Package net.shibboleth.sp.oidc.profile.config.logic

Class RequestedACRValidationActivationCondition

java.lang.Object

net.shibboleth.sp.oidc.profile.config.logic.RequestedACRValidationActivationCondition

All Implemented Interfaces:

BiPredicate<org.opensaml.profile.context.ProfileRequestContext,com.nimbusds.jwt.JWTClaimsSet>

@ThreadSafe
public class RequestedACRValidationActivationCondition
extends Object
implements BiPredicate<org.opensaml.profile.context.ProfileRequestContext,com.nimbusds.jwt.JWTClaimsSet>

An activation condition that activates if the profile configuration indicates that ACR value in the id_token should be validated against those in the request.

If, for some reason, the profile configuration cannot be determined, the condition evaluates to true. That is, ACR validation will be performed.

Field Summary

Fields

Modifier and Type	Field	Description
private final org.slf4j.Logger	log	Class logger.
private final Function<org.opensaml.profile.context.ProfileRequestContext,net.shibboleth.profile.context.RelyingPartyContext>	relyingPartyContextLookupStrategy	Lookup function for relying party context.

Constructor Summary

Constructors

Constructor	Description
RequestedACRValidationActivationCondition(Function<org.opensaml.profile.context.ProfileRequestContext,net.shibboleth.profile.context.RelyingPartyContext> strategy)	Constructor.

Method Summary

Modifier and Type	Method	Description
boolean	test(org.opensaml.profile.context.ProfileRequestContext prc, com.nimbusds.jwt.JWTClaimsSet claims)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface java.util.function.BiPredicate

and, negate, or

Field Details

log

@Nonnull
private final org.slf4j.Logger log

Class logger.

relyingPartyContextLookupStrategy

@Nonnull
private final Function<org.opensaml.profile.context.ProfileRequestContext,net.shibboleth.profile.context.RelyingPartyContext> relyingPartyContextLookupStrategy

Lookup function for relying party context.

Constructor Details

RequestedACRValidationActivationCondition

public RequestedACRValidationActivationCondition(@ParameterName(name="relyingPartyContextLookupStrategy") @Nonnull
 Function<org.opensaml.profile.context.ProfileRequestContext,net.shibboleth.profile.context.RelyingPartyContext> strategy)

Constructor.

Parameters:

strategy - the strategy to find the relying party context

Method Details

test

public boolean test(@Nullable
 org.opensaml.profile.context.ProfileRequestContext prc,
 @Nullable
 com.nimbusds.jwt.JWTClaimsSet claims)

Specified by:

test in interface BiPredicate<org.opensaml.profile.context.ProfileRequestContext,com.nimbusds.jwt.JWTClaimsSet>