Package net.shibboleth.sp.oidc.profile.impl
package net.shibboleth.sp.oidc.profile.impl
OIDC Relying Party profile implementation classes.
-
ClassesClassDescriptionAbstract class for actions based on the
AuthenticationResponselocated under theInOutOperationContext.getInboundMessageContext().AbstractHttpOAuthAction<T extends com.nimbusds.oauth2.sdk.Response>An abstract class for OIDC/OAuth actions that make synchronous HTTP requests and return types ofresponses.Base class for message handlers that process and apply values of OpenID Connect logout requests.An action that adds, if enabled in profile config, the client address to State Data.Locates theProviderMetadataResolverassociated with theApplicationmaking an agent request.AFunctionthat producesStateDatarepresenting authentication request state that is required for validating the authentication response.Action that creates a Request ObjectJWT, and sets it to the work contextOIDCAuthenticationRequestlocated underInOutOperationContext.getOutboundMessageContext().An action that looks upStateDatausing a configured lookup strategy and adds it to aStateDataContextobtained from the profile request context using a configured creation strategy.A default merging strategy for combing claims in the UserInfo response with those from the id_token.Action to exchange the authorization code in the authentication response for an OAuth access token which contains an OIDC id_token.An action that extracts OIDC End-User claims from the combined id_token and UserInfo response claims in theEndUserClaimsContext.An action that creates anOIDCAuthenticationRequestshell to populate in future steps, and sets it to the outbound message context.An action that creates anOIDCLogoutRequestshell to populate in future steps, and sets it to the outbound message context.Anactionthat resolves the Client Authentication method for the chosen OpenID Provider (issuer) from the profile configuration, and adds it to theOAuth2ClientAuthenticationContext.Anactionthat resolves the client identifier and redirect URI for the chosen provider (issuer).Initialize an outbound message context with an OIDC peer entity context ready for an authorization/authentication request to be built.An action that initializes theOIDCPeerEntityContextbased on the issuer value from theStateData.Action that adds aRelyingPartyContextto the currentProfileRequestContexttree via a creation function.AFunctionthat producesStateDatarepresenting logout request state that is required for validating the logout response (if there is one).OIDC-specific subclass of a token consumer response action.Action that adds an inboundMessageContextand aOIDCPeerEntityContextto theProfileRequestContextbased on the identity of a relying party.OAuth/OIDC-specific action that processes the state token by setting it as the state value.Process the end-user claims from the id_token and possible UserInfo claims sets.Processes a request to potentially initiate a OIDC RP-Initiated logout by examining the input to recover the required id_token information from the opaque portion of the session created by the token consumer flow and store in a newly createdOIDCLogoutContext.A consumer that sets the decoded issuer value onto theOIDCPeerEntityContext(creating a peer entity context if none already exists).Function to perform "standard" extraction of data into attributes.Request information from the UserInfo OAuth2.0 endpoint using the access_token already present in the context.An action that checks the inbound authentication response indicated success as opposed to an error.Validation action that validates the OAuth Access Token Response against RFC 6749 section 5.1 and OpenID Connect Core 1.0 section 3.1.3.3.Action that validates the claims of a JWT using the suppliedclaims validator.Validate a successful UserInfo JSON Object Response according to section 5.3.2 of OpenID Connect Core 1.0.Produce a claims set from the JWT claims set without either the validation claims or claims with null values.