method in class net.shibboleth.oidc.metadata.impl.DefaultBatchBackingStore
 
getPadding() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA128CBCHS256
getPadding() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA128GCM
getPadding() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA192CBCHS384
getPadding() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA192GCM
getPadding() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA256CBCHS512
getPadding() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA256GCM
getPadding() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSA15
getPadding() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP
getPadding() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP256
getPadding() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP384
getPadding() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP512
getParsingStrategy() - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
Get the parsing strategy.
getParsingStrategy() - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCacheBuilderSpec
Get the raw batch metadata to metadata type parsing strategy.
getPostAuthenticationFlows(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
getPostLogoutRedirectUris() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Get the list of post logout redirection URIs.
getPostLogoutRedirectUris() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Get the list of post logout redirection URIs.
getProfileRequestContextLookupStrategy() - Method in class net.shibboleth.oidc.profile.config.navigate.MessageContextLookupFunctionAdaptor
Get the profile request context lookup strategy used to adapt the message context.
getPrompt() - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
Get the prompt.
getProviderInformation() - Method in class net.shibboleth.oidc.metadata.context.OIDCProviderMetadataContext
Set the client information.
getProxyCount(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
getRedirectURI() - Method in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
Get the redirect_uri.
getRedirectUriOverride(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Get the redirect_uri override if set.
getRedirectUriOverride(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCAuthenticationRelyingPartyProfileConfiguration
Get the redirect_uri override if set.
getReferenceURI() - Method in class net.shibboleth.oidc.security.credential.BasicJWKReferenceCredential
Get the reference URI to the remote JWK.
getReferenceURI() - Method in interface net.shibboleth.oidc.security.credential.JWKReferenceCredential
Get the reference URI to the remote JWK.
getRefreshDelayFactor() - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
Get the refresh delay factor.
getRefreshDelayFactor() - Method in class net.shibboleth.oidc.metadata.cache.impl.BaseMetadataCacheBuilderSpec
Gets the delay factor used to compute the next refresh time.
getRefreshTokenChainLifetime(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Get refresh token chain lifetime.
getRefreshTokenChainLifetime(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2RefreshTokenProducingProfileConfiguration
Get refresh token chain lifetime.
getRefreshTokenClaimsSetManipulationStrategy(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
Get the bi-function for manipulating refresh token claims set.
getRefreshTokenClaimsSetManipulationStrategy(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenConfiguration
Get the bi-function for manipulating refresh token claims set.
getRefreshTokenTimeout(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Get refresh token timeout.
getRefreshTokenTimeout(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2RefreshTokenProducingProfileConfiguration
Get refresh token timeout.
getRefreshTokenType(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Get refresh token type.
getRefreshTokenType(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2RefreshTokenProducingProfileConfiguration
Get refresh token type.
getRefreshTriggerTime() - Method in class net.shibboleth.oidc.metadata.MetadataManagementData
Get the refresh trigger time of the metadata.
getRegexp() - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
Get the regular expression that the claim value must meet.
getRegistrationValidityPeriod(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCDynamicRegistrationConfiguration
Get dynamic registration validity period.
getRegistrationValidityPeriod(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCDynamicRegistrationConfiguration
Get dynamic registration validity period.
getRequestedClaims() - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
Get the requested claims.
getRequestLookupStrategy() - Method in class net.shibboleth.oidc.profile.audit.impl.AbstractAuthenticationRequestAuditExtractor
Get the request lookup strategy.
getRequestObject() - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
Get the request object.
getRequestObjectClaimsSet() - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
Get the request object claims set.
getRequestObjectEncryptionAlg() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Get the JWE alg algorithm for request object encryption.
getRequestObjectEncryptionAlg() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Get the JWE alg algorithm for request object encryption.
getRequestObjectEncryptionEnc() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Get the JWE enc algorithm for request object encryption.
getRequestObjectEncryptionEnc() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Get the JWE enc algorithm for request object encryption.
getRequestObjectSigningAlg() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Get the JWS alg algorithm for request object signature.
getRequestObjectSigningAlg() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Get the JWS alg algorithm for request object signature.
getRequestURI() - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
Get the URI to fetch the request object from.
getRequestUriClaimsSetManipulationStrategy(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2PushedAuthorizationRequestConfiguration
Get the bi-function for manipulating request URI claims set.
getRequestUriClaimsSetManipulationStrategy(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2PushedAuthorizationRequestConfiguration
Get the bi-function for manipulating request URI claims set.
getRequestUriLifetime(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2PushedAuthorizationRequestConfiguration
Get request URI lifetime.
getRequestUriLifetime(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2PushedAuthorizationRequestConfiguration
Get request URI lifetime.
getRequestUris() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Get the list of request URIs.
getRequestUris() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Get the list of request URIs.
getRequestUriType(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2PushedAuthorizationRequestConfiguration
Get request URI type.
getRequestUriType(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2PushedAuthorizationRequestConfiguration
Get request URI type.
getResolvers() - Method in class net.shibboleth.oidc.metadata.impl.ChainingClientInformationResolver
Get an immutable the list of currently registered resolvers.
getResolvers() - Method in class net.shibboleth.oidc.metadata.impl.ChainingProviderMetadataResolver
Get an immutable the list of currently registered resolvers.
getResource() - Method in class net.shibboleth.oidc.metadata.impl.PropertiesClientSecretValueResolver
Get the properties resource containing client secret values.
getResourceLocation() - Method in class net.shibboleth.oidc.metadata.criterion.ResourceLocationCriterion
Get the resource location.
getResponseLookupStrategy() - Method in class net.shibboleth.oidc.profile.audit.impl.AbstractAuthenticationResponseAuditExtractor
Get the response lookup strategy.
getResponseMode() - Method in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
Get the response mode.
getResponseMode(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Get the response_mode to use for authorization requests.
getResponseMode(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2AuthorizationProfileConfiguration
Get the response_mode to use for authorization requests.
getResponseModes(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Get the response_modes that are allowed to be used in authorization requests.
getResponseModes(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2AuthorizationProfileConfiguration
Get the response_modes that are allowed to be used in authorization requests.
getResponseType() - Method in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
Get the response type.
getResponseType(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Get the response_type to use for authorization requests.
getResponseType(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2AuthorizationProfileConfiguration
Get the response_type to use for authorization requests.
getResponseTypes() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Get the whitespace-delimited list of response types.
getResponseTypes() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Get the whitespace-delimited list of response types.
getRevocationLifetime(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenRevocationConfiguration
Get revocation lifetime.
getRevocationLifetime(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenRevocationConfiguration
Get revocation lifetime.
getRevocationMethod(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenRevocationConfiguration
Get the revocation method used when revoking a token.
getRevocationMethod(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenRevocationConfiguration
Get the revocation method used when revoking a token.
getScope() - Method in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
Get the scope.
getScopes() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Get the whitespace-delimited list of scopes.
getScopes() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Get the whitespace-delimited list of scopes.
getScopes(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Get the scopes to use in authentication requests.
getScopes(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2AuthorizationProfileConfiguration
Get the scopes to use in authentication requests.
getSecret() - Method in class net.shibboleth.oidc.security.credential.BasicNimbusSecretCredential
Deprecated.
Get the client secret.
getSecret() - Method in interface net.shibboleth.oidc.security.credential.ClientSecretCredential
Get the client_secret as a UTF-8 encoded String.
getSecret() - Method in class net.shibboleth.oidc.security.credential.DefaultClientSecretCredential
Get the client_secret as a UTF-8 encoded String.
getSecret() - Method in interface net.shibboleth.oidc.security.credential.NimbusSecretCredential
Deprecated.
Get the client secret.
getSecretAsBytes() - Method in interface net.shibboleth.oidc.security.credential.ClientSecretCredential
Get the client_secret as UTF-8 bytes.
getSecretAsBytes() - Method in class net.shibboleth.oidc.security.credential.DefaultClientSecretCredential
Get the client_secret as UTF-8 bytes.
getSecretBytes(String) - Static method in class net.shibboleth.oidc.security.JWSAssemblyUtils
Convert the given secret into its byte representation assuming a UTF-8 character set.
getSecretExpirationPeriod(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCDynamicRegistrationConfiguration
Get client secret expiration period.
getSecretExpirationPeriod(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCDynamicRegistrationConfiguration
Get client secret expiration period.
getSecretReference() - Method in class net.shibboleth.oidc.metadata.criterion.ClientSecretReferenceCriterion
Get the client secret reference.
getSectorIdentifierUri() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Get the sector identifier URI.
getSectorIdentifierUri() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Get the sector identifier URI.
getSignatureAlgorithm() - Method in class net.shibboleth.oidc.security.jose.SignatureSigningParameters
Get the signature algorithm URI to use when signing.
getSignatureAlgorithms() - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningConfiguration
Get the list of preferred signature algorithm URIs, in preference order.
getSignatureAlgorithms() - Method in interface net.shibboleth.oidc.security.jose.SignatureSigningConfiguration
Get the list of preferred signature algorithm URIs, in preference order.
getSignatureSigningParameters() - Method in class net.shibboleth.oidc.security.jose.context.SecurityParametersContext
Get the parameters to use for signature signing operations.
getSignatureTrustEngine() - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureValidationConfiguration
Get the signature trust engine to use.
getSignatureTrustEngine() - Method in interface net.shibboleth.oidc.security.jose.SignatureValidationConfiguration
Get the signature trust engine to use.
getSignatureTrustEngine() - Method in class net.shibboleth.oidc.security.jose.SignatureValidationParameters
Get the signature trust engine to use.
getSignatureValidationParameters() - Method in class net.shibboleth.oidc.security.jose.context.SecurityParametersContext
Get the parameters to use for signature validation operations.
getSignatureValidationParameters() - Method in class net.shibboleth.oidc.security.jose.criterion.SignatureValidationParametersCriterion
Get the signature validation parameters instance.
getSigner(Algorithm, Credential) - Method in class net.shibboleth.oidc.security.impl.JWSTokenSigner
Returns the correct implementation of the JWSSigner based on the algorithm type and credential given.
getSigningCredential() - Method in class net.shibboleth.oidc.security.jose.SignatureSigningParameters
Get the signing credential to use when signing.
getSigningCredentials() - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningConfiguration
Get the list of signing credentials to use when signing, in preference order.
getSigningCredentials() - Method in interface net.shibboleth.oidc.security.jose.SignatureSigningConfiguration
Get the list of signing credentials to use when signing, in preference order.
getSingleURIValue(String) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
Converts the given String into a URI.
getSingleURIValue(MetadataValueSAMLObject) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
Converts the metadata value object value into a URI.
getSoftwareId() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Get the software identifier.
getSoftwareId() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Get the software identifier.
getSoftwareVersion() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Get the software version.
getSoftwareVersion() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Get the software version.
getSourceId() - Method in class net.shibboleth.oidc.metadata.filter.MetadataSource
Get identifier of the metadata source.
getSourceIdentifier() - Method in class net.shibboleth.oidc.metadata.cache.impl.DefaultFileLoadingStrategy
Get a friendly name source identifier to use in log statements.
getSourceIdentifier() - Method in class net.shibboleth.oidc.metadata.cache.impl.DefaultResourceLoadingStrategy
Get a friendly name source identifier to use in log statements.
getSourceIdentifier() - Method in interface net.shibboleth.oidc.metadata.cache.LoadingStrategy
Get a friendly name source identifier to use in log statements.
getSourceMetadataExpiryStrategy() - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
Get the source metadata expiry strategy.
getSourceMetadataExpiryStrategy() - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCacheBuilderSpec
Get the source metadata expiry date strategy.
getSourceMetadataValidPredicate() - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
Get the predicate which determines if the source metadata is valid or not.
getSourceMetadataValidPredicate() - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCacheBuilderSpec
Get the predicate which determines if the source metadata is valid or not.
getStampLock() - Method in class net.shibboleth.oidc.metadata.MetadataManagementData
Get the read-write lock instance which governs access to the metadata's backing store data.
getState() - Method in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
Get the state.
getStorage() - Method in class net.shibboleth.oidc.jwk.RemoteJwkSetCache
Get the backing store for the remote JWK set contents.
getStorageService() - Method in class net.shibboleth.oidc.metadata.impl.BaseStorageServiceClientInformationComponent
Get the StorageService back-end to use.
getSubsetOfValues() - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
Get the list of value(s) from which the claim must be subset of.
getSupersetOfValues() - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
Get the list of value(s) from which the claim must be superset of.
getSupportedContentTypes() - Method in class net.shibboleth.oidc.metadata.impl.AbstractDynamicHTTPFetchingStrategy
Get the list of supported MIME types for use in Accept request header and validation of response Content-Type header.
getTokenEndpointAuthMethod() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Get the token endpoint authentication method.
getTokenEndpointAuthMethod() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Get the token endpoint authentication method.
getTokenEndpointAuthMethod(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Get the token endpoint authentication method to use with an OpenID Provider.
getTokenEndpointAuthMethod(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2ClientAuthenticableClientProfileConfiguration
Get the token endpoint authentication method to use with an OpenID Provider.
getTokenEndpointAuthMethods(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Get the enabled token endpoint authentication methods.
getTokenEndpointAuthMethods(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2ClientAuthenticableProfileConfiguration
Get the enabled token endpoint authentication methods.
getTokenEndpointAuthSigningAlg() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Get the JWS alg algorithm for token endpoint authentication signature.
getTokenEndpointAuthSigningAlg() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Get the JWS alg algorithm for token endpoint authentication signature.
getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA128CBCHS256
getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA128GCM
getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA192CBCHS384
getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA192GCM
getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA256CBCHS512
getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA256GCM
getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyAgreementECDHES
getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyAgreementECDHESA128KW
getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyAgreementECDHESA192KW
getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyAgreementECDHESA256KW
getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSA15
getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP
getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP256
getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP384
getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP512
getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureES256
getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureES384
getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureES512
getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureHS256
getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureHS384
getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureHS512
getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignaturePS256
 
getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignaturePS384
 
getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignaturePS512
 
getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureRS256
getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureRS384
getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureRS512
getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA128GCMKW
getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA128KW
getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA192GCMKW
getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA192KW
getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA256GCMKW
getType() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA256KW
getType() - Method in class net.shibboleth.oidc.metadata.AbstractEvaluableMetadataCriterion
Get the object type this criterion accepts.
getUnknownAttributes() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
getUnknownXMLObjects() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
getUnknownXMLObjects(QName) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
getUnregisteredClientPolicy(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Get the policy for validating unregistered clients.
getUnregisteredClientPolicy(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2ClientAuthenticableProfileConfiguration
Get the policy for validating unregistered clients.
getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA128CBCHS256
getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA128GCM
getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA192CBCHS384
getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA192GCM
getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA256CBCHS512
getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.EncryptionA256GCM
getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyAgreementECDHES
getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyAgreementECDHESA128KW
getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyAgreementECDHESA192KW
getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyAgreementECDHESA256KW
getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSA15
getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP
getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP256
getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP384
getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP512
getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureES256
getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureES384
getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureES512
getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureHS256
getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureHS384
getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureHS512
getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignaturePS256
 
getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignaturePS384
 
getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignaturePS512
 
getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureRS256
getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureRS384
getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureRS512
getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA128GCMKW
getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA128KW
getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA192GCMKW
getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA192KW
getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA256GCMKW
getURI() - Method in class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA256KW
getUsageType(JWK) - Static method in class net.shibboleth.oidc.security.CredentialConversionUtil
Converts JWK key usage type to OpenSAML usage type.
getUserInfoEncryptedResponseAlg() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Get the JWE alg algorithm for UserInfo response encryption.
getUserInfoEncryptedResponseAlg() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Get the JWE alg algorithm for UserInfo response encryption.
getUserInfoEncryptedResponseEnc() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Get the JWE enc algorithm for UserInfo response encryption.
getUserInfoEncryptedResponseEnc() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Get the JWE enc algorithm for UserInfo response encryption.
getUserInfoHttpRequestMethod(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Get the HTTP request method for the UserInfo request.
getUserInfoHttpRequestMethod(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCAuthenticationRelyingPartyProfileConfiguration
Get the HTTP request method for the UserInfo request.
getUserInfoSignedResponseAlg() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Get the JWS alg algorithm for UserInfo response signature.
getUserInfoSignedResponseAlg() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Get the JWS alg algorithm for UserInfo response signature.
getValue() - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
Get the (forced) value for the claim.
getValue() - Method in enum class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest.CodeChallengeMethod
Get the code_challenge_method value.
getValue() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.AbstractMetadataValueSAMLObject
Get the value for this metadata object.
getValue() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.JwksUriImpl
Get the value for this metadata object.
getValue() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.PostLogoutRedirectUriImpl
Get the value for this metadata object.
getValue() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.RequestUriImpl
Get the value for this metadata object.
getValue() - Method in interface net.shibboleth.oidc.saml.xmlobject.MetadataValueSAMLObject
Deprecated, for removal: This API element is subject to removal in a future version. 
GRANT_TYPES_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Attribute local name.
grantTypes - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Grant types for this entity.
GrantTypesLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
A function that obtains OAuth2TokenConfiguration.getGrantTypes(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
GrantTypesLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.GrantTypesLookupFunction
 
grantTypesLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
Enabled grant types.

H

handleResponse(ClassicHttpResponse) - Method in class net.shibboleth.oidc.metadata.impl.HTTPProviderConfigurationFetchingStrategy.OIDCProviderMetadataResponseHandler
 
handleResponse(ClassicHttpResponse) - Method in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyResponseHandler
handles(XMLObject) - Method in class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.ClientSecretProvider
handles(XMLObject) - Method in class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.ClientSecretReferenceProvider
handles(XMLObject) - Method in class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.InlineJwksProvider
handles(XMLObject) - Method in class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.JWKSReferenceProvider
hasExpired(MetadataManagementData<IdentifierType>) - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
Determine if the metadata has expired based on the expiration time set in the management metadata.
hashCode() - Method in class net.shibboleth.oidc.authn.principal.AuthenticationContextClassReferencePrincipal
hashCode() - Method in class net.shibboleth.oidc.metadata.criterion.ClientIDCriterion
hashCode() - Method in class net.shibboleth.oidc.metadata.criterion.ClientSecretReferenceCriterion
hashCode() - Method in class net.shibboleth.oidc.metadata.criterion.IssuerIDCriterion
hashCode() - Method in class net.shibboleth.oidc.metadata.criterion.ResourceLocationCriterion
hashCode() - Method in class net.shibboleth.oidc.metadata.ProviderMetadataProviderContainer
hashCode() - Method in class net.shibboleth.oidc.metadata.RelyingPartyClientInformationProvider
hashCode() - Method in class net.shibboleth.oidc.security.credential.impl.DataEncryptionAlgorithmCriterion
hashCode() - Method in class net.shibboleth.oidc.security.credential.impl.EvaluableKeyIDCredentialCriterion
hashCode() - Method in class net.shibboleth.oidc.security.credential.impl.EvaluableMACKeyLengthCredentialCriterion
hashCode() - Method in class net.shibboleth.oidc.security.credential.impl.KeyManagmentAlgorithmCriterion
hashCode() - Method in class net.shibboleth.oidc.security.jose.criterion.ClientSecretCredentialCriterion
hashCode() - Method in class net.shibboleth.oidc.security.jose.criterion.DecryptionConfigurationCriterion
hashCode() - Method in class net.shibboleth.oidc.security.jose.criterion.EncryptionConfigurationCriterion
hashCode() - Method in class net.shibboleth.oidc.security.jose.criterion.JOSEObjectCriterion
hashCode() - Method in class net.shibboleth.oidc.security.jose.criterion.JWKSetCriterion
hashCode() - Method in class net.shibboleth.oidc.security.jose.criterion.KeyIdCriterion
hashCode() - Method in class net.shibboleth.oidc.security.jose.criterion.ProviderMetadataCriterion
hashCode() - Method in class net.shibboleth.oidc.security.jose.criterion.SignatureSigningConfigurationCriterion
hashCode() - Method in class net.shibboleth.oidc.security.jose.criterion.SignatureValidationConfigurationCriterion
hashCode() - Method in class net.shibboleth.oidc.security.jose.criterion.SignatureValidationParametersCriterion
httpClient - Variable in class net.shibboleth.oidc.jwk.RemoteJwkSetCache
The HttpClient to use.
httpClient - Variable in class net.shibboleth.oidc.metadata.impl.AbstractDynamicHTTPFetchingStrategy
HTTP Client used to pull the configuration information.
httpClientSecurityParameters - Variable in class net.shibboleth.oidc.jwk.RemoteJwkSetCache
HTTP client security parameters.
httpClientSecurityParameters - Variable in class net.shibboleth.oidc.metadata.impl.AbstractDynamicHTTPFetchingStrategy
HTTP client security parameters.
HTTPPostAuthnRequestEncoder - Class in net.shibboleth.oidc.profile.encoding.impl
A message encoder that encodes an OpenID authentication request by HTTP Form POST Serialization.
HTTPPostAuthnRequestEncoder() - Constructor for class net.shibboleth.oidc.profile.encoding.impl.HTTPPostAuthnRequestEncoder
 
HTTPPostAuthnResponseDecoder - Class in net.shibboleth.oidc.profile.decoding.impl
A message decoder that decodes an incoming AuthenticationResponse when using a form_post response_type.
HTTPPostAuthnResponseDecoder() - Constructor for class net.shibboleth.oidc.profile.decoding.impl.HTTPPostAuthnResponseDecoder
 
HTTPProviderConfigurationFetchingStrategy - Class in net.shibboleth.oidc.metadata.impl
A dynamic strategy for fetching OpenID Connect Provider Configuration Metadata from its well-known location (OpenID Connect Discovery 1.0, section 4).
HTTPProviderConfigurationFetchingStrategy(HttpClient, HttpClientResponseHandler<OIDCProviderMetadata>) - Constructor for class net.shibboleth.oidc.metadata.impl.HTTPProviderConfigurationFetchingStrategy
Constructor.
HTTPProviderConfigurationFetchingStrategy.DefaultWellKnownPathCompositionStrategy - Class in net.shibboleth.oidc.metadata.impl
Default strategy for composing a well-known URL to fetch a provider's configuration document from.
HTTPProviderConfigurationFetchingStrategy.OIDCProviderMetadataResponseHandler - Class in net.shibboleth.oidc.metadata.impl
The response handler for parsing the providers's configuration information into OIDCProviderMetadata.
HTTPRedirectAuthnRequestEncoder - Class in net.shibboleth.oidc.profile.encoding.impl
A message encoder that encodes an OpenID authentication request by Query String Serialization and sends a HTTP redirect response.
HTTPRedirectAuthnRequestEncoder() - Constructor for class net.shibboleth.oidc.profile.encoding.impl.HTTPRedirectAuthnRequestEncoder
 
HTTPRedirectAuthnResponseDecoder - Class in net.shibboleth.oidc.profile.decoding.impl
A message decoder that decodes an incoming AuthenticationResponse when using a query response_mode.
HTTPRedirectAuthnResponseDecoder() - Constructor for class net.shibboleth.oidc.profile.decoding.impl.HTTPRedirectAuthnResponseDecoder
 
HttpRequestMethod() - Constructor for enum class net.shibboleth.oidc.profile.oauth2.config.OAuth2AuthorizationProfileConfiguration.HttpRequestMethod
 
httpRequestMethodLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Which HTTP method should be used to issue OIDC authentication requests.
HybridFlowEnabledPredicate - Class in net.shibboleth.oidc.profile.config.logic
HybridFlowEnabledPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.HybridFlowEnabledPredicate
 
hybridFlowPredicate - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2FlowAwareProfileConfiguration
Predicate used to indicate whether hybrid flow is supported by this profile.

I

id - Variable in class net.shibboleth.oidc.metadata.criterion.ClientIDCriterion
The client ID.
id - Variable in class net.shibboleth.oidc.metadata.criterion.IssuerIDCriterion
The issuer ID.
id - Variable in class net.shibboleth.oidc.metadata.MetadataManagementData
The identifier of the entity managed by this instance.
ID_TOKEN_ENCRYPTED_RESPONSE_ALG_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Attribute local name.
ID_TOKEN_ENCRYPTED_RESPONSE_ENC_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Attribute local name.
ID_TOKEN_ISSUE_INSTANT - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
id_token issue instant.
ID_TOKEN_SIGNED_RESPONSE_ALG_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Attribute local name.
identifer - Variable in class net.shibboleth.oidc.profile.messaging.context.AbstractOIDCEntityContext
The identifier of the OIDC peer entity e.g.
identifierExtractionStrategy - Variable in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
Strategy used to extract an identifier from the given metadata.
identifierExtractionStrategy - Variable in class net.shibboleth.oidc.metadata.cache.impl.BaseMetadataCacheBuilderSpec
Strategy used to extract an identifier from the given metadata.
IDTokenClaims - Enum Class in net.shibboleth.oidc.security.jwt.claims.impl
Enum of those OIDC ID token claims that are not part of the standard JWT claims set.
IDTokenClaims(String) - Constructor for enum class net.shibboleth.oidc.security.jwt.claims.impl.IDTokenClaims
Constructor.
idTokenEncryptedResponseAlg - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
ID token encrypted response algorithm for this entity.
idTokenEncryptedResponseEnc - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
ID token encrypted response encoder for this entity.
IDTokenLifetimeLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
A function that returns OIDCIDTokenProducingProfileConfiguration.getIDTokenLifetime(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
IDTokenLifetimeLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.IDTokenLifetimeLookupFunction
 
idTokenLifetimeLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Lookup function to supply ID token lifetime.
IDTokenManipulationStrategyLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
A function that returns OIDCIDTokenProducingProfileConfiguration.getIDTokenManipulationStrategy(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
IDTokenManipulationStrategyLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.IDTokenManipulationStrategyLookupFunction
 
idTokenManipulationStrategyLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Lookup function to supply strategy bi-function for manipulating id_token claims.
idTokenSignedResponseAlg - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
ID token signed response algorithm for this entity.
ImplicitFlowEnabledPredicate - Class in net.shibboleth.oidc.profile.config.logic
ImplicitFlowEnabledPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.ImplicitFlowEnabledPredicate
 
implicitFlowPredicate - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2FlowAwareProfileConfiguration
Predicate used to indicate whether implicit flow is supported by this profile.
INBOUND_MESSAGE_CLASS - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
The inbound (Nimbus) message class.
InboundMessageClassLookupFunction - Class in net.shibboleth.oidc.profile.audit.impl
Looks up the value of the simple class name from the inbound message context's message object.
InboundMessageClassLookupFunction() - Constructor for class net.shibboleth.oidc.profile.audit.impl.InboundMessageClassLookupFunction
 
IncludeIssuerInAuthenticationResponsePredicate - Class in net.shibboleth.oidc.profile.config.logic
IncludeIssuerInAuthenticationResponsePredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.IncludeIssuerInAuthenticationResponsePredicate
 
includeIssuerInResponsePredicate - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Whether to include iss parameter in the authentication response.
indexedEntities - Variable in class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver.JsonBackingStore
Index of identifiers to their entity information.
indexedValues - Variable in class net.shibboleth.oidc.metadata.impl.AbstractBackingStore
Index of entity IDs to their descriptors.
indexEntityDescriptor(Value, Key, AbstractOIDCEntityResolver.JsonBackingStore) - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver
Index the specified entity descriptor, updating the specified entity backing store instance as necessary.
indicatesSuccess() - Method in class net.shibboleth.oidc.profile.messaging.JSONErrorResponse
indicatesSuccess() - Method in class net.shibboleth.oidc.profile.messaging.JSONSuccessResponse
init() - Method in class net.shibboleth.oidc.attribute.resolver.spring.enc.impl.AttributeEncoderNamespaceHandler
init() - Method in class net.shibboleth.oidc.profile.spring.relyingparty.metadata.impl.MetadataNamespaceHandler
initialCleanupTaskDelay - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
The initial cleanup task delay.
initialCleanupTaskDelay - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
The initial cleanup task delay.
initialize() - Method in class net.shibboleth.oidc.security.credential.impl.AbstractClientInformationCredentialResolver
initialize() - Method in class net.shibboleth.oidc.security.credential.impl.ProviderMetadataCredentialResolver
initializeMetricsInstrumentation() - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
Initialize the Metrics-based instrumentation.
initializeVerifier(Algorithm, Credential) - Static method in class net.shibboleth.oidc.security.impl.BaseSignedJWTTrustEngine
Initializes a JWSVerifier for the given algorithm, using the provided Credential.
initializeVerifier(Algorithm, Credential) - Static method in class net.shibboleth.oidc.security.impl.JWTSignatureValidationUtil
Initializes a JWSVerifier for the given algorithm, using the provided Credential.
INITIATE_LOGIN_URI_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Attribute local name.
initiateLoginUri - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Initiate login URI for this entity.
initMetadataResolver() - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver
Initialise this metadata provider.
initMetadataResolver() - Method in class net.shibboleth.oidc.metadata.impl.JSONMapMetadataResolver
 
initMetadataResolver() - Method in class net.shibboleth.oidc.metadata.impl.OIDCMapBasedMetadataResolver
 
initMetadataResolver() - Method in class net.shibboleth.oidc.metadata.impl.OIDCProviderMetadataResolver
 
initMetadataResolver() - Method in class net.shibboleth.oidc.metadata.policy.impl.OIDCMetadataPolicyResolver
Initialise this metadata provider.
initOIDCResolver() - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver
Initializes this resolver by creating a new backing store.
initOIDCResolver() - Method in class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver
 
InlineJwksProvider - Class in net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider
Implementation of KeyInfoProvider which provides basic support for extracting a JWKCredential child of KeyInfo.
InlineJwksProvider() - Constructor for class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.InlineJwksProvider
 
inputstreamToByteArray(InputStream) - Static method in class net.shibboleth.oidc.metadata.impl.ResolverHelper
Converts an InputStream into a byte array.
INVALID_ACCESS_TOKEN - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
The access token is invalid.
INVALID_DPOP_ACCESS_TOKEN - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
The DPoP access token is invalid.
INVALID_DPOP_NONCE - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
ID of event returned if the DPoP proof nonce is invalid.
INVALID_DPOP_PROOF - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
ID of event returned if the DPoP proof is invalid.
INVALID_GRANT - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
The provided authorization grant is invalid.
INVALID_GRANT_TYPE - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
The grant type in token request is not supported for RP.
INVALID_ID_TOKEN - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
The id_token is invalid.
INVALID_ID_TOKEN_HINT - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
The id_token_hint is invalid.
INVALID_PKCE_TRANSFORMATION_METHOD - Static variable in class net.shibboleth.oidc.profile.core.OidcError
The request contains an unsupported PKCE transform algorithm.
INVALID_PKCE_TRANSFORMATION_METHOD - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
ID of event returned if the PKCE code verifier transformation method is invalid.
INVALID_REDIRECT_URI - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
The redirect_uri in request is invalid.
INVALID_REDIRECT_URIS - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
ID of event returned if the mandatory redirect_uris is invalid.
INVALID_REQUEST_OBJECT - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
The request object cannot be validated.
INVALID_REQUEST_URI - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
The request uri is invalid.
INVALID_RESPONSE_MODE - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
The response type in request is not supported for RP.
INVALID_RESPONSE_TYPE - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
The response type in request is not supported for RP.
INVALID_SCOPE - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
The scope is invalid.
INVALID_SUBJECT - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
The subject resolved is not the expected one.
INVALID_TARGET - Static variable in class net.shibboleth.oidc.profile.core.OidcError
The resource indicator is invalid.
INVALID_TARGET - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
The resource indicator is invalid.
INVALID_TARGET_CODE - Static variable in class net.shibboleth.oidc.profile.core.OidcError
The resource indicator is invalid.
INVALID_TOKEN - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
The token is invalid.
INVALID_USERINFO_CLAIMS - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
The UserInfo claims are invalid.
invalidate(IdentifierType) - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
Remove/discard from the backing store all metadata for the entity with the given identifier.
invalidateAll() - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
Remove/discard all metadata for the backing store.
IS_PASSIVE - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
prompt=none requested field.
isAcrRequestAlwaysEssential(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Get whether all acr claim requests should be treated as Essential.
isAcrRequestAlwaysEssential(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCAuthorizationConfiguration
Get whether all acr claim requests should be treated as Essential.
isAllowPKCEPlain(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Get whether client is allowed to use PKCE code challenge method plain.
isAllowPKCEPlain(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCSSOProfileConfiguration
Get whether client is allowed to use PKCE code challenge method plain.
isAlwaysIssueBearerAccessToken(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Get whether the access token to be issued is always a bearer access token.
isAlwaysIssueBearerAccessToken(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
Get whether the access token to be issued is always a bearer access token.
isAlwaysIssueBearerAccessToken(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2AccessTokenProducingProfileConfiguration
Get whether the access token to be issued is always a bearer access token.
isAuthorizationCodeFlowEnabled(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2FlowAwareProfileConfiguration
Get whether authorization code flow is supported by this profile.
isAuthorizationCodeFlowEnabled(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2FlowAwareProfileConfiguration
Get whether authorization code flow is supported by this profile.
isBackChannelLogoutSessionRequired() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Get the flag to require session id in back-channel logout request.
isBackChannelLogoutSessionRequired() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Get the flag to require session id in back-channel logout request.
isDataEncryptionAlgorithm(String) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
Evaluate whether the specified algorithm is a data encryption algorithm.
isECKeyType(Key) - Static method in class net.shibboleth.oidc.security.credential.JWACredentialSupport
Returns true of the key is not null and is an EC key.
isEncodeConsentInTokens(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Get whether to encode consent in authorization code and access/refresh tokens.
isEncodeConsentInTokens(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCAuthorizationConfiguration
Get whether to encode consent in authorization code and access/refresh tokens.
isEncryptionOptional(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Get whether encryption is optional in the face of a missing key, etc.
isEncryptionOptional(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
 
isEncryptionOptional(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCUserInfoConfiguration
 
isEncryptionOptional(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
Get whether encryption is optional in the face of a missing key, etc.
isEncryptionOptional(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenEncryptionProfileConfiguration
Get whether encryption is optional in the face of a missing key, etc.
isEncryptRequestObject(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Should the RequestObject (if configured) be encrypted?
isEncryptRequestObject(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCAuthenticationRelyingPartyProfileConfiguration
Should the RequestObject (if configured) be encrypted?
isEnforceRefreshTokenRotation(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
Get whether always revoke the refresh_token after it's used.
isEnforceRefreshTokenRotation(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenConfiguration
Get whether always revoke the refresh_token after it's used.
isEssential() - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
Is the flag indicating that the claim must have a value enabled.
isFailFastInitialization() - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver
Gets whether problems during initialization should cause the provider to fail or go on without metadata.
isFailFastInitialization() - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver
Gets whether problems during initialization should cause the provider to fail or go on without metadata.
isForceAuthn(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
isForcePKCE(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Get whether client is required to use PKCE.
isForcePKCE(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCSSOProfileConfiguration
Get whether client is required to use PKCE.
isFrontChannelLogoutSessionRequired() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Get the flag to require session id in front-channel logout request.
isFrontChannelLogoutSessionRequired() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Get the flag to require session id in front-channel logout request.
isFrontChannelSuccess(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
 
