Package net.shibboleth.oidc.security.jwt.claims.impl

Class SubFromIDTokenLookupFunction

java.lang.Object

net.shibboleth.oidc.security.jwt.claims.impl.AbstractTokenResponseLookupStrategy

net.shibboleth.oidc.security.jwt.claims.impl.SubFromIDTokenLookupFunction

All Implemented Interfaces:

BiFunction<ProfileRequestContext,JWTClaimsSet,String>

@ThreadSafe
public class SubFromIDTokenLookupFunction
extends AbstractTokenResponseLookupStrategy
implements BiFunction<ProfileRequestContext,JWTClaimsSet,String>

A function that pulls the subject 'sub' out of the id_token in the AccessTokenResponseContext.

Field Summary

Fields

Modifier and Type	Field	Description
private final org.slf4j.Logger	log	Class logger.

Constructor Summary

Constructors

Constructor	Description
SubFromIDTokenLookupFunction()	Constructor.
SubFromIDTokenLookupFunction(Function<ProfileRequestContext,AccessTokenResponseContext> strategy)	Constructor.

Method Summary

Modifier and Type	Method	Description
String	apply(ProfileRequestContext prc, JWTClaimsSet claimsSet)	The input claims set is ignored because it belongs to the JWT that is being tested.

Methods inherited from class net.shibboleth.oidc.security.jwt.claims.impl.AbstractTokenResponseLookupStrategy

getTokenResponseContextLookupStrategy

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface java.util.function.BiFunction

andThen

Field Details

log

@Nonnull
private final org.slf4j.Logger log

Class logger.

Constructor Details

SubFromIDTokenLookupFunction

public SubFromIDTokenLookupFunction()

Constructor.

SubFromIDTokenLookupFunction

public SubFromIDTokenLookupFunction(@Nonnull @ParameterName(name="accessTokenContextLookupStrategy")
 Function<ProfileRequestContext,AccessTokenResponseContext> strategy)

Constructor.

Parameters:

strategy - the AccessTokenResponseContext lookup strategy to use.

Method Details

apply

@Nullable
public String apply(@Nullable
 ProfileRequestContext prc,
 @Nullable
 JWTClaimsSet claimsSet)

The input claims set is ignored because it belongs to the JWT that is being tested. Here we lookup the 'sub' claim from the id_token in a different context.

Specified by:

apply in interface BiFunction<ProfileRequestContext,JWTClaimsSet,String>