Package net.shibboleth.oidc.profile.oauth2.config

Interface OAuth2ClientAuthenticableProfileConfiguration

All Superinterfaces:

AuthenticationProfileConfiguration, Component, ConditionalProfileConfiguration, IdentifiedComponent, OAuth2DPoPProofValidatingProfileConfiguration, OAuth2ProfileConfiguration, ProfileConfiguration

All Known Subinterfaces:

OAuth2PushedAuthorizationRequestConfiguration, OAuth2TokenConfiguration, OAuth2TokenIntrospectionConfiguration, OAuth2TokenRevocationConfiguration, OAuth2TokenValidatingProfileConfiguration, OIDCAuthorizationConfiguration, OIDCDynamicRegistrationConfiguration, OIDCSSOProviderConfiguration, OIDCUserInfoConfiguration

All Known Implementing Classes:

AbstractOAuth2ClientAuthenticableProfileConfiguration, AbstractOAuth2FlowAwareProfileConfiguration, AbstractOAuth2TokenValidatingConfiguration, AbstractOIDCSSOConfiguration, DefaultOAuth2PushedAuthorizationRequestConfiguration, DefaultOAuth2TokenConfiguration, DefaultOAuth2TokenIntrospectionConfiguration, DefaultOAuth2TokenRevocationConfiguration, DefaultOIDCAuthorizationConfiguration, DefaultOIDCDynamicRegistrationConfiguration, DefaultOIDCUserInfoConfiguration

public interface OAuth2ClientAuthenticableProfileConfiguration
extends AuthenticationProfileConfiguration, OAuth2ProfileConfiguration, OAuth2DPoPProofValidatingProfileConfiguration

OAuth 2.0 profile configurations that support OAuth-defined client authentication methods.

Field Summary

Fields inherited from interface net.shibboleth.profile.config.ProfileConfiguration

DEFAULT_DISALLOWED_FEATURES

Method Summary

Modifier and Type	Method	Description
ClaimsValidator	getClaimsValidator(ProfileRequestContext profileRequestContext)	Get the ClaimsValidator to apply to JWT-based client authentication.
Set<String>	getTokenEndpointAuthMethods(ProfileRequestContext profileRequestContext)	Get the enabled token endpoint authentication methods.
Map<String,UnregisteredClientPolicy>	getUnregisteredClientPolicy(ProfileRequestContext profileRequestContext)	Get the policy for validating unregistered clients.

Methods inherited from interface net.shibboleth.idp.authn.config.AuthenticationProfileConfiguration

getAuthenticationFlows, getDefaultAuthenticationMethods, getPostAuthenticationFlows, getProxyCount, isForceAuthn, isLocal

Methods inherited from interface net.shibboleth.profile.config.ConditionalProfileConfiguration

getActivationCondition

Methods inherited from interface net.shibboleth.shared.component.IdentifiedComponent

getId

Methods inherited from interface net.shibboleth.oidc.profile.oauth2.config.OAuth2DPoPProofValidatingProfileConfiguration

getDpopProofClaimsValidator, getDpopProofNonceGenerator, getDpopProofSignatureValidationConfiguration, isRequireDpopProof

Methods inherited from interface net.shibboleth.profile.config.ProfileConfiguration

getDisallowedFeatures, getSecurityConfiguration, isFeatureDisallowed

Method Details

getClaimsValidator

@ConfigurationSetting(name="claimsValidator")
@Nullable
ClaimsValidator getClaimsValidator(@Nullable
 ProfileRequestContext profileRequestContext)

Get the ClaimsValidator to apply to JWT-based client authentication.

Parameters:

profileRequestContext - current profile request context

Returns:

the validator to use

Since:

3.1.0

getTokenEndpointAuthMethods

@ConfigurationSetting(name="tokenEndpointAuthMethods")
@Nonnull
@NonnullElements
@NotLive
@Unmodifiable
Set<String> getTokenEndpointAuthMethods(@Nullable
 ProfileRequestContext profileRequestContext)

Get the enabled token endpoint authentication methods.

Parameters:

profileRequestContext - profile request context

Returns:

enabled token endpoint authentication methods

getUnregisteredClientPolicy

@ConfigurationSetting(name="unregisteredClientPolicy")
@Nonnull
@Unmodifiable
Map<String,UnregisteredClientPolicy> getUnregisteredClientPolicy(@Nullable
 ProfileRequestContext profileRequestContext)

Get the policy for validating unregistered clients.

Parameters:

profileRequestContext - profile request context

Returns:

the map of policies for validating claims of an unregistered client

Since:

3.0.0