isFrontChannelSuccess(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCLogoutProfileConfiguration
Get whether to consider front-channel logout propagation successful.
isHybridFlowEnabled(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCFlowAwareProfileConfiguration
Get whether the implicit flow is supported by this profile.
isHybridFlowEnabled(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2FlowAwareProfileConfiguration
Get whether the implicit flow is supported by this profile.
isImplicitFlowEnabled(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2FlowAwareProfileConfiguration
Get whether hybrid flow is supported by this profile.
isImplicitFlowEnabled(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2FlowAwareProfileConfiguration
Get whether hybrid flow is supported by this profile.
isIncludeIssuerInResponse(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Get whether to include iss parameter in the authentication response.
isIncludeIssuerInResponse(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCAuthorizationConfiguration
Get whether to include iss parameter in the authentication response.
isInitialized - Variable in class net.shibboleth.oidc.security.credential.impl.AbstractClientInformationCredentialResolver
Initialization flag.
isInitialized - Variable in class net.shibboleth.oidc.security.credential.impl.ProviderMetadataCredentialResolver
Initialization flag.
isInitialized() - Method in class net.shibboleth.oidc.security.credential.impl.AbstractClientInformationCredentialResolver
isInitialized() - Method in class net.shibboleth.oidc.security.credential.impl.ProviderMetadataCredentialResolver
isIssueIdTokenViaRefreshToken(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
Get whether the id_token is issued when refresh token grant is used.
isIssueIdTokenViaRefreshToken(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenConfiguration
Get whether the id_token is issued when refresh token grant is used.
isKeyEncryptionAlgorithm(String) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
Evaluate whether the specified algorithm is a key encryption or key wrapping algorithm.
isLimitInitialAccessTokenToSelf(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
Get whether the initial access token audience is solely to self (i.e.
isLimitInitialAccessTokenToSelf(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenConfiguration
Get whether the initial access token audience is solely to self (i.e.
isLocalCredential(Credential) - Method in class net.shibboleth.oidc.security.credential.impl.LocalJOSEObjectCredentialResolver
Determine whether the credential is a local credential.
isMatchOnIdentifierRequired() - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
Is a match on identifier required?
isMatchOnIdentifierRequired() - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCacheBuilderSpec
Get if an identifier criteria match is required.
isPreferFrontChannel(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
 
isPreferFrontChannel(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCLogoutProfileConfiguration
Get whether to prefer front-channel if both are defined for the RP.
isProxiedAuthnInstant(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Gets whether authentication results produced by use of this profile should carry the proxied assertion's auth_time from the id_token, rather than the current time.
isProxiedAuthnInstant(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCAuthenticationRelyingPartyProfileConfiguration
Gets whether authentication results produced by use of this profile should carry the proxied assertion's auth_time from the id_token, rather than the current time.
isRefreshTokensEnabled(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2FlowAwareProfileConfiguration
Get whether refresh tokens are supported by this profile.
isRefreshTokensEnabled(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2FlowAwareProfileConfiguration
Get whether refresh tokens are supported by this profile.
isRemoveData(MetadataManagementData<IdentifierType>, Instant, Instant) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache.ExpiredAndIdleMetadataCleanupTask
Determine whether metadata should be removed based on expiration and idle time data.
isRemoveIdleEntityData() - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
Should idle metadata be removed?
isRequireAuthenticationRequest(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Get whether client is required to use OIDC authentication request vs plain OAuth2 authorization request.
isRequireAuthenticationRequest(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2AuthorizationProfileConfiguration
Get whether client is required to use OIDC authentication request vs plain OAuth2 authorization request.
isRequireAuthTime() - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Get the flag to require authentication time.
isRequireAuthTime() - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Get the flag to require authentication time.
isRequireDpopJkt(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Get whether client is required to include jkt parameter in authorization requests.
isRequireDpopJkt(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2AuthorizationProfileConfiguration
Get whether client is required to include jkt parameter in authorization requests.
isRequireDpopProof(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Get whether client is required to include DPoP Proof JWT in request.
isRequireDpopProof(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2DPoPProofValidatingProfileConfiguration
Get whether client is required to include DPoP Proof JWT in request.
isRequireIdTokenHint(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
 
isRequireIdTokenHint(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCLogoutProfileConfiguration
Get whether to require the use of id_token_hint in an OIDC RP-initiated logout sequence.
isRequirePushedAuthorizationRequest(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Get whether client is required to use pushed authorization requests.
isRequirePushedAuthorizationRequest(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2AuthorizationProfileConfiguration
Get whether client is required to use pushed authorization requests.
isRequireValidMetadata() - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor.SkeletonEchoingRoleDescriptorResolver
isResolveAttributes(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
isResolveAttributes(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCUserInfoConfiguration
isResolveAttributes(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
isRetrieveUserInfoEndpointClaims(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Get whether to make a request to the UserInfo Endpoint to obtain authenticated End-User claims.
isRetrieveUserInfoEndpointClaims(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCAuthenticationRelyingPartyProfileConfiguration
Get whether to make a request to the UserInfo Endpoint to obtain authenticated End-User claims.
isRevokeTokens(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
 
isRevokeTokens(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCLogoutProfileConfiguration
Get whether to revoke the tokens related to the session to be logged out.
isSatisfyAnyPredicates() - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver
Get the flag indicating whether resolved credentials may satisfy any predicates (i.e.
isSignRequestObject(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Should the RequestObject (if configured) be signed?
isSignRequestObject(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCAuthenticationRelyingPartyProfileConfiguration
Should the RequestObject (if configured) be signed?
isStrictScopeValidation(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Get whether scope validation is strict, i.e.
isStrictScopeValidation(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2ScopeValidatingProfileConfiguration
Get whether scope validation is strict, i.e.
isSubsetOfValues(Object, Collection<?>) - Static method in class net.shibboleth.oidc.metadata.policy.impl.MetadataPolicyHelper
Checks if the given candiate is a subset of the given values.
ISSUED_AT_CLAIM - Enum constant in enum class net.shibboleth.oidc.security.jwt.claims.impl.JWTClaims
Time at which the JWT was issued.
IssuedAtClaimsValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl
If the 'iat' claim is present in the JWT, verifies it is not to far away from the current time.
IssuedAtClaimsValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.IssuedAtClaimsValidator
Constructor.
IssuedClaimsValidatorLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
A function that obtains OAuth2TokenValidatingProfileConfiguration.getIssuedClaimsValidator(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
IssuedClaimsValidatorLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.IssuedClaimsValidatorLookupFunction
 
issuedClaimsValidatorLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2TokenValidatingConfiguration
Validation of JWT claims for issued tokens.
issueIdTokenViaRefreshTokenPredicate - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
Whether issue id_token when refresh_token is used.
IssueIdTokenViaRefreshTokenPredicate - Class in net.shibboleth.oidc.profile.config.logic
IssueIdTokenViaRefreshTokenPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.IssueIdTokenViaRefreshTokenPredicate
 
ISSUER - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
OIDC issuer.
ISSUER_CLAIM - Enum constant in enum class net.shibboleth.oidc.security.jwt.claims.impl.JWTClaims
Issuer Identifier for the Issuer of the response.
IssuerIDCriterion - Class in net.shibboleth.oidc.metadata.criterion
A Criterion representing an OIDC issuer ID.
IssuerIDCriterion(Issuer) - Constructor for class net.shibboleth.oidc.metadata.criterion.IssuerIDCriterion
Constructor.
IssuerIDFromOIDCProviderMetadataContextLookupFunction - Class in net.shibboleth.oidc.profile.logic
A function that returns the issuer id via the provider information stored in OIDCProviderMetadataContext.
IssuerIDFromOIDCProviderMetadataContextLookupFunction() - Constructor for class net.shibboleth.oidc.profile.logic.IssuerIDFromOIDCProviderMetadataContextLookupFunction
Constructor.
issuerLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Lookup function to override issuer value.
issuerLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCDynamicRegistrationConfiguration
Lookup function to override issuer value.
issuerLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
Lookup function to override issuer value.
issuerLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCProviderInformationConfiguration
Lookup function to override issuer value.
issuerLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2TokenValidatingConfiguration
Lookup function to override issuer value.
issuerLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2PushedAuthorizationRequestConfiguration
Lookup function to override issuer value.
issuerLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
Lookup function to override issuer value.
isSupersetOfValues(Object, Collection<?>) - Static method in class net.shibboleth.oidc.metadata.policy.impl.MetadataPolicyHelper
Checks if the given candidate is a superset of the given values.
isTlsServerValidationSufficient(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Is TLS server validation of the token endpoint sufficient to verify an id_token without checking the id_token signature.
isTlsServerValidationSufficient(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCAuthenticationRelyingPartyProfileConfiguration
Is TLS server validation of the token endpoint sufficient to verify an id_token without checking the id_token signature.
isTrusted() - Method in class net.shibboleth.oidc.metadata.filter.MetadataSource
Get whether the metadata source is trusted.
isUseRequestObject(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Should OpenID specific authentication request parameters should be passed in a single, self contained, JWT?
isUseRequestObject(ProfileRequestContext) - Method in interface net.shibboleth.oidc.profile.config.OIDCAuthenticationProfileConfiguration
Should OpenID specific authentication request parameters should be passed in a single, self contained, JWT?

J

jcaAlg - Variable in class net.shibboleth.oidc.security.credential.BasicExpiringJWTSharedSecretCredentialFactoryBean
The JCA algorithm to set on the SecretKey.
JCAConstantExtension - Class in net.shibboleth.oidc.jwa.support
Additional constants to JCAConstants defined in and/or used with the Java Cryptography Architecture (JCA) specification.
JCAConstantExtension() - Constructor for class net.shibboleth.oidc.jwa.support.JCAConstantExtension
Private constructor.
joseHeaderLookupStrategy - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AccessTokenHashValidator
Strategy to find the JOSE headers relating to the id_token the at_hash is taken from.
joseObject - Variable in class net.shibboleth.oidc.security.jose.criterion.JOSEObjectCriterion
The JOSEObject which serves as the source for credential criteria.
joseObjectCredentialResolver - Variable in class net.shibboleth.oidc.security.impl.BaseSignedJWTTrustEngine
Resolver of credentials from JOSEObject headers.
JOSEObjectCredentialResolver - Interface in net.shibboleth.oidc.security.credential
Specialized CredentialResolver marker interface for resolvers which resolve credentials from the headers of a JOSEObject instance.
JOSEObjectCriterion - Class in net.shibboleth.oidc.security.jose.criterion
An implementation of Criterion which specifies criteria based on the contents of a JOSEObject element.
JOSEObjectCriterion(JOSEObject) - Constructor for class net.shibboleth.oidc.security.jose.criterion.JOSEObjectCriterion
Constructor.
jsonBackingStore - Variable in class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver
Backing store for runtime JSON data.
JsonBackingStore() - Constructor for class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver.JsonBackingStore
Constructor.
JSONErrorResponse - Class in net.shibboleth.oidc.profile.messaging
Class for creating JSON Error response for requests expecting JSON response.
JSONErrorResponse(ErrorObject) - Constructor for class net.shibboleth.oidc.profile.messaging.JSONErrorResponse
Constructor.
JSONErrorResponse(ErrorObject, String, String) - Constructor for class net.shibboleth.oidc.profile.messaging.JSONErrorResponse
Constructor.
JSONMapMetadataResolver - Class in net.shibboleth.oidc.metadata.impl
Concrete metadata resolver for OIDC Provider configuration metadata resolution.
JSONMapMetadataResolver(MetadataCache<Map<String, Object>>) - Constructor for class net.shibboleth.oidc.metadata.impl.JSONMapMetadataResolver
Constructor.
JSONMetadataResolver - Interface in net.shibboleth.oidc.metadata
A resolver that is capable of resolving Map instances which meet certain supplied criteria.
JSONSecurityConfiguration - Class in net.shibboleth.oidc.profile.config
Class extends SecurityConfiguration to support separate configuration for various encryption and signature validation operations.
JSONSecurityConfiguration() - Constructor for class net.shibboleth.oidc.profile.config.JSONSecurityConfiguration
Constructor.
JSONSecurityConfiguration(Duration, IdentifierGenerationStrategy) - Constructor for class net.shibboleth.oidc.profile.config.JSONSecurityConfiguration
Constructor.
JSONSuccessResponse - Class in net.shibboleth.oidc.profile.messaging
Class for creating JSON Success response.
JSONSuccessResponse(JSONObject) - Constructor for class net.shibboleth.oidc.profile.messaging.JSONSuccessResponse
Constructor.
JSONSuccessResponse(JSONObject, String, String) - Constructor for class net.shibboleth.oidc.profile.messaging.JSONSuccessResponse
Constructor.
JWACredentialSupport - Class in net.shibboleth.oidc.security.credential
Support class for JSON Web Algorithm credentials.
JWACredentialSupport() - Constructor for class net.shibboleth.oidc.security.credential.JWACredentialSupport
Constructor.
JWEDataEncryptionAlgorithmsLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
A function that returns EncryptionConfiguration.getDataEncryptionAlgorithms() if it is available in the OIDC security configuration of the profile configuration.
JWEDataEncryptionAlgorithmsLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.JWEDataEncryptionAlgorithmsLookupFunction
 
JWEKeyTransportEncryptionAlgorithmsLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
A function that returns EncryptionConfiguration.getKeyTransportEncryptionAlgorithms() if it is available in the OIDC security configuration of the profile configuration.
JWEKeyTransportEncryptionAlgorithmsLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.JWEKeyTransportEncryptionAlgorithmsLookupFunction
 
JWETokenDecrypter - Class in net.shibboleth.oidc.security.impl
Supports decryption of encrypted JSON Web Tokens using the JSON Web Encryption standard.
JWETokenDecrypter(DecryptionParameters) - Constructor for class net.shibboleth.oidc.security.impl.JWETokenDecrypter
Constructor.
jwkAlgorithm - Variable in class net.shibboleth.oidc.security.credential.BasicJWKCredential
jwk algorithm.
JWKCredential - Interface in net.shibboleth.oidc.security.credential
Credential based on JSON Web Key (JWK).
JWKCredentialsToPublishLookupStrategy - Class in net.shibboleth.oidc.profile.config.navigate
Strategy to locate the set of JWK credentials to publish in a KeySet document.
JWKCredentialsToPublishLookupStrategy() - Constructor for class net.shibboleth.oidc.profile.config.navigate.JWKCredentialsToPublishLookupStrategy
 
JWKCredentialSupport - Class in net.shibboleth.oidc.security.credential
Provide JWK specific credential support.
JWKCredentialSupport() - Constructor for class net.shibboleth.oidc.security.credential.JWKCredentialSupport
Constructor.
jwkKid - Variable in class net.shibboleth.oidc.security.credential.BasicJWKCredential
jwk kid.
JWKReferenceCredential - Interface in net.shibboleth.oidc.security.credential
Credential based on a reference (URI) to a JSON Web Key (JWK).
jwkResource - Variable in class net.shibboleth.oidc.security.credential.BasicJWKCredentialFactoryBean
Where the private key is to be found.
JwksData - Interface in net.shibboleth.oidc.saml.xmlobject
SAML2 OIDC metadata extension 'JwksData'.
JwksDataBuilder - Class in net.shibboleth.oidc.saml.xmlobject.impl
Builder of JwksDataImpl.
JwksDataBuilder() - Constructor for class net.shibboleth.oidc.saml.xmlobject.impl.JwksDataBuilder
 
JwksDataImpl - Class in net.shibboleth.oidc.saml.xmlobject.impl
Concrete implementation of JwksData.
JwksDataImpl(String, String, String) - Constructor for class net.shibboleth.oidc.saml.xmlobject.impl.JwksDataImpl
Constructor.
jwkSet - Variable in class net.shibboleth.oidc.security.jose.criterion.JWKSetCriterion
The JWKSet which serves as a source of credentials.
JWKSetCriterion - Class in net.shibboleth.oidc.security.jose.criterion
An implementation of Criterion which specifies criteria based on the contents of a JWKSet element.
JWKSetCriterion(JWKSet) - Constructor for class net.shibboleth.oidc.security.jose.criterion.JWKSetCriterion
Constructor.
JWKSReferenceProvider - Class in net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider
Implementation of KeyInfoProvider which provides basic support for extracting a JWKReferenceCredential child of KeyInfo.
JWKSReferenceProvider() - Constructor for class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.JWKSReferenceProvider
 
JwksUri - Interface in net.shibboleth.oidc.saml.xmlobject
SAML2 OIDC metadata extension 'JwksUri'.
JwksUriBuilder - Class in net.shibboleth.oidc.saml.xmlobject.impl
Builder of JwksUriImpl.
JwksUriBuilder() - Constructor for class net.shibboleth.oidc.saml.xmlobject.impl.JwksUriBuilder
 
JwksUriImpl - Class in net.shibboleth.oidc.saml.xmlobject.impl
Concrete implementation of JwksUri.
JwksUriImpl(String, String, String) - Constructor for class net.shibboleth.oidc.saml.xmlobject.impl.JwksUriImpl
Constructor.
JWSAssemblyUtils - Class in net.shibboleth.oidc.security
Generic utility class for helping with JWS assembly.
JWSAssemblyUtils() - Constructor for class net.shibboleth.oidc.security.JWSAssemblyUtils
Private constructor.
JWSSignatureAlgorithmsLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
A function that returns SignatureSigningConfiguration.getSignatureAlgorithms() if it is available in the OIDC security configuration of the profile configuration.
JWSSignatureAlgorithmsLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.JWSSignatureAlgorithmsLookupFunction
 
JWSTokenSigner - Class in net.shibboleth.oidc.security.impl
Supports signing a JSON Web Token (JWT) claims set using the JSON Web Signature standard using the algorithm and credential contained inside the SignatureSigningParameters.
JWSTokenSigner(SignatureSigningParameters) - Constructor for class net.shibboleth.oidc.security.impl.JWSTokenSigner
Constructor.
JWT_ID_CLAIM - Enum constant in enum class net.shibboleth.oidc.security.jwt.claims.impl.JWTClaims
The "jti" (JWT ID) claim provides a unique identifier for the JWT.
JWTClaims - Enum Class in net.shibboleth.oidc.security.jwt.claims.impl
Enum that represents the standard set of registered JWT claims.
JWTClaims(String) - Constructor for enum class net.shibboleth.oidc.security.jwt.claims.impl.JWTClaims
Constructor.
jwtClaimSetToSign - Variable in class net.shibboleth.oidc.security.impl.SignJWTHandler
The stashed claims to sign.
jwtDecryptConfig - Variable in class net.shibboleth.oidc.profile.config.JSONSecurityConfiguration
Configuration used when decrypting JWE tokens.
JWTDecryptionConfigurationLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
A function that returns a DecryptionConfiguration list for JWE decrypting by way of various lookup strategies.
JWTDecryptionConfigurationLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.JWTDecryptionConfigurationLookupFunction
 
jwtEncryptConfig - Variable in class net.shibboleth.oidc.profile.config.JSONSecurityConfiguration
Configuration used when encrypting JWE tokens.
JWTEncryptionConfigurationLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
A function that returns an EncryptionConfiguration list for JWT encryption by way of various lookup strategies.
JWTEncryptionConfigurationLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.JWTEncryptionConfigurationLookupFunction
 
JWTIdentifierClaimsValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl
Verifies the identifier (jit) from the JWT against replay via configurable ReplayCache.
JWTIdentifierClaimsValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierClaimsValidator
Constructor.
JWTIdentifierRevocationValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl
Verifies the identifier (jit) from the JWT against revocation via configurable RevocationCache.
JWTIdentifierRevocationValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierRevocationValidator
 
jwtLookupStrategy - Variable in class net.shibboleth.oidc.profile.audit.impl.ClaimSetFromJWTLookupStrategy
Strategy used to lookup the JWT to retrieve the claimsset from.
JWTMessageSignatureSecurityHandler - Class in net.shibboleth.oidc.security.impl
A MessageHandler that uses a TrustEngine to evaluate the signature of a signed JWT.
JWTMessageSignatureSecurityHandler() - Constructor for class net.shibboleth.oidc.security.impl.JWTMessageSignatureSecurityHandler
 
jwtSignatureSigningConfig - Variable in class net.shibboleth.oidc.profile.config.JSONSecurityConfiguration
Configuration used when JWS tokens.
JWTSignatureSigningConfigurationLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
A function that returns a SignatureSigningConfiguration list for JWT signing by way of various lookup strategies.
JWTSignatureSigningConfigurationLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.JWTSignatureSigningConfigurationLookupFunction
 
jwtSignatureValidationConfig - Variable in class net.shibboleth.oidc.profile.config.JSONSecurityConfiguration
Configuration used when validating JWS signatures.
JWTSignatureValidationConfigurationLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
A function that returns a SignatureValidationConfiguration list for JWS validation by way of various lookup strategies.
JWTSignatureValidationConfigurationLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.JWTSignatureValidationConfigurationLookupFunction
 
JWTSignatureValidationUtil - Class in net.shibboleth.oidc.security.impl
Generic utility class for helping JWT signature validation.
JWTSignatureValidationUtil() - Constructor for class net.shibboleth.oidc.security.impl.JWTSignatureValidationUtil
Private constructor.
jwtTokenLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration
Function that looks up an encrypted JWT token from the given profile context to validate .
jwtTokenLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler
Function that looks up a signed JWT token from the given message context to validate .
jwtTokenLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.DecryptJWE
Function that looks up a signed JWT token from the given message context to validate.
jwtTokenLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.JWTMessageSignatureSecurityHandler
Function that looks up a signed JWT token from the given message context to validate.
jwtUpdateConsumer - Variable in class net.shibboleth.oidc.security.impl.EncryptJWTHandler
A consumer that takes the EncryptedJWT and updates the correct object inside the MessageContext.
jwtUpdateConsumer - Variable in class net.shibboleth.oidc.security.impl.SignJWTHandler
A consumer that takes the Signed JWT and updates the correct object inside the MessageContext.
jwtUpdateStrategy - Variable in class net.shibboleth.oidc.security.impl.DecryptJWE
A consumer that sets the JWT produced from this decryption operation back into the profile request context.
JWTValidationException - Exception in net.shibboleth.oidc.jwt.claims
JWT validation exception, to throw when validation fails.
JWTValidationException() - Constructor for exception net.shibboleth.oidc.jwt.claims.JWTValidationException
Constructor.
JWTValidationException(Exception) - Constructor for exception net.shibboleth.oidc.jwt.claims.JWTValidationException
Constructor.
JWTValidationException(String) - Constructor for exception net.shibboleth.oidc.jwt.claims.JWTValidationException
Constructor.
JWTValidationException(String, Exception) - Constructor for exception net.shibboleth.oidc.jwt.claims.JWTValidationException
Constructor.

K

kekKeyCredentialResolver - Variable in class net.shibboleth.oidc.security.jose.DecryptionParameters
The encrypted content encrypted key's (CEK) credential resolver.
kekKeyCredentialResolver - Variable in class net.shibboleth.oidc.security.jose.impl.BasicDecryptionConfiguration
The EncryptedKey's credential resolver.
kekKeyCredentialResolver - Variable in class net.shibboleth.oidc.security.jose.impl.BasicEncryptionConfiguration
The EncryptedKey's credential resolver.
KeyAgreementECDHES - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
Algorithm descriptor for JWE key management algorithm: ECDH-ES.
KeyAgreementECDHES() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyAgreementECDHES
 
KeyAgreementECDHESA128KW - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
Algorithm descriptor for JWE key management algorithm: ECDH-ES+A128KW.
KeyAgreementECDHESA128KW() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyAgreementECDHESA128KW
 
KeyAgreementECDHESA192KW - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
Algorithm descriptor for JWE key management algorithm: ECDH-ES+A192KW.
KeyAgreementECDHESA192KW() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyAgreementECDHESA192KW
 
KeyAgreementECDHESA256KW - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
Algorithm descriptor for JWE key management algorithm: ECDH-ES+A256KW.
KeyAgreementECDHESA256KW() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyAgreementECDHESA256KW
 
keyFetchInterval - Variable in class net.shibboleth.oidc.security.credential.impl.ClientInformationCredentialResolver
The remote key refresh interval.
keyFetchInterval - Variable in class net.shibboleth.oidc.security.credential.impl.ProviderMetadataCredentialResolver
The remote key refresh interval.
keyId - Variable in class net.shibboleth.oidc.security.credential.impl.EvaluableKeyIDCredentialCriterion
Base criteria.
keyId - Variable in class net.shibboleth.oidc.security.jose.criterion.KeyIdCriterion
Expected key ID of resolved credentials.
KeyIdCriterion - Class in net.shibboleth.oidc.security.jose.criterion
An implementation of Criterion which specifies key ID criteria.
KeyIdCriterion(String) - Constructor for class net.shibboleth.oidc.security.jose.criterion.KeyIdCriterion
Constructor.
keyInfoCredentialResolver - Variable in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
The KeyInfoCredentialResolver to be used for the resolution.
keyLengthSupportsMACAlgorithm(JWSAlgorithm, Key) - Static method in class net.shibboleth.oidc.security.credential.JWACredentialSupport
Check the key length is compatible with the given JWS algorithm.
KeyManagementConstants - Class in net.shibboleth.oidc.jwa.support
Algorithm Header Parameter 'alg' Values for JWE as defined by RFC 7518.
KeyManagementConstants() - Constructor for class net.shibboleth.oidc.jwa.support.KeyManagementConstants
Constructor.
KeyManagmentAlgorithmCriterion - Class in net.shibboleth.oidc.security.credential.impl
An implementation of Criterion which specifies key management algorithm criteria.
KeyManagmentAlgorithmCriterion(String) - Constructor for class net.shibboleth.oidc.security.credential.impl.KeyManagmentAlgorithmCriterion
Constructor.
keyName - Variable in class net.shibboleth.oidc.profile.config.navigate.ClientInformationStringValueLookupFunction
The key for which to fetch the value for.
keyName - Variable in class net.shibboleth.oidc.profile.config.navigate.ProviderMetadataStringValuesLookupFunction
The key for which to fetch the value for.
keySupportsCurve(ECKey, JWSAlgorithm) - Static method in class net.shibboleth.oidc.security.credential.JWACredentialSupport
Is the EC key supplied compatible with the EC Curve required by the algorithm given.
keySupportsCurve(ECKey, String) - Static method in class net.shibboleth.oidc.security.credential.JWACredentialSupport
Is the EC key supplied compatible with the EC Curve required by the algorithm given.
keyToCredential(JWK) - Static method in class net.shibboleth.oidc.security.CredentialConversionUtil
Converts a JWK to an internal Credential.
keyTransportEncryptionAlgorithmLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration
A lookup function for the key transport algorithm in the client metadata.
keyTransportEncryptionAlgorithms - Variable in class net.shibboleth.oidc.security.jose.impl.BasicEncryptionConfiguration
Key transport encryption algorithm URIs.
keyTransportEncryptionAlgorithmsLookupStrategy - Variable in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
A lookup strategy to locate key encryption algorithms from the given criteria set and includesExcludes predicate.
keyTransportEncryptionAlgorithmURI - Variable in class net.shibboleth.oidc.security.jose.EncryptionParameters
The EncryptedKey encryption algorithm URI.
keyTransportEncryptionCredential - Variable in class net.shibboleth.oidc.security.jose.EncryptionParameters
The EncryptedKey encryption credential.
KeyTransportRSA15 - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
Algorithm descriptor for JWE key transport algorithm: RSA1_5.
KeyTransportRSA15() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSA15
 
KeyTransportRSAOAEP - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
Algorithm descriptor for JWE key transport algorithm: RSA-OAEP.
KeyTransportRSAOAEP() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP
 
KeyTransportRSAOAEP256 - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
Algorithm descriptor for JWE key transport algorithm: RSA-OAEP-256.
KeyTransportRSAOAEP256() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP256
 
KeyTransportRSAOAEP384 - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
Algorithm descriptor for JWE key transport algorithm: RSA-OAEP-384.
KeyTransportRSAOAEP384() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP384
 
KeyTransportRSAOAEP512 - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
Algorithm descriptor for JWE key transport algorithm: RSA-OAEP-512.
KeyTransportRSAOAEP512() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.KeyTransportRSAOAEP512
 
keyTrust - Variable in class net.shibboleth.oidc.security.impl.ExplicitKeySignedJWTTrustEngine
The external explicit key trust engine to use as a basis for trust in this implementation.

L

lastAccessedTime - Variable in class net.shibboleth.oidc.metadata.MetadataManagementData
The last time at which the entity's backing store data was accessed.
lastRefresh - Variable in class net.shibboleth.oidc.metadata.cache.CacheLoadingContext
Last time a refresh cycle occurred.
lastRefresh - Variable in class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver
Last time a refresh cycle occurred.
lastRefresh - Variable in class net.shibboleth.oidc.metadata.impl.DefaultBatchBackingStore
Last time a refresh cycle occurred.
lastUpdate - Variable in class net.shibboleth.oidc.metadata.cache.CacheLoadingContext
Last time the metadata was updated.
lastUpdate - Variable in class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver
Last time the metadata was updated.
lastUpdate - Variable in class net.shibboleth.oidc.metadata.impl.DefaultBatchBackingStore
Last time the metadata was updated.
lastUpdateTime - Variable in class net.shibboleth.oidc.metadata.MetadataManagementData
Last update time of the associated metadata.
limitInitialAccessTokenToSelfPredicate - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
Whether initial access token audience is solely to self (i.e.
LimitInitialAccessTokenToSelfPredicate - Class in net.shibboleth.oidc.profile.config.logic
LimitInitialAccessTokenToSelfPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.LimitInitialAccessTokenToSelfPredicate
 
load(CacheLoadingContext) - Method in class net.shibboleth.oidc.metadata.cache.impl.DefaultFileLoadingStrategy
Load cache data from a source.
load(CacheLoadingContext) - Method in class net.shibboleth.oidc.metadata.cache.impl.DefaultResourceLoadingStrategy
Load cache data from a source.
load(CacheLoadingContext) - Method in interface net.shibboleth.oidc.metadata.cache.LoadingStrategy
Load cache data from a source.
loadCache() - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
Reload the entire backing-store cache using the loading strategy.
loadingStrategy - Variable in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
The function to use to load metadata.
loadingStrategy - Variable in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCacheBuilderSpec
The function to use to load metadata.
LoadingStrategy - Interface in net.shibboleth.oidc.metadata.cache
A strategy that loads binary information from a configured source.
localCredResolver - Variable in class net.shibboleth.oidc.security.credential.impl.LocalJOSEObjectCredentialResolver
The resolver which is used to resolve local credentials.
LocalJOSEObjectCredentialResolver - Class in net.shibboleth.oidc.security.credential.impl
A simple specialization of BasicJOSEObjectCredentialResolver which is capable of resolving local credentials from a supplied CredentialResolver which manages local credentials.
LocalJOSEObjectCredentialResolver(JOSEObjectCredentialResolver) - Constructor for class net.shibboleth.oidc.security.credential.impl.LocalJOSEObjectCredentialResolver
Constructor.
location - Variable in class net.shibboleth.oidc.metadata.criterion.ResourceLocationCriterion
The resource location.
log - Variable in class net.shibboleth.oidc.attribute.transcoding.AbstractOIDCAttributeTranscoder
Class logger.
log - Variable in class net.shibboleth.oidc.attribute.transcoding.impl.OIDCScopedStringAttributeTranscoder
Class logger.
log - Variable in class net.shibboleth.oidc.attribute.transcoding.impl.OIDCStringAttributeTranscoder
Class logger.
log - Variable in class net.shibboleth.oidc.jwk.RemoteJwkSetCache
Logger.
log - Variable in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
Class logger.
log - Variable in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
Class logger.
log - Variable in class net.shibboleth.oidc.metadata.cache.impl.DefaultFileLoadingStrategy
Class logger.
log - Variable in class net.shibboleth.oidc.metadata.cache.impl.DefaultJSONMapParsingStrategy
Class logger.
log - Variable in class net.shibboleth.oidc.metadata.cache.impl.DefaultOIDCProviderMetadataParsingStrategy
Class logger.
log - Variable in class net.shibboleth.oidc.metadata.cache.impl.DefaultResourceLoadingStrategy
Class logger.
log - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache.ExpiredAndIdleMetadataCleanupTask
Logger.
log - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
Class logger.
log - Variable in class net.shibboleth.oidc.metadata.cache.impl.FetchThroughMetadataCache
Class logger.
log - Variable in class net.shibboleth.oidc.metadata.cache.impl.MetadataCacheBuilder.Builder
Class logger.
log - Variable in class net.shibboleth.oidc.metadata.impl.AbstractDynamicHTTPFetchingStrategy
Class logger.
log - Variable in class net.shibboleth.oidc.metadata.impl.AbstractFileOIDCEntityResolver
Class logger.
log - Variable in class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver
Class logger.
log - Variable in class net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver
Class logger.
log - Variable in class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver
Class logger.
log - Variable in class net.shibboleth.oidc.metadata.impl.ChainingClientInformationResolver
Class logger.
log - Variable in class net.shibboleth.oidc.metadata.impl.ChainingProviderMetadataResolver
Class logger.
log - Variable in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
Class logger.
log - Variable in class net.shibboleth.oidc.metadata.impl.FilesystemClientInformationResolver
Class logger.
log - Variable in class net.shibboleth.oidc.metadata.impl.FilesystemProviderMetadataResolver
Class logger.
log - Variable in class net.shibboleth.oidc.metadata.impl.HTTPProviderConfigurationFetchingStrategy
Class logger.
log - Variable in class net.shibboleth.oidc.metadata.impl.HTTPProviderConfigurationFetchingStrategy.OIDCProviderMetadataResponseHandler
Class logger.
log - Variable in class net.shibboleth.oidc.metadata.impl.PropertiesClientSecretValueResolver
Class logger.
log - Variable in class net.shibboleth.oidc.metadata.impl.ReloadingProviderMetadataProvider
Class logger.
log - Variable in class net.shibboleth.oidc.metadata.impl.ReloadingRelyingPartyClientInformationProvider
Class logger.
log - Variable in class net.shibboleth.oidc.metadata.impl.ResolverServiceClientSecretValueResolver
Class logger.
log - Variable in class net.shibboleth.oidc.metadata.impl.StorageServiceClientInformationManager
Class logger.
log - Variable in class net.shibboleth.oidc.metadata.impl.StorageServiceClientInformationResolver
Class logger.
log - Variable in class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.ClientSecretProvider
Class logger.
log - Variable in class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.ClientSecretReferenceProvider
Class logger.
log - Variable in class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.InlineJwksProvider
Class logger.
log - Variable in class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.JWKSReferenceProvider
Class logger.
log - Variable in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyEnforcer
Class logger.
log - Variable in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyResponseHandler
Class logger.
log - Variable in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyValidator
Class logger.
log - Variable in class net.shibboleth.oidc.metadata.policy.impl.MetadataPolicyViaLocationFetchingStrategy
Class logger.
log - Variable in class net.shibboleth.oidc.metadata.ProviderMetadataProviderContainer
Class logger.
log - Variable in class net.shibboleth.oidc.metadata.RelyingPartyClientInformationProvider
Class logger.
log - Variable in class net.shibboleth.oidc.profile.audit.impl.AbstractClaimsSetAuditExtractor
Class logger.
log - Variable in class net.shibboleth.oidc.profile.audit.impl.ClaimSetFromJWTLookupStrategy
Class logger.
log - Variable in class net.shibboleth.oidc.profile.audit.impl.DateBasedJWTClaimAuditExtractor
Class logger.
log - Variable in class net.shibboleth.oidc.profile.config.navigate.ClientInformationStringValueLookupFunction
Class logger.
log - Variable in class net.shibboleth.oidc.profile.config.navigate.JWKCredentialsToPublishLookupStrategy
Class logger.
log - Variable in class net.shibboleth.oidc.profile.config.navigate.ProviderMetadataStringValuesLookupFunction
Class logger.
log - Variable in class net.shibboleth.oidc.profile.config.navigate.ResolverBasedRegistrationMetadataPolicyLookupFunction
Class logger.
log - Variable in class net.shibboleth.oidc.profile.decoding.impl.HTTPPostAuthnResponseDecoder
Class logger.
log - Variable in class net.shibboleth.oidc.profile.decoding.impl.HTTPRedirectAuthnResponseDecoder
Class logger.
log - Variable in class net.shibboleth.oidc.profile.encoding.impl.AbstractOIDCMessageEncoder
Class logger.
log - Variable in class net.shibboleth.oidc.profile.encoding.impl.HTTPPostAuthnRequestEncoder
Class logger.
log - Variable in class net.shibboleth.oidc.profile.encoding.impl.HTTPRedirectAuthnRequestEncoder
Class logger.
log - Variable in class net.shibboleth.oidc.profile.encoding.impl.OIDCResponseEncoderFactory
Class logger.
log - Variable in class net.shibboleth.oidc.profile.impl.AbstractBuildErrorResponseFromEvent
Class logger.
log - Variable in class net.shibboleth.oidc.profile.impl.AuthenticationRequestMessageEncoderFactory
Class logger.
log - Variable in class net.shibboleth.oidc.profile.impl.FormOutboundKeySetResponseMessage
Class logger.
log - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTDecryptionParameters
Class logger.
log - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
Class logger.
log - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParameters
Class logger.
log - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
Class logger.
log - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureValidationParametersHandler
Class logger.
log - Variable in class net.shibboleth.oidc.profile.spring.relyingparty.metadata.filter.impl.ClientInformationParser
Class logger.
log - Variable in class net.shibboleth.oidc.security.credential.BasicJWKCredentialFactoryBean
Class logger.
log - Variable in class net.shibboleth.oidc.security.credential.impl.AbstractClientInformationCredentialResolver
Class logger.
log - Variable in class net.shibboleth.oidc.security.credential.impl.BasicJOSEObjectCredentialResolver
Logger.
log - Variable in class net.shibboleth.oidc.security.credential.impl.ClientInformationCredentialResolver
Class logger.
log - Variable in class net.shibboleth.oidc.security.credential.impl.ClientSecretCriterionCredentialResolver
Class logger.
log - Variable in class net.shibboleth.oidc.security.credential.impl.EvaluableKeyIDCredentialCriterion
Logger.
log - Variable in class net.shibboleth.oidc.security.credential.impl.EvaluableMACKeyLengthCredentialCriterion
Logger.
log - Variable in class net.shibboleth.oidc.security.credential.impl.LocalJOSEObjectCredentialResolver
Class logger.
log - Variable in class net.shibboleth.oidc.security.credential.impl.ProviderMetadataCredentialResolver
Class logger.
log - Variable in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler
Class logger.
log - Variable in class net.shibboleth.oidc.security.impl.BaseSignedJWTTrustEngine
Logger.
log - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration
Logger.
log - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler
Logger.
log - Variable in class net.shibboleth.oidc.security.impl.ClientInformationJWTTrustEngine
Class logger.
log - Variable in class net.shibboleth.oidc.security.impl.DecryptJWE
Class logger.
log - Variable in class net.shibboleth.oidc.security.impl.EncryptJWTHandler
Class logger.
log - Variable in class net.shibboleth.oidc.security.impl.ExplicitKeySignedJWTTrustEngine
Class logger.
log - Variable in class net.shibboleth.oidc.security.impl.ExplicitKeyTrustEvaluator
Class logger.
log - Variable in class net.shibboleth.oidc.security.impl.JWETokenDecrypter
Class logger.
log - Variable in class net.shibboleth.oidc.security.impl.JWSTokenSigner
Class logger.
log - Variable in class net.shibboleth.oidc.security.impl.JWTMessageSignatureSecurityHandler
Logger.
log - Static variable in class net.shibboleth.oidc.security.impl.JWTSignatureValidationUtil
Class logger.
log - Variable in class net.shibboleth.oidc.security.impl.SignJWTHandler
Class logger.
log - Variable in class net.shibboleth.oidc.security.impl.TokenAsymmetricKeyTrustEngine
Class logger.
log - Variable in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver
Class logger.
log - Variable in class net.shibboleth.oidc.security.jose.impl.BasicSignatureValidationParametersResolver
Logger.
log - Variable in class net.shibboleth.oidc.security.jose.impl.ClientInformationDataEncryptionAlgorithmsLookupStrategy
Logger.
log - Variable in class net.shibboleth.oidc.security.jose.impl.ClientInformationKeyTransportEncryptionAlgorithmsLookupStrategy
Logger.
log - Variable in class net.shibboleth.oidc.security.jose.impl.ClientInformationSignatureSigningParametersResolver
Class logger.
log - Variable in class net.shibboleth.oidc.security.jose.impl.DefaultDecryptionParametersResolver
Logger.
log - Variable in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
Logger.
log - Variable in class net.shibboleth.oidc.security.jose.impl.ProviderMetadataDataEncryptionAlgorithmsLookupStrategy
Logger.
log - Variable in class net.shibboleth.oidc.security.jose.impl.ProviderMetadataKeyTransportEncryptionAlgorithmsLookupStrategy
Logger.
log - Variable in class net.shibboleth.oidc.security.jose.impl.RelyingPartySigningParametersResolver
Logger.
log - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AccessTokenHashValidator
Class logger.
log - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationTimeClaimsValidator
Class logger.
log - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AuthTimeRequestedActivationCondition
Class logger.
log - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.ChainingJWTClaimsValidator
Class logger.
log - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.ExactMatchClaimsValidator
Class logger.
LOG - Static variable in class net.shibboleth.oidc.security.credential.JWACredentialSupport
Logger.
logEncryption(String, String, String) - Method in class net.shibboleth.oidc.security.impl.EncryptJWTHandler
A convince method to log encryption parameters.
loginHint - Variable in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
Hint to the Authorization Server about the login identifier the End-User might use to log in.
loginHintLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Lookup function to determine the login_hint of an authentication request.
logJWT(JWT) - Method in class net.shibboleth.oidc.security.impl.DecryptJWE
Log (on trace) the JWT.
logJWT(SignedJWT) - Method in class net.shibboleth.oidc.security.impl.SignJWTHandler
Log (on trace) the JWT.
logName - Variable in class net.shibboleth.oidc.security.impl.EncryptJWTHandler
A friendly name to log as the subject of encryption.
logName - Variable in class net.shibboleth.oidc.security.impl.SignJWTHandler
A friendly name to log as the subject of signing.
LogoutHintMatchingStrategyLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
A function that returns OIDCLogoutProfileConfiguration.getLogoutHintMatchingStrategy(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
LogoutHintMatchingStrategyLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.LogoutHintMatchingStrategyLookupFunction
 
logoutHintMatchingStrategyLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
Lookup function to the RP-initiated logout's logout_hint parameter.
logPrefix - Variable in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
Cached log prefix.
logPrefix - Variable in class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver
Logging prefix.
logPrefix - Variable in class net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver
Logging prefix.
logResult(DecryptionParameters) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultDecryptionParametersResolver
Log the resolved parameters.
logResult(EncryptionParameters) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
Log the resolved parameters.
logResult(SignatureSigningParameters) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver
Log the resolved parameters.
logResult(SignatureValidationParameters) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureValidationParametersResolver
Log the resolved parameters.
LookupFunctionWrapper(Function<Collection<String>, Collection<Principal>>) - Constructor for class net.shibboleth.oidc.profile.config.navigate.ProxyAwareDefaultOIDCAuthenticationContextClassResponseLookupFunction.LookupFunctionWrapper
Constructor.
lookupIdentifier(IdentifierType) - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
Get list of descriptors matching the identifier.
lookupIdentifier(Key) - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver
Get list of information matching a given identifier.
lookupIndexedIdentifier(IdentifierType) - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
Lookup the specified identifier from the index.
lookupIndexedIdentifier(Key) - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver
Lookup the specified identifier from the index.

M

MapBasedMetadataResolver - Interface in net.shibboleth.oidc.metadata
A resolver that is capable of resolving Maps which meet certain supplied criteria.
mappedErrors - Variable in class net.shibboleth.oidc.profile.impl.AbstractBuildErrorResponseFromEvent
Map of eventIds to pre-configured error objects.
mapType - Variable in class net.shibboleth.oidc.metadata.cache.impl.DefaultJSONMapParsingStrategy
The map type used by object mapper for deserializing the JSON into desired format.
marshallAttributes(XMLObject, Element) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsMarshaller
matchOnIdentifierRequired - Variable in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
Is a match based on an identifier required? If not, all known metadata will be returned.
matchOnIdentifierRequired - Variable in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCacheBuilderSpec
Is a match based on an identifier required? If not, all known metadata will be returned.
maxAge - Variable in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
Specifies the allowable elapsed time in seconds since the last time the End-User was actively authenticated by the OP.
maxAuthenticationAgeLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Lookup function to determine the max_age of an authentication request.
maxCacheDuration - Variable in class net.shibboleth.oidc.metadata.cache.ExpirationTimeContext
Maximum cache duration.
maxCacheDuration - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
Maximum cache duration.
maxCacheDuration - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
Maximum cache duration.
maxIdleEntityData - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
The maximum idle time for which the resolver will keep data for a given entityID, before it is removed.
maxIdleEntityData - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
The maximum idle time for which the cache will keep data for before it is removed.
maxRefreshDelay - Variable in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
Refresh interval used when metadata does not contain any validUntil or cacheDuration information.
maxRefreshDelay - Variable in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCacheBuilderSpec
Refresh interval used when metadata does not contain any validUntil or cacheDuration information.
maxRefreshDelay - Variable in class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver
Refresh interval used when metadata does not contain any validUntil or cacheDuration information.
maxReplayCacheRecordLifetime - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierClaimsValidator
Maximum lifetime to be used in replay cache when 'exp' claim is exploited.
MDC_ATTRIB_CURRENT_REQUEST_URI - Static variable in class net.shibboleth.oidc.metadata.impl.AbstractDynamicHTTPFetchingStrategy
MDC attribute representing the current request URI.
mergeMetadataPolicies(MetadataPolicy, MetadataPolicy) - Static method in class net.shibboleth.oidc.metadata.policy.impl.MetadataPolicyHelper
Merges two metadata policies with the rules defined in the OIDC federation spec 5.1.3.1:
MessageContextLookupFunctionAdaptor<ResultType> - Class in net.shibboleth.oidc.profile.config.navigate
Adaptor function that allows a profile request context lookup function to work inside a message handler.
MessageContextLookupFunctionAdaptor(Function<ProfileRequestContext, ResultType>) - Constructor for class net.shibboleth.oidc.profile.config.navigate.MessageContextLookupFunctionAdaptor
Constructor.
messageEncoder - Variable in class net.shibboleth.oidc.profile.encoding.impl.OIDCResponseEncoderFactory
The message encoder to be returned by this factory.
MessageHandlerLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
A function that returns OAuth2InterceptorAwareProfileConfiguration.getMessageHandler(MessageContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
MessageHandlerLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.MessageHandlerLookupFunction
 
messageHandlerLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2InterceptorAwareProfileConfiguration
Lookup strategy for message handler.
messageLifetime - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.IssuedAtClaimsValidator
Amount of time for which a message is valid after it is issued (Default value: 1 minute).
metadata - Variable in class net.shibboleth.oidc.metadata.cache.ExpirationTimeContext
The metadata to base the expiry time off.
metadata - Variable in class net.shibboleth.oidc.security.jose.criterion.ProviderMetadataCriterion
The OpenID Provider metadata.
METADATA_TAG_NAME - Static variable in interface net.shibboleth.oidc.attribute.transcoding.OIDCAttributeTranscoder
Name of metadata tag/attribute to check for in the event that OIDCAttributeTranscoder.PROP_NAME_FROM_METADATA is used.
metadataBeforeRemovalHook - Variable in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
A hook that is executed just before a cache entry will been removed/invalidated/evicted.
metadataBeforeRemovalHook - Variable in class net.shibboleth.oidc.metadata.cache.impl.BaseMetadataCacheBuilderSpec
A hook that is executed just before a cache entry will been removed/invalidated/evicted.
MetadataCache<U> - Interface in net.shibboleth.oidc.metadata.cache
A cache for loading, storing, and retrieving metadata against against the supplied CriteriaSet.
MetadataCacheBuilder - Class in net.shibboleth.oidc.metadata.cache.impl
A builder that creates, initializes, and safely publishes the correct metadata cache based on the supplied metadata cache builder specification.
MetadataCacheBuilder() - Constructor for class net.shibboleth.oidc.metadata.cache.impl.MetadataCacheBuilder
Private constructor.
MetadataCacheBuilder.Builder<IdentifierType,MetadataType> - Class in net.shibboleth.oidc.metadata.cache.impl
A static builder for generating a batch metadata cache from a given specification.
MetadataCacheBuilderSpec<IdentifierType,MetadataType> - Interface in net.shibboleth.oidc.metadata.cache.impl
Marker interface for metadata cache builder specifications.
MetadataCacheException - Exception in net.shibboleth.oidc.metadata.cache
Base exception for metadata cache related errors.
MetadataCacheException() - Constructor for exception net.shibboleth.oidc.metadata.cache.MetadataCacheException
Constructor.
MetadataCacheException(Exception) - Constructor for exception net.shibboleth.oidc.metadata.cache.MetadataCacheException
Constructor.
MetadataCacheException(String) - Constructor for exception net.shibboleth.oidc.metadata.cache.MetadataCacheException
Constructor.
MetadataCacheException(String, Exception) - Constructor for exception net.shibboleth.oidc.metadata.cache.MetadataCacheException
Constructor.
metadataContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
Strategy used to look up a SAML metadata context.
metadataExpirationTimeStrategy - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
Strategy used to compute an expiration time from a metadata instance.
metadataExpirationTimeStrategy - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
Strategy used to compute an expiration time.
metadataFile - Variable in class net.shibboleth.oidc.metadata.cache.impl.DefaultFileLoadingStrategy
The metadata file.
metadataFile - Variable in class net.shibboleth.oidc.metadata.impl.AbstractFileOIDCEntityResolver
The metadata file.
metadataFileFriendlyName - Variable in class net.shibboleth.oidc.metadata.cache.impl.DefaultFileLoadingStrategy
The metadata file name to use in logs.
MetadataFilter<T> - Interface in net.shibboleth.oidc.metadata.filter
A metadata filter is used to process a metadata document after it has been acquired from a metadata source.
MetadataFilterContext - Class in net.shibboleth.oidc.metadata.filter
Class used to provide contextual information at runtime to MetadataFilter implementations.
MetadataFilterContext() - Constructor for class net.shibboleth.oidc.metadata.filter.MetadataFilterContext
 
MetadataFilterContext.Data - Interface in net.shibboleth.oidc.metadata.filter
Marker interface for data classes to be used with MetadataFilterContext.
metadataFilterStrategy - Variable in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
A strategy to filter metadata.
metadataFilterStrategy - Variable in class net.shibboleth.oidc.metadata.cache.impl.BaseMetadataCacheBuilderSpec
A strategy to filter metadata.
MetadataManagementData<MetadataIdentifier> - Class in net.shibboleth.oidc.metadata
Class that holds management data about an entities metadata.
MetadataManagementData(MetadataIdentifier) - Constructor for class net.shibboleth.oidc.metadata.MetadataManagementData
Constructor.
MetadataNamespaceHandler - Class in net.shibboleth.oidc.profile.spring.relyingparty.metadata.impl
Namespace handler for urn:mace:shibboleth:2.0:metadata:oidc.
MetadataNamespaceHandler() - Constructor for class net.shibboleth.oidc.profile.spring.relyingparty.metadata.impl.MetadataNamespaceHandler
 
MetadataPolicy - Class in net.shibboleth.oidc.metadata.policy
The metadata policy for a single claim.
MetadataPolicy() - Constructor for class net.shibboleth.oidc.metadata.policy.MetadataPolicy
 
MetadataPolicy.Builder - Class in net.shibboleth.oidc.metadata.policy
Builder class for the MetadataPolicy objects.
MetadataPolicyHelper - Class in net.shibboleth.oidc.metadata.policy.impl
Static utility methods related to metadata policies.
MetadataPolicyHelper() - Constructor for class net.shibboleth.oidc.metadata.policy.impl.MetadataPolicyHelper
Constructor.
metadataPolicyLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCDynamicRegistrationConfiguration
Lookup function to the default metadata policy.
MetadataPolicyLookupStrategyFactory - Class in net.shibboleth.oidc.metadata.cache.impl
A factory for building a function that resolves maps of metadata policies from the profile request context.
MetadataPolicyLookupStrategyFactory() - Constructor for class net.shibboleth.oidc.metadata.cache.impl.MetadataPolicyLookupStrategyFactory
 
metadataPolicyResolver - Variable in class net.shibboleth.oidc.profile.config.navigate.ResolverBasedRegistrationMetadataPolicyLookupFunction
The metadata policy resolver.
MetadataPolicyResolver - Interface in net.shibboleth.oidc.metadata.policy
A resolver that is capable of resolving map of metadata policies (in the entry values as MetadataPolicy objects) which meet certain supplied criteria.
MetadataPolicyViaLocationFetchingStrategy - Class in net.shibboleth.oidc.metadata.policy.impl
A fetching strategy that exploits ResourceLocationCriterion from the given CriteriaSet to resolve a location for metadata policy.
MetadataPolicyViaLocationFetchingStrategy(HttpClient, HttpClientResponseHandler<Map<String, MetadataPolicy>>) - Constructor for class net.shibboleth.oidc.metadata.policy.impl.MetadataPolicyViaLocationFetchingStrategy
Constructor.
metadataResource - Variable in class net.shibboleth.oidc.metadata.cache.impl.DefaultResourceLoadingStrategy
The metadata resource.
metadataResourceFriendlyName - Variable in class net.shibboleth.oidc.metadata.cache.impl.DefaultResourceLoadingStrategy
The metadata resource name to use in logs.
MetadataSource - Class in net.shibboleth.oidc.metadata.filter
Data object for MetadataFilterContext intended to hold information about the source of the metadata currently being processed.
MetadataSource() - Constructor for class net.shibboleth.oidc.metadata.filter.MetadataSource
 
metadataValid(OIDCProviderMetadata, String) - Method in class net.shibboleth.oidc.metadata.impl.HTTPProviderConfigurationFetchingStrategy.OIDCProviderMetadataResponseHandler
Check the Issuer in the metadata is identical to the Issuer URL used to retrieve the metadata.
metadataValidPredicate - Variable in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
Is the metadata valid?
metadataValidPredicate - Variable in class net.shibboleth.oidc.metadata.cache.impl.BaseMetadataCacheBuilderSpec
Is the metadata valid? Defaults to true.
MetadataValueSAMLObject - Interface in net.shibboleth.oidc.saml.xmlobject
Abstract interface for SAML metadata objects containing single String value inside the element.
METRIC_GAUGE_NUM_LIVE_INDEX_METADATA - Static variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
Metric name for the gauge of the number of live entityIDs.
METRIC_RATIOGAUGE_FETCH_TO_GET - Static variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
Metric name for the ratio gauge of fetches to resolve requests.
METRIC_TIMER_FETCH_FROM_ORIGIN_SOURCE - Static variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
METRIC_TIMER_GET - Static variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
Metric name for the timer for DynamicMetadataCache.get(CriteriaSet).
metricsBaseName - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
Base name for Metrics instrumentation names.
mgmtDataMap - Variable in class net.shibboleth.oidc.metadata.impl.DefaultDynamicBackingStore
Map holding management data for each entityID.
mgmtMappingFunction - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
Mapping function to use when creating new metadata management data.
minCacheDuration - Variable in class net.shibboleth.oidc.metadata.cache.ExpirationTimeContext
Minimum cache duration.
minCacheDuration - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
Minimum cache duration.
minCacheDuration - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
Minimum cache duration.
minRefreshDelay - Variable in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
Floor, in milliseconds, for the refresh interval.
minRefreshDelay - Variable in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCacheBuilderSpec
Floor, in milliseconds, for the refresh interval.
minRefreshDelay - Variable in class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver
Floor, in milliseconds, for the refresh interval.
MISSING_DPOP_JKT - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
ID of event returned if the mandatory dpop_jkt parameter is missing.
MISSING_DPOP_PROOF - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
ID of event returned if the mandatory DPoP proof is missing.
MISSING_MANDATORY_ID_TOKEN_HINT - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
The id_token hint is missing in request, even though it's mandatory.
MISSING_MANDATORY_PAR_REQUEST_URI - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
The pushed authorization request (specific request_uri) is not included in request even though it's mandatory.
MISSING_MANDATORY_REQUEST_OBJECT - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
The request object or uri is missing in request, even though it's mandatory.
MISSING_PKCE_CODE_CHALLENGE - Static variable in class net.shibboleth.oidc.profile.core.OidcError
The request is missing a required PKCE code challenge.
MISSING_PKCE_CODE_CHALLENGE - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
ID of event returned if the mandatory PKCE code challenge is missing.
MISSING_REDIRECT_URIS - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
ID of event returned if the mandatory redirect_uris is missing.

N

nameFromMetadataLookupStrategy - Variable in class net.shibboleth.oidc.attribute.transcoding.AbstractOIDCAttributeTranscoder
Strategy to lookup naming overrides in metadata.
NAMESPACE - Static variable in class net.shibboleth.oidc.attribute.resolver.spring.enc.impl.AttributeEncoderNamespaceHandler
Namespace for this handler.
NAMESPACE - Static variable in class net.shibboleth.oidc.profile.spring.relyingparty.metadata.impl.MetadataNamespaceHandler
Namespace for this handler.
NamingFunction() - Constructor for class net.shibboleth.oidc.attribute.transcoding.AbstractOIDCAttributeTranscoder.NamingFunction
 
net.shibboleth.oidc.attribute.resolver.spring.enc.impl - package net.shibboleth.oidc.attribute.resolver.spring.enc.impl
Attribute encoder namespace implementations.
net.shibboleth.oidc.attribute.transcoding - package net.shibboleth.oidc.attribute.transcoding
OIDC Attribute Transcoding base classes.
net.shibboleth.oidc.attribute.transcoding.impl - package net.shibboleth.oidc.attribute.transcoding.impl
Attribute encoder implementations.
net.shibboleth.oidc.authn.context - package net.shibboleth.oidc.authn.context
OIDC/Oauth2 authentication contexts.
net.shibboleth.oidc.authn.principal - package net.shibboleth.oidc.authn.principal
OIDC-specific classes for integration with idp-authn-api packages.
net.shibboleth.oidc.common - package net.shibboleth.oidc.common
Plugin and module information about the OIDC common library.
net.shibboleth.oidc.jwa.algorithm.descriptors - package net.shibboleth.oidc.jwa.algorithm.descriptors
OIDC Signing/Encryption Algorithms.
net.shibboleth.oidc.jwa.support - package net.shibboleth.oidc.jwa.support
Constants related to OIDC crypto features, like signature and ecryption.
net.shibboleth.oidc.jwk - package net.shibboleth.oidc.jwk
Classes related to JSON Web Key (JWK) handling.
net.shibboleth.oidc.jwk.support - package net.shibboleth.oidc.jwk.support
Utility classes related to JSON Web Key (JWK) handling.
net.shibboleth.oidc.jwt.claims - package net.shibboleth.oidc.jwt.claims
Validation functions for JWT claims.
net.shibboleth.oidc.metadata - package net.shibboleth.oidc.metadata
Interfaces and common classes related to resolution of OIDC metadata (or client information).
net.shibboleth.oidc.metadata.cache - package net.shibboleth.oidc.metadata.cache
Metadata cache API.
net.shibboleth.oidc.metadata.cache.impl - package net.shibboleth.oidc.metadata.cache.impl
Metadata cache implementation.
net.shibboleth.oidc.metadata.context - package net.shibboleth.oidc.metadata.context
Metadata cache API contexts.
net.shibboleth.oidc.metadata.criterion - package net.shibboleth.oidc.metadata.criterion
Criteria related to OIDC entity resolution.
net.shibboleth.oidc.metadata.filter - package net.shibboleth.oidc.metadata.filter
Metadata cache filter API.
net.shibboleth.oidc.metadata.impl - package net.shibboleth.oidc.metadata.impl
Implementation classes related to resolution of OIDC metadata (or client information).
net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider - package net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider
Implementation classes related to KeyInfo extensions.
net.shibboleth.oidc.metadata.policy - package net.shibboleth.oidc.metadata.policy
Metadata policy API.
net.shibboleth.oidc.metadata.policy.impl - package net.shibboleth.oidc.metadata.policy.impl
Metadata policy implementation.
net.shibboleth.oidc.profile.audit - package net.shibboleth.oidc.profile.audit
Audit logging related to OIDC functionality.
net.shibboleth.oidc.profile.audit.impl - package net.shibboleth.oidc.profile.audit.impl
Audit extractors .
net.shibboleth.oidc.profile.config - package net.shibboleth.oidc.profile.config
Profile configurations related to OIDC functionality.
net.shibboleth.oidc.profile.config.impl - package net.shibboleth.oidc.profile.config.impl
Profile configuration implementations related to OIDC functionality.
net.shibboleth.oidc.profile.config.logic - package net.shibboleth.oidc.profile.config.logic
Configuration predicates.
net.shibboleth.oidc.profile.config.navigate - package net.shibboleth.oidc.profile.config.navigate
Navigation functions related to OIDC profile configurations.
net.shibboleth.oidc.profile.core - package net.shibboleth.oidc.profile.core
Core profile classes.
net.shibboleth.oidc.profile.decoding - package net.shibboleth.oidc.profile.decoding
OIDC message decoder API.
net.shibboleth.oidc.profile.decoding.impl - package net.shibboleth.oidc.profile.decoding.impl
OIDC message decoders.
net.shibboleth.oidc.profile.encoding - package net.shibboleth.oidc.profile.encoding
OIDC message encoder API.
net.shibboleth.oidc.profile.encoding.impl - package net.shibboleth.oidc.profile.encoding.impl
OIDC message encoders.
net.shibboleth.oidc.profile.impl - package net.shibboleth.oidc.profile.impl
OIDC profile implementation classes.
net.shibboleth.oidc.profile.logic - package net.shibboleth.oidc.profile.logic
OIDC profile logic implementation classes.
net.shibboleth.oidc.profile.messaging - package net.shibboleth.oidc.profile.messaging
OIDC messaging interfaces and classes.
net.shibboleth.oidc.profile.messaging.context - package net.shibboleth.oidc.profile.messaging.context
OIDC messaging contexts.
net.shibboleth.oidc.profile.oauth2.config - package net.shibboleth.oidc.profile.oauth2.config
OAuth2 profile configurations.
net.shibboleth.oidc.profile.oauth2.config.impl - package net.shibboleth.oidc.profile.oauth2.config.impl
OAuth2 profile configuration implementations.
net.shibboleth.oidc.profile.spring.relyingparty.metadata.filter.impl - package net.shibboleth.oidc.profile.spring.relyingparty.metadata.filter.impl
Spring-aware tools for resolving OIDC entities.
net.shibboleth.oidc.profile.spring.relyingparty.metadata.impl - package net.shibboleth.oidc.profile.spring.relyingparty.metadata.impl
Spring-aware tools for resolving OIDC entities.
net.shibboleth.oidc.saml.xmlobject - package net.shibboleth.oidc.saml.xmlobject
Concrete definitions of the objects described in saml-metadata-ext-oidcmd.xsd work.
net.shibboleth.oidc.saml.xmlobject.impl - package net.shibboleth.oidc.saml.xmlobject.impl
Concrete implementations of the objects described in saml-metadata-ext-oidcmd.xsd.
net.shibboleth.oidc.security - package net.shibboleth.oidc.security
OIDC security .
net.shibboleth.oidc.security.credential - package net.shibboleth.oidc.security.credential
JWK Credentials.
net.shibboleth.oidc.security.credential.impl - package net.shibboleth.oidc.security.credential.impl
Credential resolver implementation classes.
net.shibboleth.oidc.security.impl - package net.shibboleth.oidc.security.impl
Utility classes for security related functions.
net.shibboleth.oidc.security.jose - package net.shibboleth.oidc.security.jose
JOSE security API classes.
net.shibboleth.oidc.security.jose.context - package net.shibboleth.oidc.security.jose.context
JOSE security contexts .
net.shibboleth.oidc.security.jose.criterion - package net.shibboleth.oidc.security.jose.criterion
OIDC security criterion.
net.shibboleth.oidc.security.jose.impl - package net.shibboleth.oidc.security.jose.impl
Implementation of cryptographic primitives that support JOSE objects.
net.shibboleth.oidc.security.jwt.claims.impl - package net.shibboleth.oidc.security.jwt.claims.impl
Validation functions for JWT claims.
newFilterContext() - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
Get a new instance of MetadataFilterContext to be used when filtering metadata.
nextRefresh - Variable in class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver
Next time a refresh cycle will occur.
NimbusSecretCredential - Interface in net.shibboleth.oidc.security.credential
Deprecated, for removal: This API element is subject to removal in a future version.
nonce - Variable in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
The nonce.
NONCE - Enum constant in enum class net.shibboleth.oidc.security.jwt.claims.impl.IDTokenClaims
String value used to associate a Client session with an ID Token, and to mitigate replay attacks.
NONCE - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
id_token nonce.
NonceAuditExtractor - Class in net.shibboleth.oidc.profile.audit.impl
Function that extracts nonce in the OIDCAuthenticationRequest.
NonceAuditExtractor(Function<ProfileRequestContext, OIDCAuthenticationRequest>) - Constructor for class net.shibboleth.oidc.profile.audit.impl.NonceAuditExtractor
Constructor.
NonceValidationActivationCondition - Class in net.shibboleth.oidc.security.jwt.claims.impl
Determines if nonce validation should occur.
NonceValidationActivationCondition() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.NonceValidationActivationCondition
 
noResultIsError - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParameters
Whether failure to resolve parameters should be raised as an error.
noResultIsError - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
Whether failure to resolve parameters should be raised as an error.
NOT_BEFORE_CLAIM - Enum constant in enum class net.shibboleth.oidc.security.jwt.claims.impl.JWTClaims
The "nbf" (not before) claim identifies the time before which the JWT MUST NOT be accepted for processing.
NotBeforeClaimsValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl
Iff a not-before-time (nbf) claim is present, makes sure it is before the current time.
NotBeforeClaimsValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.NotBeforeClaimsValidator
Constructor.
now - Variable in class net.shibboleth.oidc.metadata.cache.ExpirationTimeContext
The now time to base computation off.
NumberOfClaimValuesActivationCondition - Class in net.shibboleth.oidc.security.jwt.claims.impl
Activation condition to check the number of values a claim has against a given predicate.
NumberOfClaimValuesActivationCondition(String, IntPredicate) - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.NumberOfClaimValuesActivationCondition
Constructor.
numberOfValuesPredicate - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.NumberOfClaimValuesActivationCondition
The predicate used to determine if the claim has the correct number of values.

O

OAuth2AccessTokenProducingProfileConfiguration - Interface in net.shibboleth.oidc.profile.oauth2.config
Configuration common to OAuth 2.0 access token producing profiles.
OAuth2AuthorizationCodeProducingProfileConfiguration - Interface in net.shibboleth.oidc.profile.oauth2.config
Configuration common to authorizaton code producing profiles.
OAuth2AuthorizationProfileConfiguration - Interface in net.shibboleth.oidc.profile.oauth2.config
Configuration for a generic OAuth 2.0 authorization request.
OAuth2AuthorizationProfileConfiguration.HttpRequestMethod - Enum Class in net.shibboleth.oidc.profile.oauth2.config
Enumeration of the HTTP methods used in various OAuth requests.
OAuth2ClientAuthenticableClientProfileConfiguration - Interface in net.shibboleth.oidc.profile.oauth2.config
OAuth 2.0 profile configurations that support OAuth-defined client authentication methods.
OAuth2ClientAuthenticableProfileConfiguration - Interface in net.shibboleth.oidc.profile.oauth2.config
OAuth 2.0 profile configurations that support OAuth-defined client authentication methods.
OAuth2ClientAuthenticationContext - Class in net.shibboleth.oidc.authn.context
A context containing data about OAuth 2.0 client authentication.
OAuth2ClientAuthenticationContext() - Constructor for class net.shibboleth.oidc.authn.context.OAuth2ClientAuthenticationContext
 
OAuth2DPoPProofValidatingProfileConfiguration - Interface in net.shibboleth.oidc.profile.oauth2.config
Profile configuration for validating DPoP proof JWTs.
OAuth2FlowAwareProfileConfiguration - Interface in net.shibboleth.oidc.profile.oauth2.config
Interface for profile configurations that understand OAuth 2.0 authorization grants corresponding to OIDC authentication flows.
OAuth2InterceptorAwareProfileConfiguration - Interface in net.shibboleth.oidc.profile.oauth2.config
Common interface for interceptor-aware OAuth 2.0 Profile Configurations.
OAuth2ProfileConfiguration - Interface in net.shibboleth.oidc.profile.oauth2.config
Common interface for OAuth 2.0 Profile Configurations.
OAuth2PushedAuthorizationRequestConfiguration - Interface in net.shibboleth.oidc.profile.oauth2.config
Profile configuration for OAuth2 Pushed Authorization Requests (PAR).
OAuth2RefreshTokenProducingProfileConfiguration - Interface in net.shibboleth.oidc.profile.oauth2.config
Configuration common to OAuth 2.0 refresh token producing profiles.
OAuth2ScopeValidatingProfileConfiguration - Interface in net.shibboleth.oidc.profile.oauth2.config
Profile configuration for validating scope values.
OAuth2TokenAudienceConfiguration - Interface in net.shibboleth.oidc.profile.oauth2.config
Profile interface for OAuth 2 token "audience" profile configuration.
OAuth2TokenConfiguration - Interface in net.shibboleth.oidc.profile.oauth2.config
OIDC-aware OAuth 2.0 token endpoint profile configuration.
OAuth2TokenEncryptionProfileConfiguration - Interface in net.shibboleth.oidc.profile.oauth2.config
Profile configuration for token endpoints that deal with encryption.
OAuth2TokenIntrospectionConfiguration - Interface in net.shibboleth.oidc.profile.oauth2.config
Profile configuration for OAuth2 Token Introspection.
OAuth2TokenRevocationConfiguration - Interface in net.shibboleth.oidc.profile.oauth2.config
Configuration for the OAuth 2.0 Token Revocation profile.
OAuth2TokenRevocationConfiguration.OAuth2TokenRevocationMethod - Enum Class in net.shibboleth.oidc.profile.oauth2.config
Enumeration of the OAuth2 token revocation methods.
OAuth2TokenRevocationMethod() - Constructor for enum class net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenRevocationConfiguration.OAuth2TokenRevocationMethod
 
OAuth2TokenValidatingProfileConfiguration - Interface in net.shibboleth.oidc.profile.oauth2.config
Profile configuration for OIDC-aware OAuth 2.0 token endpoints.
OAuthAuthorizationRequest - Class in net.shibboleth.oidc.profile.core
An OAuth 2.0 authorization request.
OAuthAuthorizationRequest(ClientID) - Constructor for class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
Constructor.
OAuthAuthorizationRequest.CodeChallengeMethod - Enum Class in net.shibboleth.oidc.profile.core
The code challenge method for Proof Key for Code Exchange.
OAuthRPExtensions - Interface in net.shibboleth.oidc.saml.xmlobject
SAML 2.0 Metadata extension OAuthRPExtensions.
OAuthRPExtensionsBuilder - Class in net.shibboleth.oidc.saml.xmlobject.impl
Builder of OAuthRPExtensions objects.
OAuthRPExtensionsBuilder() - Constructor for class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsBuilder
 
OAuthRPExtensionsImpl - Class in net.shibboleth.oidc.saml.xmlobject.impl
Implementation for OAuthRPExtensions.
OAuthRPExtensionsImpl(String, String, String) - Constructor for class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Constructor.
OAuthRPExtensionsMarshaller - Class in net.shibboleth.oidc.saml.xmlobject.impl
Marshaller for OAuthRPExtensions objects.
OAuthRPExtensionsMarshaller() - Constructor for class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsMarshaller
 
