All Classes

Class	Description
AbstractAuthenticatableOIDCContext	An abstract base class for subcontexts that carry information which may be authenticated.
AbstractOIDCEntityContext	Abstract base class for subcontexts that carry information about a OIDC entity.
AbstractUserInfoResponseTypeCondition	Abstract predicate for pulling out the UserInfoResponseContext.
AccessTokenResponseContext	A context to hold an OIDC token request response.
ClientIDFromOAuth2ClientContextFunction	A function that pulls the client_id out of the OAuth2ClientContext.
DefaultEndUserClaimsLookupStrategy	Function that extracts the end-user's claims from the EndUserClaimsContext.
DefaultIDTokenLookupStrategy	Function that extracts the id_token from the AccessTokenResponseContext.
DefaultUserInfoTokenLookupStrategy	Function that extracts the id_token from the AccessTokenResponseContext.
EncryptRequestObjectPredicate	A predicate that determines if the RequestObject JWT should be encrypted based on the profile configuration.
EndUserClaimsContext	A context to hold the final set of claims associated with an authenticated end-user.
ExtraAudiencesLookupStrategy	Locate additional accepted audiences from the additional audiences for ID Token profile config value.
IDTokenInAccessTokenUpdateStrategy	Consumer to update the id_token in the AccessTokenResponseContext.
IDTokenJOSEHeaderLookupStrategy	Function that extracts the JWS JOSE header from the id_token inside the AccessTokenResponseContext.
InboundMessageContextFromProxyPRC	A ContextDataLookupFunction that returns the inbound MessageContext for a ProfileRequestContext located inside an AuthenticationContext i.e.
IsCodeFlowPredicate	A predicate that determines if the flow is a 'code-flow' using the AuthenticationRequest that is inside the message context.
IsHybridFlowPredicate	A predicate that determines if the flow is a 'hybrid-flow' using the AuthenticationRequest that is inside the message context.
IsImplicitFlowPredicate	A predicate that determines if the flow is a 'implicit-flow' using the AuthenticationRequest that is inside the message context.
JWTClaimsSetFromRequestObjectLookupFunction	Extract the Payload from the Request Object inside the OIDCAuthenticationRequest.
JWTUserInfoResponse	A UserInfo response returned as a JWT which maybe signed and or encrypted.
MaxAgeFromProfileLookupFunction	Locate the maximum authentication age from the profile request context.
OAuth2ClientContext	A context to store information pertaining to the OAuth2 client (Relying Party) to use in communication with a OpenID Provider.
OIDCAuthnContext	Manages state during proxied OIDC authentication.
OIDCPeerEntityContext	Lightweight subcontext that carries information about a OIDC peer entity.
OIDCProviderMetadataFromOuboundPeerLookupStrategy	Lookup function to extract the OIDCProviderMetadataContext from the OIDCPeerEntityContext in the outbound message.
OIDCProxyException	An exception to signal a general Duo error.
OIDCRPException	An exception to signal a general OIDC RelyingParty error.
OIDCSubjectIdentifierPrincipal	Principal based on an OIDC 'sub' (subject) identifier.
OutboundMessageContextFromProxyPRC	A ContextDataLookupFunction that returns the outbound MessageContext for a ProfileRequestContext located inside an AuthenticationContext i.e.
OutboundMessageHandlerContext	A context to stash controller parameters for use by message handlers.
PayloadFromRequestObjectLookupFunction	Extract the Payload from the Request Object inside the OIDCAuthenticationRequest.
PlainUserInfoResponse	A UserInfo response that was a plain JSON object with claims.
RawTokenResponseLookupStrategy	Function that extracts the raw token response from the AccessTokenResponseContext.
RedirectUriLookupFunction	Pull a redirect_uri from the Relying Party profile config if present.
RequestObjectRequiredAndSupported	Tests whether a request object should be build, and if it is supported by the upstream OP.
RequestObjectSupportedSignatureSigningAlgorithms	Pull out the request object supported signature signing algorithms from the metadata.
RequestObjectTokenUpdateStrategy	Consumer that adds the JWT back to the Request Object in the OIDCAuthenticationRequest.
RequiresSignatureVerificationPredicate	Is successful TLS credential verification enough to validate the JWT in question? Defaults to true — signature verification is required.
SignRequestObjectPredicate	A predicate that determines if the RequestObject JWT should be signed based on the profile configuration.
SubFromIDTokenLookupFunction	A function that pulls the subject 'sub' out of the id_token in the AccessTokenResponseContext.
TokenResponseIDTokenLookupStrategy	Return the raw base64 encoded id_token from the TokenResponseContext, or null if not found.
UserInfoEncryptedJWTResponseTypeCondition	Return true if the UserInfo response was an encrypted JWT type.
UserInfoInUserInfoResponseContextUpdateStrategy	Consumer strategy to update the UserInfo JWT in the UserInfoResponseContext.
UserInfoLookupCondition	Checks whether the UserInfo endpoint should be accessed to retrieve claims about the authenticated end-user.
UserInfoPlainResponseTypeCondition	Condition that returns true if the UserInfo response was an plain JSON type i.e.
UserInfoResponse	A User information response.
UserInfoResponse.UserInfoResponseType	Which type of response is this.
UserInfoResponseContext	A context to hold the response from the UserInfo endpoint.
UserInfoSignedJWTResponseTypeCondition	Return true if the UserInfo response was a signed JWT type.
Version	Class for getting and printing the version of the plugin.