Package net.shibboleth.sp.oidc.profile.impl

Class ValidationClaimStrippingSanitizationStrategy

java.lang.Object

net.shibboleth.sp.oidc.profile.impl.ValidationClaimStrippingSanitizationStrategy

All Implemented Interfaces:

Function<com.nimbusds.openid.connect.sdk.claims.ClaimsSet,com.nimbusds.openid.connect.sdk.claims.ClaimsSet>, UnaryOperator<com.nimbusds.openid.connect.sdk.claims.ClaimsSet>

public class ValidationClaimStrippingSanitizationStrategy
extends Object
implements UnaryOperator<com.nimbusds.openid.connect.sdk.claims.ClaimsSet>

Produce a claims set from the JWT claims set without either the validation claims or claims with null values. Leaving the identity, authorization, and misc. claims.

Noting this strategy is less restrictive over what is filters for the OIDC SP than it is for the OIDC-Proxy case, as more information could transit from the Hub back to the agent.

Field Summary

Fields

Modifier and Type	Field	Description
private final Set<String>	validationClaims	The set of validation claims to filter out of the input claims.

Constructor Summary

Constructors

Constructor	Description
ValidationClaimStrippingSanitizationStrategy()	Constructor.

Method Summary

Modifier and Type	Method	Description
com.nimbusds.openid.connect.sdk.claims.ClaimsSet	apply(com.nimbusds.openid.connect.sdk.claims.ClaimsSet jwtClaims)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface java.util.function.Function

andThen, compose

Field Details

validationClaims

@Nonnull
private final Set<String> validationClaims

The set of validation claims to filter out of the input claims.

Constructor Details

ValidationClaimStrippingSanitizationStrategy

public ValidationClaimStrippingSanitizationStrategy()

Constructor.

Method Details

apply

public com.nimbusds.openid.connect.sdk.claims.ClaimsSet apply(@Nullable
 com.nimbusds.openid.connect.sdk.claims.ClaimsSet jwtClaims)

Specified by:

apply in interface Function<com.nimbusds.openid.connect.sdk.claims.ClaimsSet,com.nimbusds.openid.connect.sdk.claims.ClaimsSet>