OAuthRPExtensionsUnmarshaller - Class in net.shibboleth.oidc.saml.xmlobject.impl
Unmarshaller for OAuthRPExtensions objects.
OAuthRPExtensionsUnmarshaller() - Constructor for class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsUnmarshaller
 
objectMapper - Variable in class net.shibboleth.oidc.metadata.cache.impl.DefaultJSONMapParsingStrategy
JSON object mapper.
objectType - Variable in class net.shibboleth.oidc.metadata.AbstractEvaluableMetadataCriterion
Object type.
OIDC_PROTOCOL_URI - Static variable in class net.shibboleth.oidc.saml.xmlobject.Constants
OIDC base protocol URI.
OIDC_SUB_NAMEID_FORMAT_PAIRWISE - Static variable in class net.shibboleth.oidc.saml.xmlobject.Constants
Format constant for signaling pairwise "sub" claim in metadata.
OIDC_SUB_NAMEID_FORMAT_PUBLIC - Static variable in class net.shibboleth.oidc.saml.xmlobject.Constants
Format constant for signaling public "sub" claim in metadata.
OIDCAttributeTranscoder - Interface in net.shibboleth.oidc.attribute.transcoding
Marker interface for transcoders that operate on OIDC claims.
OIDCAuthenticationProfileConfiguration - Interface in net.shibboleth.oidc.profile.config
Generic configuration for an OIDC 1.0 authentication request.
OIDCAuthenticationRelyingPartyProfileConfiguration - Interface in net.shibboleth.oidc.profile.config
Configuration of an OIDC 1.0 authentication request.
OIDCAuthenticationRequest - Class in net.shibboleth.oidc.profile.core
OpenID Connect Authentication Request.
OIDCAuthenticationRequest(ClientID) - Constructor for class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
Constructor.
OIDCAuthorizationConfiguration - Interface in net.shibboleth.oidc.profile.config
Configuration of an OIDC 1.0 authentication request.
OIDCByteAttributeTranscoder - Class in net.shibboleth.oidc.attribute.transcoding.impl
Class encoding byte attributes to base64 encoded string json object.
OIDCByteAttributeTranscoder() - Constructor for class net.shibboleth.oidc.attribute.transcoding.impl.OIDCByteAttributeTranscoder
 
OIDCByteEncoderParser - Class in net.shibboleth.oidc.attribute.resolver.spring.enc.impl
Spring bean definition parser for OIDCByteAttributeTranscoder.
OIDCByteEncoderParser() - Constructor for class net.shibboleth.oidc.attribute.resolver.spring.enc.impl.OIDCByteEncoderParser
 
oidcClientInformation - Variable in class net.shibboleth.oidc.security.jose.criterion.ClientInformationCriterion
Client information.
oidcClientMetadataContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTDecryptionParameters
Strategy used to look up a OIDC client metadata context.
oidcClientMetadataContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
Strategy used to look up a OIDC client metadata context.
oidcClientMetadataContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParameters
Strategy used to look up a OIDC client metadata context.
oidcClientMetadataContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
Strategy used to look up a OIDC client metadata context.
OIDCCommonModule4 - Class in net.shibboleth.oidc.common
OIDC Common module implementation.
OIDCCommonModule4() - Constructor for class net.shibboleth.oidc.common.OIDCCommonModule4
Constructor.
OIDCCommonModule5 - Class in net.shibboleth.oidc.common
OIDC Common module implementation.
OIDCCommonModule5() - Constructor for class net.shibboleth.oidc.common.OIDCCommonModule5
Constructor.
OIDCCommonModule6 - Class in net.shibboleth.oidc.common
OIDC Common module implementation.
OIDCCommonModule6() - Constructor for class net.shibboleth.oidc.common.OIDCCommonModule6
Constructor.
OIDCCommonPlugin - Class in net.shibboleth.oidc.common
OIDC Common plugin implementation.
OIDCCommonPlugin() - Constructor for class net.shibboleth.oidc.common.OIDCCommonPlugin
Constructor.
OIDCDynamicRegistrationConfiguration - Interface in net.shibboleth.oidc.profile.config
Configuration of OpenID Connect Dynamic Client Registration 1.0.
OidcError - Class in net.shibboleth.oidc.profile.core
Supplemental error objects for any missing values in the Nimbus library.
OidcError() - Constructor for class net.shibboleth.oidc.profile.core.OidcError
Constructor.
OidcEventIds - Class in net.shibboleth.oidc.profile.core
OpenID Connect -specific constants to use for ProfileAction EventContexts.
OidcEventIds() - Constructor for class net.shibboleth.oidc.profile.core.OidcEventIds
Constructor.
OIDCFlowAwareProfileConfiguration - Interface in net.shibboleth.oidc.profile.config
Interface for profile configurations that understand OIDC specific authentication flows in addition to the OAuth 2.0 flows described by OAuth2FlowAwareProfileConfiguration.
OIDCIDTokenProducingProfileConfiguration - Interface in net.shibboleth.oidc.profile.config
Configuration common to ID Token producing profiles.
OIDCLogoutProfileConfiguration - Interface in net.shibboleth.oidc.profile.config
Configuration for IdP OpenID Connect Logout.
OIDCMapBasedMetadataResolver - Class in net.shibboleth.oidc.metadata.impl
Concrete metadata resolver for OIDC Provider configuration metadata resolution.
OIDCMapBasedMetadataResolver(MetadataCache<Map<String, Object>>) - Constructor for class net.shibboleth.oidc.metadata.impl.OIDCMapBasedMetadataResolver
Constructor.
OIDCMessageDecoder - Interface in net.shibboleth.oidc.profile.decoding
Marker interface for OIDC Message Decoders.
OIDCMessageEncoder - Interface in net.shibboleth.oidc.profile.encoding
An OIDC message encoder interface which requires implementations to test if the request method is supported by the encoder.
OIDCMetadataContext - Class in net.shibboleth.oidc.metadata.context
Subcontext carrying information on metadata of the relying party.
OIDCMetadataContext() - Constructor for class net.shibboleth.oidc.metadata.context.OIDCMetadataContext
 
oidcMetadataContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.logic.ClientIDFromOIDCMetadataContextLookupFunction
Strategy that will return OIDCMetadataContext.
oidcMetadataContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.logic.IssuerIDFromOIDCProviderMetadataContextLookupFunction
Strategy that will return OIDCProviderMetadataContext.
OIDCMetadataPolicyResolver - Class in net.shibboleth.oidc.metadata.policy.impl
Concrete resolver implementation for metadata policy resolution.
OIDCMetadataPolicyResolver(MetadataCache<Map<String, MetadataPolicy>>) - Constructor for class net.shibboleth.oidc.metadata.policy.impl.OIDCMetadataPolicyResolver
Constructor.
OIDCMetadataResolver<T> - Interface in net.shibboleth.oidc.metadata
Generic interface for OIDC Metadata resolvers which process specified criteria and produce some implementation-specific result information.
OIDCPeerEntityContext - Class in net.shibboleth.oidc.profile.messaging.context
Lightweight subcontext that carries information about a OIDC peer entity.
OIDCPeerEntityContext() - Constructor for class net.shibboleth.oidc.profile.messaging.context.OIDCPeerEntityContext
 
OIDCProfileConfiguration - Interface in net.shibboleth.oidc.profile.config
Common interface for OpenID Connect 1.0 Profile Configurations.
OIDCProviderInformationConfiguration - Interface in net.shibboleth.oidc.profile.config
Profile configuration for an OpenID Connect Provider Configuration.
OIDCProviderMetadataContext - Class in net.shibboleth.oidc.metadata.context
Subcontext carrying information on metadata of the OpenID Connect Provider.
OIDCProviderMetadataContext() - Constructor for class net.shibboleth.oidc.metadata.context.OIDCProviderMetadataContext
 
oidcProviderMetadataContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
Strategy used to look up a OIDC provider metadata context.
oidcProviderMetadataContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParameters
Strategy used to look up a OIDC provider metadata context.
oidcProviderMetadataContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
Strategy used to look up a OIDC provider metadata context.
OIDCProviderMetadataResolver - Class in net.shibboleth.oidc.metadata.impl
Concrete metadata resolver for OIDC Provider configuration metadata resolution.
OIDCProviderMetadataResolver(MetadataCache<OIDCProviderMetadata>) - Constructor for class net.shibboleth.oidc.metadata.impl.OIDCProviderMetadataResolver
Constructor.
OIDCProviderMetadataResponseHandler() - Constructor for class net.shibboleth.oidc.metadata.impl.HTTPProviderConfigurationFetchingStrategy.OIDCProviderMetadataResponseHandler
 
OIDCPublishKeySetConfiguration - Interface in net.shibboleth.oidc.profile.config
Configuration of an OpenID published key set document.
OIDCResponseEncoderFactory - Class in net.shibboleth.oidc.profile.encoding.impl
A source of encoders that first verifies a message being an instance of Nimbus Response and then returns the attached MessageEncoder.
OIDCResponseEncoderFactory() - Constructor for class net.shibboleth.oidc.profile.encoding.impl.OIDCResponseEncoderFactory
 
OIDCScopedStringAttributeTranscoder - Class in net.shibboleth.oidc.attribute.transcoding.impl
Class encoding scoped string attributes to string json object.
OIDCScopedStringAttributeTranscoder() - Constructor for class net.shibboleth.oidc.attribute.transcoding.impl.OIDCScopedStringAttributeTranscoder
 
OIDCScopedStringEncoderParser - Class in net.shibboleth.oidc.attribute.resolver.spring.enc.impl
Spring bean definition parser for OIDCScopedStringAttributeTranscoder.
OIDCScopedStringEncoderParser() - Constructor for class net.shibboleth.oidc.attribute.resolver.spring.enc.impl.OIDCScopedStringEncoderParser
 
OIDCSSOProfileConfiguration - Interface in net.shibboleth.oidc.profile.config
Profile configuration generic to all OIDC SSO profiles.
OIDCSSOProviderConfiguration - Interface in net.shibboleth.oidc.profile.config
Profile configuration for an OIDC SSO Provider.
OIDCSSORelyingPartyConfiguration - Interface in net.shibboleth.oidc.profile.config
Profile configuration for an OIDC SSO Client or Relying Party.
OIDCStringAttributeTranscoder - Class in net.shibboleth.oidc.attribute.transcoding.impl
Class encoding string attributes to string json object.
OIDCStringAttributeTranscoder() - Constructor for class net.shibboleth.oidc.attribute.transcoding.impl.OIDCStringAttributeTranscoder
 
OIDCStringEncoderParser - Class in net.shibboleth.oidc.attribute.resolver.spring.enc.impl
Spring bean definition parser for OIDCStringAttributeTranscoder.
OIDCStringEncoderParser() - Constructor for class net.shibboleth.oidc.attribute.resolver.spring.enc.impl.OIDCStringEncoderParser
 
OIDCUserInfoConfiguration - Interface in net.shibboleth.oidc.profile.config
Configuration for an OpenID Connect core protocol UserInfo endpoint.
oneOfValues - Variable in class net.shibboleth.oidc.metadata.policy.MetadataPolicy.Builder
The list of values from which the claim must be one of.
oneOfValues - Variable in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
The list of values from which the claim must be one of.
orderedEntitiess - Variable in class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver.JsonBackingStore
Ordered list of entity information.
orderedValues - Variable in class net.shibboleth.oidc.metadata.impl.AbstractBackingStore
Ordered list of entity descriptors.
originalValue - Variable in class net.shibboleth.oidc.metadata.impl.DefaultBatchBackingStore
The bytes of the original loaded metadata.
OUTBOUND_MESSAGE_CLASS - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
The outbound (Nimbus) message class.
OutboundMessageClassLookupFunction - Class in net.shibboleth.oidc.profile.audit.impl
Looks up the value of the simple class name from the outbound message context's message object.
OutboundMessageClassLookupFunction() - Constructor for class net.shibboleth.oidc.profile.audit.impl.OutboundMessageClassLookupFunction
Constructor.

P

pairFirstEquals(String, List<Pair<String, String>>) - Method in class net.shibboleth.oidc.profile.encoding.impl.AbstractOIDCMessageEncoder
Check if the value is contained (exact string match) in the parameter map as the first item of any pair.
pairSecondContains(String, String, List<Pair<String, String>>) - Method in class net.shibboleth.oidc.profile.encoding.impl.AbstractOIDCMessageEncoder
Check if the value is contained (string containment) in the parameter map as the second item of a pair.
params - Variable in class net.shibboleth.oidc.security.impl.JWETokenDecrypter
The JWT decryption parameters.
params - Variable in class net.shibboleth.oidc.security.impl.JWSTokenSigner
The signature signing parameters.
params - Variable in class net.shibboleth.oidc.security.jose.criterion.SignatureValidationParametersCriterion
The SignatureValidationParameters instance.
parse(byte[]) - Method in class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver
Parses an entity from the byte array.
parse(byte[]) - Method in class net.shibboleth.oidc.metadata.impl.FilesystemClientInformationResolver
Parses an entity from the byte array.
parse(byte[]) - Method in class net.shibboleth.oidc.metadata.impl.FilesystemProviderMetadataResolver
Parses an entity from the byte array.
parseApplicationType(OAuthRPExtensions) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
Parse the ApplicationType from the given extensions.
parseAudiences(OAuthRPExtensions) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
Parse the SAML Audience elements.
parseClientAuthenticationMethod(OAuthRPExtensions) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
Parse the ClientAuthenticationMethod from the given extensions.
parseClientID(SPSSODescriptor) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
Converts the entityID of the given SPSSODescriptor into a ClientID.
parseClientSecret(Iterable<Credential>) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
Fetches the client secret from given the set of Credentials.
parseDefaultAcrValues(OAuthRPExtensions) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
Parse the default ACR values from the given extensions.
parseEncryptionMethod(String) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
Parse the EncryptionMethod from the given metadata value.
parseGrantTypes(OAuthRPExtensions) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
Parse the GrantTypes from the given extensions.
parseJweAlgorithm(String) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
Parse the JWEAlgorithm from the given metadata value.
parseJWK(String) - Method in class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.InlineJwksProvider
Parse JWK from a string.
parseJWKs(String) - Method in class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.InlineJwksProvider
Parse JWKs out of a string.
parseJwkSet(Iterable<Credential>, String) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
Convert the given credentials into the Nimbus JWKSet.
parseJWKSet(String) - Method in class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.InlineJwksProvider
Parse JWKSet from a string.
parseJwkUri(Iterable<Credential>, String) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
Convert the given credentials into a JWKS URI.
parseJwsAlgorithm(String) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
Parse the JWSAlgorithm from the given metadata value.
parseLogoutUris(SPSSODescriptor, String) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
Parse the single logout URIs from the given role descriptor.
parseRedirectUris(SPSSODescriptor) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
Parse the redirection URIs from the given role descriptor.
parseResponseTypes(OAuthRPExtensions) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
Parse the ResponseTypes from the given extensions.
parseScopes(OAuthRPExtensions) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
Parse the Scope from the given extensions.
parseSubjectType(SPSSODescriptor) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
Parse the SubjectType from the given role descriptor's name ID formats.
parseUris(List<? extends MetadataValueSAMLObject>) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
Parse the URIs from the given list of metadata values.
parsingStrategy - Variable in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
How to parse the loaded metadata from the loadingStrategy into a usable metadatatype.
parsingStrategy - Variable in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCacheBuilderSpec
How to parse the loaded metadata from the loadingStrategy into a usable metadatatype.
parsingStrategy - Variable in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyResponseHandler
The parsing strategy used for parsing metadata policies.
parsingStrategy - Variable in class net.shibboleth.oidc.metadata.policy.impl.MetadataPolicyViaLocationFetchingStrategy
The parsing strategy used for parsing metadata policies.
payloadToEncryptLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.EncryptJWTHandler
Strategy used to locate the payload to encrypt.
peerContext - Variable in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler
The context representing the OIDC peer entity.
PLAIN - Enum constant in enum class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest.CodeChallengeMethod
The code_challenge is the same as the code_verifier.
populateCredentialsFromKeySet(JWKSet, Collection<Credential>) - Method in class net.shibboleth.oidc.security.credential.impl.BasicJOSEObjectCredentialResolver
Convert the RSA and EC keys from the given JWKSet into the collection of credentials.
PopulateJWTDecryptionParameters - Class in net.shibboleth.oidc.profile.impl
Action that resolves and populates DecryptionParameters on an SecurityParametersContext created/accessed via a lookup function, by default on a child of the outbound message context.
PopulateJWTDecryptionParameters() - Constructor for class net.shibboleth.oidc.profile.impl.PopulateJWTDecryptionParameters
Constructor.
PopulateJWTEncryptionParameters - Class in net.shibboleth.oidc.profile.impl
Action that resolves and populates EncryptionParameters on an SecurityParametersContext created/accessed via a lookup function, by default on a child of the outbound message context.
PopulateJWTEncryptionParameters() - Constructor for class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
Constructor.
PopulateJWTSignatureSigningParameters - Class in net.shibboleth.oidc.profile.impl
Action that resolves and populates SignatureSigningParameters on a SecurityParametersContext created/accessed via a lookup function, by default on the outbound message context.
PopulateJWTSignatureSigningParameters(ContextDataLookupFunction<ProfileRequestContext, MessageContext>) - Constructor for class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParameters
Constructor.
PopulateJWTSignatureSigningParametersHandler - Class in net.shibboleth.oidc.profile.impl
Handler that resolves and populates SignatureSigningParameters on a SecurityParametersContext created/accessed via a lookup function, by default as an immediate child context of the target MessageContext.
PopulateJWTSignatureSigningParametersHandler() - Constructor for class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
Constructor.
PopulateJWTSignatureValidationParameters - Class in net.shibboleth.oidc.profile.impl
Action that resolves and populates SignatureValidationParameters on a SecurityParametersContext created/accessed via a lookup function, by default on the inbound message context.
PopulateJWTSignatureValidationParameters(ContextDataLookupFunction<ProfileRequestContext, MessageContext>) - Constructor for class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureValidationParameters
Constructor.
PopulateJWTSignatureValidationParametersHandler - Class in net.shibboleth.oidc.profile.impl
Handler that resolves and populates SignatureValidationParameters on a SecurityParametersContext created/accessed via a lookup function, by default as an immediate child context of the target MessageContext.
PopulateJWTSignatureValidationParametersHandler() - Constructor for class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureValidationParametersHandler
Constructor.
populateMetadata(SPSSODescriptor, Iterable<Credential>, String) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
Populates the OIDCClientMetadata using the values found from the given SPSSODescriptor, the set of Credentials and the client ID.
POST - Enum constant in enum class net.shibboleth.oidc.profile.oauth2.config.OAuth2AuthorizationProfileConfiguration.HttpRequestMethod
HTTP POST.
postAuthenticationFlowsLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Lookup function to supply post authentication flows.
PostLogoutRedirectUri - Interface in net.shibboleth.oidc.saml.xmlobject
SAML2 OIDC metadata extension 'PostLogoutRedirectUri'.
PostLogoutRedirectUriBuilder - Class in net.shibboleth.oidc.saml.xmlobject.impl
PostLogoutRedirectUriBuilder() - Constructor for class net.shibboleth.oidc.saml.xmlobject.impl.PostLogoutRedirectUriBuilder
 
PostLogoutRedirectUriImpl - Class in net.shibboleth.oidc.saml.xmlobject.impl
Concrete implementation of PostLogoutRedirectUri.
PostLogoutRedirectUriImpl(String, String, String) - Constructor for class net.shibboleth.oidc.saml.xmlobject.impl.PostLogoutRedirectUriImpl
Constructor.
postLogoutRedirectUris - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Post logout redirect URIs for this entity.
postProcess(CriteriaSet, JOSEObject, List<Credential>) - Method in class net.shibboleth.oidc.security.credential.impl.BasicJOSEObjectCredentialResolver
Hook for subclasses to do post-processing of the credential set after all JOSE header keys have been processed.
postProcess(CriteriaSet, JOSEObject, List<Credential>) - Method in class net.shibboleth.oidc.security.credential.impl.LocalJOSEObjectCredentialResolver
 
pragma - Variable in class net.shibboleth.oidc.profile.messaging.JSONErrorResponse
pragma value.
pragma - Variable in class net.shibboleth.oidc.profile.messaging.JSONSuccessResponse
pragma value.
PRC_LOOKUP - Static variable in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler
Lookup function for parent ProfileRequestContext.
predicateFilterCandidates(Iterable<MetadataType>, CriteriaSet, boolean) - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver
Filter the supplied candidates by resolving predicates from the supplied criteria and applying the predicates to return a filtered Iterable.
PreferFrontChannelLogoutPredicate - Class in net.shibboleth.oidc.profile.config.logic
PreferFrontChannelLogoutPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.PreferFrontChannelLogoutPredicate
 
preferFrontChannelPredicate - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
Whether encryption is optional in the face of no key, etc.
preProcessEntityDescriptor(Value, Key, AbstractOIDCEntityResolver.JsonBackingStore) - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver
Pre-process the specified entity descriptor, updating the specified entity backing store instance as necessary.
principalMappings - Variable in class net.shibboleth.oidc.profile.config.navigate.ProxyAwareDefaultOIDCAuthenticationContextClassRequestLookupFunction
Mappings to transform proxied Principals.
principalMappings - Variable in class net.shibboleth.oidc.profile.config.navigate.ProxyAwareDefaultOIDCAuthenticationContextClassResponseLookupFunction
Mappings to transform proxied Principals.
process(XMLObject) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
process(KeyInfoCredentialResolver, XMLObject, CriteriaSet, KeyInfoResolutionContext) - Method in class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.ClientSecretProvider
process(KeyInfoCredentialResolver, XMLObject, CriteriaSet, KeyInfoResolutionContext) - Method in class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.ClientSecretReferenceProvider
process(KeyInfoCredentialResolver, XMLObject, CriteriaSet, KeyInfoResolutionContext) - Method in class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.InlineJwksProvider
process(KeyInfoCredentialResolver, XMLObject, CriteriaSet, KeyInfoResolutionContext) - Method in class net.shibboleth.oidc.metadata.keyinfo.ext.impl.provider.JWKSReferenceProvider
processAttribute(XMLObject, Attr) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsUnmarshaller
processChildElement(XMLObject, XMLObject) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsUnmarshaller
processJWEHeader(JWEHeader) - Method in class net.shibboleth.oidc.security.credential.impl.BasicJOSEObjectCredentialResolver
Process JWE header into a list of credentials.
processJWSHeader(JWSHeader) - Method in class net.shibboleth.oidc.security.credential.impl.BasicJOSEObjectCredentialResolver
Process credentials indicated by a JWS header.
PROFILE_COUNTER - Static variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
OIDC authorization profile counter name.
PROFILE_COUNTER - Static variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCDynamicRegistrationConfiguration
OIDC dynamic registration profile counter name.
PROFILE_COUNTER - Static variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
OIDC Back-Channel Logout profile counter name.
PROFILE_COUNTER - Static variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCProviderInformationConfiguration
OIDC provider information profile counter name.
PROFILE_COUNTER - Static variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCPublishKeySetConfiguration
OIDC keyset profile counter name.
PROFILE_COUNTER - Static variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCUserInfoConfiguration
OIDC UserInfo profile counter name.
PROFILE_COUNTER - Static variable in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2PushedAuthorizationRequestConfiguration
OAuth2 pushed authorization request profile counter name.
PROFILE_COUNTER - Static variable in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
OAuth2 token profile counter name.
PROFILE_COUNTER - Static variable in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenIntrospectionConfiguration
OAuth2 token introspection profile counter name.
PROFILE_COUNTER - Static variable in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenRevocationConfiguration
OAuth2 token revocation profile counter name.
PROFILE_ID - Static variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCPublishKeySetConfiguration
ID for this profile configuration.
PROFILE_ID - Static variable in interface net.shibboleth.oidc.profile.config.OIDCAuthenticationProfileConfiguration
ID for this profile configuration.
PROFILE_ID - Static variable in interface net.shibboleth.oidc.profile.config.OIDCAuthorizationConfiguration
ID for this profile configuration.
PROFILE_ID - Static variable in interface net.shibboleth.oidc.profile.config.OIDCDynamicRegistrationConfiguration
ID for this profile configuration.
PROFILE_ID - Static variable in interface net.shibboleth.oidc.profile.config.OIDCLogoutProfileConfiguration
ID for this profile configuration.
PROFILE_ID - Static variable in interface net.shibboleth.oidc.profile.config.OIDCProviderInformationConfiguration
ID for this profile configuration.
PROFILE_ID - Static variable in interface net.shibboleth.oidc.profile.config.OIDCPublishKeySetConfiguration
ID for this profile configuration.
PROFILE_ID - Static variable in interface net.shibboleth.oidc.profile.config.OIDCSSOProfileConfiguration
ID for this profile configuration.
PROFILE_ID - Static variable in interface net.shibboleth.oidc.profile.config.OIDCUserInfoConfiguration
ID for this profile configuration.
PROFILE_ID - Static variable in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2PushedAuthorizationRequestConfiguration
ID for this profile configuration.
PROFILE_ID - Static variable in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenAudienceConfiguration
ID for this profile configuration.
PROFILE_ID - Static variable in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenConfiguration
ID for this profile configuration.
PROFILE_ID - Static variable in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenIntrospectionConfiguration
ID for this profile configuration.
PROFILE_ID - Static variable in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenRevocationConfiguration
ID for this profile configuration.
profileConfiguration - Variable in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler
Applicable stashed profile configuration appropriate for OAuth clients.
profileRequestContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.navigate.MessageContextLookupFunctionAdaptor
Strategy used to locate the ProfileRequestContext associated with a given MessageContext.
prohibitedClaims - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.ProhibitedClaimsValidator
The names of the JWT claims that must not be present, empty set if none.
ProhibitedClaimsValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl
Verify the claims set does not contain any of the described set of claims.
ProhibitedClaimsValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.ProhibitedClaimsValidator
Constructor.
prompt - Variable in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
Space delimited, case sensitive list of ASCII string values that specifies whether the Authorization Server prompts the End-User for reauthentication and consent.
PROP_ARRAY_AS_STRING - Static variable in interface net.shibboleth.oidc.attribute.transcoding.OIDCAttributeTranscoder
Whether to decode a JSON Array into a serialized JSON string.
PROP_ASARRAY - Static variable in interface net.shibboleth.oidc.attribute.transcoding.OIDCAttributeTranscoder
Whether to encode data to JSON array.
PROP_ASBOOLEAN - Static variable in interface net.shibboleth.oidc.attribute.transcoding.OIDCAttributeTranscoder
Whether to encode data to JSON integer.
PROP_ASINTEGER - Static variable in interface net.shibboleth.oidc.attribute.transcoding.OIDCAttributeTranscoder
Whether to encode data to JSON integer.
PROP_ASOBJECT - Static variable in class net.shibboleth.oidc.attribute.transcoding.impl.OIDCStringAttributeTranscoder
Whether to parse the values into and out as a JSON object.
PROP_BOOLEAN_AS_STRING - Static variable in interface net.shibboleth.oidc.attribute.transcoding.OIDCAttributeTranscoder
Whether to decode JSON Booleans to IdP Attribute Strings.
PROP_NAME - Static variable in interface net.shibboleth.oidc.attribute.transcoding.OIDCAttributeTranscoder
The claim name.
PROP_NAME_FROM_METADATA - Static variable in interface net.shibboleth.oidc.attribute.transcoding.OIDCAttributeTranscoder
Flag to signal use of metadata to override name to encode.
PROP_NUMBER_AS_STRING - Static variable in interface net.shibboleth.oidc.attribute.transcoding.OIDCAttributeTranscoder
Whether to decode JSON Numbers to IdP Attribute Strings.
PROP_SCOPE_DELIMITER - Static variable in class net.shibboleth.oidc.attribute.transcoding.impl.OIDCScopedStringAttributeTranscoder
Scope delimiter for combining the data.
PROP_STRING_DELIMITER - Static variable in interface net.shibboleth.oidc.attribute.transcoding.OIDCAttributeTranscoder
Separator to use when not encoding multiple values to array.
PropertiesClientSecretValueResolver - Class in net.shibboleth.oidc.metadata.impl
A client secret value resolver that fetches the values from the given Properties file.
PropertiesClientSecretValueResolver() - Constructor for class net.shibboleth.oidc.metadata.impl.PropertiesClientSecretValueResolver
 
propertiesResource - Variable in class net.shibboleth.oidc.metadata.impl.PropertiesClientSecretValueResolver
The properties resource containing client secret values.
PROTOCOL_URI - Static variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCPublishKeySetConfiguration
OIDC base protocol URI.
PROTOCOL_URI - Static variable in interface net.shibboleth.oidc.profile.config.OIDCDynamicRegistrationConfiguration
OIDC base protocol URI.
PROTOCOL_URI - Static variable in interface net.shibboleth.oidc.profile.config.OIDCProviderInformationConfiguration
OIDC base protocol URI.
PROTOCOL_URI - Static variable in interface net.shibboleth.oidc.profile.config.OIDCPublishKeySetConfiguration
OIDC base protocol URI.
PROTOCOL_URI - Static variable in interface net.shibboleth.oidc.profile.config.OIDCUserInfoConfiguration
OIDC base protocol URI.
PROTOCOL_URI - Static variable in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2PushedAuthorizationRequestConfiguration
OAuth2 Pushed Authorization Requests URI.
PROTOCOL_URI - Static variable in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenAudienceConfiguration
OAuth2 Token Revocation URI.
PROTOCOL_URI - Static variable in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenIntrospectionConfiguration
OAuth2 Token Revocation URI.
PROTOCOL_URI - Static variable in interface net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenRevocationConfiguration
OAuth2 Token Revocation URI.
providerEncryptionMethodsLookupStrategy - Variable in class net.shibboleth.oidc.security.jose.impl.ProviderMetadataDataEncryptionAlgorithmsLookupStrategy
A strategy to locate the encryption methods ('enc') appropriate for the JWT to be encrypted.
providerInformation - Variable in class net.shibboleth.oidc.metadata.context.OIDCProviderMetadataContext
The client information.
providerKeyTransportAlgorithmsLookupStrategy - Variable in class net.shibboleth.oidc.security.jose.impl.ProviderMetadataKeyTransportEncryptionAlgorithmsLookupStrategy
A strategy to locate the algorithms ('alg') appropriate for the JWT to be encrypted.
providerMetadata - Variable in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler
The provider metadata found from the lookup strategy.
providerMetadataAlgorithmLookupStrategy - Variable in class net.shibboleth.oidc.security.jose.impl.RelyingPartySigningParametersResolver
A strategy to pull out the correct set of supported algorithms from the OIDCProviderMetadata.
ProviderMetadataCredentialResolver - Class in net.shibboleth.oidc.security.credential.impl
A LocalJOSEObjectCredentialResolver that resolves credentials from the jwks_uri of an OpenID Provider.
ProviderMetadataCredentialResolver(RemoteJwkSetCache) - Constructor for class net.shibboleth.oidc.security.credential.impl.ProviderMetadataCredentialResolver
Constructor.
ProviderMetadataCredentialResolver(RemoteJwkSetCache, Duration) - Constructor for class net.shibboleth.oidc.security.credential.impl.ProviderMetadataCredentialResolver
Constructor.
ProviderMetadataCriterion - Class in net.shibboleth.oidc.security.jose.criterion
Provider metadata criterion to make decisions based on OpenID Provider information.
ProviderMetadataCriterion(OIDCProviderMetadata) - Constructor for class net.shibboleth.oidc.security.jose.criterion.ProviderMetadataCriterion
Constructor.
ProviderMetadataDataEncryptionAlgorithmsLookupStrategy - Class in net.shibboleth.oidc.security.jose.impl
A lookup strategy that finds data/content encryption algorithms from local configuration that are compatible with those advertised by the OpenID Provider.
ProviderMetadataDataEncryptionAlgorithmsLookupStrategy(Function<OIDCProviderMetadata, List<String>>) - Constructor for class net.shibboleth.oidc.security.jose.impl.ProviderMetadataDataEncryptionAlgorithmsLookupStrategy
Constructor.
ProviderMetadataDataEncryptionAlgorithmsLookupStrategy(Function<OIDCProviderMetadata, List<String>>, AlgorithmRegistry) - Constructor for class net.shibboleth.oidc.security.jose.impl.ProviderMetadataDataEncryptionAlgorithmsLookupStrategy
Constructor.
ProviderMetadataKeyTransportEncryptionAlgorithmsLookupStrategy - Class in net.shibboleth.oidc.security.jose.impl
A lookup strategy that finds key transport algorithms from local configuration that are compatible with those advertised by the downstream OpenID Provider.
ProviderMetadataKeyTransportEncryptionAlgorithmsLookupStrategy(Function<OIDCProviderMetadata, List<String>>) - Constructor for class net.shibboleth.oidc.security.jose.impl.ProviderMetadataKeyTransportEncryptionAlgorithmsLookupStrategy
Constructor.
ProviderMetadataKeyTransportEncryptionAlgorithmsLookupStrategy(Function<OIDCProviderMetadata, List<String>>, AlgorithmRegistry) - Constructor for class net.shibboleth.oidc.security.jose.impl.ProviderMetadataKeyTransportEncryptionAlgorithmsLookupStrategy
Constructor.
providerMetadataLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler
Function that looks up provider metadata from the given message context.
ProviderMetadataProviderContainer - Class in net.shibboleth.oidc.metadata
This class is a sortable container of ProviderMetadataResolvers, wrapped into a serviceable component.
ProviderMetadataProviderContainer() - Constructor for class net.shibboleth.oidc.metadata.ProviderMetadataProviderContainer
 
ProviderMetadataResolver - Interface in net.shibboleth.oidc.metadata
A resolver that is capable of resolving OIDCProviderMetadata instances which meet certain supplied criteria.
ProviderMetadataResolverServiceStrategy - Class in net.shibboleth.oidc.profile.spring.relyingparty.metadata.impl
Strategy for summoning up a ProviderMetadataResolver from a populated ApplicationContext.
ProviderMetadataResolverServiceStrategy() - Constructor for class net.shibboleth.oidc.profile.spring.relyingparty.metadata.impl.ProviderMetadataResolverServiceStrategy
 
ProviderMetadataStringValuesLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
Fetches the values for the configured key as String.
ProviderMetadataStringValuesLookupFunction(String) - Constructor for class net.shibboleth.oidc.profile.config.navigate.ProviderMetadataStringValuesLookupFunction
Constructor.
providerSupportsClaimsParameter - Variable in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
Does the OpenID Provider support the claims parameter? Typically taken from its metadata.
providerSupportsClaimsParameter() - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
Does the OpenID Provider support the claims parameter?
proxiedAuthnInstantPredicate - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Whether authentication results should carry the proxied auth_time in the id_token.
PROXY_CLIENT_ID - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
OIDC proxy client ID.
PROXY_ISSUER - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
OIDC proxy issuer.
ProxyAwareDefaultOIDCAuthenticationContextClassRequestLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
Implements a set of default logic for determining the custom principals to derive the OIDC ACRs from.
ProxyAwareDefaultOIDCAuthenticationContextClassRequestLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.ProxyAwareDefaultOIDCAuthenticationContextClassRequestLookupFunction
Constructor.
ProxyAwareDefaultOIDCAuthenticationContextClassResponseLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
Implements a set of logic for determining the principals to use from OIDC 'amr' or 'acr' claims.
ProxyAwareDefaultOIDCAuthenticationContextClassResponseLookupFunction(Map<String, Collection<Principal>>) - Constructor for class net.shibboleth.oidc.profile.config.navigate.ProxyAwareDefaultOIDCAuthenticationContextClassResponseLookupFunction
Constructor.
ProxyAwareDefaultOIDCAuthenticationContextClassResponseLookupFunction.LookupFunctionWrapper - Class in net.shibboleth.oidc.profile.config.navigate
A simple lookup function that returns a singleton function.
proxyCountLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Lookup function to supply proxyCount property.
PushedAuthorizationRequestUriClaimsSetManipulationStrategyLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
A function that returns OAuth2PushedAuthorizationRequestConfiguration.getRequestUriClaimsSetManipulationStrategy(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
PushedAuthorizationRequestUriClaimsSetManipulationStrategyLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.PushedAuthorizationRequestUriClaimsSetManipulationStrategyLookupFunction
 
PushedAuthorizationRequestUriLifetimeLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
A function that returns OAuth2PushedAuthorizationRequestConfiguration.getRequestUriLifetime(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
PushedAuthorizationRequestUriLifetimeLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.PushedAuthorizationRequestUriLifetimeLookupFunction
 
PushedAuthorizationRequestUriTypeLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
A function that returns OAuth2PushedAuthorizationRequestConfiguration.getRequestUriType(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
PushedAuthorizationRequestUriTypeLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.PushedAuthorizationRequestUriTypeLookupFunction
 

R

ratioGaugeFetchToGet - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
Metrics RatioGauge for count of origin fetches to gets.
read(MetadataManagementData<IdentifierType>, IdentifierType) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
Read metadata from the cache under the lock relating to the Identifier of the metadata to find.
readWriteLock - Variable in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
A lock to use when reading from and loading the cache.
recordEntityAccess() - Method in class net.shibboleth.oidc.metadata.MetadataManagementData
Record access of the entity's backing store data.
REDIRECT_URI - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
The authorization endpoint for the authentication request.
redirectURI - Variable in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
The redirect URI to which the response will be sent.
RedirectURIAuditExtractor - Class in net.shibboleth.oidc.profile.audit.impl
Function that extracts the redirect_uri from the OIDCAuthenticationRequest.
RedirectURIAuditExtractor(Function<ProfileRequestContext, OIDCAuthenticationRequest>) - Constructor for class net.shibboleth.oidc.profile.audit.impl.RedirectURIAuditExtractor
Constructor.
redirectUriOverrideLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
An override to specify a specific redirect_uri to use over the normally computed one.
referenceUri - Variable in class net.shibboleth.oidc.security.credential.BasicJWKReferenceCredential
A reference to a JWK.
refresh() - Method in class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver
Refreshes the metadata from its source.
refresh() - Method in class net.shibboleth.oidc.metadata.impl.ChainingClientInformationResolver
Refresh the data exposed by the resolver.
refresh() - Method in class net.shibboleth.oidc.metadata.impl.ChainingProviderMetadataResolver
Refresh the data exposed by the resolver.
refresh() - Method in interface net.shibboleth.oidc.metadata.RefreshableClientInformationResolver
Refresh the data exposed by the resolver.
refresh() - Method in interface net.shibboleth.oidc.metadata.RefreshableProviderMetadataResolver
Refresh the data exposed by the resolver.
refresh() - Method in class net.shibboleth.oidc.metadata.RelyingPartyClientInformationProvider
Refresh the data exposed by the resolver.
RefreshableClientInformationResolver - Interface in net.shibboleth.oidc.metadata
Specialization of ClientInformationResolver that supports on-demand refresh.
RefreshableProviderMetadataResolver - Interface in net.shibboleth.oidc.metadata
Specialization of ProviderMetadataResolver that supports on-demand refresh.
refreshDelayFactor - Variable in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
Factor used to compute when the next refresh interval will occur.
refreshDelayFactor - Variable in class net.shibboleth.oidc.metadata.cache.impl.BaseMetadataCacheBuilderSpec
Factor used to compute when the next refresh interval will occur.
refreshMetadataTask - Variable in class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver
Current task to refresh metadata.
RefreshMetadataTask() - Constructor for class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver.RefreshMetadataTask
 
RefreshTokenChainLifetimeLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
A function that returns OAuth2RefreshTokenProducingProfileConfiguration.getRefreshTokenChainLifetime(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
RefreshTokenChainLifetimeLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.RefreshTokenChainLifetimeLookupFunction
 
refreshTokenChainLifetimeLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Lookup function to supply refresh token chain lifetime.
RefreshTokenClaimsSetManipulationStrategyLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
A function that returns OAuth2TokenConfiguration.getRefreshTokenClaimsSetManipulationStrategy(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
RefreshTokenClaimsSetManipulationStrategyLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.RefreshTokenClaimsSetManipulationStrategyLookupFunction
 
refreshTokenClaimsSetManipulationStrategyLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
Lookup function to supply strategy bi-function for manipulating refresh token claims set.
RefreshTokensEnabledPredicate - Class in net.shibboleth.oidc.profile.config.logic
RefreshTokensEnabledPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.RefreshTokensEnabledPredicate
 
refreshTokensPredicate - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2FlowAwareProfileConfiguration
Predicate used to indicate whether refresh tokens are supported by this profile.
RefreshTokenTimeoutLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
A function that returns OAuth2RefreshTokenProducingProfileConfiguration.getRefreshTokenTimeout(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
RefreshTokenTimeoutLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.RefreshTokenTimeoutLookupFunction
 
refreshTokenTimeoutLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Lookup function to supply refresh token timeout.
RefreshTokenTypeLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
A function that returns OAuth2RefreshTokenProducingProfileConfiguration.getRefreshTokenType(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
RefreshTokenTypeLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.RefreshTokenTypeLookupFunction
 
refreshTokenTypeLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Lookup function to supply refresh token type.
refreshTriggerTime - Variable in class net.shibboleth.oidc.metadata.MetadataManagementData
Time at which should start attempting to refresh the metadata.
regexp - Variable in class net.shibboleth.oidc.metadata.policy.MetadataPolicy.Builder
The regular expression that the claim value must meet.
regexp - Variable in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
The regular expression that the claim value must meet.
RegistrationMetadataPolicyLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
A function that returns OIDCDynamicRegistrationConfiguration.getMetadataPolicy(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
RegistrationMetadataPolicyLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.RegistrationMetadataPolicyLookupFunction
 
RegistrationValidityPeriodLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
A function that returns OIDCDynamicRegistrationConfiguration.getRegistrationValidityPeriod(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
RegistrationValidityPeriodLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.RegistrationValidityPeriodLookupFunction
 
registrationValidityPeriodLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCDynamicRegistrationConfiguration
Lookup function to supply registration validity period.
ReloadingProviderMetadataProvider - Class in net.shibboleth.oidc.metadata.impl
This class uses the service interface to implement ProviderMetadataResolver.
ReloadingProviderMetadataProvider(ReloadableService<ProviderMetadataResolver>) - Constructor for class net.shibboleth.oidc.metadata.impl.ReloadingProviderMetadataProvider
Constructor.
ReloadingRelyingPartyClientInformationProvider - Class in net.shibboleth.oidc.metadata.impl
This class uses the service interface to implement ClientInformationResolver.
ReloadingRelyingPartyClientInformationProvider(ReloadableService<ClientInformationResolver>) - Constructor for class net.shibboleth.oidc.metadata.impl.ReloadingRelyingPartyClientInformationProvider
Constructor.
RelyingPartyClientInformationProvider - Class in net.shibboleth.oidc.metadata
This class exists primarily to allow the parsing of relying-party.xml to create a serviceable implementation of ClientInformationResolver.
RelyingPartyClientInformationProvider() - Constructor for class net.shibboleth.oidc.metadata.RelyingPartyClientInformationProvider
Constructor.
relyingPartyContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.FormOutboundKeySetResponseMessage
Strategy used to locate the RelyingPartyContext associated with a given ProfileRequestContext.
relyingPartyContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTDecryptionParameters
Lookup function for relying party context.
relyingPartyContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
Lookup function for relying party context.
relyingPartyContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
Lookup function for relying party context.
relyingPartyContextLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler
Lookup function for relying party context.
RelyingPartySigningParametersResolver - Class in net.shibboleth.oidc.security.jose.impl
A specialization of BasicSignatureSigningParametersResolver which supports selecting signing credentials from client_secret credential criterion (e.g.
RelyingPartySigningParametersResolver() - Constructor for class net.shibboleth.oidc.security.jose.impl.RelyingPartySigningParametersResolver
Constructor.
remoteJwkSetCache - Variable in class net.shibboleth.oidc.security.credential.impl.ClientInformationCredentialResolver
The cache for remote JWK key sets.
remoteJwkSetCache - Variable in class net.shibboleth.oidc.security.credential.impl.ProviderMetadataCredentialResolver
The cache for remote JWK key sets.
RemoteJwkSetCache - Class in net.shibboleth.oidc.jwk
Stores fetched remote key set values for a desired period of time.
RemoteJwkSetCache() - Constructor for class net.shibboleth.oidc.jwk.RemoteJwkSetCache
 
RemoteJwkUtils - Class in net.shibboleth.oidc.jwk.support
Generic utility methods related to remote JWK sets.
RemoteJwkUtils() - Constructor for class net.shibboleth.oidc.jwk.support.RemoteJwkUtils
Constructor.
removeByIdentifier(Key, AbstractOIDCEntityResolver.JsonBackingStore) - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver
Remove from the backing store all metadata for the entity with the given identifier.
removeExpiredAndIdleMetadata() - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache.ExpiredAndIdleMetadataCleanupTask
removeIdleEntityData - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
Flag indicating whether idle entity data should be removed.
removeIdleEntityData - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
Flag indicating whether idle entity data should be removed.
removeManagementData(I) - Method in interface net.shibboleth.oidc.metadata.DynamicBackingStore
Remove the management data for the specified entityID.
removeManagementData(I) - Method in class net.shibboleth.oidc.metadata.impl.DefaultDynamicBackingStore
Remove the management data for the specified entityID.
replayCache - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierClaimsValidator
Message replay cache instance to use.
replayCacheKeyCalculationStrategy - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierClaimsValidator
Optional function to calculate they key used with ReplayCache.
replayCacheRecordLifetime - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierClaimsValidator
Static lifetime to be used in replay cache if claims set doesn't contain expiration value.
REQUEST_OBJECT_AND_URI - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
Both request uri and request object in request.
REQUEST_OBJECT_ENCRYPTION_ALG_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Attribute local name.
REQUEST_OBJECT_ENCRYPTION_ENC_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Attribute local name.
REQUEST_OBJECT_SIGNING_ALG_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Attribute local name.
requested - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationTimeClaimsValidator
Has the auth_time been requested, either explicitly or from the max_age parameter? Defaults to true.
requestedClaims - Variable in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
Individual requested claims.
RequestedEssentialACRClaimsLookupStrategy - Class in net.shibboleth.oidc.security.jwt.claims.impl
Strategy that looks up any requested ACR claims from the requested claims object that have to be contained in the token's claims set.
RequestedEssentialACRClaimsLookupStrategy(Function<ProfileRequestContext, OIDCAuthenticationRequest>) - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.RequestedEssentialACRClaimsLookupStrategy
Constructor.
requestedEssentialAcrsClaimLookupStrategy - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.ACRClaimsValidator
Strategy to find the essential requested ACR claim values.
requestLookupStrategy - Variable in class net.shibboleth.oidc.profile.audit.impl.AbstractAuthenticationRequestAuditExtractor
Lookup strategy to locate the authentication request.
requestLookupStrategy - Variable in class net.shibboleth.oidc.profile.audit.impl.ForceAuthnAuditExtractor
Lookup strategy to locate the authentication request.
requestObject - Variable in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
The request object.
requestObjectClaimsSet - Variable in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
The claims used to build a request object JWT.
requestObjectEncryptionAlg - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Request object encryption algorithm for this entity.
requestObjectEncryptionEnc - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Request object encryption encoder for this entity.
requestObjectSigningAlg - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Request object signing algorithm for this entity.
requestURI - Variable in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
The request URI.
RequestUri - Interface in net.shibboleth.oidc.saml.xmlobject
SAML2 OIDC metadata extension 'RequestUri'.
RequestUriBuilder - Class in net.shibboleth.oidc.saml.xmlobject.impl
Builder of RequestUriImpl.
RequestUriBuilder() - Constructor for class net.shibboleth.oidc.saml.xmlobject.impl.RequestUriBuilder
 
requestUriClaimsSetManipulationStrategyLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2PushedAuthorizationRequestConfiguration
Lookup function to supply strategy bi-function for manipulating request URI claims set.
RequestUriImpl - Class in net.shibboleth.oidc.saml.xmlobject.impl
Concrete implementation of RequestUri.
RequestUriImpl(String, String, String) - Constructor for class net.shibboleth.oidc.saml.xmlobject.impl.RequestUriImpl
Constructor.
requestUriLifetimeLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2PushedAuthorizationRequestConfiguration
Lookup function to supply request URI lifetime.
requestUris - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Request URIs for this entity.
requestUriTypeLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2PushedAuthorizationRequestConfiguration
Lookup function to supply request URI type.
REQUIRE_AUTH_TIME_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Attribute local name.
requireAll - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.ChainingJWTClaimsValidator
Require all of the validators to be successful.
RequireAuthenticationRequestPredicate - Class in net.shibboleth.oidc.profile.config.logic
RequireAuthenticationRequestPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.RequireAuthenticationRequestPredicate
 
requireAuthenticationRequestPredicateLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Whether client is required to use OIDC authentication request vs plain OAuth2 authorization request.
requireAuthTime - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Require auth time flag for this entity.
requiredClaims - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.RequiredClaimsValidator
The names of the JWT claims that must be present, if empty no claims are required.
RequiredClaimsValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl
Verify the claims set contains the given set of required claims.
RequiredClaimsValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.RequiredClaimsValidator
Constructor.
RequireDPoPJktParameterPredicate - Class in net.shibboleth.oidc.profile.config.logic
RequireDPoPJktParameterPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.RequireDPoPJktParameterPredicate
 
requireDpopJktPredicate - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Whether client is required to include dpop_jkt in authorization request.
requireDpopProofPredicate - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Whether client is required to include DPoP Proof JWT in API request.
RequireDPoPProofPredicate - Class in net.shibboleth.oidc.profile.config.logic
RequireDPoPProofPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.RequireDPoPProofPredicate
 
requiredRule - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.IssuedAtClaimsValidator
Whether this rule is required to be met.
requireIdTokenHintPredicate - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
Whether to require the use of id_token_hint in RP-initiated logout parameters.
RequireIdTokenHintPredicate - Class in net.shibboleth.oidc.profile.config.logic
RequireIdTokenHintPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.RequireIdTokenHintPredicate
 
requirePushedAuthorizationRequestPredicate - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Whether client is required to use pushed authorization request.
RequirePushedAuthorizationRequestPredicate - Class in net.shibboleth.oidc.profile.config.logic
RequirePushedAuthorizationRequestPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.RequirePushedAuthorizationRequestPredicate
 
resolve(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver
resolve(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.ChainingClientInformationResolver
resolve(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.ChainingProviderMetadataResolver
resolve(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor.SkeletonEchoingRoleDescriptorResolver
resolve(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.FilesystemClientInformationResolver
resolve(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.FilesystemProviderMetadataResolver
resolve(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.PropertiesClientSecretValueResolver
resolve(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.ReloadingProviderMetadataProvider
resolve(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.ReloadingRelyingPartyClientInformationProvider
resolve(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.ResolverServiceClientSecretValueResolver
resolve(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.StorageServiceClientInformationResolver
resolve(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.RelyingPartyClientInformationProvider
resolve(CriteriaSet) - Method in class net.shibboleth.oidc.security.credential.impl.ReturnAllCollectionJOSEObjectCredentialResolver
resolve(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver
resolve(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureValidationParametersResolver
resolve(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultDecryptionParametersResolver
resolve(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
resolveAcceptedAudiences(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AudienceClaimsValidator
Resolve the set of accepted audiences.
resolveAcceptedAudiences(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationAudienceClaimsValidator
Resolve the set of accepted audiences.
resolveAlgorithm(Credential, String) - Method in class net.shibboleth.oidc.security.impl.JWSTokenSigner
Resolves JWS algorithm from signature signing parameters.
resolveAndPopulateCredentialAndSignatureAlgorithm(SignatureSigningParameters, CriteriaSet, Predicate<String>) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver
Resolve and populate the signing credential and signature method algorithm URI on the supplied parameters instance.
resolveAndPopulateCredentialAndSignatureAlgorithm(SignatureSigningParameters, CriteriaSet, Predicate<String>) - Method in class net.shibboleth.oidc.security.jose.impl.RelyingPartySigningParametersResolver
Resolve and populate the signing credential and signature method algorithm URI on the supplied parameters instance.
resolveAndPopulateCredentialsAndAlgorithms(EncryptionParameters, CriteriaSet, Predicate<String>) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
Resolve and populate the data encryption and key transport credentials and algorithm URIs.
resolveAttributesPredicate - Variable in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Whether attributes should be resolved in the course of the profile.
resolveAttributesPredicate - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCUserInfoConfiguration
Whether attributes should be resolved in the course of the profile.
resolveAttributesPredicate - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
Whether attributes should be resolved in the course of the profile.
resolveContentEncryptionKeyCredentialResolver(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultDecryptionParametersResolver
Resolve and return the effective CredentialResolver used to resolve the content encryption key.
resolveContentEncryptionKeyCredentialResolver(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
Resolve and return the effective CredentialResolver used to resolve the content encryption key.
resolveCredentialForSupportedAlgorithm(CriteriaSet, List<JWEAlgorithm>, List<EncryptionMethod>, EncryptionParameters) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
Resolve a credential (key) compatible with one-of the supported algorithms.
resolveCredentials(SPSSODescriptor) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor
Get all the credentials attached to the given SPSSODescriptor.
resolveEncryptionMethod(List<EncryptionMethod>) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
Return the first encryption method in the supported list, or null otherwise.
resolveFromMetadata(CriteriaSet, OIDCProviderMetadata) - Method in class net.shibboleth.oidc.security.credential.impl.ProviderMetadataCredentialResolver
Fetch the remote JWK Set from the jwk_uri in the OpenID Provider's metadata.
resolveFromMetadata(CriteriaSet, OIDCClientInformation) - Method in class net.shibboleth.oidc.security.credential.impl.ClientInformationCredentialResolver
Fetch the remote JWK Set from the jwk_uri in the RP/Client metadata.
resolveFromSource(CriteriaSet) - Method in class net.shibboleth.oidc.security.credential.impl.BasicJOSEObjectCredentialResolver
 
resolveFromSource(CriteriaSet) - Method in class net.shibboleth.oidc.security.credential.impl.ClientInformationClientSecretCredentialResolver
resolveFromSource(CriteriaSet) - Method in class net.shibboleth.oidc.security.credential.impl.ClientInformationCredentialResolver
resolveFromSource(CriteriaSet) - Method in class net.shibboleth.oidc.security.credential.impl.ClientSecretCriterionCredentialResolver
resolveFromSource(CriteriaSet) - Method in class net.shibboleth.oidc.security.credential.impl.CollectionJOSEObjectCredentialResolver
resolveFromSource(CriteriaSet) - Method in class net.shibboleth.oidc.security.credential.impl.ProviderMetadataCredentialResolver
resolveKEKCredentialResolver(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultDecryptionParametersResolver
Resolve and return the effective CredentialResolver used to decrypt content encryption keys.
resolveKEKCredentialResolver(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
Resolve and return the effective CredentialResolver used to encrypt/wrap content encryption keys.
resolveKeyIdFromJoseHeader(Header) - Method in class net.shibboleth.oidc.security.credential.impl.LocalJOSEObjectCredentialResolver
Return the KeyId from either a JWSHeader or a JWEHeader.
resolveKeyUse(Credential) - Static method in class net.shibboleth.oidc.security.CredentialConversionUtil
Resolves KeyUse parameter from credential.
resolveKid(Credential) - Static method in class net.shibboleth.oidc.security.CredentialConversionUtil
Resolves kid from key name.
resolveLocalCredentialsByCriteria(CriteriaSet) - Method in class net.shibboleth.oidc.security.credential.impl.LocalJOSEObjectCredentialResolver
Resolve credentials using the LocalJOSEObjectCredentialResolver.localCredResolver and the supplied criteria.
resolver - Variable in class net.shibboleth.oidc.metadata.ProviderMetadataProviderContainer
The embedded resolver.
resolver - Variable in class net.shibboleth.oidc.metadata.RelyingPartyClientInformationProvider
The embedded resolver.
resolver - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTDecryptionParameters
Resolver for parameters to store into context.
resolver - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParameters
Resolver for parameters to store into context.
resolver - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
Resolver for parameters to store into context.
resolver - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureValidationParameters
Resolver for parameters to store into context.
resolver - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureValidationParametersHandler
Resolver for parameters to store into context.
ResolverBasedRegistrationMetadataPolicyLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
A lookup function for the map of MetadataPolicy objects, resolved via configurable MetadataPolicyResolver and optionally configurable CriteriaSet.
ResolverBasedRegistrationMetadataPolicyLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.ResolverBasedRegistrationMetadataPolicyLookupFunction
 
ResolverHelper - Class in net.shibboleth.oidc.metadata.impl
Helper methods for (OIDC) metadata resolution classes.
ResolverHelper() - Constructor for class net.shibboleth.oidc.metadata.impl.ResolverHelper
Constructor.
resolvers - Variable in class net.shibboleth.oidc.metadata.impl.ChainingClientInformationResolver
Registered resolvers.
resolvers - Variable in class net.shibboleth.oidc.metadata.impl.ChainingProviderMetadataResolver
Registered resolvers.
ResolverServiceClientSecretValueResolver - Class in net.shibboleth.oidc.metadata.impl
A client secret value resolver that fetches the values from the given AttributeResolver service.
ResolverServiceClientSecretValueResolver() - Constructor for class net.shibboleth.oidc.metadata.impl.ResolverServiceClientSecretValueResolver
Constructor.
resolveSecretCredentials(CriteriaSet) - Method in class net.shibboleth.oidc.security.credential.impl.AbstractClientInformationCredentialResolver
Resolves client secret credential.
resolveSignatureTrustEngine(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureValidationParametersResolver
Resolve and return the effective SignatureTrustEngine.
resolveSingle(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver
resolveSingle(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.ChainingClientInformationResolver
resolveSingle(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.ChainingProviderMetadataResolver
resolveSingle(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.FilesystemClientInformationResolver
resolveSingle(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.FilesystemProviderMetadataResolver
resolveSingle(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.PropertiesClientSecretValueResolver
resolveSingle(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.ReloadingProviderMetadataProvider
resolveSingle(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.ReloadingRelyingPartyClientInformationProvider
resolveSingle(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.ResolverServiceClientSecretValueResolver
resolveSingle(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.impl.StorageServiceClientInformationResolver
resolveSingle(CriteriaSet) - Method in class net.shibboleth.oidc.metadata.RelyingPartyClientInformationProvider
resolveSingle(CriteriaSet) - Method in class net.shibboleth.oidc.security.credential.impl.ReturnAllCollectionJOSEObjectCredentialResolver
resolveSingle(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver
resolveSingle(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureValidationParametersResolver
resolveSingle(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultDecryptionParametersResolver
resolveSingle(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
resolveTokenCredentials(SignedJWT) - Method in class net.shibboleth.oidc.security.impl.BaseSignedJWTTrustEngine
Resolve any credentials indicated in the token, such as by inline JWK.
resolveTrustEngine(MessageContext) - Method in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler
ResourceLocationCriterion - Class in net.shibboleth.oidc.metadata.criterion
A Criterion representing a resource location.
ResourceLocationCriterion(String) - Constructor for class net.shibboleth.oidc.metadata.criterion.ResourceLocationCriterion
Constructor.
responderIdLookupStrategy - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationAudienceClaimsValidator
Lookup function for the responder identifier.
RESPONSE_MODE - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
The response_type of the authentication request.
RESPONSE_TYPE - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
The response_type of the authentication request.
RESPONSE_TYPES_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Attribute local name.
responseHandler - Variable in class net.shibboleth.oidc.metadata.impl.AbstractDynamicHTTPFetchingStrategy
HttpClient ResponseHandler instance to use.
responseLookupStrategy - Variable in class net.shibboleth.oidc.profile.audit.impl.AbstractAuthenticationResponseAuditExtractor
Lookup strategy to locate the authentication response.
responseMode - Variable in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
The response mode.
ResponseModeAuditExtractor - Class in net.shibboleth.oidc.profile.audit.impl
Function that extracts response_mode in the OIDCAuthenticationRequest.
ResponseModeAuditExtractor(Function<ProfileRequestContext, OIDCAuthenticationRequest>) - Constructor for class net.shibboleth.oidc.profile.audit.impl.ResponseModeAuditExtractor
Constructor.
responseModeLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Lookup function to override the default response_mode for a given response_type.
ResponseModesLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
A function that returns OAuth2AuthorizationProfileConfiguration.getResponseModes(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
ResponseModesLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.ResponseModesLookupFunction
 
responseModesLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Lookup function to supply the response_modes that are allowed to be used in authorization request.
responseType - Variable in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
The authorization processing flow to use.
ResponseTypeAuditExtractor - Class in net.shibboleth.oidc.profile.audit.impl
Function that extracts response_type in the OIDCAuthenticationRequest.
ResponseTypeAuditExtractor(Function<ProfileRequestContext, OIDCAuthenticationRequest>) - Constructor for class net.shibboleth.oidc.profile.audit.impl.ResponseTypeAuditExtractor
Constructor.
responseTypeLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Lookup function to retrieve the response_type.
responseTypes - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Response types for this entity.
retrieveUserInfoEndpointClaims - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Whether to make a UserInfo Endpoint request for End-User claims.
ReturnAllCollectionJOSEObjectCredentialResolver - Class in net.shibboleth.oidc.security.credential.impl
An implementation of JOSEObjectCredentialResolver that uses a Collection as the underlying credential source.
ReturnAllCollectionJOSEObjectCredentialResolver(List<Credential>) - Constructor for class net.shibboleth.oidc.security.credential.impl.ReturnAllCollectionJOSEObjectCredentialResolver
Constructor.
ReturnAllCollectionJOSEObjectCredentialResolver(Credential) - Constructor for class net.shibboleth.oidc.security.credential.impl.ReturnAllCollectionJOSEObjectCredentialResolver
Constructor.
REVOCATION_FAILED - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
The revocation attempt failed.
revocationCache - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierRevocationValidator
Message replay cache instance to use.
RevocationLifetimeLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
A function that returns OAuth2TokenRevocationConfiguration.getRevocationLifetime(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
RevocationLifetimeLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.RevocationLifetimeLookupFunction
 
revocationLifetimeLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenRevocationConfiguration
Lookup function to supply revocation lifetime.
RevocationMethodLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
A function that returns OAuth2TokenRevocationConfiguration.getRevocationMethod(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
RevocationMethodLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.RevocationMethodLookupFunction
 
revocationMethodLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenRevocationConfiguration
Which revocation method should be used when revoking a token.
REVOKED_TOKEN - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
Revoked Token.
RevokeTokensInLogoutPredicate - Class in net.shibboleth.oidc.profile.config.logic
RevokeTokensInLogoutPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.RevokeTokensInLogoutPredicate
 
revokeTokensPredicate - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
Whether to revoke the tokens related to the session to be logged out.
run() - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache.AsynchronousRefreshAHeadTask
 
run() - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache.ExpiredAndIdleMetadataCleanupTask
 
run() - Method in class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver.RefreshMetadataTask

S

S256 - Enum constant in enum class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest.CodeChallengeMethod
Compute the code_challenge by SHA-256 hashing and base64 URL encoding the code_verifier.
SAML20MDOIDCMD_NS - Static variable in class net.shibboleth.oidc.saml.xmlobject.Constants
SAML 2.0 Metadata extension for OAuth/OIDC descriptors XML namespace.
SAML20MDOIDCMD_NS - Static variable in interface net.shibboleth.oidc.saml.xmlobject.MetadataValueSAMLObject
SAML 2.0 Metadata extension for OAuth/OIDC descriptors XML namespace.
SAML20MDOIDCMD_PREFIX - Static variable in class net.shibboleth.oidc.saml.xmlobject.Constants
SAML 2.0 Metadata extension for OAuth/OIDC descriptors prefi.
SAML20MDOIDCMD_PREFIX - Static variable in interface net.shibboleth.oidc.saml.xmlobject.MetadataValueSAMLObject
SAML 2.0 Metadata extension for OAuth/OIDC descriptors prefi.
SAML20MDOIDCMD_SCHEMA_LOCATION - Static variable in class net.shibboleth.oidc.saml.xmlobject.Constants
SAML 2.0 Metadata extension for OAuth/OIDC descriptors.
SAML20MDOIDCMD_SCHEMA_LOCATION - Static variable in interface net.shibboleth.oidc.saml.xmlobject.MetadataValueSAMLObject
SAML 2.0 Metadata extension for OAuth/OIDC descriptors.
satisfyAnyPredicates - Variable in class net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver
Flag which determines whether predicates used in filtering are connected by a logical 'OR' (true) or by logical 'AND' (false).
scheduleNextRefresh(Duration) - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
Schedules the next refresh.
scheduleNextRefresh(Duration) - Method in class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver
Schedules the next refresh.
scope - Variable in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
The requested scopes.
SCOPE - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
Token scope.
ScopeAuditExtractor - Class in net.shibboleth.oidc.profile.audit.impl
Function that extracts scope in the OIDCAuthenticationRequest.
ScopeAuditExtractor(Function<ProfileRequestContext, OIDCAuthenticationRequest>) - Constructor for class net.shibboleth.oidc.profile.audit.impl.ScopeAuditExtractor
Constructor.
scopes - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Scopes for this entity.
SCOPES_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Attribute local name.
scopesLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Lookup function to retrieve the scopes requested during authentication.
secConfiguration - Variable in class net.shibboleth.oidc.profile.impl.FormOutboundKeySetResponseMessage
Security configuration we look for keys to publish.
secret - Variable in class net.shibboleth.oidc.security.credential.BasicClientSecretCredentialFactoryBean
The secret to use when creating a BasicJWKCredential.
secret - Variable in class net.shibboleth.oidc.security.credential.BasicExpiringJWTSharedSecretCredentialFactoryBean
The secret to use when creating a BasicJWKCredential.
SecretExpirationPeriodLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
A function that returns OIDCDynamicRegistrationConfiguration.getSecretExpirationPeriod(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
SecretExpirationPeriodLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.SecretExpirationPeriodLookupFunction
 
secretExpirationPeriodLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCDynamicRegistrationConfiguration
Lookup function to supply client secret expiration period.
secretKeyName - Variable in class net.shibboleth.oidc.security.credential.DefaultClientSecretCredential
The chosen client_secret keyname.
secretReference - Variable in class net.shibboleth.oidc.metadata.criterion.ClientSecretReferenceCriterion
The client secret reference.
SECTOR_IDENTIFIER_URI_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Attribute local name.
sectorIdentifierUri - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Sector identifier URI for this entity.
SecurityParametersContext - Class in net.shibboleth.oidc.security.jose.context
A context implementation for storing parameter instances for JWS signature signing and validation, and JWE encryption and decryption.
SecurityParametersContext() - Constructor for class net.shibboleth.oidc.security.jose.context.SecurityParametersContext
 
securityParametersContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTDecryptionParameters
Strategy used to look up the SecurityParametersContext to set the parameters for.
securityParametersContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
Strategy used to look up the SecurityParametersContext to extract parameters from.
securityParametersContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParameters
Strategy used to look up the SecurityParametersContext to set the parameters for.
securityParametersContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
Strategy used to look up the SecurityParametersContext to set the parameters for.
securityParametersContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureValidationParameters
Strategy used to look up the SecurityParametersContext to set the parameters for.
securityParametersContextLookupStrategy - Variable in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureValidationParametersHandler
Strategy used to look up the SecurityParametersContext to set the parameters for.
securityParametersContextLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler
Strategy used to look up the SecurityParametersContext.
securityParametersLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.EncryptJWTHandler
Strategy used to locate the SecurityParametersContext to use for signing.
securityParametersLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.SignJWTHandler
Strategy used to locate the SecurityParametersContext to use for signing.
securityParamsLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.DecryptJWE
Strategy used to locate the SecurityParametersContext.
serializeAuthorizationParamsToQueryString(OIDCAuthenticationRequest) - Method in class net.shibboleth.oidc.profile.encoding.impl.AbstractOIDCMessageEncoder
Serialize OAuth 2.0 authorization parameters from the authentication request to a query string.
serializeAuthorizationParamsToUrl(OIDCAuthenticationRequest, URLBuilder) - Method in class net.shibboleth.oidc.profile.encoding.impl.AbstractOIDCMessageEncoder
Serialize OAuth 2.0 authorization parameters from the authentication request to the query string of the URL.
serializeMessageForLogging(Object) - Method in class net.shibboleth.oidc.profile.decoding.impl.HTTPPostAuthnResponseDecoder
serializeMessageForLogging(Object) - Method in class net.shibboleth.oidc.profile.decoding.impl.HTTPRedirectAuthnResponseDecoder
serializeMessageForLogging(Object) - Method in class net.shibboleth.oidc.profile.encoding.impl.AbstractOIDCMessageEncoder
serializeMessageForLogging(Object) - Method in class net.shibboleth.oidc.profile.encoding.impl.SimpleNimbusResponseEncoder
serialVersionUID - Static variable in exception net.shibboleth.oidc.jwt.claims.JWTValidationException
Serial version UID.
serialVersionUID - Static variable in exception net.shibboleth.oidc.metadata.cache.CacheLoadingException
Generated serial UID.
serialVersionUID - Static variable in exception net.shibboleth.oidc.metadata.cache.MetadataCacheException
SerialUID.
serialVersionUID - Static variable in exception net.shibboleth.oidc.metadata.filter.FilterException
Serial version UID.
serialVersionUID - Static variable in exception net.shibboleth.oidc.security.jose.SignatureException
Serial version UID.
service - Variable in class net.shibboleth.oidc.metadata.impl.ReloadingProviderMetadataProvider
The service which managed the reloading.
service - Variable in class net.shibboleth.oidc.metadata.impl.ReloadingRelyingPartyClientInformationProvider
The service which managed the reloading.
service - Variable in class net.shibboleth.oidc.metadata.impl.ResolverServiceClientSecretValueResolver
The attribute resolver service used for the client secret value resolution.
SESSION_NOT_FOUND - Static variable in class net.shibboleth.oidc.profile.core.OidcEventIds
ID of event returned upon an inability to locate any matching session for a LogoutRequest.
setAccessTokenClaimsSetManipulationStrategy(BiFunction<ProfileRequestContext, Map<String, Object>, Map<String, Object>>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Set the bi-function for manipulating access token claims set.
setAccessTokenClaimsSetManipulationStrategy(BiFunction<ProfileRequestContext, Map<String, Object>, Map<String, Object>>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
Set the bi-function for manipulating access token claims set.
setAccessTokenClaimsSetManipulationStrategyLookupStrategy(Function<ProfileRequestContext, BiFunction<ProfileRequestContext, Map<String, Object>, Map<String, Object>>>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Set a lookup strategy for the bi-function for manipulating access token claims set.
setAccessTokenClaimsSetManipulationStrategyLookupStrategy(Function<ProfileRequestContext, BiFunction<ProfileRequestContext, Map<String, Object>, Map<String, Object>>>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
Set a lookup strategy for the bi-function for manipulating access token claims set.
setAccessTokenLifetime(Duration) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Set the lifetime of an access token.
setAccessTokenLifetime(Duration) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
Set the lifetime of an access token.
setAccessTokenLifetimeLookupStrategy(Function<ProfileRequestContext, Duration>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Set a lookup strategy for the access token lifetime.
setAccessTokenLifetimeLookupStrategy(Function<ProfileRequestContext, Duration>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
Set a lookup strategy for the access token lifetime.
setAccessTokenLookupStrategy(Function<ProfileRequestContext, AccessToken>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AccessTokenHashValidator
Set the lookup strategy used to locate the access_token.
setAccessTokenType(String) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Set access token type.
setAccessTokenType(String) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
Set access token type.
setAccessTokenTypeLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Set lookup strategy for access token type.
setAccessTokenTypeLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
Set lookup strategy for access token type.
setAcrRequestAlwaysEssential(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set whether all acr claim requests should be treated as Essential.
setAcrRequestAlwaysEssentialPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set condition for whether all acr claim requests should be treated as Essential.
setAcrs(List<ACR>) - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
Set the ACRs.
setActivationCondition(BiPredicate<ProfileRequestContext, JWTClaimsSet>) - Method in class net.shibboleth.oidc.jwt.claims.AbstractClaimsValidator
Set an activation condition for this validator.
setAdd(Object) - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
Set the value(s) to be added for the claim.
setAdditionalAudiencesForIdToken(Collection<String>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Set the set of audiences, in addition to the relying party(ies) to which the IdP is issuing the ID Token, with which the token may be shared.
setAdditionalAudiencesForIdTokenLookupStrategy(Function<ProfileRequestContext, Set<String>>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Set a lookup strategy for the set of audiences, in addition to the relying party(ies) to which the IdP is issuing the ID Token, with which the token may be shared.
setAdditionalAudiencesLookupStrategy(BiFunction<ProfileRequestContext, JWTClaimsSet, Set<String>>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AudienceClaimsValidator
Set the strategy used to lookup the list of additional audiences to find in the 'aud' claim.
setAlg(Algorithm) - Method in class net.shibboleth.oidc.security.credential.BasicExpiringJWTSharedSecretCredentialFactoryBean
Set the algorithm 'alg' associated with this credential.
setAlgorithm(Algorithm) - Method in class net.shibboleth.oidc.security.credential.BasicJWKCredential
Set the algorithm of jwk.
setAlgorithm(String) - Method in class net.shibboleth.oidc.security.credential.impl.KeyManagmentAlgorithmCriterion
Set the algorithm criteria.
setAlgorithmRegistry(AlgorithmRegistry) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver
Set the AlgorithmRegistry instance used when resolving algorithm URIs.
setAlgorithmRegistry(AlgorithmRegistry) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
Set the AlgorithmRegistry instance used when resolving algorithm URIs.
setAllowMissing(boolean) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AccessTokenHashValidator
Set whether a missing 'at_hash' claim is valid or not.
setAllowMissing(boolean) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AudienceClaimsValidator
Set whether a missing 'aud' claim is valid or not.
setAllowPKCEPlain(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Set whether client is allowed to use PKCE code challenge method plain.
setAllowPKCEPlainPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Set condition for whether client is allowed to use PKCE code challenge method plain.
setAlwaysIncludedAttributes(Collection<String>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Set the set of attribute IDs which should be included in the ID token regardless of response_type.
setAlwaysIncludedAttributesLookupStrategy(Function<ProfileRequestContext, Set<String>>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Set a lookup strategy for the attribute IDs which should be included in the ID token regardless of response_type.
setAlwaysIssueBearerAccessToken(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Set whether the access token to be issued is always a bearer access token.
setAlwaysIssueBearerAccessToken(boolean) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
Set whether the access token to be issued is always a bearer access token.
setAlwaysIssueBearerAccessTokenPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Set a condition to determine whether the access token to be issued is always a bearer access token.
setAlwaysIssueBearerAccessTokenPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
Set a condition to determine whether the access token to be issued is always a bearer access token.
setApplicationContext(ApplicationContext) - Method in class net.shibboleth.oidc.metadata.policy.impl.BeanMetadataPolicyOperator
 
