Package net.shibboleth.oidc.profile.config.navigate

Class ProxyAwareDefaultOIDCAuthenticationContextClassResponseLookupFunction

java.lang.Object

net.shibboleth.oidc.profile.config.navigate.ProxyAwareDefaultOIDCAuthenticationContextClassResponseLookupFunction

All Implemented Interfaces:

Function<Collection<String>,Collection<Principal>>

@ThreadSafe
public class ProxyAwareDefaultOIDCAuthenticationContextClassResponseLookupFunction
extends Object
implements Function<Collection<String>,Collection<Principal>>

Implements a set of logic for determining the principals to use from OIDC 'amr' or 'acr' claims.

This operates for the OIDC to SAML proxy use case, in effect the reverse of the ProxyAwareDefaultOIDCAuthenticationContextClassRequestLookupFunction function. All input values are either OIDC ACRs or AMRs, and all output values Java Principals. The values are mapped by the given principal mappings. If a mapping does not exist, the AMR or ACR is ignored.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	ProxyAwareDefaultOIDCAuthenticationContextClassResponseLookupFunction.LookupFunctionWrapper	A simple lookup function that returns a singleton function.

Field Summary

Fields

Modifier and Type	Field	Description
private final Map<String,Collection<Principal>>	principalMappings	Mappings to transform proxied Principals.

Constructor Summary

Constructors

Constructor	Description
ProxyAwareDefaultOIDCAuthenticationContextClassResponseLookupFunction(Map<String,Collection<Principal>> mappings)	Constructor.

Method Summary

Modifier and Type	Method	Description
Collection<Principal>	apply(Collection<String> amrOrAcrs)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface java.util.function.Function

andThen, compose

Field Details

principalMappings

@Nonnull
@NonnullElements
private final Map<String,Collection<Principal>> principalMappings

Mappings to transform proxied Principals.

Constructor Details

ProxyAwareDefaultOIDCAuthenticationContextClassResponseLookupFunction

public ProxyAwareDefaultOIDCAuthenticationContextClassResponseLookupFunction(@Nullable @NonnullElements @ParameterName(name="mappings")
 Map<String,Collection<Principal>> mappings)

Constructor.

Parameters:

mappings - the AMR/ACR value to Principal mappings

Method Details

apply

@Nullable
public Collection<Principal> apply(Collection<String> amrOrAcrs)

Specified by:

apply in interface Function<Collection<String>,Collection<Principal>>