All Classes

Class Summary

Class	Description
AbstractHttpOIDCAuthenticationAction<T extends com.nimbusds.oauth2.sdk.Response>	An abstract class for OIDC actions that make synchronous HTTP requests and return responses.
AbstractJSONResponseDecoderFunction<T>	Abstract class for JSON based response decoders.
AbstractOIDCAuthenticationRequestActionMessageHandler	An abstract message handler that runs inside an WebFlowMessageHandlerAdaptor that provides functions to make available various OIDC contexts.
AbstractOIDCAuthenticationRequestMessageHandler	An abstract message handler that does *not* run inside an WebFlowMessageHandlerAdaptor.
AbstractOIDCAuthenticationResponseAction	Abstract class for actions based on the AuthenticationResponse located under the InOutOperationContext.getInboundMessageContext() and the built OIDCAuthenticationRequest located under the InOutOperationContext.getOutboundMessageContext().
AbstractRequestEncoderFunction	Abstract request encoder function that pulls out various contexts and request/response messages.
AccessTokenToPrivateCredentialsMappingStrategy	A mapping strategy that locates the AccessTokenResponseContext from the ProfileRequestContext and constructs and returns an OAuth2AccessTokenPrincipal from the access_token, token_type, and expires_in.
AddAuthenticationContextClassReferencesHandler	A message handler that adds any authentication context class references from the those derived from the profile config - which may be proxied and mapped from the original request.
AddEndpointURIHandler	A message handler that adds the authorization endpoint URI from the providers metadata to the under constructions authentication request.
AddForceAuthenticationHandler	An action that sets the 'prompt' parameter to 'login' and max_age to 0 seconds, iff force authn was requested by the upstream SP (or is overridden in the profile config).
AddLoginHintHandler	Message handler that adds the login_hint parameter based on any defined in the profile configuration.
AddMaxAgeHandler	Message handler that adds the max_age parameter based on any defined in the profile configuration.
AddNonceHandler	A message handler that adds a nonce from a lookup strategy to the authentication request.
AddRedirectURIHandler	A message handler that adds a redirect_uri to the authentication request.
AddRequestedClaimsHandler	A message handler that adds requested claims to the under constructions authentication request.
AddResponseTypeAndModeHandler	Action that populates the authentication request response_mode and response_type from various strategies, by default from the profile configuration.
AddScopesHandler	A message handler that adds the scopes from the profile request object to the authentication request.
AddStateHandler	Add state to the authentication request URL and the request object claims (if present).
AuthenticationRequestNonceClaimLookupStrategy	Lookup strategy that finds the nonce from the OIDCAuthenticationRequest.
AuthorizationController	Servlet compatible with the ExternalAuthentication interface that begins, by HTTP redirect, an OpenID Connect authentication request to an OpenID Connect Provider (an OAuth 2.0 Authorization Server that supports OpenID Connect).
BuildPlainRequestObjectJWT	If the Request Object claims are present in the authentication request, convert them into a JWTClaimsSet inside a PlainJWT.
BuildRequestObject	Action that creates a Request Object JWT, and sets it to the work context OIDCAuthenticationRequest located under InOutOperationContext.getOutboundMessageContext().
DefaultAccessTokenResponseDecoder	Default access token response decoder, which converts a successful HTTP response into an OIDCTokenResponse.
DefaultAuthCodeTokenRequestEncoder	A token request encoder that builds an OAuth2.0 Access Token Request for an authorization_code grant and returns an HttpUriRequest.
DefaultClaimMergingStrategy	A default merging strategy for combing claims in the UserInfo response with those from the id_token.
DefaultClaimSanitizationStrategy	Produce a claims set from the JWT claims set without the validation claims, leaving the identity, authorization, and misc.
DefaultRedirectUriCreationFunction	Constructive, pure, function that returns a redirect_uri from one of (ordered): A pre-registered redirect_uri on the OAuth2ClientContext.getRedirectUriOverride().
DefaultUserInfoRequestEncoder	Default encoder for UserInfo requests.
DefaultUserInfoResponseDecoder	Response decoder for UserInfo responses.