setApplicationType(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Set the application type.
setApplicationType(String) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Set the application type.
setAttributeIds(List<String>) - Method in class net.shibboleth.oidc.metadata.impl.ResolverServiceClientSecretValueResolver
Set the list of attribute IDs that may contain the resolved client secret values.
setAttributeResolver(ReloadableService<AttributeResolver>) - Method in class net.shibboleth.oidc.metadata.impl.ResolverServiceClientSecretValueResolver
Set the attribute resolver service used for the client secret value resolution.
setAudienceLookupStrategy(BiFunction<ProfileRequestContext, JWTClaimsSet, String>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AudienceClaimsValidator
Set the audience lookup strategy.
setAuthenticationContextClassReferenceTranslationStrategyLookupStrategy(Function<ProfileRequestContext, Function<Collection<String>, Collection<Principal>>>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set the lookup function to locate the Authentication Context Class Reference strategy used to translate between an inbound proxied OIDC ACR into an appropriate set of custom Principal objects to populate the subject.
setAuthenticationFlows(Collection<String>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Set the authentication flows to use.
setAuthenticationFlowsLookupStrategy(Function<ProfileRequestContext, Set<String>>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Set a lookup strategy for the authentication flows to use.
setAuthenticationMethodsReferencesTranslationStrategyLookupStrategy(Function<ProfileRequestContext, Function<Collection<String>, Collection<Principal>>>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set the lookup function to locate the Authentication Methods References strategy used to translate between an inbound proxied OIDC AMR into an appropriate set of custom Principal objects to populate the subject.
setAuthnLifetime(Duration) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationTimeClaimsValidator
Sets the amount of time for which a token is valid from when the original authentication took place.
setAuthnLifetimeLookupStrategy(Function<ProfileRequestContext, Duration>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationTimeClaimsValidator
Set the lookup strategy used to locate the amount of time for which a token is valid from when the original authentication took place.
setAuthnRequestTime(Instant) - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
Set the time at which this RP sent this authentication request to the OP.
setAuthnRequestTimeLookupStrategy(Function<ProfileRequestContext, Instant>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationTimeClaimsValidator
Set the lookup strategy to find out when the authentication request (if any) was made.
setAuthorizationCodeClaimsSetManipulationStrategy(BiFunction<ProfileRequestContext, Map<String, Object>, Map<String, Object>>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set the bi-function for manipulating authorization code claims set.
setAuthorizationCodeClaimsSetManipulationStrategyLookupStrategy(Function<ProfileRequestContext, BiFunction<ProfileRequestContext, Map<String, Object>, Map<String, Object>>>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set a lookup strategy for the bi-function for manipulating authorization code claims set.
setAuthorizationCodeFlowEnabled(boolean) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2FlowAwareProfileConfiguration
Set whether authorization code flow is supported by this profile.
setAuthorizationCodeFlowEnabledPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2FlowAwareProfileConfiguration
Set condition used to indicate whether authorization code flow is supported by this profile.
setAuthorizationParamsAreValidPredicate(Predicate<List<Pair<String, String>>>) - Method in class net.shibboleth.oidc.profile.encoding.impl.AbstractOIDCMessageEncoder
Set a hook that allows the built authorization parameters to be validated before they are used.
setAuthorizeCodeLifetime(Duration) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set the lifetime of authz code.
setAuthorizeCodeLifetimeLookupStrategy(Function<ProfileRequestContext, Duration>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set a lookup strategy for the authz code lifetime.
setBackChannelLogoutSessionRequired(boolean) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Set the flag to require session id in back-channel logout request.
setBackChannelLogoutSessionRequired(boolean) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Set the flag to require session id in back-channel logout request.
setBackingStore(AbstractOIDCEntityResolver.JsonBackingStore) - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver
Set the entity backing store currently in use by the metadata resolver.
setCacheId(String) - Method in class net.shibboleth.oidc.metadata.cache.impl.BaseMetadataCacheBuilderSpec
Set the cache identifier of the cache this specification builds.
setClaimName(String) - Method in class net.shibboleth.oidc.profile.audit.impl.AbstractClaimsSetAuditExtractor
Set the claim whose value is to be extracted from the id_token claims set.
setClaimName(String) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ExactMatchClaimsValidator
Set the name of the claim to match.
setClaimsSetLookupStrategy(Function<ProfileRequestContext, ClaimsSet>) - Method in class net.shibboleth.oidc.profile.audit.impl.AbstractClaimsSetAuditExtractor
Set the strategy used to lookup the JWTClaimsSet to look for the claim in.
setClaimsToSignLookupStrategy(Function<MessageContext, JWTClaimsSet>) - Method in class net.shibboleth.oidc.security.impl.SignJWTHandler
Set the strategy used to locate the JWTClaimsSet to sign.
setClaimsValidator(ClaimsValidator) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Set the ClaimsValidator to apply to JWT-based client authentication.
setClaimsValidatorLookupStrategy(Function<ProfileRequestContext, ClaimsValidator>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Set a lookup strategy for the ClaimsValidator to apply to JWT-based client authentication.
setClaimValidators(List<ClaimsValidator>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ChainingJWTClaimsValidator
Set the list of validators to use.
setCleanupTaskInterval(Duration) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
Set the interval at which the cleanup task should run.
setCleanupTaskInterval(Duration) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
Set the interval at which the cleanup task should run.
setClientAuthentication(ClientAuthentication) - Method in class net.shibboleth.oidc.authn.context.OAuth2ClientAuthenticationContext
Set the OAuth 2 client authentication credentials.
setClientCredential(ClientSecretCredential) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Set a fixed client credential to use no matter what the context/request.
setClientCredentialLookupStrategy(Function<ProfileRequestContext, ClientSecretCredential>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Set the client credential lookup strategy.
setClientId(String) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Set a fixed client_id to use no matter what the context/request.
setClientIdLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Set the strategy to locate a client_id.
setClientInformation(OIDCClientInformation) - Method in class net.shibboleth.oidc.metadata.context.OIDCMetadataContext
Set the client information.
setClientInformationLookupStrategy(Function<MessageContext, OIDCClientInformation>) - Method in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler
Set the lookup strategy to locate the client information.
setClientInformationLookupStrategy(Function<MessageContext, OIDCClientInformation>) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler
Set the lookup strategy to locate the client information.
setClientInformationLookupStrategy(Function<ProfileRequestContext, OIDCClientInformation>) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration
Set the lookup strategy to locate the client information.
setClientMetadataContextLookupStrategy(Function<MessageContext, OIDCMetadataContext>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
Set lookup strategy for OIDCMetadataContext for input to resolution.
setClientMetadataContextLookupStrategy(Function<ProfileRequestContext, OIDCMetadataContext>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTDecryptionParameters
Set lookup strategy for OIDCMetadataContext for input to resolution.
setClientMetadataContextLookupStrategy(Function<ProfileRequestContext, OIDCMetadataContext>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
Set lookup strategy for OIDCMetadataContext for input to resolution.
setClientMetadataContextLookupStrategy(Function<ProfileRequestContext, OIDCMetadataContext>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParameters
Set lookup strategy for OIDCMetadataContext for input to resolution.
setClientUri(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Set the client URI.
setClientUri(String) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Set the client URI.
setClockSkew(Duration) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationTimeClaimsValidator
Set the clock skew.
setClockSkew(Duration) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ExpiryClaimsValidator
Set the clock skew.
setClockSkew(Duration) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.IssuedAtClaimsValidator
Set the clock skew.
setClockSkew(Duration) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierClaimsValidator
Set the clock skew.
setClockSkew(Duration) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.NotBeforeClaimsValidator
Set the clock skew.
setCodeChallenge(String) - Method in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
Get the authorisation code_challenge for Proof Key for Code Exchange.
setCodeChallengeMethod(OAuthAuthorizationRequest.CodeChallengeMethod) - Method in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
Set the code_challenge_method used to transform the code_verifier into a code_challenge.
setCodeVerifier(String) - Method in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
Set the authorisation code_verifier for Proof Key for Code Exchange.
setConfigurationLookupStrategy(Function<MessageContext, List<SignatureSigningConfiguration>>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
Set the strategy used to look up a per-request SignatureSigningConfiguration list.
setConfigurationLookupStrategy(Function<MessageContext, List<SignatureValidationConfiguration>>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureValidationParametersHandler
Set the strategy used to look up a per-request SignatureValidationConfiguration list.
setConfigurationLookupStrategy(Function<ProfileRequestContext, List<DecryptionConfiguration>>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTDecryptionParameters
Set the strategy used to look up a per-request DecryptionConfiguration list.
setConfigurationLookupStrategy(Function<ProfileRequestContext, List<EncryptionConfiguration>>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
Set the strategy used to look up a per-request EncryptionConfiguration list.
setConfigurationLookupStrategy(Function<ProfileRequestContext, List<SignatureSigningConfiguration>>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParameters
Set the strategy used to look up a per-request SignatureSigningConfiguration list.
setConfigurationLookupStrategy(Function<ProfileRequestContext, List<SignatureValidationConfiguration>>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureValidationParameters
Set the strategy used to look up a per-request SignatureValidationConfiguration list.
setContentEncryptionKeyCredentialResolver(JOSEObjectCredentialResolver) - Method in class net.shibboleth.oidc.security.jose.DecryptionParameters
Set the KeyInfoCredentialResolver to use when processing the encrypted content.
setContentEncryptionKeyCredentialResolver(JOSEObjectCredentialResolver) - Method in class net.shibboleth.oidc.security.jose.impl.BasicDecryptionConfiguration
Set the KeyInfoCredentialResolver to use when processing the encrypted content.
setContentEncryptionKeyCredentialResolver(CredentialResolver) - Method in class net.shibboleth.oidc.security.jose.impl.BasicEncryptionConfiguration
Set the CredentialResolver to resolve the content encryption key.
setContext(String) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierRevocationValidator
Set the revocation cache context that partitions entries.
setCredentialExpiresAt(Duration) - Method in class net.shibboleth.oidc.security.credential.BasicExpiringJWKCredential
Set the expiry.
setCredentialExpiresAt(Duration) - Method in class net.shibboleth.oidc.security.credential.BasicExpiringJWTSharedSecretCredentialFactoryBean
Set the expiry in seconds since 1970-01-01T0:0:0Z.
setCredentialsToPublishLookupStrategy(Function<JSONSecurityConfiguration, List<Credential>>) - Method in class net.shibboleth.oidc.profile.impl.FormOutboundKeySetResponseMessage
Set the strategy used to locate the credentials to publish at the KeySet endpoint.
setCriteriaSetLookupStrategy(Function<ProfileRequestContext, CriteriaSet>) - Method in class net.shibboleth.oidc.profile.config.navigate.ResolverBasedRegistrationMetadataPolicyLookupFunction
Set the lookup strategy for the criteria set used for the metadata policy resolver.
setCriteriaToIdentifierStrategy(Function<CriteriaSet, IdentifierType>) - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
Set the CriteriaSet to IdentifierType strategy.
setCriteriaToIdentifierStrategy(Function<CriteriaSet, IdentifierType>) - Method in class net.shibboleth.oidc.metadata.cache.impl.BaseMetadataCacheBuilderSpec
Set the criteria set to identifier lookup strategy.
setCriterionPredicateRegistry(CriterionPredicateRegistry<MetadataType>) - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver
Set the registry used in resolving predicates from criteria.
setCSPDigester(StringDigester) - Method in class net.shibboleth.oidc.profile.encoding.impl.HTTPPostAuthnRequestEncoder
Sets a StringDigester to use in computing CSP digests in views.
setCSPNonceGenerator(IdentifierGenerationStrategy) - Method in class net.shibboleth.oidc.profile.encoding.impl.HTTPPostAuthnRequestEncoder
Sets an IdentifierGenerationStrategy to use in computing CSP nonces in views.
setCustomMetadataPolicyOperators(Map<String, CustomMetadataPolicyOperator>) - Method in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyEnforcer
Set the map of custom metadata policy operators that are applied after the standard operators.
setCustomMetadataPolicyOperators(Map<String, CustomMetadataPolicyOperator>) - Method in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyValidator
Set the map of custom metadata policy operators that are applied after the standard operators.
setCustomOperator(String, Object) - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
Add a custom operator to the map of custom operators.
setCustomRedirectUriValidationStrategy(BiPredicate<URI, ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Set the bi-predicate for custom validation of redirect URI in the request.
setCustomRedirectUriValidationStrategyLookupStrategy(Function<ProfileRequestContext, BiPredicate<URI, ProfileRequestContext>>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Set a lookup strategy for the bi-predicate for custom validation of redirect URI in the request.
setDataEncryptionAlgorithm(String) - Method in class net.shibboleth.oidc.security.jose.EncryptionParameters
Set the encryption algorithm URI to use when encrypting the EncryptedData.
setDataEncryptionAlgorithmLookupStrategy(Function<OIDCClientInformation, String>) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration
Set the strategy used to look up the data encryption algorithm in the client metadata.
setDataEncryptionAlgorithms(List<String>) - Method in class net.shibboleth.oidc.security.jose.impl.BasicEncryptionConfiguration
Set the data encryption algorithms to use.
setDataEncryptionAlgorithmsLookupStrategy(BiFunction<CriteriaSet, Predicate<String>, List<String>>) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
Set the data encryption algorithms lookup strategy to use.
setDataEncryptionCredential(Credential) - Method in class net.shibboleth.oidc.security.jose.EncryptionParameters
Set the encryption credential to use when encrypting the EncryptedData.
setDateTimeFormat(String) - Method in class net.shibboleth.oidc.profile.audit.impl.DateBasedJWTClaimAuditExtractor
Set the formatting string to apply when extracting date/time fields.
setDecryptionParameters(DecryptionParameters) - Method in class net.shibboleth.oidc.security.jose.context.SecurityParametersContext
Set the parameters to use for decryption operations.
setDecryptionParametersResolver(DecryptionParametersResolver) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTDecryptionParameters
Set the resolver to use for the parameters to store into the context.
setDefaultAlgorithmValue(String) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler
Set the default algorithm value used if lookup strategy returned null.
setDefaultAuthenticationMethods(Collection<Principal>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Set the default authentication contexts to use, expressed as custom principals.
setDefaultAuthenticationMethodsLookupStrategy(Function<ProfileRequestContext, Collection<Principal>>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Set a lookup strategy for the authentication contexts to use, expressed as custom principals.
setDefaultCode(String) - Method in class net.shibboleth.oidc.profile.impl.AbstractBuildErrorResponseFromEvent
Set the code for unmapped events.
setDefaultMaxAge(int) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Set the value for default max age.
setDefaultMaxAge(int) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Set the value for default max age.
setDefaultResponseMode(ResponseMode) - Method in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
Set the default response_mode for the given response_type.
setDefaultStatusCode(int) - Method in class net.shibboleth.oidc.profile.impl.AbstractBuildErrorResponseFromEvent
Set the status code for unmapped events.
setDefaultValue(Object) - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
Set the default value for the claim to be used in case none is specified.
setDeniedUserInfoAttributes(Collection<String>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set the set of attribute IDs which should be omitted from the UserInfo token.
setDeniedUserInfoAttributes(Collection<String>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCUserInfoConfiguration
Set the set of attribute IDs which should be omitted from the UserInfo token.
setDeniedUserInfoAttributesLookupStrategy(Function<ProfileRequestContext, Set<String>>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set a lookup strategy for the set of attribute IDs which should be omitted from the UserInfo token.
setDeniedUserInfoAttributesLookupStrategy(Function<ProfileRequestContext, Set<String>>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCUserInfoConfiguration
Set a lookup strategy for the set of attribute IDs which should be omitted from the UserInfo token.
setDisplay(Display) - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
Set the display.
setDisplay(String) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set the display parameter value to use.
setDisplayLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set the lookup strategy to determine the display parameter value for authorization requests.
setDpopProofClaimsValidator(ClaimsValidator) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Set the ClaimsValidator to apply to DPoP Proof JWT.
setDpopProofClaimsValidatorLookupStrategy(Function<ProfileRequestContext, ClaimsValidator>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Set a lookup strategy for the ClaimsValidator to apply to DPoP Proof JWT.
setDpopProofNonceGenerator(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Set the Function to create nonces to be used with DPoP Proof JWTs.
setDpopProofNonceGeneratorLookupStrategy(Function<ProfileRequestContext, Function<ProfileRequestContext, String>>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Set a lookup strategy for the Function to create nonces to be used with DPoP Proof JWTs.
setDpopProofSignatureValidationConfiguration(SignatureValidationConfiguration) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Set the SignatureValidationConfiguration to validate the DPoP Proof JWT signatures.
setDpopProofSignatureValidationConfigurationLookupStrategy(Function<ProfileRequestContext, SignatureValidationConfiguration>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Set a lookup strategy for the SignatureValidationConfiguration to validate the DPoP Proof JWT signatures.
setEmbeddedResolver(ClientInformationResolver) - Method in class net.shibboleth.oidc.metadata.RelyingPartyClientInformationProvider
Set the ClientInformationResolver to embed.
setEmbeddedResolver(ProviderMetadataResolver) - Method in class net.shibboleth.oidc.metadata.ProviderMetadataProviderContainer
Set the ProviderMetadataResolver to embed.
setEncAlgorithm(String) - Method in class net.shibboleth.oidc.security.credential.impl.DataEncryptionAlgorithmCriterion
Set the encryption algorithm criteria.
setEncodeConsentInTokens(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set whether to encode consent in authorization code and access/refresh tokens.
setEncodeConsentInTokensPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set condition for whether to encode consent in authorization code and access/refresh tokens.
setEncodedAttributes(Collection<String>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set the set of attribute IDs which should be encoded in encrypted form into the authorization code and/or access/refresh tokens to enable recovery on the back-channel.
setEncodedAttributesLookupStrategy(Function<ProfileRequestContext, Set<String>>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set a lookup strategy for the attribute IDs which should be encoded in encrypted form into the authorization code and/or access/refresh tokens to enable recovery on the back-channel.
setEncryptionOptional(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Set whether encryption is optional in the face of a missing key, etc.
setEncryptionOptional(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
Set whether encryption is optional in the face of a missing key, etc.
setEncryptionOptional(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCUserInfoConfiguration
Set whether encryption is optional in the face of a missing key, etc.
setEncryptionOptional(boolean) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
Sets the boolean condition to apply to determine how to proceed if encryption parameter resolution fails.
setEncryptionOptional(boolean) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
Set whether encryption is optional in the face of a missing key, etc.
setEncryptionOptionalPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Set a condition to determine whether encryption is optional in the face of a missing key, etc.
setEncryptionOptionalPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
Set a condition to determine whether encryption is optional in the face of a missing key, etc.
setEncryptionOptionalPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCUserInfoConfiguration
Set a condition to determine whether encryption is optional in the face of a missing key, etc.
setEncryptionOptionalPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
Sets the condition to apply to determine how to proceed if encryption parameter resolution fails.
setEncryptionOptionalPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
Set a condition to determine whether encryption is optional in the face of a missing key, etc.
setEncryptionOptionalPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration
Sets the condition to apply to determine how to proceed if encryption parameter resolution fails.
setEncryptionParameters(EncryptionParameters) - Method in class net.shibboleth.oidc.security.jose.context.SecurityParametersContext
Set the parameters to use for encryption operations.
setEncryptionParametersResolver(EncryptionParametersResolver) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
Set the encParamsresolver to use for the parameters to store into the context.
setEncryptRequestObject(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set whether the RequestObject should be encrypted.
setEncryptRequestObjectPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set the predicate to determine if the RequestObject should be encrypted.
setEndpointReplacement(String) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationAudienceClaimsValidator
Set the replacement substring for the endpoint containing any ones configured at AuthenticationAudienceClaimsValidator.endpointTargets.
setEndpointTargets(List<String>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationAudienceClaimsValidator
Set the substrings to replace from resolved endpoint with one configured at AuthenticationAudienceClaimsValidator.endpointReplacement.
setEndpointURI(URI) - Method in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
Set the endpoint_uri.
setEnforceRefreshTokenRotation(boolean) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
Set whether always revoke the refresh_token after it's used.
setEnforceRefreshTokenRotationPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
Set condition for whether always revoke the refresh_token after it's used.
setErrorEventId(String) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration
Sets the event identifier to publish if token parameters are not compliant with the configuration.
setErrorEventId(String) - Method in class net.shibboleth.oidc.security.impl.DecryptJWE
Sets the event identifier to publish in the case of decryption errors.
setEssential(Boolean) - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
Set the flag indicating that the claim must have a value.
setEventContextLookupStrategy(Function<ProfileRequestContext, EventContext>) - Method in class net.shibboleth.oidc.profile.impl.AbstractBuildErrorResponseFromEvent
Set lookup strategy for EventContext to check.
setExistingParametersContextLookupStrategy(Function<MessageContext, SecurityParametersContext>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
Set the strategy used to look up an existing SecurityParametersContext to copy instead of actually resolving the parameters to set.
setExistingParametersContextLookupStrategy(Function<ProfileRequestContext, SecurityParametersContext>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParameters
Set the strategy used to look up an existing SecurityParametersContext to copy instead of actually resolving the parameters to set.
setExpirationTime(Instant) - Method in class net.shibboleth.oidc.metadata.MetadataManagementData
Set the expiration time of the metadata.
setExtraAudienceValidation(boolean) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AudienceClaimsValidator
Set whether to enable extra audience validation.
setFailFastInitialization(boolean) - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCEntityResolver
Sets whether problems during initialization should cause the provider to fail or go on without metadata.
setFailFastInitialization(boolean) - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver
Sets whether problems during initialization should cause the provider to fail or go on without metadata.
setFailIfResourceIsNull(boolean) - Method in class net.shibboleth.oidc.security.credential.BasicJWKCredentialFactoryBean
Should the factory throw an exeception if the resource is null?
setFetchStrategy(Function<CriteriaSet, MetadataType>) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
Set the metadata fetching strategy.
setFetchStrategy(Function<CriteriaSet, MetadataType>) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
Set the metadata fetching strategy.
setFetchStrategy(Function<CriteriaSet, MetadataType>) - Method in class net.shibboleth.oidc.metadata.cache.impl.FetchThroughMetadataCache
Set the metadata fetching strategy.
setFetchStrategy(Function<CriteriaSet, MetadataType>) - Method in class net.shibboleth.oidc.metadata.cache.impl.FetchThroughMetadataCacheBuilderSpec
Set the metadata fetching strategy.
setForceAuthn(boolean) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Set whether a fresh user presence proof should be required for this request.
setForceAuthnPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Set a condition to determine whether a fresh user presence proof should be required for this request.
setForcePKCE(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Set whether client is required to use PKCE.
setForcePKCEPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Set condition for whether client is required to use PKCE.
setForFriendlyName(String) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
Set the friendly name to log as the subject of encryption parameter resolution.
setFrontChannelLogoutSessionRequired(boolean) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Set the flag to require session id in front-channel logout request.
setFrontChannelLogoutSessionRequired(boolean) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Set the flag to require session id in front-channel logout request.
setFrontChannelSuccess(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
Set whether to consider front-channel logout propagation successful.
setFrontChannelSuccessPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
Set a condition to determine whether to consider front-channel logout propagation successful.
setGrantTypes(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Set the whitespace-delimited list of grant types.
setGrantTypes(String) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Set the whitespace-delimited list of grant types.
setGrantTypes(Collection<String>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
Set the enabled grant types.
setGrantTypesLookupStrategy(Function<ProfileRequestContext, Set<String>>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
Set a lookup strategy for the enabled grant types.
setHttpClient(HttpClient) - Method in class net.shibboleth.oidc.jwk.RemoteJwkSetCache
Set the HttpClient to use.
setHttpClientSecurityParameters(HttpClientSecurityParameters) - Method in class net.shibboleth.oidc.jwk.RemoteJwkSetCache
Set the optional client security parameters.
setHttpClientSecurityParameters(HttpClientSecurityParameters) - Method in class net.shibboleth.oidc.metadata.impl.AbstractDynamicHTTPFetchingStrategy
Set an instance of HttpClientSecurityParameters which provides various parameters to influence the security behavior of the HttpClient instance.
setHttpRequestMethod(OAuth2AuthorizationProfileConfiguration.HttpRequestMethod) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set the HTTP request method for an authentication request.
setHttpRequestMethodLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set a lookup strategy to determine the HTTP request method for an authentication request.
setHybridFlowEnabled(boolean) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2FlowAwareProfileConfiguration
Set whether implicit flow is supported by this profile.
setHybridFlowEnabledPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2FlowAwareProfileConfiguration
Set condition used to indicate whether implicit flow is supported by this profile.
setIdentifier(String) - Method in class net.shibboleth.oidc.profile.messaging.context.AbstractOIDCEntityContext
Sets the identifier of the OIDC entity e.g.
setIdentifierExtractionStrategy(Function<MetadataType, IdentifierType>) - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
Set the MetadataType to IdentifierType extraction time strategy.
setIdentifierExtractionStrategy(Function<MetadataType, IdentifierType>) - Method in class net.shibboleth.oidc.metadata.cache.impl.BaseMetadataCacheBuilderSpec
Set the identifier extraction strategy.
setIdTokenEncryptedResponseAlg(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Set the JWE alg algorithm for ID token encryption.
setIdTokenEncryptedResponseAlg(String) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Set the JWE alg algorithm for ID token encryption.
setIdTokenEncryptedResponseEnc(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Set the JWE enc algorithm for ID token encryption.
setIdTokenEncryptedResponseEnc(String) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Set the JWE enc algorithm for ID token encryption.
setIDTokenLifetime(Duration) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Set the lifetime of an id token.
setIDTokenLifetimeLookupStrategy(Function<ProfileRequestContext, Duration>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Set a lookup strategy for the ID token lifetime.
setIDTokenManipulationStrategy(BiFunction<ProfileRequestContext, Map<String, Object>, Map<String, Object>>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Set the bi-function for manipulating id_token claims.
setIDTokenManipulationStrategyLookupStrategy(Function<ProfileRequestContext, BiFunction<ProfileRequestContext, Map<String, Object>, Map<String, Object>>>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Set a lookup strategy for the bi-function for manipulating id_token claims.
setIdTokenSignedResponseAlg(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Set the JWS alg algorithm for ID token signature.
setIdTokenSignedResponseAlg(String) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Set the JWS alg algorithm for ID token signature.
setImplicitFlowEnabled(boolean) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2FlowAwareProfileConfiguration
Set whether hybrid flow is supported by this profile.
setImplicitFlowEnabledPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2FlowAwareProfileConfiguration
Set condition used to indicate whether hybrid flow is supported by this profile.
setIncludeIssuerInResponse(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set whether to include iss parameter in the authentication response.
setIncludeIssuerInResponsePredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set condition for whether to include iss parameter in the authentication response.
setInitialCleanupTaskDelay(Duration) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
Set the initial cleanup task delay.
setInitialCleanupTaskDelay(Duration) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
Set the initial cleanup task delay.
setInitiateLoginUri(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Set the URI for initiating login.
setInitiateLoginUri(String) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Set the URI for initiating login.
setIssuedClaimsValidator(ClaimsValidator) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2TokenValidatingConfiguration
Set the ClaimsValidator to apply to issued JWT-based tokens being validated by this profile.
setIssuedClaimsValidatorLookupStrategy(Function<ProfileRequestContext, ClaimsValidator>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2TokenValidatingConfiguration
Set a lookup strategy for the ClaimsValidator to apply to issued JWT-based tokens being validated by this profile.
setIssueIdTokenViaRefreshToken(boolean) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
Set whether the id_token is issued when refresh token grant is used.
setIssueIdTokenViaRefreshTokenPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
Set condition for whether the id_token is issued when refresh token grant is used.
setIssuer(String) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Set overridden issuer value.
setIssuer(String) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCDynamicRegistrationConfiguration
Set overridden issuer value.
setIssuer(String) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
Set overridden issuer value.
setIssuer(String) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCProviderInformationConfiguration
Set overridden issuer value.
setIssuer(String) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2TokenValidatingConfiguration
Set overridden issuer value.
setIssuer(String) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2PushedAuthorizationRequestConfiguration
Set overridden issuer value.
setIssuer(String) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
Set overridden issuer value.
setIssuerLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Sets lookup strategy for overridden issuer value.
setIssuerLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCDynamicRegistrationConfiguration
Sets lookup strategy for overridden issuer value.
setIssuerLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
Sets lookup strategy for overridden issuer value.
setIssuerLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCProviderInformationConfiguration
Sets lookup strategy for overridden issuer value.
setIssuerLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2TokenValidatingConfiguration
Sets lookup strategy for overridden issuer value.
setIssuerLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2PushedAuthorizationRequestConfiguration
Sets lookup strategy for overridden issuer value.
setIssuerLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
Sets lookup strategy for overridden issuer value.
setJcaAlg(String) - Method in class net.shibboleth.oidc.security.credential.BasicExpiringJWTSharedSecretCredentialFactoryBean
Set the JCA Algorithm to associate with this credential.
setJoseHeaderLookupStrategy(Function<ProfileRequestContext, JWSHeader>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AccessTokenHashValidator
Set the lookup strategy used to locate the JWS header of the id_token.
setJOSEObject(JOSEObject) - Method in class net.shibboleth.oidc.security.jose.criterion.JOSEObjectCriterion
Sets the JOSEObject which is the source of credential criteria.
setJWKSet(JWKSet) - Method in class net.shibboleth.oidc.security.jose.criterion.JWKSetCriterion
Sets the JWKSet which is the source of credentials.
setJwtDecryptionConfiguration(DecryptionConfiguration) - Method in class net.shibboleth.oidc.profile.config.JSONSecurityConfiguration
Set the configuration used to decrypt JWE tokens.
setJwtEncryptionConfiguration(EncryptionConfiguration) - Method in class net.shibboleth.oidc.profile.config.JSONSecurityConfiguration
Set the configuration used to encrypt JWE tokens.
setJwtSignatureSigningConfiguration(SignatureSigningConfiguration) - Method in class net.shibboleth.oidc.profile.config.JSONSecurityConfiguration
Set the configuration used when signing JWS tokens.
setJwtSignatureValidationConfiguration(SignatureValidationConfiguration) - Method in class net.shibboleth.oidc.profile.config.JSONSecurityConfiguration
Set the configuration used when validating JWS tokens.
setJwtTokenLookupStrategy(Function<MessageContext, SignedJWT>) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler
Set the strategy used to look up a SignedJWT.
setJwtTokenLookupStrategy(Function<MessageContext, SignedJWT>) - Method in class net.shibboleth.oidc.security.impl.JWTMessageSignatureSecurityHandler
Set the strategy used to look up a signed JWT token.
setJwtTokenLookupStrategy(Function<ProfileRequestContext, EncryptedJWT>) - Method in class net.shibboleth.oidc.security.impl.DecryptJWE
Set the strategy used to look up a encrypted JWT token.
setJwtTokenLookupStrategy(Function<ProfileRequestContext, JWT>) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration
Set the strategy used to look up a JWT.
setJwtUpdateConsumer(BiConsumer<JWT, MessageContext>) - Method in class net.shibboleth.oidc.security.impl.EncryptJWTHandler
Set the consumer used to update the MessageContext with the supplied EncryptedJWT.
setJwtUpdateConsumer(BiConsumer<JWT, MessageContext>) - Method in class net.shibboleth.oidc.security.impl.SignJWTHandler
Set the consumer used to update the MessageContext with the supplied EncryptedJWT.
setJwtUpdateStrategy(BiConsumer<ProfileRequestContext, JWT>) - Method in class net.shibboleth.oidc.security.impl.DecryptJWE
Set the strategy used to update the profile request context with the JWT produced as a result of this decryption operation.
setKEKCredentialResolver(JOSEObjectCredentialResolver) - Method in class net.shibboleth.oidc.security.jose.DecryptionParameters
Set the CredentialResolver to use when processing the EncryptedKey (the Key Encryption Key or KEK).
setKEKCredentialResolver(JOSEObjectCredentialResolver) - Method in class net.shibboleth.oidc.security.jose.impl.BasicDecryptionConfiguration
Set the CredentialResolver to use when processing the EncryptedKey (the Key Encryption Key or KEK).
setKEKCredentialResolver(CredentialResolver) - Method in class net.shibboleth.oidc.security.jose.impl.BasicEncryptionConfiguration
Set the CredentialResolver to resolve the key encryption or key wrapping key.
setKeyId(String) - Method in class net.shibboleth.oidc.security.jose.criterion.KeyIdCriterion
Set the key ID criteria.
setKeyTransportEncryptionAlgorithm(String) - Method in class net.shibboleth.oidc.security.jose.EncryptionParameters
Set the encryption algorithm URI to use when encrypting the EncryptedKey.
setKeyTransportEncryptionAlgorithmLookupStrategy(Function<OIDCClientInformation, String>) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration
Set the strategy used to look up the data encryption algorithm in the client metadata.
setKeyTransportEncryptionAlgorithms(List<String>) - Method in class net.shibboleth.oidc.security.jose.impl.BasicEncryptionConfiguration
Set the key transport encryption algorithms to use.
setKeyTransportEncryptionAlgorithmsLookupStrategy(BiFunction<CriteriaSet, Predicate<String>, List<String>>) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
Set the key transport encryption algorithms lookup strategy to use.
setKeyTransportEncryptionCredential(Credential) - Method in class net.shibboleth.oidc.security.jose.EncryptionParameters
Set the encryption credential to use when encrypting the EncryptedKey.
setKid(String) - Method in class net.shibboleth.oidc.security.credential.BasicJWKCredential
Set the kid of jwk.
setLastRefresh(Instant) - Method in interface net.shibboleth.oidc.metadata.BatchBackingStore
Set the time at which the last refresh was attempted.
setLastRefresh(Instant) - Method in class net.shibboleth.oidc.metadata.impl.DefaultBatchBackingStore
 
