Package net.shibboleth.idp.plugin.authn.oidc.rp.impl

Class AbstractOIDCAuthenticationResponseAction

java.lang.Object

net.shibboleth.utilities.java.support.component.AbstractInitializableComponent

org.opensaml.profile.action.AbstractProfileAction

org.opensaml.profile.action.AbstractConditionalProfileAction

net.shibboleth.idp.profile.AbstractProfileAction

net.shibboleth.idp.authn.AbstractAuthenticationAction

net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractOIDCAuthenticationResponseAction

All Implemented Interfaces:

Component, DestructableComponent, InitializableComponent, ProfileAction, Aware, MessageSource, MessageSourceAware, Action

Direct Known Subclasses:

AbstractHttpOIDCAuthenticationAction, ProcessEndUserClaims, ValidateOAuthAccessTokenResponse, ValidateResponseState, ValidateTokenClaims

public abstract class AbstractOIDCAuthenticationResponseAction
extends net.shibboleth.idp.authn.AbstractAuthenticationAction

Abstract class for actions based on the AuthenticationResponse located under the InOutOperationContext.getInboundMessageContext() and the built OIDCAuthenticationRequest located under the InOutOperationContext.getOutboundMessageContext().

Also makes available the OpenID Provider metadata context

Field Summary

Fields

Modifier and Type	Field	Description
private net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest	authnRequest	OIDC authentication request built by the IdP.
private com.nimbusds.openid.connect.sdk.AuthenticationSuccessResponse	authnResponse	OIDC authentication response from upstream OP.
private org.slf4j.Logger	log	Class logger.
private net.shibboleth.oidc.metadata.context.OIDCProviderMetadataContext	providerMetadataContext	OIDC Metadata context.
private Function<ProfileRequestContext,net.shibboleth.oidc.metadata.context.OIDCProviderMetadataContext>	providerMetadataLookupStrategy	Lookup strategy to locate the OP metadata to use.

Constructor Summary

Constructors

Modifier	Constructor	Description
protected	AbstractOIDCAuthenticationResponseAction()	Constructor.

Method Summary

Modifier and Type	Method	Description
protected boolean	doPreExecute(ProfileRequestContext profileRequestContext, net.shibboleth.idp.authn.context.AuthenticationContext authenticationContext)
protected net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest	getAuthenticationRequest()	Returns the authentication request build by this IdP.
protected com.nimbusds.openid.connect.sdk.AuthenticationSuccessResponse	getAuthenticationResponse()	Returns the authentication response from the upstream OP.
protected net.shibboleth.oidc.metadata.context.OIDCProviderMetadataContext	getProviderMetadataContext()	Returns the OIDC provider metadata context.
void	setProviderMetadataLookupStrategy(Function<ProfileRequestContext,net.shibboleth.oidc.metadata.context.OIDCProviderMetadataContext> strategy)	Set the lookup strategy to locate the OpenID providers metadata.

Methods inherited from class net.shibboleth.idp.authn.AbstractAuthenticationAction

doExecute, doExecute, doPreExecute, setAuthenticationContextLookupStrategy

Methods inherited from class net.shibboleth.idp.profile.AbstractProfileAction

doExecute, execute, getMessage, getMessage, getMessage, getProfileContextLookupStrategy, getRequestContext, getResult, setMessageSource, setProfileContextLookupStrategy

Methods inherited from class org.opensaml.profile.action.AbstractConditionalProfileAction

getActivationCondition, setActivationCondition

Methods inherited from class org.opensaml.profile.action.AbstractProfileAction

doPostExecute, doPostExecute, execute, getHttpServletRequest, getHttpServletResponse, getLogPrefix, setHttpServletRequest, setHttpServletResponse

Methods inherited from class net.shibboleth.utilities.java.support.component.AbstractInitializableComponent

destroy, doDestroy, doInitialize, initialize, isDestroyed, isInitialized

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface net.shibboleth.utilities.java.support.component.InitializableComponent

initialize, isInitialized

Field Detail

log

@Nonnull
private final org.slf4j.Logger log

Class logger.

providerMetadataLookupStrategy

@Nonnull
private Function<ProfileRequestContext,net.shibboleth.oidc.metadata.context.OIDCProviderMetadataContext> providerMetadataLookupStrategy

Lookup strategy to locate the OP metadata to use.

authnResponse

@Nullable
private com.nimbusds.openid.connect.sdk.AuthenticationSuccessResponse authnResponse

OIDC authentication response from upstream OP.

authnRequest

@Nullable
private net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest authnRequest

OIDC authentication request built by the IdP.

providerMetadataContext

@Nullable
private net.shibboleth.oidc.metadata.context.OIDCProviderMetadataContext providerMetadataContext

OIDC Metadata context.

Constructor Detail

AbstractOIDCAuthenticationResponseAction

protected AbstractOIDCAuthenticationResponseAction()

Constructor.

Method Detail

setProviderMetadataLookupStrategy

public void setProviderMetadataLookupStrategy(@Nonnull
                                              Function<ProfileRequestContext,net.shibboleth.oidc.metadata.context.OIDCProviderMetadataContext> strategy)

Set the lookup strategy to locate the OpenID providers metadata.

Parameters:

strategy - the strategy.

getAuthenticationResponse

@Nullable
protected com.nimbusds.openid.connect.sdk.AuthenticationSuccessResponse getAuthenticationResponse()

Returns the authentication response from the upstream OP. Should never be null after AbstractAuthenticationAction.doPreExecute(ProfileRequestContext) has been called.

Returns:

the authentication response.

getAuthenticationRequest

@Nullable
protected net.shibboleth.oidc.profile.core.OIDCAuthenticationRequest getAuthenticationRequest()

Returns the authentication request build by this IdP. Should never be null after AbstractAuthenticationAction.doPreExecute(ProfileRequestContext) has been called.

Returns:

the authentication request.

getProviderMetadataContext

@Nullable
protected net.shibboleth.oidc.metadata.context.OIDCProviderMetadataContext getProviderMetadataContext()

Returns the OIDC provider metadata context. Should never be null after AbstractAuthenticationAction.doPreExecute(ProfileRequestContext) has been called.

Returns:

The provider metadata context.

doPreExecute

protected boolean doPreExecute(@Nonnull
                               ProfileRequestContext profileRequestContext,
                               @Nonnull
                               net.shibboleth.idp.authn.context.AuthenticationContext authenticationContext)

Overrides:

doPreExecute in class net.shibboleth.idp.authn.AbstractAuthenticationAction