Class DefaultOAuth2PushedAuthorizationRequestConfiguration
java.lang.Object
net.shibboleth.shared.component.AbstractInitializableComponent
net.shibboleth.shared.component.AbstractIdentifiedInitializableComponent
net.shibboleth.shared.component.AbstractIdentifiableInitializableComponent
net.shibboleth.profile.config.AbstractProfileConfiguration
net.shibboleth.profile.config.AbstractConditionalProfileConfiguration
net.shibboleth.idp.profile.config.AbstractInterceptorAwareProfileConfiguration
net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2InterceptorAwareProfileConfiguration
net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2FlowAwareProfileConfiguration
net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
net.shibboleth.oidc.profile.oauth2.config.impl.DefaultOAuth2PushedAuthorizationRequestConfiguration
- All Implemented Interfaces:
AuthenticationProfileConfiguration,InterceptorAwareProfileConfiguration,OIDCAuthenticationProfileConfiguration,OIDCAuthenticationRelyingPartyProfileConfiguration,OIDCAuthorizationConfiguration,OIDCFlowAwareProfileConfiguration,OIDCIDTokenProducingProfileConfiguration,OIDCProfileConfiguration,OIDCSSOProfileConfiguration,OIDCSSOProviderConfiguration,OIDCSSORelyingPartyConfiguration,OAuth2AccessTokenProducingProfileConfiguration,OAuth2AuthorizationCodeProducingProfileConfiguration,OAuth2AuthorizationProfileConfiguration,OAuth2ClientAuthenticableClientProfileConfiguration,OAuth2ClientAuthenticableProfileConfiguration,OAuth2DPoPProofValidatingProfileConfiguration,OAuth2FlowAwareProfileConfiguration,OAuth2InterceptorAwareProfileConfiguration,OAuth2ProfileConfiguration,OAuth2PushedAuthorizationRequestConfiguration,OAuth2RefreshTokenProducingProfileConfiguration,OAuth2ScopeValidatingProfileConfiguration,OAuth2TokenEncryptionProfileConfiguration,AttributeResolvingProfileConfiguration,ConditionalProfileConfiguration,OverriddenIssuerProfileConfiguration,ProfileConfiguration,Component,DestructableComponent,IdentifiableComponent,IdentifiedComponent,InitializableComponent
public class DefaultOAuth2PushedAuthorizationRequestConfiguration
extends DefaultOIDCAuthorizationConfiguration
implements OAuth2PushedAuthorizationRequestConfiguration
Implementation of a profile configuration for the OAuth2 Pushed Authorization Requests (PAR).
- Since:
- 3.2.0
-
Nested Class Summary
Nested classes/interfaces inherited from interface net.shibboleth.oidc.profile.oauth2.config.OAuth2AuthorizationProfileConfiguration
OAuth2AuthorizationProfileConfiguration.HttpRequestMethod -
Field Summary
FieldsModifier and TypeFieldDescriptionprivate Function<ProfileRequestContext,String> Lookup function to override issuer value.static final StringOAuth2 pushed authorization request profile counter name.private Function<ProfileRequestContext,BiFunction<ProfileRequestContext, Map<String, Object>, Map<String, Object>>> Lookup function to supply strategy bi-function for manipulating request URI claims set.private Function<ProfileRequestContext,Duration> Lookup function to supply request URI lifetime.private Function<ProfileRequestContext,String> Lookup function to supply request URI type.Fields inherited from interface net.shibboleth.oidc.profile.oauth2.config.OAuth2PushedAuthorizationRequestConfiguration
PROFILE_ID, PROTOCOL_URIFields inherited from interface net.shibboleth.oidc.profile.config.OIDCAuthenticationProfileConfiguration
PROFILE_IDFields inherited from interface net.shibboleth.oidc.profile.config.OIDCAuthorizationConfiguration
