Package net.shibboleth.oidc.profile.oauth2.config

Interface OAuth2PushedAuthorizationRequestConfiguration

All Superinterfaces:

AuthenticationProfileConfiguration, Component, ConditionalProfileConfiguration, IdentifiedComponent, OAuth2AuthorizationProfileConfiguration, OAuth2ClientAuthenticableClientProfileConfiguration, OAuth2ClientAuthenticableProfileConfiguration, OAuth2DPoPProofValidatingProfileConfiguration, OAuth2FlowAwareProfileConfiguration, OAuth2ProfileConfiguration, OAuth2ScopeValidatingProfileConfiguration, OAuth2TokenEncryptionProfileConfiguration, OIDCAuthenticationProfileConfiguration, OIDCAuthenticationRelyingPartyProfileConfiguration, OIDCFlowAwareProfileConfiguration, OIDCProfileConfiguration, OIDCSSOProfileConfiguration, OIDCSSORelyingPartyConfiguration, OverriddenIssuerProfileConfiguration, ProfileConfiguration

All Known Implementing Classes:

DefaultOAuth2PushedAuthorizationRequestConfiguration

public interface OAuth2PushedAuthorizationRequestConfiguration
extends OAuth2ClientAuthenticableProfileConfiguration, OAuth2AuthorizationProfileConfiguration, OAuth2ProfileConfiguration, OverriddenIssuerProfileConfiguration, OIDCAuthenticationRelyingPartyProfileConfiguration, OIDCAuthenticationProfileConfiguration, OAuth2DPoPProofValidatingProfileConfiguration, OAuth2ScopeValidatingProfileConfiguration

Profile configuration for OAuth2 Pushed Authorization Requests (PAR).

Since:

3.2.0

Nested Class Summary

Nested classes/interfaces inherited from interface net.shibboleth.oidc.profile.oauth2.config.OAuth2AuthorizationProfileConfiguration

OAuth2AuthorizationProfileConfiguration.HttpRequestMethod

Field Summary

Fields

Modifier and Type	Field	Description
static final String	PROFILE_ID	ID for this profile configuration.
static final String	PROTOCOL_URI	OAuth2 Pushed Authorization Requests URI.

Fields inherited from interface net.shibboleth.profile.config.ProfileConfiguration

DEFAULT_DISALLOWED_FEATURES

Method Summary

Modifier and Type	Method	Description
BiFunction<ProfileRequestContext,Map<String,Object>,Map<String,Object>>	getRequestUriClaimsSetManipulationStrategy(ProfileRequestContext profileRequestContext)	Get the bi-function for manipulating request URI claims set.
Duration	getRequestUriLifetime(ProfileRequestContext profileRequestContext)	Get request URI lifetime.
String	getRequestUriType(ProfileRequestContext profileRequestContext)	Get request URI type.

Methods inherited from interface net.shibboleth.idp.authn.config.AuthenticationProfileConfiguration

getAuthenticationFlows, getDefaultAuthenticationMethods, getPostAuthenticationFlows, getProxyCount, isForceAuthn, isLocal

Methods inherited from interface net.shibboleth.profile.config.ConditionalProfileConfiguration

getActivationCondition

Methods inherited from interface net.shibboleth.shared.component.IdentifiedComponent

getId

Methods inherited from interface net.shibboleth.oidc.profile.oauth2.config.OAuth2AuthorizationProfileConfiguration

getHttpRequestMethod, getResponseMode, getResponseModes, getResponseType, getScopes, isRequireAuthenticationRequest, isRequireDpopJkt, isRequirePushedAuthorizationRequest

Methods inherited from interface net.shibboleth.oidc.profile.oauth2.config.OAuth2ClientAuthenticableClientProfileConfiguration

getClientCredential, getClientId, getTokenEndpointAuthMethod

Methods inherited from interface net.shibboleth.oidc.profile.oauth2.config.OAuth2ClientAuthenticableProfileConfiguration

getClaimsValidator, getTokenEndpointAuthMethods, getUnregisteredClientPolicy

Methods inherited from interface net.shibboleth.oidc.profile.oauth2.config.OAuth2DPoPProofValidatingProfileConfiguration

getDpopProofClaimsValidator, getDpopProofNonceGenerator, getDpopProofSignatureValidationConfiguration, isRequireDpopProof

Methods inherited from interface net.shibboleth.oidc.profile.oauth2.config.OAuth2FlowAwareProfileConfiguration

isAuthorizationCodeFlowEnabled, isImplicitFlowEnabled, isRefreshTokensEnabled

Methods inherited from interface net.shibboleth.oidc.profile.oauth2.config.OAuth2ScopeValidatingProfileConfiguration

isStrictScopeValidation

Methods inherited from interface net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenEncryptionProfileConfiguration

isEncryptionOptional

Methods inherited from interface net.shibboleth.oidc.profile.config.OIDCAuthenticationProfileConfiguration

getAuthenticationContextClassReferenceTranslationStrategy, getAuthenticationMethodsReferencesTranslationStrategy, getDisplay, getLoginHint, getMaxAuthenticationAge, isUseRequestObject

Methods inherited from interface net.shibboleth.oidc.profile.config.OIDCAuthenticationRelyingPartyProfileConfiguration

getRedirectUriOverride, getUserInfoHttpRequestMethod, isEncryptRequestObject, isProxiedAuthnInstant, isRetrieveUserInfoEndpointClaims, isSignRequestObject, isTlsServerValidationSufficient

Methods inherited from interface net.shibboleth.oidc.profile.config.OIDCFlowAwareProfileConfiguration

isHybridFlowEnabled

Methods inherited from interface net.shibboleth.oidc.profile.config.OIDCSSOProfileConfiguration

getCustomRedirectUriValidationStrategy, isAllowPKCEPlain, isForcePKCE

Methods inherited from interface net.shibboleth.profile.config.OverriddenIssuerProfileConfiguration

getIssuer

Methods inherited from interface net.shibboleth.profile.config.ProfileConfiguration

getDisallowedFeatures, getSecurityConfiguration, isFeatureDisallowed

Field Details

PROTOCOL_URI

@Nonnull
@NotEmpty
static final String PROTOCOL_URI

OAuth2 Pushed Authorization Requests URI.

See Also:

• Constant Field Values

PROFILE_ID

@Nonnull
@NotEmpty
static final String PROFILE_ID

ID for this profile configuration.

See Also:

• Constant Field Values

Method Details

getRequestUriType

@ConfigurationSetting(name="requestUriType")
@Nullable
@NotEmpty
String getRequestUriType(@Nullable
 ProfileRequestContext profileRequestContext)

Get request URI type.

Parameters:

profileRequestContext - profile request context

Returns:

request URI type, or null for unspecified/opaque

getRequestUriLifetime

@ConfigurationSetting(name="requestUriLifetime")
@Positive
@Nonnull
Duration getRequestUriLifetime(@Nullable
 ProfileRequestContext profileRequestContext)

Get request URI lifetime.

Defaults to 1 minute.

Parameters:

profileRequestContext - profile request context

Returns:

request URI lifetime

getRequestUriClaimsSetManipulationStrategy

@ConfigurationSetting(name="requestUriClaimsSetManipulationStrategy")
@Nullable
BiFunction<ProfileRequestContext,Map<String,Object>,Map<String,Object>> getRequestUriClaimsSetManipulationStrategy(@Nullable
 ProfileRequestContext profileRequestContext)

Get the bi-function for manipulating request URI claims set.

Parameters:

profileRequestContext - profile request context

Returns:

the bi-function for manipulating request URI claims set