Package net.shibboleth.sp.oidc.profile.impl
package net.shibboleth.sp.oidc.profile.impl
OIDC Relying Party profile implementation classes.
-
ClassesClassDescriptionAbstract class for actions based on the
AuthenticationResponselocated under theInOutOperationContext.getInboundMessageContext().AbstractHttpOAuthAction<T extends com.nimbusds.oauth2.sdk.Response>An abstract class for OIDC/OAuth actions that make synchronous HTTP requests and return types ofresponses.Locates theProviderMetadataResolverassociated with theApplicationmaking an agent request.AFunctionthat producesStateDatarepresenting authentication request state that is required for validating the authentication response.Action that creates a Request ObjectJWT, and sets it to the work contextOIDCAuthenticationRequestlocated underInOutOperationContext.getOutboundMessageContext().An action that looks upStateDatausing a configured lookup strategy and adds it to aStateDataContextobtained from the profile request context using a configured creation strategy.A default merging strategy for combing claims in the UserInfo response with those from the id_token.Action to exchange the authorization code in the authentication response for an OAuth access token which contains an OIDC id_token.An action that extracts OIDC End-User claims from the combined id_token and UserInfo response claims in theEndUserClaimsContext.An action that creates anOIDCAuthenticationRequestshell to populate in future steps, and sets it to the outbound message context.Anactionthat resolves the Client Authentication method for the chosen OpenID Provider (issuer) from the profile configuration, and adds it to theOAuth2ClientAuthenticationContext.Anactionthat resolves the client identifier and redirect URI for the chosen provider (issuer).Initialize an outbound message context with an OIDC peer entity context ready for an authorization/authentication request to be built.An action that initializes theOIDCPeerEntityContextbased on the issuer value from theStateData.Action that adds aRelyingPartyContextto the currentProfileRequestContexttree via a creation function.OIDC-specific subclass of a token consumer response action.Action that adds an inboundMessageContextand aOIDCPeerEntityContextto theProfileRequestContextbased on the identity of a relying party.Process the end-user claims from the id_token and possible UserInfo claims sets.A consumer that sets the decoded issuer value onto theOIDCPeerEntityContext(creating a peer entity context if none already exists).Function to perform "standard" extraction of data into attributes.Request information from the UserInfo OAuth2.0 endpoint using the access_token already present in the context.An action that checks the inbound authentication response indicated success as opposed to an error.Validation action that validates the OAuth Access Token Response against RFC 6749 section 5.1 and OpenID Connect Core 1.0 section 3.1.3.3.Action that validates the claims of a JWT using the suppliedclaims validator.Validate a successful UserInfo JSON Object Response according to section 5.3.2 of OpenID Connect Core 1.0.Produce a claims set from the JWT claims set without either the validation claims or claims with null values.