setLastUpdate(Instant) - Method in interface net.shibboleth.oidc.metadata.BatchBackingStore
Set the time at which this batch backing store was successfully reloaded/updated.
setLastUpdate(Instant) - Method in class net.shibboleth.oidc.metadata.impl.DefaultBatchBackingStore
 
setLastUpdateTime(Instant) - Method in class net.shibboleth.oidc.metadata.MetadataManagementData
Set the last update time of the metadata.
setLimitInitialAccessTokenToSelf(boolean) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
Set whether the initial access token audience is solely to self (i.e.
setLimitInitialAccessTokenToSelfPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
Set condition for whether initial access token audience is solely to self (i.e.
setLoadingStrategy(LoadingStrategy) - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
Set the strategy used to batch load metadata from a source.
setLoadingStrategy(LoadingStrategy) - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCacheBuilderSpec
Set the batch metadata loading strategy, applies to the BatchMetadataCache type.
setLoginHint(String) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set a fixed login_hint.
setLoginHint(String) - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
Sets the login_hint authorisation request parameter.
setLoginHintLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set the lookup strategy for setting the login_hint.
setLogName(String) - Method in class net.shibboleth.oidc.security.impl.EncryptJWTHandler
Set the friendly name to log as the subject of encryption.
setLogName(String) - Method in class net.shibboleth.oidc.security.impl.SignJWTHandler
Set the friendly name to log as the subject of signing.
setLogoutHintMatchingStrategy(BiPredicate<String, SPSession>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
Set a bi-predicate for matching logout hint to an existing session in an OIDC RP-initiated logout sequence.
setLogoutHintMatchingStrategyLookupStrategy(Function<ProfileRequestContext, BiPredicate<String, SPSession>>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
Set a lookup strategy for the bi-predicate for matching logout hint to an existing session in an OIDC RP-initiated logout sequence.
setMappedErrors(Map<String, ErrorObject>) - Method in class net.shibboleth.oidc.profile.impl.AbstractBuildErrorResponseFromEvent
Set map of eventIds to pre-configured error objects.
setMappings(Map<Principal, Collection<Principal>>) - Method in class net.shibboleth.oidc.profile.config.navigate.ProxyAwareDefaultOIDCAuthenticationContextClassRequestLookupFunction
Sets the mappings from input/proxied Principals to zero or more equivalent values to use.
setMatchOnIdentifierRequired(boolean) - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
Set if a match on identifier is required in order to return results.
setMatchRequired(boolean) - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCacheBuilderSpec
Set if a match on identifier is required in order to return results.
setMaxAge(Duration) - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
Set the max age.
setMaxAuthenticationAge(Duration) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set the max authentication age.
setMaxAuthenticationAgeLookupStrategy(Function<ProfileRequestContext, Duration>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set a lookup strategy for the max authentication age.
setMaxCacheDuration(Duration) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
Set the maximum cache duration for metadata.
setMaxCacheDuration(Duration) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
Set the maximum cache duration for metadata.
setMaxIdleEntityData(Duration) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
Set the maximum idle time for which the resolver will keep data for a given entityID, before it is removed.
setMaxIdleEntityData(Duration) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
Set the maximum idle time for which the resolver will keep data for before it is removed.
setMaxRefreshDelay(Duration) - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
Sets the maximum amount of time between refresh intervals.
setMaxRefreshDelay(Duration) - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCacheBuilderSpec
Sets the maximum amount of time between refresh intervals.
setMaxRefreshDelay(Duration) - Method in class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver
Sets the maximum amount of time between refresh intervals.
setMaxReplayCacheRecordLifetime(Duration) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierClaimsValidator
Set the maximum lifetime to be used in replay cache when 'exp' claim is exploited.
setMessageEncoder(MessageEncoder) - Method in class net.shibboleth.oidc.profile.encoding.impl.OIDCResponseEncoderFactory
Set the message encoder to be returned by this factory.
setMessageHandler(Function<MessageContext, Exception>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2InterceptorAwareProfileConfiguration
Set a handler for the message.
setMessageHandlerLookupStrategy(Function<MessageContext, Function<MessageContext, Exception>>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2InterceptorAwareProfileConfiguration
Set a lookup strategy for the handler for the message.
setMessageLifetime(Duration) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.IssuedAtClaimsValidator
Sets the amount of time for which a message is valid.
setMetadataBeforeRemovalHook(BiConsumer<List<MetadataType>, IdentifierType>) - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
Set a hook to run before a metadata cache entry is removed from the cache.
setMetadataBeforeRemovalHook(BiConsumer<List<MetadataType>, IdentifierType>) - Method in class net.shibboleth.oidc.metadata.cache.impl.BaseMetadataCacheBuilderSpec
Set a hook to run before a metadata cache entry is removed from the cache.
setMetadataContextLookupStrategy(Function<MessageContext, SAMLMetadataContext>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
Set lookup strategy for SAMLMetadataContext for input to resolution.
setMetadataExpirationTimeStrategy(Function<ExpirationTimeContext<MetadataType>, Instant>) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
Set the metadata expiration time strategy.
setMetadataExpirationTimeStrategy(Function<ExpirationTimeContext<MetadataType>, Instant>) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
Set the metadata expiration time strategy.
setMetadataFile(File) - Method in class net.shibboleth.oidc.metadata.impl.AbstractFileOIDCEntityResolver
Sets the file from which metadata is read.
setMetadataFilterStrategy(BiFunction<MetadataType, MetadataFilterContext, MetadataType>) - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
Set the metadata filtering strategy.
setMetadataFilterStrategy(BiFunction<MetadataType, MetadataFilterContext, MetadataType>) - Method in class net.shibboleth.oidc.metadata.cache.impl.BaseMetadataCacheBuilderSpec
Set the metadata filtering strategy.
setMetadataPolicy(Map<String, MetadataPolicy>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCDynamicRegistrationConfiguration
Sets the metadata policy.
setMetadataPolicyLookupStrategy(Function<ProfileRequestContext, Map<String, MetadataPolicy>>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCDynamicRegistrationConfiguration
Set a lookup strategy for the metadata policy.
setMetadataPolicyResolver(MetadataPolicyResolver) - Method in class net.shibboleth.oidc.profile.config.navigate.ResolverBasedRegistrationMetadataPolicyLookupFunction
Set the metadata policy resolver.
setMetadataValidPredicate(Predicate<MetadataType>) - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
Set the predicate which determines if a piece of metadata is valid or not.
setMetadataValidPredicate(Predicate<MetadataType>) - Method in class net.shibboleth.oidc.metadata.cache.impl.BaseMetadataCacheBuilderSpec
Set the predicate which determines if a piece of metadata is valid or not.
setMetricsBaseName(String) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
Set the base name for Metrics instrumentation.
setMinCacheDuration(Duration) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
Set the minimum cache duration for metadata.
setMinCacheDuration(Duration) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
Set the minimum cache duration for metadata.
setMinRefreshDelay(Duration) - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
Sets the minimum amount of time between refreshes.
setMinRefreshDelay(Duration) - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCacheBuilderSpec
Sets the minimum amount of time between refreshes.
setMinRefreshDelay(Duration) - Method in class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver
Sets the minimum amount of time between refreshes.
setNameFromMetadataLookupStrategy(Function<ProfileRequestContext, Set<String>>) - Method in class net.shibboleth.oidc.attribute.transcoding.AbstractOIDCAttributeTranscoder
Sets lookup strategy for obtaining tag-based naming overrides from metadata.
setNonce(Nonce) - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
Set the nonce.
setNoResultIsError(boolean) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParameters
Set whether a failure to resolve any parameters should be raised as an exception.
setNoResultIsError(boolean) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
Set whether a failure to resolve any parameters should be raised as an exception.
setOIDCMetadataContextLookupStrategy(Function<ProfileRequestContext, OIDCMetadataContext>) - Method in class net.shibboleth.oidc.profile.logic.ClientIDFromOIDCMetadataContextLookupFunction
Set the strategy used to return the OIDCMetadataContext.
setOIDCMetadataContextLookupStrategy(Function<ProfileRequestContext, OIDCProviderMetadataContext>) - Method in class net.shibboleth.oidc.profile.logic.IssuerIDFromOIDCProviderMetadataContextLookupFunction
Set the strategy used to return the OIDCProviderMetadataContext.
setOneOfValues(List<Object>) - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
Set the list of values from which the claim must be one of.
setOriginalValue(byte[]) - Method in interface net.shibboleth.oidc.metadata.BatchBackingStore
Sets the source bytes of the source before it was parsed.
setOriginalValue(byte[]) - Method in class net.shibboleth.oidc.metadata.impl.DefaultBatchBackingStore
 
setParsingStrategy(Function<byte[], List<Map<String, MetadataPolicy>>>) - Method in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyResponseHandler
Set the parsing strategy used for parsing metadata policies.
setParsingStrategy(Function<byte[], List<Map<String, MetadataPolicy>>>) - Method in class net.shibboleth.oidc.metadata.policy.impl.MetadataPolicyViaLocationFetchingStrategy
Set the parsing strategy used for parsing metadata policies.
setParsingStrategy(Function<byte[], List<MetadataType>>) - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
Set the strategy used to convert raw metadata in bytes to the given metadata type.
setParsingStrategy(Function<byte[], List<MetadataType>>) - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCacheBuilderSpec
Set he raw batch metadata to metadata type parsing strategy.
setPayloadToEncryptLookupStrategy(Function<MessageContext, Payload>) - Method in class net.shibboleth.oidc.security.impl.EncryptJWTHandler
Set the strategy used to locate the Payload to encrypt.
setPostAuthenticationFlows(Collection<String>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Set the ordered collection of post-authentication interceptor flows to enable.
setPostAuthenticationFlowsLookupStrategy(Function<ProfileRequestContext, Collection<String>>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Set a lookup strategy for the post-authentication interceptor flows to enable.
setPreferFrontChannel(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
Set whether to prefer front-channel if both are defined for the RP.
setPreferFrontChannelPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
Set a condition to determine whether to prefer front-channel if both are defined for the RP.
setProfileRequestContextLookupStrategy(Function<MessageContext, ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.navigate.MessageContextLookupFunctionAdaptor
Set the strategy used to locate the ProfileRequestContext associated with a given MessageContext.
setProhibitedClaims(Collection<String>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ProhibitedClaimsValidator
Set the prohibited claims.
setPrompt(Prompt) - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
Set the prompt.
setProviderInformation(OIDCProviderMetadata) - Method in class net.shibboleth.oidc.metadata.context.OIDCProviderMetadataContext
Set the provider information.
setProviderMetadataAlgorithmLookupStrategy(Function<OIDCProviderMetadata, List<String>>) - Method in class net.shibboleth.oidc.security.jose.impl.RelyingPartySigningParametersResolver
Set the strategy used to locate the supported signing algorithms from the OP's metadata for this resolver instance.
setProviderMetadataContextLookupStrategy(Function<MessageContext, OIDCProviderMetadataContext>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
Set lookup strategy for OIDCProviderMetadataContext for input to resolution.
setProviderMetadataContextLookupStrategy(Function<ProfileRequestContext, OIDCProviderMetadataContext>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
Set lookup strategy for OIDCProviderMetadataContext for input to resolution.
setProviderMetadataContextLookupStrategy(Function<ProfileRequestContext, OIDCProviderMetadataContext>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParameters
Set lookup strategy for OIDCProviderMetadataContext for input to resolution.
setProviderMetadataLookupStrategy(Function<MessageContext, OIDCProviderMetadata>) - Method in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler
Set the lookup strategy to locate the OpenID providers metadata.
setProviderSupportsClaimsParameter(boolean) - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
Sets the support for the claims authorisation request parameter.
setProxiedAuthnInstant(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Sets whether authentication results produced by use of this profile should carry the proxied assertion's auth_time from the id_token, rather than the current time.
setProxyCount(Integer) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Sets the maximum number of times an assertion may be proxied outbound and/or the maximum number of hops between the relying party and a proxied authentication authority inbound.
setProxyCountLookupStrategy(Function<ProfileRequestContext, Integer>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Set a lookup strategy for the maximum number of times an assertion may be proxied outbound and/or the maximum number of hops between the relying party and a proxied authentication authority inbound.
setRedirectURI(URI) - Method in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
Set the redirect_uri.
setRedirectUriOverride(String) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set the override redirect_uri.
setRedirectUriOverrideLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set the redirect_uri lookup strategy used to locate an overridden redirect.
setReferenceURI(URI) - Method in class net.shibboleth.oidc.security.credential.BasicJWKReferenceCredential
Deprecated, for removal: This API element is subject to removal in a future version.
setRefreshDelayFactor(Float) - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
Sets the delay factor used to compute the next refresh time.
setRefreshDelayFactor(Float) - Method in class net.shibboleth.oidc.metadata.cache.impl.BaseMetadataCacheBuilderSpec
Sets the delay factor used to compute the next refresh time.
setRefreshTokenChainLifetime(Duration) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Set the lifetime of refresh token chain.
setRefreshTokenChainLifetimeLookupStrategy(Function<ProfileRequestContext, Duration>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Set a lookup strategy for the refresh token chain lifetime.
setRefreshTokenClaimsSetManipulationStrategy(BiFunction<ProfileRequestContext, Map<String, Object>, Map<String, Object>>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
Set the bi-function for manipulating refresh token claims set.
setRefreshTokenClaimsSetManipulationStrategyLookupStrategy(Function<ProfileRequestContext, BiFunction<ProfileRequestContext, Map<String, Object>, Map<String, Object>>>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenConfiguration
Set a lookup strategy for the bi-function for manipulating refresh token claims set.
setRefreshTokensEnabled(boolean) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2FlowAwareProfileConfiguration
Set whether refresh tokens are supported by this profile.
setRefreshTokensEnabledPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2FlowAwareProfileConfiguration
Set condition used to indicate whether refresh tokens are supported by this profile.
setRefreshTokenTimeout(Duration) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Set the timeout of refresh token.
setRefreshTokenTimeoutLookupStrategy(Function<ProfileRequestContext, Duration>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Set a lookup strategy for the refresh token timeout.
setRefreshTokenType(String) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Set refresh token type.
setRefreshTokenTypeLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Set lookup strategy for token token type.
setRefreshTriggerTime(Instant) - Method in class net.shibboleth.oidc.metadata.MetadataManagementData
Set the refresh trigger time of the metadata.
setRegexp(String) - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
Set the regular expression that the claim value must meet.
setRegistrationValidityPeriod(Duration) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCDynamicRegistrationConfiguration
Sets the registration validity period.
setRegistrationValidityPeriodLookupStrategy(Function<ProfileRequestContext, Duration>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCDynamicRegistrationConfiguration
Set a lookup strategy for the registration validity period.
setRelyingPartyContextLookupStrategy(Function<MessageContext, RelyingPartyContext>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
Set lookup strategy for relying party context.
setRelyingPartyContextLookupStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.oidc.profile.impl.FormOutboundKeySetResponseMessage
Set the strategy used to locate the RelyingPartyContext associated with a given ProfileRequestContext.
setRelyingPartyContextLookupStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTDecryptionParameters
Set lookup strategy for relying party context.
setRelyingPartyContextLookupStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
Set lookup strategy for relying party context.
setRelyingPartyContextLookupStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler
Set lookup strategy for relying party context.
setRemoveIdleEntityData(boolean) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
Set the flag indicating whether idle entity data should be removed.
setRemoveIdleEntityData(boolean) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCacheBuilderSpec
Set the flag indicating whether idle entity data should be removed.
setReplayCache(ReplayCache) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierClaimsValidator
Set the replay cache instance to use.
setReplayCacheKeyCalculationStrategy(Function<String, String>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierClaimsValidator
Set the function to calculate they key used with ReplayCache.
setReplayCacheRecordLifetime(Duration) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierClaimsValidator
Set the static lifetime to be used in replay cache if claims set doesn't contain expiration value.
setRequested(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationTimeClaimsValidator
Deprecated, for removal: This API element is subject to removal in a future version.
use the activation condition in the base class instead.
setRequestedClaims(OIDCClaimsRequest) - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
Set any individual requested claims.
setRequestedEssentialAcrsClaimLookupStrategy(BiFunction<ProfileRequestContext, JWTClaimsSet, List<String>>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ACRClaimsValidator
Set the strategy to locate the requested ACR claim values, if any.
setRequestObject(JWT) - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
Set the request object.
setRequestObjectClaimsSet(ClaimsSet) - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
Set the request object claims set.
setRequestObjectEncryptionAlg(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Set the JWE alg algorithm for request object encryption.
setRequestObjectEncryptionAlg(String) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Set the JWE alg algorithm for request object encryption.
setRequestObjectEncryptionEnc(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Set the JWE enc algorithm for request object encryption.
setRequestObjectEncryptionEnc(String) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Set the JWE enc algorithm for request object encryption.
setRequestObjectSigningAlg(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Set the JWS alg algorithm for request object signature.
setRequestObjectSigningAlg(String) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Set the JWS alg algorithm for request object signature.
setRequestURI(URI) - Method in class net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest
Set the URI to fetch the request object from.
setRequestUriClaimsSetManipulationStrategy(BiFunction<ProfileRequestContext, Map<String, Object>, Map<String, Object>>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2PushedAuthorizationRequestConfiguration
Set the bi-function for manipulating request URI claims set.
setRequestUriClaimsSetManipulationStrategyLookupStrategy(Function<ProfileRequestContext, BiFunction<ProfileRequestContext, Map<String, Object>, Map<String, Object>>>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2PushedAuthorizationRequestConfiguration
Set a lookup strategy for the bi-function for manipulating request URI claims set.
setRequestUriLifetime(Duration) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2PushedAuthorizationRequestConfiguration
Set the lifetime of an request URI.
setRequestUriLifetimeLookupStrategy(Function<ProfileRequestContext, Duration>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2PushedAuthorizationRequestConfiguration
Set a lookup strategy for the request URI lifetime.
setRequestUriType(String) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2PushedAuthorizationRequestConfiguration
Set request URI type.
setRequestUriTypeLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2PushedAuthorizationRequestConfiguration
Set lookup strategy for request URI type.
setRequireAll(boolean) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ChainingJWTClaimsValidator
Set whether to require all validators to be successful.
setRequireAuthenticationRequest(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set whether client is required to use OIDC authentication request vs plain OAuth2 authorization request.
setRequireAuthenticationRequestPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set condition for whether client is required to use OIDC authentication request vs plain OAuth2 authorization request.
setRequireAuthenticationRequestPredicateLookupStrategy(Function<ProfileRequestContext, Predicate<ProfileRequestContext>>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set the lookup strategy to determine whether client is required to use OIDC authentication request vs plain OAuth2 authorization request.
setRequireAuthTime(boolean) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Set the flag to require authentication time.
setRequireAuthTime(boolean) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Set the flag to require authentication time.
setRequiredClaims(Collection<String>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.RequiredClaimsValidator
Set the required claims.
setRequireDpopJkt(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set whether client is required to include dpop_jkt in authorization request.
setRequireDpopJktPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set condition for whether client is required to include dpop_jkt in authorization request.
setRequireDpopProof(boolean) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Set whether client is required to include DPoP proof in request.
setRequireDpopProofPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Set condition for whether client is required to include DPoP proof in request.
setRequiredRule(boolean) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.IssuedAtClaimsValidator
Sets whether this rule is required to be met.
setRequireIdTokenHint(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
Set whether to to require the use of id_token_hint in an OIDC RP-initiated logout sequence.
setRequireIdTokenHintPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
Set a condition to determine whether to to require the use of id_token_hint in an OIDC RP-initiated logout sequence.
setRequirePushedAuthorizationRequest(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set whether client is required to use pushed authorization request.
setRequirePushedAuthorizationRequestPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set condition for whether client is required to use pushed authorization request.
setRequireValidMetadata(boolean) - Method in class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor.SkeletonEchoingRoleDescriptorResolver
setResolveAttributes(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Set whether attributes should be resolved during the profile.
setResolveAttributes(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCUserInfoConfiguration
Set whether attributes should be resolved during the profile.
setResolveAttributes(boolean) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
Set whether attributes should be resolved during the profile.
setResolveAttributesPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Set a condition to determine whether attributes should be resolved during the profile.
setResolveAttributesPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCUserInfoConfiguration
Set a condition to determine whether attributes should be resolved during the profile.
setResolveAttributesPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenAudienceConfiguration
Set a condition to determine whether attributes should be resolved during the profile.
setResolvers(List<? extends ClientInformationResolver>) - Method in class net.shibboleth.oidc.metadata.impl.ChainingClientInformationResolver
Set the registered client information resolvers.
setResolvers(List<? extends ProviderMetadataResolver>) - Method in class net.shibboleth.oidc.metadata.impl.ChainingProviderMetadataResolver
Set the registered provider metadata resolvers.
setResource(Resource) - Method in class net.shibboleth.oidc.metadata.impl.PropertiesClientSecretValueResolver
Set the properties resource containing client secret values.
setResource(Resource) - Method in class net.shibboleth.oidc.security.credential.BasicJWKCredentialFactoryBean
Set the resource containing the private key.
setResponderIdLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationAudienceClaimsValidator
Set the lookup function for the responder identifier.
setResponseMode(ResponseMode) - Method in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
Set the response mode to be used with the ongoing authentication request.
setResponseMode(String) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set the response_mode to use for authorization requests.
setResponseModeLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set the lookup strategy to determine the response_mode for authorization requests.
setResponseModes(Collection<String>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set the set of response modes that are allowed to be used in authorization request.
setResponseModesLookupStrategy(Function<ProfileRequestContext, Set<String>>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set a lookup strategy for the set of response modes that are allowed to be used in authorization request.
setResponseType(ResponseType) - Method in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
Set the response type.
setResponseType(String) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set the response_type to use for authentication requests.
setResponseTypeLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set the lookup strategy to determine the response_type for authentication requests.
setResponseTypes(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Set the whitespace-delimited list of response types.
setResponseTypes(String) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Set the whitespace-delimited list of response types.
setRetrieveUserInfoEndpointClaims(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set whether to make a request to the UserInfo Endpoint to obtain authenticated End-User claims.
setRetrieveUserInfoEndpointClaims(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set condition for whether to make a request to the UserInfo Endpoint to obtain authenticated End-User claims.
setRevocationCache(RevocationCache) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierRevocationValidator
Set the revocation cache instance to use.
setRevocationLifetime(Duration) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenRevocationConfiguration
Set the lifetime of revocation.
setRevocationLifetimeLookupStrategy(Function<ProfileRequestContext, Duration>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenRevocationConfiguration
Set a lookup strategy for the revocation lifetime.
setRevocationMethod(OAuth2TokenRevocationConfiguration.OAuth2TokenRevocationMethod) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenRevocationConfiguration
Set which revocation method should be used when revoking a token.
setRevocationMethodLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2TokenRevocationConfiguration
Set strategy for looking up which revocation method should be used when revoking a token.
setRevokeTokens(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
Set whether to revoke the tokens related to the session to be logged out.
setRevokeTokensPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration
Set a condition to determine whether to revoke the tokens related to the session to be logged out.
setSatisfyAnyPredicates(boolean) - Method in class net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver
Set the flag indicating whether resolved credentials may satisfy any predicates (i.e.
setScopes(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Set the whitespace-delimited list of scopes.
setScopes(String) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Set the whitespace-delimited list of scopes.
setScopes(Set<String>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set the scopes to use for authentication requests.
setScopesLookupStrategy(Function<ProfileRequestContext, Set<String>>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set the lookup strategy to determine the scopes to use for authentication requests.
setSecret(Secret) - Method in class net.shibboleth.oidc.security.credential.BasicNimbusSecretCredential
Deprecated, for removal: This API element is subject to removal in a future version.
setSecret(String) - Method in class net.shibboleth.oidc.security.credential.BasicClientSecretCredentialFactoryBean
Set the secret to use.
setSecret(String) - Method in class net.shibboleth.oidc.security.credential.BasicExpiringJWTSharedSecretCredentialFactoryBean
Set the secret to use.
setSecretExpirationPeriod(Duration) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCDynamicRegistrationConfiguration
Sets the client secret expiration period.
setSecretExpirationPeriodLookupStrategy(Function<ProfileRequestContext, Duration>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCDynamicRegistrationConfiguration
Set a lookup strategy for the client secret expiration period.
setSectorIdentifierUri(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Set the sector identifier URI.
setSectorIdentifierUri(String) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Set the sector identifier URI.
setSecurityParametersContextLookupStrategy(Function<MessageContext, SecurityParametersContext>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
Set the strategy used to look up the SecurityParametersContext to set the parameters for.
setSecurityParametersContextLookupStrategy(Function<MessageContext, SecurityParametersContext>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureValidationParametersHandler
Set the strategy used to look up the SecurityParametersContext to set the parameters for.
setSecurityParametersContextLookupStrategy(Function<MessageContext, SecurityParametersContext>) - Method in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler
Set the strategy used to look up the SecurityParametersContext to set the parameters for.
setSecurityParametersContextLookupStrategy(Function<ProfileRequestContext, SecurityParametersContext>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTDecryptionParameters
Set the strategy used to look up the SecurityParametersContext to set the parameters for.
setSecurityParametersContextLookupStrategy(Function<ProfileRequestContext, SecurityParametersContext>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTEncryptionParameters
Set the lookup strategy to locate the security parameters context.
setSecurityParametersContextLookupStrategy(Function<ProfileRequestContext, SecurityParametersContext>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParameters
Set the strategy used to look up the SecurityParametersContext to set the parameters for.
setSecurityParametersContextLookupStrategy(Function<ProfileRequestContext, SecurityParametersContext>) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureValidationParameters
Set the strategy used to look up the SecurityParametersContext to set the parameters for.
setSecurityParametersContextLookupStrategy(Function<ProfileRequestContext, SecurityParametersContext>) - Method in class net.shibboleth.oidc.security.impl.DecryptJWE
Set the strategy used to locate the SecurityParametersContext associated with a given ProfileRequestContext.
setSecurityParametersLookupStrategy(Function<MessageContext, SecurityParametersContext>) - Method in class net.shibboleth.oidc.security.impl.EncryptJWTHandler
Set the strategy used to locate the SecurityParametersContext to use.
setSecurityParametersLookupStrategy(Function<MessageContext, SecurityParametersContext>) - Method in class net.shibboleth.oidc.security.impl.SignJWTHandler
Set the strategy used to locate the SecurityParametersContext to use.
setSignatureAlgorithm(String) - Method in class net.shibboleth.oidc.security.jose.SignatureSigningParameters
Set the signature algorithm URI to use when signing.
setSignatureAlgorithmLookupStrategy(Function<OIDCClientInformation, String>) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler
Set the strategy used to look up the signature algorithm in the client metadata.
setSignatureAlgorithms(List<String>) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningConfiguration
Set the signature algorithms to use when signing.
setSignatureSigningParameters(SignatureSigningParameters) - Method in class net.shibboleth.oidc.security.jose.context.SecurityParametersContext
Set the parameters to use for signature signing operations.
setSignatureSigningParametersResolver(SignatureSigningParametersResolver) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParameters
Set the resolver to use for the parameters to store into the context.
setSignatureSigningParametersResolver(SignatureSigningParametersResolver) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureSigningParametersHandler
Set the resolver to use for the parameters to store into the context.
setSignatureTrustEngine(TrustEngine<SignedJWT>) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureValidationConfiguration
Set the signature trust engine to use.
setSignatureTrustEngine(TrustEngine<SignedJWT>) - Method in class net.shibboleth.oidc.security.jose.SignatureValidationParameters
Set the signature trust engine to use.
setSignatureValidationParameters(SignatureValidationParameters) - Method in class net.shibboleth.oidc.security.jose.context.SecurityParametersContext
Set the parameters to use for signature validation operations.
setSignatureValidationParametersResolver(SignatureValidationParametersResolver) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureValidationParameters
Set the resolver to use for the parameters to store into the context.
setSignatureValidationParametersResolver(SignatureValidationParametersResolver) - Method in class net.shibboleth.oidc.profile.impl.PopulateJWTSignatureValidationParametersHandler
Set the resolver to use for the parameters to store into the context.
setSigningCredential(Credential) - Method in class net.shibboleth.oidc.security.jose.SignatureSigningParameters
Set the signing credential to use when signing.
setSigningCredentials(List<Credential>) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningConfiguration
Set the signing credentials to use when signing.
setSignRequestObject(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set whether the RequestObject should be signed.
setSignRequestObjectPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set the predicate to determine if the RequestObject should be signed.
setSoftwareId(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Set the software identifier.
setSoftwareId(String) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Set the software identifier.
setSoftwareVersion(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Set the software version.
setSoftwareVersion(String) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Set the software version.
setSortKey(int) - Method in class net.shibboleth.oidc.metadata.ProviderMetadataProviderContainer
Set the sort key.
setSortKey(int) - Method in class net.shibboleth.oidc.metadata.RelyingPartyClientInformationProvider
Set the sort key.
setSourceId(String) - Method in class net.shibboleth.oidc.metadata.filter.MetadataSource
Set identifier of the metadata source.
setSourceMetadataExpiryStrategy(Function<byte[], Instant>) - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
Set a strategy to find the metadata expiry date from a source metadata document as bytes.
setSourceMetadataExpiryStrategy(Function<byte[], Instant>) - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCacheBuilderSpec
Set a strategy to find the metadata expiry date from a source metadata document as bytes.
setSourceMetadataValidPredicate(Predicate<byte[]>) - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
Set the predicate which determines if the source metadata is valid or not.
setSourceMetadataValidPredicate(Predicate<byte[]>) - Method in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCacheBuilderSpec
Set the predicate which determines if the source metadata is valid or not.
setState(State) - Method in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
Set the state.
setStorage(StorageService) - Method in class net.shibboleth.oidc.jwk.RemoteJwkSetCache
Set the backing store for the remote JWK set contents.
setStorageService(StorageService) - Method in class net.shibboleth.oidc.metadata.impl.BaseStorageServiceClientInformationComponent
Set the StorageService back-end to use.
setStrictScopeValidation(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Set whether scope validation is strict, i.e.
setStrictScopeValidationPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Set a condition to determine whether scope validation is strict, i.e.
setSubsetOfValues(List<Object>) - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
Set the list of value(s) from which the claim must be subset of.
setSupersetOfValues(List<Object>) - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
Set the list of value(s) from which the claim must be superset of.
setSupportedContentTypes(List<String>) - Method in class net.shibboleth.oidc.metadata.impl.AbstractDynamicHTTPFetchingStrategy
Set the list of supported MIME types for use in Accept request header and validation of response Content-Type header.
setSymmetricKeyAlgorithm(String) - Method in class net.shibboleth.oidc.security.credential.BasicJWKCredentialFactoryBean
Set the JCA algorithm name to use if the key to be converted is a symmetric key.
setTlsServerValidationSufficient(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set whether TLS server validation alone is sufficient to verify the id_token (true), or whether the id_token's signature should be validated (false).
setTlsServerValidationSufficient(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set the predicate to determine whether TLS server validation alone is sufficient to verify the id_token (true), or whether the id_token's signature should be validated (false).
setTokenEndpointAuthMethod(String) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Set the enabled token endpoint authentication method to use with an upstream OpenID Provider.
setTokenEndpointAuthMethod(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Set the token endpoint authentication method.
setTokenEndpointAuthMethod(String) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Set the token endpoint authentication method.
setTokenEndpointAuthMethodLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Set a lookup strategy to find the enabled token endpoint authentication method to use with an upstream OpenID Provider.
setTokenEndpointAuthMethods(Collection<String>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Set the enabled token endpoint authentication methods.
setTokenEndpointAuthMethodsLookupStrategy(Function<ProfileRequestContext, Set<String>>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Set a lookup strategy for the enabled token endpoint authentication methods.
setTokenEndpointAuthSigningAlg(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Set the JWS alg algorithm for token endpoint authentication signature.
setTokenEndpointAuthSigningAlg(String) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Set the JWS alg algorithm for token endpoint authentication signature.
setTrusted(boolean) - Method in class net.shibboleth.oidc.metadata.filter.MetadataSource
Set whether the metadata source is trusted.
setTypeHeader(String) - Method in class net.shibboleth.oidc.security.impl.SignJWTHandler
Sets the value to be inserted as a "typ" header for the JWS.
setTypeHeaderLookupStrategy(Function<MessageContext, String>) - Method in class net.shibboleth.oidc.security.impl.SignJWTHandler
Sets the strategy used to locate the optional "typ" header to insert while signing
setUnregisteredClientPolicy(Map<String, UnregisteredClientPolicy>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Sets the policy for validating unregistered clients.
setUnregisteredClientPolicyLookupStrategy(Function<ProfileRequestContext, Map<String, UnregisteredClientPolicy>>) - Method in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Set a lookup strategy for the policy for validating unregistered clients.
setUseActiveProfileOnly(boolean) - Method in class net.shibboleth.oidc.profile.config.navigate.RevocationLifetimeLookupFunction
Set the flag for using active profile only.
setUseRequestObject(boolean) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set whether the authentication request parameters should be passed in a single, self contained, JWT.
setUseRequestObjectPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set condition for whether the authentication request parameters should be passed in a single, self contained, JWT.
setUserInfoEncryptedResponseAlg(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Set the JWE alg algorithm for UserInfo response encryption.
setUserInfoEncryptedResponseAlg(String) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Set the JWE alg algorithm for UserInfo response encryption.
setUserInfoEncryptedResponseEnc(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Set the JWE enc algorithm for UserInfo response encryption.
setUserInfoEncryptedResponseEnc(String) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Set the JWE enc algorithm for UserInfo response encryption.
setUserInfoHttpRequestMethod(OAuth2AuthorizationProfileConfiguration.HttpRequestMethod) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set the HTTP request method for an UserInfo request.
setUserInfoHttpRequestMethodLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Set a lookup strategy to determine the HTTP request method for an UserInfo request.
setUserInfoSignedResponseAlg(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Set the JWS alg algorithm for UserInfo response signature.
setUserInfoSignedResponseAlg(String) - Method in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Set the JWS alg algorithm for UserInfo response signature.
setValidator(BiFunction<JWTClaimsSet, ProfileRequestContext, JWTValidationException>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.FunctionClaimsValidator
Set the function to run.
setValidator(Predicate<MetadataPolicy>) - Method in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyOperator
Set the metadata policy validator.
setValue(Object) - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
Set the (forced) value for the claim.
setValue(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.AbstractMetadataValueSAMLObject
Set the value for this metadata object.
setValue(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.JwksUriImpl
Set the value for this metadata object.
setValue(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.PostLogoutRedirectUriImpl
Set the value for this metadata object.
setValue(String) - Method in class net.shibboleth.oidc.saml.xmlobject.impl.RequestUriImpl
Set the value for this metadata object.
setValue(String) - Method in interface net.shibboleth.oidc.saml.xmlobject.MetadataValueSAMLObject
Deprecated, for removal: This API element is subject to removal in a future version. 
setValueOperator(BiFunction<Object, MetadataPolicy, Object>) - Method in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyOperator
Set the metadata policy operator.
setValueToMatchLookupStrategy(BiFunction<ProfileRequestContext, JWTClaimsSet, String>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ExactMatchClaimsValidator
Set the value to match lookup strategy.
setVelocityEngine(VelocityEngine) - Method in class net.shibboleth.oidc.profile.encoding.impl.HTTPPostAuthnRequestEncoder
Set the VelocityEngine instance.
setVelocityTemplateId(String) - Method in class net.shibboleth.oidc.profile.encoding.impl.HTTPPostAuthnRequestEncoder
Set the Velocity template id.
setWellKnownLocationCompositionStrategy(BiFunction<Issuer, String, String>) - Method in class net.shibboleth.oidc.metadata.impl.HTTPProviderConfigurationFetchingStrategy
Set the well-known location composition strategy.
setWellKnownPath(String) - Method in class net.shibboleth.oidc.metadata.impl.HTTPProviderConfigurationFetchingStrategy
Set the well-known URL path component.
shouldAttemptRefresh(MetadataManagementData<IdentifierType>) - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
Determine if the metadata should be refreshed based on stored refresh trigger time.
shouldGenerateId() - Method in class net.shibboleth.oidc.profile.spring.relyingparty.metadata.filter.impl.ClientInformationParser
sign(JWTClaimsSet, String) - Method in class net.shibboleth.oidc.security.impl.JWSTokenSigner
Sign the given JWT claims set using the signing parameters.
SIGNATURE_RSASSA_PSS - Static variable in class net.shibboleth.oidc.jwa.support.JCAConstantExtension
RSASSA-PSS which uses SHA256/384/512 and MGF1 functions.
signatureAlgorithmLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler
A lookup function for the signature algorithm in the client metadata.
signatureAlgorithmLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.ClientInformationJWTTrustEngine
A lookup function for the signature algorithm in the client metadata.
signatureAlgorithmLookupStrategy - Variable in class net.shibboleth.oidc.security.jose.impl.ClientInformationSignatureSigningParametersResolver
A lookup function for the signature algorithm.
signatureAlgorithms - Variable in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningConfiguration
Signature method algorithm URIs.
signatureAlgorithmURI - Variable in class net.shibboleth.oidc.security.jose.SignatureSigningParameters
The signature algorithm URI.
SignatureConstants - Class in net.shibboleth.oidc.jwa.support
Algorithm Header Parameter Values for JWS.
SignatureConstants() - Constructor for class net.shibboleth.oidc.jwa.support.SignatureConstants
Constructor.
SignatureES256 - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
Algorithm descriptor for signature algorithm: ES256.
SignatureES256() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureES256
 