PROFILE_IDFields inherited from interface net.shibboleth.oidc.profile.config.OIDCSSOProfileConfiguration
PROFILE_IDFields inherited from interface net.shibboleth.profile.config.ProfileConfiguration
DEFAULT_DISALLOWED_FEATURES -
Constructor Summary
ConstructorsConstructorDescriptionConstructor.Creates a new configuration instance. -
Method Summary
Modifier and TypeMethodDescriptiongetIssuer(ProfileRequestContext profileRequestContext) getRequestUriClaimsSetManipulationStrategy(ProfileRequestContext profileRequestContext) Get the bi-function for manipulating request URI claims set.getRequestUriLifetime(ProfileRequestContext profileRequestContext) Get request URI lifetime.getRequestUriType(ProfileRequestContext profileRequestContext) Get request URI type.voidSet overridden issuer value.voidSets lookup strategy for overridden issuer value.voidsetRequestUriClaimsSetManipulationStrategy(BiFunction<ProfileRequestContext, Map<String, Object>, Map<String, Object>> strategy) Set the bi-function for manipulating request URI claims set.voidsetRequestUriClaimsSetManipulationStrategyLookupStrategy(Function<ProfileRequestContext, BiFunction<ProfileRequestContext, Map<String, Object>, Map<String, Object>>> strategy) Set a lookup strategy for the bi-function for manipulating request URI claims set.voidsetRequestUriLifetime(Duration lifetime) Set the lifetime of an request URI.voidSet a lookup strategy for the request URI lifetime.voidsetRequestUriType(String type) Set request URI type.voidSet lookup strategy for request URI type.Methods inherited from class net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration
getAuthenticationContextClassReferenceTranslationStrategy, getAuthenticationMethodsReferencesTranslationStrategy, getAuthorizationCodeClaimsSetManipulationStrategy, getAuthorizeCodeLifetime, getDeniedUserInfoAttributes, getDisplay, getEncodedAttributes, getHttpRequestMethod, getLoginHint, getMaxAuthenticationAge, getRedirectUriOverride, getResponseMode, getResponseModes, getResponseType, getScopes, getUserInfoHttpRequestMethod, isAcrRequestAlwaysEssential, isEncodeConsentInTokens, isEncryptRequestObject, isIncludeIssuerInResponse, isProxiedAuthnInstant, isRequireAuthenticationRequest, isRequireDpopJkt, isRequirePushedAuthorizationRequest, isRetrieveUserInfoEndpointClaims, isSignRequestObject, isTlsServerValidationSufficient, isUseRequestObject, setAcrRequestAlwaysEssential, setAcrRequestAlwaysEssentialPredicate, setAuthenticationContextClassReferenceTranslationStrategyLookupStrategy, setAuthenticationMethodsReferencesTranslationStrategyLookupStrategy, setAuthorizationCodeClaimsSetManipulationStrategy, setAuthorizationCodeClaimsSetManipulationStrategyLookupStrategy, setAuthorizeCodeLifetime, setAuthorizeCodeLifetimeLookupStrategy, setDeniedUserInfoAttributes, setDeniedUserInfoAttributesLookupStrategy, setDisplay, setDisplayLookupStrategy, setEncodeConsentInTokens, setEncodeConsentInTokensPredicate, setEncodedAttributes, setEncodedAttributesLookupStrategy, setEncryptRequestObject, setEncryptRequestObjectPredicate, setHttpRequestMethod, setHttpRequestMethodLookupStrategy, setIncludeIssuerInResponse, setIncludeIssuerInResponsePredicate, setLoginHint, setLoginHintLookupStrategy, setMaxAuthenticationAge, setMaxAuthenticationAgeLookupStrategy, setProxiedAuthnInstant, setRedirectUriOverride, setRedirectUriOverrideLookupStrategy, setRequireAuthenticationRequest, setRequireAuthenticationRequestPredicate, setRequireAuthenticationRequestPredicateLookupStrategy, setRequireDpopJkt, setRequireDpopJktPredicate, setRequirePushedAuthorizationRequest, setRequirePushedAuthorizationRequestPredicate, setResponseMode, setResponseModeLookupStrategy, setResponseModes, setResponseModesLookupStrategy, setResponseType, setResponseTypeLookupStrategy, setRetrieveUserInfoEndpointClaims, setRetrieveUserInfoEndpointClaims, setScopes, setScopesLookupStrategy, setSignRequestObject, setSignRequestObjectPredicate, setTlsServerValidationSufficient, setTlsServerValidationSufficient, setUseRequestObject, setUseRequestObjectPredicate, setUserInfoHttpRequestMethod, setUserInfoHttpRequestMethodLookupStrategyMethods inherited from class net.shibboleth.oidc.profile.config.impl.AbstractOIDCSSOConfiguration
getAccessTokenClaimsSetManipulationStrategy, getAccessTokenLifetime, getAccessTokenType, getAdditionalAudiencesForIdToken, getAlwaysIncludedAttributes, getCustomRedirectUriValidationStrategy, getIDTokenLifetime, getIDTokenManipulationStrategy, getRefreshTokenChainLifetime, getRefreshTokenTimeout, getRefreshTokenType, isAllowPKCEPlain, isAlwaysIssueBearerAccessToken, isEncryptionOptional, isForcePKCE, isResolveAttributes, isStrictScopeValidation, setAccessTokenClaimsSetManipulationStrategy, setAccessTokenClaimsSetManipulationStrategyLookupStrategy, setAccessTokenLifetime, setAccessTokenLifetimeLookupStrategy, setAccessTokenType, setAccessTokenTypeLookupStrategy, setAdditionalAudiencesForIdToken, setAdditionalAudiencesForIdTokenLookupStrategy, setAllowPKCEPlain, setAllowPKCEPlainPredicate, setAlwaysIncludedAttributes, setAlwaysIncludedAttributesLookupStrategy, setAlwaysIssueBearerAccessToken, setAlwaysIssueBearerAccessTokenPredicate, setCustomRedirectUriValidationStrategy, setCustomRedirectUriValidationStrategyLookupStrategy, setEncryptionOptional, setEncryptionOptionalPredicate, setForcePKCE, setForcePKCEPredicate, setIDTokenLifetime, setIDTokenLifetimeLookupStrategy, setIDTokenManipulationStrategy, setIDTokenManipulationStrategyLookupStrategy, setRefreshTokenChainLifetime, setRefreshTokenChainLifetimeLookupStrategy, setRefreshTokenTimeout, setRefreshTokenTimeoutLookupStrategy, setRefreshTokenType, setRefreshTokenTypeLookupStrategy, setResolveAttributes, setResolveAttributesPredicate, setStrictScopeValidation, setStrictScopeValidationPredicateMethods inherited from class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2FlowAwareProfileConfiguration
isAuthorizationCodeFlowEnabled, isHybridFlowEnabled, isImplicitFlowEnabled, isRefreshTokensEnabled, setAuthorizationCodeFlowEnabled, setAuthorizationCodeFlowEnabledPredicate, setHybridFlowEnabled, setHybridFlowEnabledPredicate, setImplicitFlowEnabled, setImplicitFlowEnabledPredicate, setRefreshTokensEnabled, setRefreshTokensEnabledPredicateMethods inherited from class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2ClientAuthenticableProfileConfiguration
