Package net.shibboleth.oidc.security.jwt.claims.impl

Class ACRClaimsValidator

java.lang.Object

net.shibboleth.shared.component.AbstractInitializableComponent

net.shibboleth.shared.component.AbstractIdentifiedInitializableComponent

net.shibboleth.shared.component.AbstractIdentifiableInitializableComponent

net.shibboleth.oidc.jwt.claims.AbstractClaimsValidator

net.shibboleth.oidc.security.jwt.claims.impl.ACRClaimsValidator

All Implemented Interfaces:

ClaimsValidator, Component, DestructableComponent, IdentifiableComponent, IdentifiedComponent, InitializableComponent

@ThreadSafeAfterInit
public class ACRClaimsValidator
extends AbstractClaimsValidator

Check the ACR values requested were received.

Only those essential ACR requested values are validated. Voluntary ACR claims optionally appear in the returned claims set and can not be meaningfully validated here.

Field Summary

Fields

Modifier and Type	Field	Description
private BiFunction<ProfileRequestContext,JWTClaimsSet,List<String>>	requestedEssentialAcrsClaimLookupStrategy	Strategy to find the essential requested ACR claim values.

Constructor Summary

Constructors

Constructor	Description
ACRClaimsValidator()

Method Summary

Modifier and Type	Method	Description
protected void	doInitialize()
protected void	doValidate(JWTClaimsSet claims, ProfileRequestContext context)	Perform validation of the given claims supported by the supplied context.
void	setRequestedEssentialAcrsClaimLookupStrategy(BiFunction<ProfileRequestContext,JWTClaimsSet,List<String>> strategy)	Set the strategy to locate the requested ACR claim values, if any.

Methods inherited from class net.shibboleth.oidc.jwt.claims.AbstractClaimsValidator

setActivationCondition, validate

Methods inherited from class net.shibboleth.shared.component.AbstractIdentifiableInitializableComponent

setId

Methods inherited from class net.shibboleth.shared.component.AbstractIdentifiedInitializableComponent

ensureId, getId, ifDestroyedThrowDestroyedComponentException, ifInitializedThrowUnmodifiabledComponentException, ifNotInitializedThrowUninitializedComponentException

Methods inherited from class net.shibboleth.shared.component.AbstractInitializableComponent

checkComponentActive, checkSetterPreconditions, destroy, doDestroy, initialize, isDestroyed, isInitialized

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface net.shibboleth.shared.component.IdentifiableComponent

setId

Methods inherited from interface net.shibboleth.shared.component.IdentifiedComponent

getId

Field Details

requestedEssentialAcrsClaimLookupStrategy

@NonnullAfterInit
private BiFunction<ProfileRequestContext,JWTClaimsSet,List<String>> requestedEssentialAcrsClaimLookupStrategy

Strategy to find the essential requested ACR claim values.

Constructor Details

ACRClaimsValidator

public ACRClaimsValidator()

Method Details

doInitialize

protected void doInitialize()
                     throws ComponentInitializationException

Overrides:

doInitialize in class AbstractIdentifiedInitializableComponent

Throws:

ComponentInitializationException

setRequestedEssentialAcrsClaimLookupStrategy

public void setRequestedEssentialAcrsClaimLookupStrategy(@Nonnull
 BiFunction<ProfileRequestContext,JWTClaimsSet,List<String>> strategy)

Set the strategy to locate the requested ACR claim values, if any.

Parameters:

strategy - the strategy

doValidate

protected void doValidate(@Nonnull
 JWTClaimsSet claims,
 @Nonnull
 ProfileRequestContext context)
                   throws JWTValidationException

Description copied from class: AbstractClaimsValidator

Perform validation of the given claims supported by the supplied context.

Specified by:

doValidate in class AbstractClaimsValidator

Parameters:

claims - the claims to validate.

context - the profile request context.

Throws:

JWTValidationException - when validation is unsuccessful due to a failed attempt