SignatureES384 - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
Algorithm descriptor for signature algorithm: ES384.
SignatureES384() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureES384
 
SignatureES512 - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
Algorithm descriptor for signature algorithm: ES512.
SignatureES512() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureES512
 
SignatureException - Exception in net.shibboleth.oidc.security.jose
Exception thrown when an error occurs during JWS signature operations.
SignatureException() - Constructor for exception net.shibboleth.oidc.security.jose.SignatureException
Constructor.
SignatureException(Exception) - Constructor for exception net.shibboleth.oidc.security.jose.SignatureException
Constructor.
SignatureException(String) - Constructor for exception net.shibboleth.oidc.security.jose.SignatureException
Constructor.
SignatureException(String, Exception) - Constructor for exception net.shibboleth.oidc.security.jose.SignatureException
Constructor.
SignatureHS256 - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
Algorithm descriptor for HMAC algorithm: HS256.
SignatureHS256() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureHS256
 
SignatureHS384 - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
Algorithm descriptor for HMAC algorithm: HS384.
SignatureHS384() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureHS384
 
SignatureHS512 - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
Algorithm descriptor for HMAC algorithm: HS512.
SignatureHS512() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureHS512
 
SignaturePS256 - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
Algorithm descriptor for signature algorithm: PS256.
SignaturePS256() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.SignaturePS256
 
SignaturePS384 - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
Algorithm descriptor for signature algorithm: PS384.
SignaturePS384() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.SignaturePS384
 
SignaturePS512 - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
Algorithm descriptor for signature algorithm: PS512.
SignaturePS512() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.SignaturePS512
 
SignatureRS256 - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
Algorithm descriptor for signature algorithm: RS256.
SignatureRS256() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureRS256
 
SignatureRS384 - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
Algorithm descriptor for signature algorithm: RS384.
SignatureRS384() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureRS384
 
SignatureRS512 - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
Algorithm descriptor for signature algorithm: RS512.
SignatureRS512() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.SignatureRS512
 
SignatureSigningConfiguration - Interface in net.shibboleth.oidc.security.jose
The configuration information to use when generating a signed JWT.
SignatureSigningConfigurationCriterion - Class in net.shibboleth.oidc.security.jose.criterion
Criterion which holds one or more instances of SignatureSigningConfigurationCriterion.
SignatureSigningConfigurationCriterion(List<SignatureSigningConfiguration>) - Constructor for class net.shibboleth.oidc.security.jose.criterion.SignatureSigningConfigurationCriterion
Constructor.
SignatureSigningConfigurationCriterion(SignatureSigningConfiguration...) - Constructor for class net.shibboleth.oidc.security.jose.criterion.SignatureSigningConfigurationCriterion
Constructor.
signatureSigningParameters - Variable in class net.shibboleth.oidc.security.jose.context.SecurityParametersContext
Signature signing parameters.
SignatureSigningParameters - Class in net.shibboleth.oidc.security.jose
The effective parameters to use when generating a JWS.
SignatureSigningParameters() - Constructor for class net.shibboleth.oidc.security.jose.SignatureSigningParameters
 
SignatureSigningParametersResolver - Interface in net.shibboleth.oidc.security.jose
An interface for components which resolve SignatureSigningParameters based on a CriteriaSet.
signatureTrustEngine - Variable in class net.shibboleth.oidc.security.jose.impl.BasicSignatureValidationConfiguration
The signature trust engine to use.
signatureTrustEngine - Variable in class net.shibboleth.oidc.security.jose.SignatureValidationParameters
The signature trust engine to use.
SignatureValidationConfiguration - Interface in net.shibboleth.oidc.security.jose
The configuration information to use when validating a JWS.
SignatureValidationConfigurationCriterion - Class in net.shibboleth.oidc.security.jose.criterion
Criterion which holds one or more instances of SignatureValidationConfiguration for signed JWTs.
SignatureValidationConfigurationCriterion(List<SignatureValidationConfiguration>) - Constructor for class net.shibboleth.oidc.security.jose.criterion.SignatureValidationConfigurationCriterion
Constructor.
SignatureValidationConfigurationCriterion(SignatureValidationConfiguration...) - Constructor for class net.shibboleth.oidc.security.jose.criterion.SignatureValidationConfigurationCriterion
Constructor.
signatureValidationParameters - Variable in class net.shibboleth.oidc.security.jose.context.SecurityParametersContext
Signature validation parameters.
SignatureValidationParameters - Class in net.shibboleth.oidc.security.jose
The effective parameters to use when validating a JWS.
SignatureValidationParameters() - Constructor for class net.shibboleth.oidc.security.jose.SignatureValidationParameters
 
SignatureValidationParametersCriterion - Class in net.shibboleth.oidc.security.jose.criterion
Criterion which holds an instance of SignatureValidationParameters.
SignatureValidationParametersCriterion(SignatureValidationParameters) - Constructor for class net.shibboleth.oidc.security.jose.criterion.SignatureValidationParametersCriterion
Constructor.
SignatureValidationParametersResolver - Interface in net.shibboleth.oidc.security.jose
An interface for components which resolve SignatureValidationParameters based on a CriteriaSet.
signedJwt - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler
The extracted signed JWT that is to be validated.
signedJwt - Variable in class net.shibboleth.oidc.security.impl.JWTMessageSignatureSecurityHandler
The extracted signed JWT that is to be validated.
signer - Variable in class net.shibboleth.oidc.security.impl.SignJWTHandler
The signing engine used to sign the JWT claims set.
signingCredential - Variable in class net.shibboleth.oidc.security.jose.SignatureSigningParameters
The signing credential.
signingCredentials - Variable in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningConfiguration
Signing credentials.
SignJWTHandler - Class in net.shibboleth.oidc.security.impl
Message handler that signs a JWT and sets it back to the message context via an update consumer.
SignJWTHandler() - Constructor for class net.shibboleth.oidc.security.impl.SignJWTHandler
Constructor.
signRequestObjectPredicate - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Predicate used to determine if the generated request object should be signed.
SignRequestObjectPredicate - Class in net.shibboleth.oidc.profile.config.logic
A predicate that determines if the RequestObject JWT should be signed based on the profile configuration.
SignRequestObjectPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.SignRequestObjectPredicate
 
SimpleNimbusResponseEncoder - Class in net.shibboleth.oidc.profile.encoding.impl
A message encodes that encodes the Nimbus a Response in the message context inside the attached HttpServletResponse by calling its Response.toHTTPResponse() method.
SimpleNimbusResponseEncoder() - Constructor for class net.shibboleth.oidc.profile.encoding.impl.SimpleNimbusResponseEncoder
Constructor.
SkeletonEchoingRoleDescriptorResolver() - Constructor for class net.shibboleth.oidc.metadata.impl.ClientInformationNodeProcessor.SkeletonEchoingRoleDescriptorResolver
 
SOFTWARE_ID_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Attribute local name.
SOFTWARE_VERSION_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Attribute local name.
softwareId - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Software identifier for this entity.
softwareVersion - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Software version for this entity.
sortKey - Variable in class net.shibboleth.oidc.metadata.ProviderMetadataProviderContainer
The key by which we sort the provider.
sortKey - Variable in class net.shibboleth.oidc.metadata.RelyingPartyClientInformationProvider
The key by which we sort the provider.
sortKeyValue - Static variable in class net.shibboleth.oidc.metadata.ProviderMetadataProviderContainer
If we autogenerate a sort key it comes from this count.
sortKeyValue - Static variable in class net.shibboleth.oidc.metadata.RelyingPartyClientInformationProvider
If we autogenerate a sort key it comes from this count.
sourceId - Variable in class net.shibboleth.oidc.metadata.filter.MetadataSource
An identifier for the source of the metadata, typically the resolver ID.
sourceMetadataExpiryStrategy - Variable in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
Determine the expiration time of the source batch loaded metadata.
sourceMetadataExpiryStrategy - Variable in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCacheBuilderSpec
Determine the expiration time of the source batch loaded metadata.
sourceMetadataValidPredicate - Variable in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCache
Is the raw metadata bytes from the source valid?
sourceMetadataValidPredicate - Variable in class net.shibboleth.oidc.metadata.cache.impl.BatchMetadataCacheBuilderSpec
Is the raw metadata bytes from the source valid?
state - Variable in class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest
The state.
stmpLock - Variable in class net.shibboleth.oidc.metadata.MetadataManagementData
Read-write stamped lock which governs access to the metadata's backing store data.
storage - Variable in class net.shibboleth.oidc.jwk.RemoteJwkSetCache
Backing storage for the remote JWK set contents.
storageService - Variable in class net.shibboleth.oidc.metadata.impl.BaseStorageServiceClientInformationComponent
The StorageService back-end to use.
StorageServiceClientInformationManager - Class in net.shibboleth.oidc.metadata.impl
A ClientInformationManager exploiting StorageService for storing the data.
StorageServiceClientInformationManager() - Constructor for class net.shibboleth.oidc.metadata.impl.StorageServiceClientInformationManager
 
StorageServiceClientInformationResolver - Class in net.shibboleth.oidc.metadata.impl
A ClientInformationResolver exploiting StorageService for fetching the stored data.
StorageServiceClientInformationResolver() - Constructor for class net.shibboleth.oidc.metadata.impl.StorageServiceClientInformationResolver
 
storeClientInformation(OIDCClientInformation, Instant) - Method in interface net.shibboleth.oidc.metadata.ClientInformationManager
Deprecated, for removal: This API element is subject to removal in a future version. 
storeClientInformation(OIDCClientInformation, Instant) - Method in class net.shibboleth.oidc.metadata.impl.StorageServiceClientInformationManager
Deprecated.
storeClientInformation(OIDCClientInformation, Instant, boolean) - Method in interface net.shibboleth.oidc.metadata.ClientInformationManager
Store a ClientInformation object.
storeClientInformation(OIDCClientInformation, Instant, boolean) - Method in class net.shibboleth.oidc.metadata.impl.StorageServiceClientInformationManager
Store a ClientInformation object.
storeNewMetadata(MetadataManagementData<IdentifierType>, MetadataType, IdentifierType) - Method in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
Process the new metadata as follows: Apply the metadata filtering strategy configured. Check the fetched metadata's identifier matches that expected. Write the metadata to the backing store (cache). Update the metadata's management information with new refresh information.
strictScopeValidationPredicate - Variable in class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
Whether scope validation is strict, i.e.
StrictScopeValidationPredicate - Class in net.shibboleth.oidc.profile.config.logic
StrictScopeValidationPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.StrictScopeValidationPredicate
 
StringBasedJWTClaimAuditExtractor - Class in net.shibboleth.oidc.profile.audit.impl
A JWT claim extractor function that returns String objects.
StringBasedJWTClaimAuditExtractor() - Constructor for class net.shibboleth.oidc.profile.audit.impl.StringBasedJWTClaimAuditExtractor
 
StringListBasedJWTClaimAuditExtractor - Class in net.shibboleth.oidc.profile.audit.impl
A JWT claim extractor function that returns lists of string objects.
StringListBasedJWTClaimAuditExtractor() - Constructor for class net.shibboleth.oidc.profile.audit.impl.StringListBasedJWTClaimAuditExtractor
 
SUB_FORMAT - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
The subject format (public/pairwise).
SUB_VALUE - Static variable in class net.shibboleth.oidc.profile.audit.AuditFields
The subject value.
SUBJECT_CLAIM - Enum constant in enum class net.shibboleth.oidc.security.jwt.claims.impl.JWTClaims
Subject Identifier.
subsetOfValues - Variable in class net.shibboleth.oidc.metadata.policy.MetadataPolicy.Builder
The list of value(s) from which the claim must be subset of.
subsetOfValues - Variable in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
The list of value(s) from which the claim must be subset of.
supersetOfValues - Variable in class net.shibboleth.oidc.metadata.policy.MetadataPolicy.Builder
The list of value(s) from which the claim must be superset of.
supersetOfValues - Variable in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
The list of value(s) from which the claim must be superset of.
supportedContentTypes - Variable in class net.shibboleth.oidc.metadata.impl.AbstractDynamicHTTPFetchingStrategy
List of supported MIME types for use in Accept request header and validation of response Content-Type header.
supportedContentTypesValue - Variable in class net.shibboleth.oidc.metadata.impl.AbstractDynamicHTTPFetchingStrategy
Generated Accept request header value.
supportedMediaTypes - Variable in class net.shibboleth.oidc.metadata.impl.AbstractDynamicHTTPFetchingStrategy
Supported MediaType instances, constructed from the AbstractDynamicHTTPFetchingStrategy.supportedContentTypes list.
symmetricKeyAlgorithm - Variable in class net.shibboleth.oidc.security.credential.BasicJWKCredentialFactoryBean
The JCA algorithm name to use if the key to be converted is a symmetric key.
SymmetricKeyWrapA128GCMKW - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
Algorithm descriptor for JWE key management algorithm: AES128GCMKW.
SymmetricKeyWrapA128GCMKW() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA128GCMKW
 
SymmetricKeyWrapA128KW - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
Algorithm descriptor for JWE key management algorithm: AES128KW.
SymmetricKeyWrapA128KW() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA128KW
 
SymmetricKeyWrapA192GCMKW - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
Algorithm descriptor for JWE key management algorithm: AES192GCMKW.
SymmetricKeyWrapA192GCMKW() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA192GCMKW
 
SymmetricKeyWrapA192KW - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
Algorithm descriptor for JWE key management algorithm: AES192KW.
SymmetricKeyWrapA192KW() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA192KW
 
SymmetricKeyWrapA256GCMKW - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
Algorithm descriptor for JWE key management algorithm: AES256GCMKW.
SymmetricKeyWrapA256GCMKW() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA256GCMKW
 
SymmetricKeyWrapA256KW - Class in net.shibboleth.oidc.jwa.algorithm.descriptors
Algorithm descriptor for JWE key management algorithm: AES256KW.
SymmetricKeyWrapA256KW() - Constructor for class net.shibboleth.oidc.jwa.algorithm.descriptors.SymmetricKeyWrapA256KW
 

T

taskTimer - Variable in class net.shibboleth.oidc.metadata.impl.AbstractReloadingOIDCEntityResolver
Timer used to schedule background metadata update tasks.
test(Map<String, MetadataPolicy>) - Method in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyValidator
test(OAuth2AuthorizationProfileConfiguration.HttpRequestMethod) - Method in class net.shibboleth.oidc.profile.encoding.impl.HTTPPostAuthnRequestEncoder
test(OAuth2AuthorizationProfileConfiguration.HttpRequestMethod) - Method in class net.shibboleth.oidc.profile.encoding.impl.HTTPRedirectAuthnRequestEncoder
test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.AllowPKCEPlainPredicate
test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.AlwaysIssueBearerAccessTokenPredicate
test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.AttributeConsentFlowEnabledPredicate
test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.AuthorizationCodeFlowEnabledPredicate
test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.EncodeConsentPredicate
test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.EncryptionOptionalPredicate
test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.EncryptRequestObjectPredicate
 
test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.EnforceRefreshTokenRotationPredicate
test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.ForcePKCEPredicate
test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.FrontChannelLogoutSuccessPredicate
test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.HybridFlowEnabledPredicate
test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.ImplicitFlowEnabledPredicate
test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.IncludeIssuerInAuthenticationResponsePredicate
test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.IssueIdTokenViaRefreshTokenPredicate
test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.LimitInitialAccessTokenToSelfPredicate
test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.PreferFrontChannelLogoutPredicate
test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.RefreshTokensEnabledPredicate
test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.RequireAuthenticationRequestPredicate
test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.RequireDPoPJktParameterPredicate
test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.RequireDPoPProofPredicate
test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.RequireIdTokenHintPredicate
test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.RequirePushedAuthorizationRequestPredicate
test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.RevokeTokensInLogoutPredicate
test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.SignRequestObjectPredicate
 
test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.StrictScopeValidationPredicate
test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.logic.UseRequestObjectPredicate
 
test(ProfileRequestContext) - Method in class net.shibboleth.oidc.profile.config.navigate.AcrClaimAlwaysEssentialLookupFunction
test(ProfileRequestContext, JWTClaimsSet) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AuthTimeRequestedActivationCondition
 
test(ProfileRequestContext, JWTClaimsSet) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ClaimExistsActivationCondition
 
test(ProfileRequestContext, JWTClaimsSet) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ForcedAuthenticationActivationCondition
test(ProfileRequestContext, JWTClaimsSet) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.NonceValidationActivationCondition
test(ProfileRequestContext, JWTClaimsSet) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.NumberOfClaimValuesActivationCondition
test(Credential) - Method in class net.shibboleth.oidc.security.credential.impl.EvaluableKeyIDCredentialCriterion
test(Credential) - Method in class net.shibboleth.oidc.security.credential.impl.EvaluableMACKeyLengthCredentialCriterion
test(T) - Method in class net.shibboleth.oidc.metadata.AbstractEvaluableMetadataCriterion
 
timerFetchFromSource - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
timerGet - Variable in class net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache
tlsServerValidationOnlyPredicate - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Whether TLS server validation alone is sufficient to verify the id_token (true), or whether the id_token's signature should be validated (false).
toEncryptionCredential(JWEAlgorithm, EncryptionMethod) - Method in interface net.shibboleth.oidc.security.credential.ClientSecretCredential
Create a symmetric encryption key derived from the client_secret and compatible with the key management mode and encryption algorithm specified.
toEncryptionCredential(JWEAlgorithm, EncryptionMethod) - Method in class net.shibboleth.oidc.security.credential.DefaultClientSecretCredential
Create a symmetric encryption key derived from the client_secret and compatible with the key management mode and encryption algorithm specified.
toHTTPResponse() - Method in class net.shibboleth.oidc.profile.messaging.JSONErrorResponse
toHTTPResponse() - Method in class net.shibboleth.oidc.profile.messaging.JSONSuccessResponse
toJSONObject(String) - Method in class net.shibboleth.oidc.attribute.transcoding.impl.OIDCStringAttributeTranscoder
Parses string as JSONObject.
TOKEN - Enum constant in enum class net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenRevocationConfiguration.OAuth2TokenRevocationMethod
Revoke single access or refresh token.
TOKEN_ENDPOINT_AUTH_METHOD_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Attribute local name.
TOKEN_ENDPOINT_AUTH_SIGNING_ALG_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Attribute local name.
TokenAsymmetricKeyTrustEngine - Class in net.shibboleth.oidc.security.impl
A TrustEngine implementation for Signed JSON Web Tokens.
TokenAsymmetricKeyTrustEngine(JOSEObjectCredentialResolver) - Constructor for class net.shibboleth.oidc.security.impl.TokenAsymmetricKeyTrustEngine
Constructor.
tokenEndpointAuthMethod - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Token endpoint authentication method for this entity.
TokenEndpointAuthMethodLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
A function that obtains OAuth2ClientAuthenticableProfileConfiguration.getTokenEndpointAuthMethods(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
TokenEndpointAuthMethodLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.TokenEndpointAuthMethodLookupFunction
 
tokenEndpointAuthMethodLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
The token endpoint authentication method to use with an upstream OpenID Provider.
tokenEndpointAuthMethodsLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Enabled token endpoint authentication methods.
tokenEndpointAuthSigningAlg - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
Token endpoint authentication signing algorithm for this entity.
toSigningCredential() - Method in interface net.shibboleth.oidc.security.credential.ClientSecretCredential
Create a MAC singing key from the client_secret.
toSigningCredential() - Method in class net.shibboleth.oidc.security.credential.DefaultClientSecretCredential
Create a MAC singing key from the client_secret.
toString() - Method in class net.shibboleth.oidc.authn.principal.AuthenticationContextClassReferencePrincipal
toString() - Method in class net.shibboleth.oidc.metadata.criterion.ClientIDCriterion
toString() - Method in class net.shibboleth.oidc.metadata.criterion.ClientSecretReferenceCriterion
toString() - Method in class net.shibboleth.oidc.metadata.criterion.IssuerIDCriterion
toString() - Method in class net.shibboleth.oidc.metadata.criterion.ResourceLocationCriterion
toString() - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy
toString() - Method in class net.shibboleth.oidc.profile.messaging.JSONSuccessResponse
toString() - Method in class net.shibboleth.oidc.security.credential.impl.DataEncryptionAlgorithmCriterion
toString() - Method in class net.shibboleth.oidc.security.credential.impl.EvaluableKeyIDCredentialCriterion
toString() - Method in class net.shibboleth.oidc.security.credential.impl.EvaluableMACKeyLengthCredentialCriterion
toString() - Method in class net.shibboleth.oidc.security.credential.impl.KeyManagmentAlgorithmCriterion
toString() - Method in class net.shibboleth.oidc.security.jose.criterion.ClientSecretCredentialCriterion
toString() - Method in class net.shibboleth.oidc.security.jose.criterion.DecryptionConfigurationCriterion
toString() - Method in class net.shibboleth.oidc.security.jose.criterion.EncryptionConfigurationCriterion
toString() - Method in class net.shibboleth.oidc.security.jose.criterion.JOSEObjectCriterion
toString() - Method in class net.shibboleth.oidc.security.jose.criterion.JWKSetCriterion
toString() - Method in class net.shibboleth.oidc.security.jose.criterion.KeyIdCriterion
toString() - Method in class net.shibboleth.oidc.security.jose.criterion.ProviderMetadataCriterion
toString() - Method in class net.shibboleth.oidc.security.jose.criterion.SignatureSigningConfigurationCriterion
toString() - Method in class net.shibboleth.oidc.security.jose.criterion.SignatureValidationConfigurationCriterion
toString() - Method in class net.shibboleth.oidc.security.jose.criterion.SignatureValidationParametersCriterion
transformValues(TranscodingRule, Stream<String>) - Method in class net.shibboleth.oidc.attribute.transcoding.impl.OIDCStringAttributeTranscoder
Converts string values to List of Integer, String or Boolean depending on rule.
trusted - Variable in class net.shibboleth.oidc.metadata.filter.MetadataSource
Flag indicating whether the metadata source is trusted.
TYPE_LOCAL_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Local name of the XSI type.
TYPE_NAME - Static variable in class net.shibboleth.oidc.attribute.resolver.spring.enc.impl.OIDCByteEncoderParser
Schema type name:.
TYPE_NAME - Static variable in class net.shibboleth.oidc.attribute.resolver.spring.enc.impl.OIDCScopedStringEncoderParser
Schema type name.
TYPE_NAME - Static variable in class net.shibboleth.oidc.attribute.resolver.spring.enc.impl.OIDCStringEncoderParser
Schema type name:.
TYPE_NAME - Static variable in class net.shibboleth.oidc.profile.spring.relyingparty.metadata.filter.impl.ClientInformationParser
Element name.
TYPE_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.ClientSecret
QName of the XSI type.
TYPE_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.ClientSecretKeyReference
QName of the XSI type.
TYPE_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.DefaultAcrValue
QName of the XSI type.
TYPE_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.JwksData
QName of the XSI type.
TYPE_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.JwksUri
QName of the XSI type.
TYPE_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
QName of the XSI type.
TYPE_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.PostLogoutRedirectUri
QName of the XSI type.
TYPE_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.RequestUri
QName of the XSI type.
typeHeaderLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.SignJWTHandler
Strategy used to locate the optional "typ" header to insert while signing.

U

unknownAttributes - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
"anyAttribute" attributes.
unknownChildren - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
"any" children.
UnregisteredClientPolicy - Class in net.shibboleth.oidc.metadata.policy
The policy used for validating single claim of an unregistered client.
UnregisteredClientPolicy() - Constructor for class net.shibboleth.oidc.metadata.policy.UnregisteredClientPolicy
Constructor.
UnregisteredClientPolicy(MetadataPolicy) - Constructor for class net.shibboleth.oidc.metadata.policy.UnregisteredClientPolicy
Constructor.
UnregisteredClientPolicyLookupFunction - Class in net.shibboleth.oidc.profile.config.navigate
A function that obtains OAuth2ClientAuthenticableProfileConfiguration.getUnregisteredClientPolicy(ProfileRequestContext) if such a profile is available from a RelyingPartyContext obtained via a lookup function, by default a child of the ProfileRequestContext.
UnregisteredClientPolicyLookupFunction() - Constructor for class net.shibboleth.oidc.profile.config.navigate.UnregisteredClientPolicyLookupFunction
 
unregisteredClientPolicyLookupStrategy - Variable in class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
Lookup function to retrieve the policy for validating claims of an unregistered client.
UNSPECIFIED - Static variable in class net.shibboleth.oidc.authn.principal.AuthenticationContextClassReferencePrincipal
unspecified auth ctx class.
updateKeys(List<OIDCClientInformation>) - Method in class net.shibboleth.oidc.metadata.impl.FilesystemClientInformationResolver
Updates the key set in the given list of OIDC client informations.
useRequestObjectPredicate - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Whether to encode authentication request parameters inside a JWT request object .
UseRequestObjectPredicate - Class in net.shibboleth.oidc.profile.config.logic
A predicate that determines if a RequestObject JWT should be used based on the profile configuration.
UseRequestObjectPredicate() - Constructor for class net.shibboleth.oidc.profile.config.logic.UseRequestObjectPredicate
 
USERINFO_ENCRYPTED_RESPONSE_ALG_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Attribute local name.
USERINFO_ENCRYPTED_RESPONSE_ENC_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Attribute local name.
USERINFO_SIGNED_RESPONSE_ALG_ATTRIB_NAME - Static variable in interface net.shibboleth.oidc.saml.xmlobject.OAuthRPExtensions
Attribute local name.
userInfoEncryptedResponseAlg - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
User info encrypted response algorithm for this entity.
userInfoEncryptedResponseEnc - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
User info encrypted response encoder for this entity.
userInfoHttpRequestMethodLookupStrategy - Variable in class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
Which HTTP method should be used to issue the UserInfo requests.
userInfoSignedResponseAlg - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.OAuthRPExtensionsImpl
User info signed response algorithm for this entity.

V

validate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.jwt.claims.AbstractClaimsValidator
Validate all, or part of, the given JWT claims set.
validate(JWTClaimsSet, ProfileRequestContext) - Method in interface net.shibboleth.oidc.jwt.claims.ClaimsValidator
Validate all, or part of, the given JWT claims set.
validate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ChainingJWTClaimsValidator
Validate all, or part of, the given JWT claims set.
validate(SignedJWT, CriteriaSet) - Method in class net.shibboleth.oidc.security.impl.BaseSignedJWTTrustEngine
validate(SignedJWT, TrustBasisType) - Method in class net.shibboleth.oidc.security.impl.BaseSignedJWTTrustEngine
Attempt to establish trust by resolving token verification credentials from the token itself.
validate(Key, Iterable<Key>) - Method in class net.shibboleth.oidc.security.impl.ExplicitKeyTrustEvaluator
Evaluate trust.
validate(Key, Key) - Method in class net.shibboleth.oidc.security.impl.ExplicitKeyTrustEvaluator
Evaluate trust.
validate(MetadataPolicy) - Method in class net.shibboleth.oidc.metadata.policy.impl.BeanMetadataPolicyOperator
 
validate(MetadataPolicy) - Method in interface net.shibboleth.oidc.metadata.policy.impl.CustomMetadataPolicyOperator
Validate whether the operator is compatible with the other operators in the policy.
validate(MetadataPolicy) - Method in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyOperator
 
validate(EncryptionParameters, boolean) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
Validate that the EncryptionParameters instance has all the required properties populated.
validate(SignatureSigningParameters) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver
Validate that the SignatureSigningParameters instance has all the required properties populated.
validate(Credential, Iterable<Credential>) - Method in class net.shibboleth.oidc.security.impl.ExplicitKeyTrustEvaluator
Evaluate trust.
validate(Credential, Credential) - Method in class net.shibboleth.oidc.security.impl.ExplicitKeyTrustEvaluator
Evaluate trust.
validateAlgorithmURI(String) - Method in class net.shibboleth.oidc.security.impl.JWETokenDecrypter
Validate the supplied algorithm URI against the configured include and exclude lists.
validateContentEncryptionAlgorithm(EncryptedJWT) - Method in class net.shibboleth.oidc.security.impl.JWETokenDecrypter
Validates the 'enc' algorithm in the header against the include and exclude algorithm URI lists.
validateContentEncryptionAlgorithm(EncryptedJWT, JWKCredential) - Method in class net.shibboleth.oidc.security.impl.JWETokenDecrypter
Validates the 'enc' algorithm in the header matches the encryption algorithm specified for the credential, and validates against the include and exclude algorithm URI lists.
validateHttpResponse(ClassicHttpResponse) - Method in class net.shibboleth.oidc.metadata.impl.HTTPProviderConfigurationFetchingStrategy.OIDCProviderMetadataResponseHandler
Validate the received HTTP response instance, such as checking for supported content types.
validateKeyManagmentAlgorithm(EncryptedJWT, JWKCredential) - Method in class net.shibboleth.oidc.security.impl.JWETokenDecrypter
If the credential contains algorithm 'alg' information, validate the 'alg' algorithm in the JWT JOSE header matches the algorithm specified for the credential.
validateMetadataFile(File) - Static method in class net.shibboleth.oidc.metadata.impl.ResolverHelper
Validate the basic properties of the specified metadata file, for example that it exists; that it is a file; and that it is readable.
validateParams(List<Pair<String, String>>) - Method in class net.shibboleth.oidc.profile.encoding.impl.AbstractOIDCMessageEncoder
Ensure the authorization parameters are valid.
validateSignatureEx(Collection<? extends Credential>, SignedJWT, String) - Static method in class net.shibboleth.oidc.security.impl.JWTSignatureValidationUtil
Validates the signature of the given JWS against the given list of credentials.
validator - Variable in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyOperator
The metadata policy validator.
validator - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.FunctionClaimsValidator
The function to run.
value - Variable in enum class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest.CodeChallengeMethod
The value.
value - Variable in class net.shibboleth.oidc.saml.xmlobject.impl.AbstractMetadataValueSAMLObject
The value for this metadata object.
valueOf(String) - Static method in enum class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest.CodeChallengeMethod
Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class net.shibboleth.oidc.profile.oauth2.config.OAuth2AuthorizationProfileConfiguration.HttpRequestMethod
Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenRevocationConfiguration.OAuth2TokenRevocationMethod
Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class net.shibboleth.oidc.security.jwt.claims.impl.IDTokenClaims
Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class net.shibboleth.oidc.security.jwt.claims.impl.JWTClaims
Returns the enum constant of this class with the specified name.
valueOperator - Variable in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyOperator
The metadata policy operator.
values() - Static method in enum class net.shibboleth.oidc.profile.core.OAuthAuthorizationRequest.CodeChallengeMethod
Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class net.shibboleth.oidc.profile.oauth2.config.OAuth2AuthorizationProfileConfiguration.HttpRequestMethod
Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenRevocationConfiguration.OAuth2TokenRevocationMethod
Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class net.shibboleth.oidc.security.jwt.claims.impl.IDTokenClaims
Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class net.shibboleth.oidc.security.jwt.claims.impl.JWTClaims
Returns an array containing the constants of this enum class, in the order they are declared.
valueToMatchLookupStrategy - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.ExactMatchClaimsValidator
Strategy to retrieve the value to match to an ID Token claim.
velocityEngine - Variable in class net.shibboleth.oidc.profile.encoding.impl.HTTPPostAuthnRequestEncoder
Velocity engine used to evaluate the template when using FORM POST response mode.
velocityTemplateId - Variable in class net.shibboleth.oidc.profile.encoding.impl.HTTPPostAuthnRequestEncoder
ID of the Velocity template used when using FORM POST response mode.
verifyRegexp(Object, String) - Method in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyEnforcer
Verifies that the given candidate meets the regular expression.
verifySignature(SignedJWT, Credential) - Method in class net.shibboleth.oidc.security.impl.BaseSignedJWTTrustEngine
Attempt to verify a signature using the key from the supplied credential.
verifyValue(String, Pair<String, Object>, List<Object>, List<Object>, List<Object>) - Method in class net.shibboleth.oidc.metadata.policy.impl.DefaultMetadataPolicyValidator
Verifies the value against the following rules:

W

wellKnownLocationCompositionStrategy - Variable in class net.shibboleth.oidc.metadata.impl.HTTPProviderConfigurationFetchingStrategy
Strategy for composing an issuer with the well-known configuration path.
wellKnownPath - Variable in class net.shibboleth.oidc.metadata.impl.HTTPProviderConfigurationFetchingStrategy
The well-known path for OpenID Provider metadata.
withAdd(Object) - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy.Builder
Set the value(s) to be added for the claim.
withCustomOperator(String, Object) - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy.Builder
Add a custom operator to the map of custom operators.
withDefaultValue(Object) - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy.Builder
Set the default value for the claim to be used in case none is specified.
withEssential(Boolean) - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy.Builder
Set the flag indicating that the claim must have a value.
withOneOfValues(List<Object>) - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy.Builder
Set the list of values from which the claim must be one of.
withRegexp(String) - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy.Builder
Set the regular expression that the claim value must meet.
withSubsetOfValues(List<Object>) - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy.Builder
Set the list of value(s) from which the claim must be subset of.
withSupersetOfValues(List<Object>) - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy.Builder
Set the list of value(s) from which the claim must be superset of.
withValue(Object) - Method in class net.shibboleth.oidc.metadata.policy.MetadataPolicy.Builder
Set the (forced) value for the claim.
writeToBackingStore(MetadataType) - Method in class net.shibboleth.oidc.metadata.cache.impl.AbstractMetadataCache
Write the given metadata to the backing store index.

X

XMLObjectProviderInitializer - Class in net.shibboleth.oidc.saml.xmlobject.impl
XMLObject provider initializer for the metadata extension.
XMLObjectProviderInitializer() - Constructor for class net.shibboleth.oidc.saml.xmlobject.impl.XMLObjectProviderInitializer
 
A B C D E F G H I J K L M N O P R S T U V W X 
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form