getAuthenticationFlows, getClaimsValidator, getClientCredential, getClientId, getDefaultAuthenticationMethods, getDpopProofClaimsValidator, getDpopProofNonceGenerator, getDpopProofSignatureValidationConfiguration, getPostAuthenticationFlows, getProxyCount, getTokenEndpointAuthMethod, getTokenEndpointAuthMethods, getUnregisteredClientPolicy, isForceAuthn, isRequireDpopProof, setAuthenticationFlows, setAuthenticationFlowsLookupStrategy, setClaimsValidator, setClaimsValidatorLookupStrategy, setClientCredential, setClientCredentialLookupStrategy, setClientId, setClientIdLookupStrategy, setDefaultAuthenticationMethods, setDefaultAuthenticationMethodsLookupStrategy, setDpopProofClaimsValidator, setDpopProofClaimsValidatorLookupStrategy, setDpopProofNonceGenerator, setDpopProofNonceGeneratorLookupStrategy, setDpopProofSignatureValidationConfiguration, setDpopProofSignatureValidationConfigurationLookupStrategy, setForceAuthn, setForceAuthnPredicate, setPostAuthenticationFlows, setPostAuthenticationFlowsLookupStrategy, setProxyCount, setProxyCountLookupStrategy, setRequireDpopProof, setRequireDpopProofPredicate, setTokenEndpointAuthMethod, setTokenEndpointAuthMethodLookupStrategy, setTokenEndpointAuthMethods, setTokenEndpointAuthMethodsLookupStrategy, setUnregisteredClientPolicy, setUnregisteredClientPolicyLookupStrategyMethods inherited from class net.shibboleth.oidc.profile.oauth2.config.impl.AbstractOAuth2InterceptorAwareProfileConfiguration
getMessageHandler, setMessageHandler, setMessageHandlerLookupStrategyMethods inherited from class net.shibboleth.idp.profile.config.AbstractInterceptorAwareProfileConfiguration
getInboundInterceptorFlows, getOutboundInterceptorFlows, setInboundInterceptorFlows, setInboundInterceptorFlowsLookupStrategy, setOutboundInterceptorFlows, setOutboundInterceptorFlowsLookupStrategyMethods inherited from class net.shibboleth.profile.config.AbstractConditionalProfileConfiguration
getActivationCondition, setActivationConditionMethods inherited from class net.shibboleth.profile.config.AbstractProfileConfiguration
equals, getDisallowedFeatures, getSecurityConfiguration, hashCode, isFeatureDisallowed, setDisallowedFeatures, setDisallowedFeaturesLookupStrategy, setSecurityConfiguration, setSecurityConfigurationLookupStrategyMethods inherited from class net.shibboleth.shared.component.AbstractIdentifiableInitializableComponent
setIdMethods inherited from class net.shibboleth.shared.component.AbstractIdentifiedInitializableComponent
doInitialize, ensureId, getId, ifDestroyedThrowDestroyedComponentException, ifInitializedThrowUnmodifiabledComponentException, ifNotInitializedThrowUninitializedComponentExceptionMethods inherited from class net.shibboleth.shared.component.AbstractInitializableComponent
checkComponentActive, checkSetterPreconditions, destroy, doDestroy, initialize, isDestroyed, isInitializedMethods inherited from class java.lang.Object
clone, finalize, getClass, notify, notifyAll, toString, wait, wait, waitMethods inherited from interface net.shibboleth.profile.config.AttributeResolvingProfileConfiguration
isResolveAttributesMethods inherited from interface net.shibboleth.idp.authn.config.AuthenticationProfileConfiguration
getAuthenticationFlows, getDefaultAuthenticationMethods, getPostAuthenticationFlows, getProxyCount, isForceAuthn, isLocalMethods inherited from interface net.shibboleth.profile.config.ConditionalProfileConfiguration
getActivationConditionMethods inherited from interface net.shibboleth.shared.component.IdentifiedComponent
getIdMethods inherited from interface net.shibboleth.idp.profile.config.InterceptorAwareProfileConfiguration
getInboundInterceptorFlows, getOutboundInterceptorFlowsMethods inherited from interface net.shibboleth.oidc.profile.oauth2.config.OAuth2AccessTokenProducingProfileConfiguration
getAccessTokenClaimsSetManipulationStrategy, getAccessTokenLifetime, getAccessTokenType, isAlwaysIssueBearerAccessTokenMethods inherited from interface net.shibboleth.oidc.profile.oauth2.config.OAuth2AuthorizationProfileConfiguration
