Package net.shibboleth.idp.plugin.authn.oidc.rp.impl

Class ValidateUserInfoJSONObjectClaims

java.lang.Object

net.shibboleth.utilities.java.support.component.AbstractInitializableComponent

org.opensaml.profile.action.AbstractProfileAction

org.opensaml.profile.action.AbstractConditionalProfileAction

net.shibboleth.idp.profile.AbstractProfileAction

net.shibboleth.idp.authn.AbstractAuthenticationAction

net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateUserInfoJSONObjectClaims

All Implemented Interfaces:

Component, DestructableComponent, InitializableComponent, ProfileAction, Aware, MessageSource, MessageSourceAware, Action

public class ValidateUserInfoJSONObjectClaims
extends net.shibboleth.idp.authn.AbstractAuthenticationAction

Validate a successful UserInfo JSON Object Response according to section 5.3.2 of OpenID Connect Core 1.0.

Event:

EventIds.PROCEED_EVENT_ID, OidcEventIds.INVALID_USERINFO_CLAIMS, EventIds.INVALID_PROFILE_CTX

Field Summary

Fields

Modifier and Type	Field	Description
private com.nimbusds.jwt.JWTClaimsSet	idTokenClaims	The stashed id_token claims.
private org.slf4j.Logger	log	Class logger.
private Function<ProfileRequestContext,AccessTokenResponseContext>	tokenResponseContextLookupStrategy	Strategy used to look up the AccessTokenResponseContext.
private UserInfoResponseContext	userInfoCtx	The stashed user info response context.
private Function<ProfileRequestContext,UserInfoResponseContext>	userInfoResponseContextLookupStrategy	Strategy used to look up the UserInfoResponseContext.

Constructor Summary

Constructors

Constructor	Description
ValidateUserInfoJSONObjectClaims()	Constructor.

Method Summary

Modifier and Type	Method	Description
protected void	doExecute(ProfileRequestContext profileRequestContext, net.shibboleth.idp.authn.context.AuthenticationContext authenticationContext)
protected boolean	doPreExecute(ProfileRequestContext profileRequestContext, net.shibboleth.idp.authn.context.AuthenticationContext authenticationContext)
void	setTokenResponseContextLookupStrategy(Function<ProfileRequestContext,AccessTokenResponseContext> strategy)	Set the strategy used to look up a AccessTokenResponseContext.
void	setUserInfoResponseContextLookupStrategy(Function<ProfileRequestContext,UserInfoResponseContext> strategy)	Set the strategy used to look up a UserInfoResponseContext.

Methods inherited from class net.shibboleth.idp.authn.AbstractAuthenticationAction

doExecute, doPreExecute, setAuthenticationContextLookupStrategy

Methods inherited from class net.shibboleth.idp.profile.AbstractProfileAction

doExecute, execute, getMessage, getMessage, getMessage, getProfileContextLookupStrategy, getRequestContext, getResult, setMessageSource, setProfileContextLookupStrategy

Methods inherited from class org.opensaml.profile.action.AbstractConditionalProfileAction

getActivationCondition, setActivationCondition

Methods inherited from class org.opensaml.profile.action.AbstractProfileAction

doPostExecute, doPostExecute, execute, getHttpServletRequest, getHttpServletResponse, getLogPrefix, setHttpServletRequest, setHttpServletResponse

Methods inherited from class net.shibboleth.utilities.java.support.component.AbstractInitializableComponent

destroy, doDestroy, doInitialize, initialize, isDestroyed, isInitialized

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface net.shibboleth.utilities.java.support.component.InitializableComponent

initialize, isInitialized

Field Detail

log

@Nonnull
private final org.slf4j.Logger log

Class logger.

userInfoResponseContextLookupStrategy

@Nonnull
private Function<ProfileRequestContext,UserInfoResponseContext> userInfoResponseContextLookupStrategy

Strategy used to look up the UserInfoResponseContext.

tokenResponseContextLookupStrategy

@Nonnull
private Function<ProfileRequestContext,AccessTokenResponseContext> tokenResponseContextLookupStrategy

Strategy used to look up the AccessTokenResponseContext.

userInfoCtx

@Nullable
private UserInfoResponseContext userInfoCtx

The stashed user info response context.

idTokenClaims

@Nullable
private com.nimbusds.jwt.JWTClaimsSet idTokenClaims

The stashed id_token claims.

Constructor Detail

ValidateUserInfoJSONObjectClaims

public ValidateUserInfoJSONObjectClaims()

Constructor.

Method Detail

setTokenResponseContextLookupStrategy

public void setTokenResponseContextLookupStrategy(@Nonnull
                                                  Function<ProfileRequestContext,AccessTokenResponseContext> strategy)

Set the strategy used to look up a AccessTokenResponseContext.

Parameters:

strategy - lookup strategy

setUserInfoResponseContextLookupStrategy

public void setUserInfoResponseContextLookupStrategy(@Nonnull
                                                     Function<ProfileRequestContext,UserInfoResponseContext> strategy)

Set the strategy used to look up a UserInfoResponseContext.

Parameters:

strategy - lookup strategy

doPreExecute

protected boolean doPreExecute(@Nonnull
                               ProfileRequestContext profileRequestContext,
                               @Nonnull
                               net.shibboleth.idp.authn.context.AuthenticationContext authenticationContext)

Overrides:

doPreExecute in class net.shibboleth.idp.authn.AbstractAuthenticationAction

doExecute

protected void doExecute(@Nonnull
                         ProfileRequestContext profileRequestContext,
                         @Nonnull
                         net.shibboleth.idp.authn.context.AuthenticationContext authenticationContext)

Overrides:

doExecute in class net.shibboleth.idp.authn.AbstractAuthenticationAction