Package net.shibboleth.oidc.profile.config

Interface OIDCSSOProfileConfiguration

All Superinterfaces:

Component, ConditionalProfileConfiguration, IdentifiedComponent, OAuth2ProfileConfiguration, OIDCProfileConfiguration, ProfileConfiguration

All Known Subinterfaces:

OAuth2PushedAuthorizationRequestConfiguration, OAuth2TokenConfiguration, OIDCAuthenticationRelyingPartyProfileConfiguration, OIDCAuthorizationConfiguration, OIDCSSOProviderConfiguration, OIDCSSORelyingPartyConfiguration

All Known Implementing Classes:

AbstractOIDCSSOConfiguration, DefaultOAuth2PushedAuthorizationRequestConfiguration, DefaultOAuth2TokenConfiguration, DefaultOIDCAuthorizationConfiguration

public interface OIDCSSOProfileConfiguration
extends OIDCProfileConfiguration

Profile configuration generic to all OIDC SSO profiles.

Field Summary

Fields

Modifier and Type	Field	Description
static final String	PROFILE_ID	ID for this profile configuration.

Fields inherited from interface net.shibboleth.profile.config.ProfileConfiguration

DEFAULT_DISALLOWED_FEATURES

Method Summary

Modifier and Type	Method	Description
BiPredicate<URI,ProfileRequestContext>	getCustomRedirectUriValidationStrategy(ProfileRequestContext profileRequestContext)	Get the bi-predicate for validating redirect URI in request to the current profile request context state.
boolean	isAllowPKCEPlain(ProfileRequestContext profileRequestContext)	Get whether client is allowed to use PKCE code challenge method plain.
boolean	isForcePKCE(ProfileRequestContext profileRequestContext)	Get whether client is required to use PKCE.

Methods inherited from interface net.shibboleth.profile.config.ConditionalProfileConfiguration

getActivationCondition

Methods inherited from interface net.shibboleth.shared.component.IdentifiedComponent

getId

Methods inherited from interface net.shibboleth.profile.config.ProfileConfiguration

getDisallowedFeatures, getSecurityConfiguration, isFeatureDisallowed

Field Details

PROFILE_ID

@Nonnull
@NotEmpty
static final String PROFILE_ID

ID for this profile configuration.

See Also:

• Constant Field Values

Method Details

isForcePKCE

@ConfigurationSetting(name="forcePKCE")
boolean isForcePKCE(@Nullable
 ProfileRequestContext profileRequestContext)

Get whether client is required to use PKCE.

Parameters:

profileRequestContext - profile request context

Returns:

whether client is required to use PKCE

isAllowPKCEPlain

@ConfigurationSetting(name="allowPKCEPlain")
boolean isAllowPKCEPlain(@Nullable
 ProfileRequestContext profileRequestContext)

Get whether client is allowed to use PKCE code challenge method plain.

Parameters:

profileRequestContext - profile request context

Returns:

whether client is allowed to use PKCE code challenge method plain

getCustomRedirectUriValidationStrategy

@ConfigurationSetting(name="customRedirectUriValidationStrategy")
@Nullable
BiPredicate<URI,ProfileRequestContext> getCustomRedirectUriValidationStrategy(@Nullable
 ProfileRequestContext profileRequestContext)

Get the bi-predicate for validating redirect URI in request to the current profile request context state.

Parameters:

profileRequestContext - profile request context

Returns:

the bi-predicate for validating requested redirect URI

Since:

3.2.0