Package net.shibboleth.oidc.profile.oauth2.config

Interface OAuth2DPoPProofValidatingProfileConfiguration

All Superinterfaces:

Component, ConditionalProfileConfiguration, IdentifiedComponent, OAuth2ProfileConfiguration, ProfileConfiguration

All Known Subinterfaces:

OAuth2ClientAuthenticableProfileConfiguration, OAuth2PushedAuthorizationRequestConfiguration, OAuth2TokenConfiguration, OAuth2TokenIntrospectionConfiguration, OAuth2TokenRevocationConfiguration, OAuth2TokenValidatingProfileConfiguration, OIDCAuthorizationConfiguration, OIDCDynamicRegistrationConfiguration, OIDCSSOProviderConfiguration, OIDCUserInfoConfiguration

All Known Implementing Classes:

AbstractOAuth2ClientAuthenticableProfileConfiguration, AbstractOAuth2FlowAwareProfileConfiguration, AbstractOAuth2TokenValidatingConfiguration, AbstractOIDCSSOConfiguration, DefaultOAuth2PushedAuthorizationRequestConfiguration, DefaultOAuth2TokenConfiguration, DefaultOAuth2TokenIntrospectionConfiguration, DefaultOAuth2TokenRevocationConfiguration, DefaultOIDCAuthorizationConfiguration, DefaultOIDCDynamicRegistrationConfiguration, DefaultOIDCUserInfoConfiguration

public interface OAuth2DPoPProofValidatingProfileConfiguration
extends OAuth2ProfileConfiguration

Profile configuration for validating DPoP proof JWTs.

Since:

3.2.0

Field Summary

Fields inherited from interface net.shibboleth.profile.config.ProfileConfiguration

DEFAULT_DISALLOWED_FEATURES

Method Summary

Modifier and Type	Method	Description
ClaimsValidator	getDpopProofClaimsValidator(ProfileRequestContext profileRequestContext)	Get the ClaimsValidator to apply to DPoP Proof JWTs being validated by this profile.
Function<ProfileRequestContext,String>	getDpopProofNonceGenerator(ProfileRequestContext profileRequestContext)	Get the Function to create nonces to be used with DPoP Proof JWTs.
SignatureValidationConfiguration	getDpopProofSignatureValidationConfiguration(ProfileRequestContext profileRequestContext)	Get the SignatureValidationConfiguration to be used for DPoP Proof JWT signature validation.
boolean	isRequireDpopProof(ProfileRequestContext profileRequestContext)	Get whether client is required to include DPoP Proof JWT in request.

Methods inherited from interface net.shibboleth.profile.config.ConditionalProfileConfiguration

getActivationCondition

Methods inherited from interface net.shibboleth.shared.component.IdentifiedComponent

getId

Methods inherited from interface net.shibboleth.profile.config.ProfileConfiguration

getDisallowedFeatures, getSecurityConfiguration, isFeatureDisallowed

Method Details

getDpopProofClaimsValidator

@ConfigurationSetting(name="dpopProofClaimsValidator")
@Nullable
ClaimsValidator getDpopProofClaimsValidator(@Nullable
 ProfileRequestContext profileRequestContext)

Get the ClaimsValidator to apply to DPoP Proof JWTs being validated by this profile.

Parameters:

profileRequestContext - current profile request context

Returns:

the validator to use

getDpopProofSignatureValidationConfiguration

@ConfigurationSetting(name="dpopProofSignatureValidationConfiguration")
@Nullable
SignatureValidationConfiguration getDpopProofSignatureValidationConfiguration(@Nullable
 ProfileRequestContext profileRequestContext)

Get the SignatureValidationConfiguration to be used for DPoP Proof JWT signature validation.

Parameters:

profileRequestContext - current profile request context

Returns:

the signature validation configuration to use

isRequireDpopProof

@ConfigurationSetting(name="requireDpopProof")
boolean isRequireDpopProof(@Nullable
 ProfileRequestContext profileRequestContext)

Get whether client is required to include DPoP Proof JWT in request.

Parameters:

profileRequestContext - the profile request context

Returns:

whether client is required to include DPoP Proof JWT in request

getDpopProofNonceGenerator

@ConfigurationSetting(name="dpopProofNonceGenerator")
@Nullable
Function<ProfileRequestContext,String> getDpopProofNonceGenerator(@Nullable
 ProfileRequestContext profileRequestContext)

Get the Function to create nonces to be used with DPoP Proof JWTs.

Parameters:

profileRequestContext - current profile request context

Returns:

the nonce generator to use