getHttpRequestMethod, getResponseMode, getResponseModes, getResponseType, getScopes, isRequireAuthenticationRequest, isRequireDpopJkt, isRequirePushedAuthorizationRequestMethods inherited from interface net.shibboleth.oidc.profile.oauth2.config.OAuth2ClientAuthenticableClientProfileConfiguration
getClientCredential, getClientId, getTokenEndpointAuthMethodMethods inherited from interface net.shibboleth.oidc.profile.oauth2.config.OAuth2ClientAuthenticableProfileConfiguration
getClaimsValidator, getTokenEndpointAuthMethods, getUnregisteredClientPolicyMethods inherited from interface net.shibboleth.oidc.profile.oauth2.config.OAuth2DPoPProofValidatingProfileConfiguration
getDpopProofClaimsValidator, getDpopProofNonceGenerator, getDpopProofSignatureValidationConfiguration, isRequireDpopProofMethods inherited from interface net.shibboleth.oidc.profile.oauth2.config.OAuth2FlowAwareProfileConfiguration
isAuthorizationCodeFlowEnabled, isImplicitFlowEnabled, isRefreshTokensEnabledMethods inherited from interface net.shibboleth.oidc.profile.oauth2.config.OAuth2RefreshTokenProducingProfileConfiguration
getRefreshTokenChainLifetime, getRefreshTokenTimeout, getRefreshTokenTypeMethods inherited from interface net.shibboleth.oidc.profile.oauth2.config.OAuth2ScopeValidatingProfileConfiguration
isStrictScopeValidationMethods inherited from interface net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenEncryptionProfileConfiguration
isEncryptionOptionalMethods inherited from interface net.shibboleth.oidc.profile.config.OIDCAuthenticationProfileConfiguration
getAuthenticationContextClassReferenceTranslationStrategy, getAuthenticationMethodsReferencesTranslationStrategy, getDisplay, getLoginHint, getMaxAuthenticationAge, isUseRequestObjectMethods inherited from interface net.shibboleth.oidc.profile.config.OIDCAuthenticationRelyingPartyProfileConfiguration
getRedirectUriOverride, getUserInfoHttpRequestMethod, isEncryptRequestObject, isProxiedAuthnInstant, isRetrieveUserInfoEndpointClaims, isSignRequestObject, isTlsServerValidationSufficientMethods inherited from interface net.shibboleth.oidc.profile.config.OIDCFlowAwareProfileConfiguration
isHybridFlowEnabledMethods inherited from interface net.shibboleth.oidc.profile.config.OIDCIDTokenProducingProfileConfiguration
getAdditionalAudiencesForIdToken, getAlwaysIncludedAttributes, getIDTokenLifetime, getIDTokenManipulationStrategyMethods inherited from interface net.shibboleth.oidc.profile.config.OIDCSSOProfileConfiguration
getCustomRedirectUriValidationStrategy, isAllowPKCEPlain, isForcePKCEMethods inherited from interface net.shibboleth.profile.config.ProfileConfiguration
getDisallowedFeatures, getSecurityConfiguration, isFeatureDisallowed
-
Field Details
-
PROFILE_COUNTER
OAuth2 pushed authorization request profile counter name.- See Also:
-
issuerLookupStrategy
Lookup function to override issuer value. -
requestUriTypeLookupStrategy
Lookup function to supply request URI type. -
requestUriLifetimeLookupStrategy
Lookup function to supply request URI lifetime. -
requestUriClaimsSetManipulationStrategyLookupStrategy
@Nonnull private Function<ProfileRequestContext,BiFunction<ProfileRequestContext, requestUriClaimsSetManipulationStrategyLookupStrategyMap<String, Object>, Map<String, Object>>> Lookup function to supply strategy bi-function for manipulating request URI claims set.