ExchangeCodeForAccessToken	Action to exchange the authorization code in the authentication response for an OAuth access token which contains an OIDC id_token.
FixedStringAuditExtractor	A simple audit extractor that allows a fixed string to be logged.
InitializeAuthorizationRequest	An action that creates an OIDCAuthenticationRequest shell to populate in future steps, and sets it to the outbound message context.
InitializeBlankOutboundResponseMessageContext	Action that adds an outbound MessageContext to the outbound message context inside the ProfileRequestContext.
InitializeOAuth2ClientAuthenticationContext	An action that resolves the Client Authentication method for the chosen upstream OpenID Provider (issuer) from the profile configuration.
InitializeOAuth2ClientContext	An action that resolves the client identifier and redirect URI for the chosen provider (issuer).
InitializeOutboundAuthorizationRequestMessageContext	Initialize an outbound message context with an OIDC peer entity context ready for an authorization/authentication request to be built.
InitializeRelyingPartyContext	Action that adds a RelyingPartyContext to the current ProfileRequestContext tree via a creation function.
InitializeUnverifiedRelyingPartyContext	Action that adds an unverified RelyingPartyContext to the current ProfileRequestContext tree via a creation function.
ManyValuesIntegerComparisonPredicate	Predicate that returns true if the test integer is greater than 1.
NonceValidationActivationCondition	Determines if nonce validation should occur.
OIDCProviderMetadataLookupHandler	Handler for inbound OIDC protocol messages that attempts to locate OIDC metadata for a OP (issuer), and attaches it with a OIDCMetadataContext as a child of a pre-existing instance of MessageContext.
OIDCProxySupport	Support class for OIDC proxy related implementations.
OIDCRPModule	IdP Module implementation.
OIDCRPPlugin	Plugin description about the OIDC-RP plugin.
PrepareOIDCInboundMessageContext	Action that adds an inbound MessageContext and a OIDCPeerEntityContext to the ProfileRequestContext based on the identity of a relying party, by default from the AuthenticationContext.getAuthenticatingAuthority().
ProcessEndUserClaims	Process the end-user claims from the id_token and possible UserInfo claims sets.
ProxyAuthenticationFlowAuditExtractor	A Function that returns the authentication flow ID from the attempted flow of the parent context used to satisfy a request.
SetAuthenticationRequestTimeHandler	Handler that adds the authentication request time to the authentication request.
SimpleOIDCSubjectIdentifierCanonicalization	An action that operates on a SubjectCanonicalizationContext child of the current ProfileRequestContext, and transforms the input Subject into a principal name by searching for one and only one OIDCSubjectIdentifierPrincipal custom principal.
SimpleOIDCSubjectIdentifierCanonicalization.ActivationCondition	A predicate that determines if this action can run or not.
TransitionActionWriteAuditLog	A simple extension of the WriteAuditLog action that creates an Event with the string literal 'success', such that the write audit log action can be used inside a transition and does not prevent the transition from proceeding.
UnsupportedResponseTypeAction	Simple action to log the response from an unsupported grant type.
UserInfoEndpointLookup	Request information from the UserInfo OAuth2.0 endpoint using the access_token already present in the context.
ValidateAuthenticationResponseResult	An action that checks the inbound authentication response indicated success as opposed to an error.
ValidateExternalAuthenticationContext	An action that checks for a ExternalAuthenticationContext for a signalled event via the ExternalAuthenticationContext.getAuthnError() method.
ValidateOAuthAccessTokenResponse	Validation action that validates the OAuth Access Token Response against RFC 6749 section 5.1 and OpenID Connect Core 1.0 section 3.1.3.3.
ValidateOIDCAuthentication	An action that builds an AuthenticationResult based on an inbound OIDC authentication response.
ValidateResponseState	Authentication action that validates the authentication response state parameter (which is required in the Proxy flow) matches that in the authentication request.
ValidateTokenClaims	Action that validates the claims of a JWT using the supplied claims validator.
ValidateUserInfoJSONObjectClaims	Validate a successful UserInfo JSON Object Response according to section 5.3.2 of OpenID Connect Core 1.0.