Class RequiresSignatureVerificationPredicate
- java.lang.Object
-
- net.shibboleth.idp.plugin.authn.oidc.rp.messaging.context.logic.RequiresSignatureVerificationPredicate
-
- All Implemented Interfaces:
Predicate<MessageContext>
public class RequiresSignatureVerificationPredicate extends Object implements Predicate<MessageContext>
Is successful TLS credential verification enough to validate the JWT in question? Defaults to true — signature verification is required.
-
-
Field Summary
Fields Modifier and Type Field Description private Function<MessageContext,AbstractAuthenticatableOIDCContext>authenticatableOIDCContextLookupStrategyStrategy used to lookup theAbstractAuthenticatableOIDCContextto test.private org.slf4j.LoggerlogClass logger.private booleantlsServerValidationOnlyIf true and theAbstractAuthenticatableOIDCContextis authenticated, the predicate returns false (no additional signature verification required).
-
Constructor Summary
Constructors Constructor Description RequiresSignatureVerificationPredicate(Function<MessageContext,AbstractAuthenticatableOIDCContext> strategy)Constructor.
-
Method Summary
All Methods Instance Methods Concrete Methods Modifier and Type Method Description voidsetTlsServerValidationOnly(boolean flag)Set whether TLS server validation is sufficient (true), or if JWT signature verification should still occur (false).booleantest(MessageContext msgContext)
-
-
-
Field Detail
-
log
@Nonnull private final org.slf4j.Logger log
Class logger.
-
tlsServerValidationOnly
private boolean tlsServerValidationOnly
If true and theAbstractAuthenticatableOIDCContextis authenticated, the predicate returns false (no additional signature verification required).
-
authenticatableOIDCContextLookupStrategy
@Nonnull private final Function<MessageContext,AbstractAuthenticatableOIDCContext> authenticatableOIDCContextLookupStrategy
Strategy used to lookup theAbstractAuthenticatableOIDCContextto test.
-
-
Constructor Detail
-
RequiresSignatureVerificationPredicate
public RequiresSignatureVerificationPredicate(@Nonnull @ParameterName(name="authenticatableOIDCContextLookupStrategy") Function<MessageContext,AbstractAuthenticatableOIDCContext> strategy)
Constructor.- Parameters:
strategy- the strategy used to locate theAbstractAuthenticatableOIDCContextto test
-
-
Method Detail
-
setTlsServerValidationOnly
public void setTlsServerValidationOnly(boolean flag)
Set whether TLS server validation is sufficient (true), or if JWT signature verification should still occur (false).- Parameters:
flag- the flag
-
test
public boolean test(@Nonnull MessageContext msgContext)- Specified by:
testin interfacePredicate<MessageContext>
-
-