-
-
Constructor Details
-
DefaultOAuth2PushedAuthorizationRequestConfiguration
public DefaultOAuth2PushedAuthorizationRequestConfiguration()Constructor. -
DefaultOAuth2PushedAuthorizationRequestConfiguration
Creates a new configuration instance.- Parameters:
profileId- Unique profile identifier.
-
-
Method Details
-
getIssuer
- Specified by:
getIssuerin interfaceOverriddenIssuerProfileConfiguration- Overrides:
getIssuerin classAbstractOIDCSSOConfiguration
-
setIssuer
Set overridden issuer value.- Overrides:
setIssuerin classAbstractOIDCSSOConfiguration- Parameters:
issuer- issuer value
-
setIssuerLookupStrategy
Sets lookup strategy for overridden issuer value.- Overrides:
setIssuerLookupStrategyin classAbstractOIDCSSOConfiguration- Parameters:
strategy- lookup strategy
-
getRequestUriType
@Nullable @NotEmpty public String getRequestUriType(@Nullable ProfileRequestContext profileRequestContext) Get request URI type.- Specified by:
getRequestUriTypein interfaceOAuth2PushedAuthorizationRequestConfiguration- Parameters:
profileRequestContext- profile request context- Returns:
- request URI type, or null for unspecified/opaque
-
setRequestUriType
Set request URI type.- Parameters:
type- token type, or null for unspecified/opaque
-
setRequestUriTypeLookupStrategy
public void setRequestUriTypeLookupStrategy(@Nonnull Function<ProfileRequestContext, String> strategy) Set lookup strategy for request URI type.- Parameters:
strategy- lookup strategy
-
getRequestUriLifetime
@Positive @Nonnull public Duration getRequestUriLifetime(@Nullable ProfileRequestContext profileRequestContext) Get request URI lifetime.Defaults to 1 minute.
- Specified by:
getRequestUriLifetimein interfaceOAuth2PushedAuthorizationRequestConfiguration- Parameters:
profileRequestContext- profile request context- Returns:
- request URI lifetime
-
setRequestUriLifetime
Set the lifetime of an request URI.- Parameters:
lifetime- lifetime of an request URI in milliseconds
-
setRequestUriLifetimeLookupStrategy
public void setRequestUriLifetimeLookupStrategy(@Nullable Function<ProfileRequestContext, Duration> strategy) Set a lookup strategy for the request URI lifetime.- Parameters:
strategy- lookup strategy
-
getRequestUriClaimsSetManipulationStrategy
@Nullable public BiFunction<ProfileRequestContext,Map<String, getRequestUriClaimsSetManipulationStrategyObject>, Map<String, Object>> (@Nullable ProfileRequestContext profileRequestContext) Get the bi-function for manipulating request URI claims set.- Specified by:
getRequestUriClaimsSetManipulationStrategyin interfaceOAuth2PushedAuthorizationRequestConfiguration- Parameters:
profileRequestContext- profile request context- Returns:
- the bi-function for manipulating request URI claims set
-
setRequestUriClaimsSetManipulationStrategy
public void setRequestUriClaimsSetManipulationStrategy(@Nullable BiFunction<ProfileRequestContext, Map<String, Object>, Map<String, Object>> strategy) Set the bi-function for manipulating request URI claims set.- Parameters:
strategy- bi-function for manipulating request URI claims set
-
setRequestUriClaimsSetManipulationStrategyLookupStrategy
public void setRequestUriClaimsSetManipulationStrategyLookupStrategy(@Nonnull Function<ProfileRequestContext, BiFunction<ProfileRequestContext, Map<String, Object>, Map<String, Object>>> strategy) Set a lookup strategy for the bi-function for manipulating request URI claims set.- Parameters:
strategy- lookup strategy
-