A B C D E F G H I J L M N O P R S T U V
All Classes All Packages

A

AbstractHttpOIDCAuthenticationAction<T extends com.nimbusds.oauth2.sdk.Response> - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

An abstract class for OIDC actions that make synchronous HTTP requests and return responses.

AbstractHttpOIDCAuthenticationAction() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction

AbstractJSONResponseDecoderFunction<T> - Class in net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl

Abstract class for JSON based response decoders.

AbstractJSONResponseDecoderFunction() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl.AbstractJSONResponseDecoderFunction

AbstractOIDCAuthenticationRequestActionMessageHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl

An abstract message handler that runs inside an WebFlowMessageHandlerAdaptor that provides functions to make available various OIDC contexts.

AbstractOIDCAuthenticationRequestActionMessageHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler

Constructor.

AbstractOIDCAuthenticationRequestMessageHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl

An abstract message handler that does *not* run inside an WebFlowMessageHandlerAdaptor.

AbstractOIDCAuthenticationRequestMessageHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestMessageHandler

Constructor.

AbstractOIDCAuthenticationResponseAction - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

Abstract class for actions based on the AuthenticationResponse located under the InOutOperationContext.getInboundMessageContext() and the built OIDCAuthenticationRequest located under the InOutOperationContext.getOutboundMessageContext().

AbstractOIDCAuthenticationResponseAction() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractOIDCAuthenticationResponseAction

Constructor.

AbstractRequestEncoderFunction - Class in net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl

Abstract request encoder function that pulls out various contexts and request/response messages.

AbstractRequestEncoderFunction() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction

Constructor.

accessTokenResponseContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims

Strategy used to look up the AccessTokenResponseContext .

AccessTokenToPrivateCredentialsMappingStrategy - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

A mapping strategy that locates the AccessTokenResponseContext from the ProfileRequestContext and constructs and returns an OAuth2AccessTokenPrincipal from the access_token, token_type, and expires_in.

AccessTokenToPrivateCredentialsMappingStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AccessTokenToPrivateCredentialsMappingStrategy

Constructor.

AccessTokenToPrivateCredentialsMappingStrategy(Function<ProfileRequestContext, AccessTokenResponseContext>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AccessTokenToPrivateCredentialsMappingStrategy

Constructor.

acrTranslator - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Incoming context translation function for converting OIDC ACRs into Principals.

ActivationCondition(boolean) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.SimpleOIDCSubjectIdentifierCanonicalization.ActivationCondition

Constructor.

adapt(Function<ProfileRequestContext, T>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler

Adapt a ProfileRequestContext function to a MessageContext function via composing with a lookup function.

adapt(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler

Adapt a ProfileRequestContext predicate into a MessageContext predicate via composing with a lookup function.

AddAuthenticationContextClassReferencesHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl

A message handler that adds any authentication context class references from the those derived from the profile config - which may be proxied and mapped from the original request.

AddAuthenticationContextClassReferencesHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddAuthenticationContextClassReferencesHandler

addBearerTokenToGet(RequestBuilder, AccessTokenResponseContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.DefaultUserInfoRequestEncoder

Add the bearer token to the Authorization header, used when issuing HTTP GET requests.

addBearerTokenToPost(RequestBuilder, AccessTokenResponseContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.DefaultUserInfoRequestEncoder

Add the bearer token to the 'access_token' parameter, used when issuing HTTP POST requests.

AddEndpointURIHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl

A message handler that adds the authorization endpoint URI from the providers metadata to the under constructions authentication request.

AddEndpointURIHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddEndpointURIHandler

AddForceAuthenticationHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl

An action that sets the 'prompt' parameter to 'login' and max_age to 0 seconds, iff force authn was requested by the upstream SP (or is overridden in the profile config).

AddForceAuthenticationHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddForceAuthenticationHandler

AddLoginHintHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl

Message handler that adds the login_hint parameter based on any defined in the profile configuration.

AddLoginHintHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddLoginHintHandler

AddMaxAgeHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl

Message handler that adds the max_age parameter based on any defined in the profile configuration.

AddMaxAgeHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddMaxAgeHandler

AddNonceHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl

A message handler that adds a nonce from a lookup strategy to the authentication request.

AddNonceHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddNonceHandler

Constructor.

AddRedirectURIHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl

A message handler that adds a redirect_uri to the authentication request.

AddRedirectURIHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddRedirectURIHandler

AddRequestedClaimsHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl

A message handler that adds requested claims to the under constructions authentication request.

AddRequestedClaimsHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddRequestedClaimsHandler

Constructor.

AddResponseTypeAndModeHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl

Action that populates the authentication request response_mode and response_type from various strategies, by default from the profile configuration.

AddResponseTypeAndModeHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddResponseTypeAndModeHandler

AddScopesHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl

A message handler that adds the scopes from the profile request object to the authentication request.

AddScopesHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddScopesHandler

AddStateHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl

Add state to the authentication request URL and the request object claims (if present).

AddStateHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddStateHandler

Constructor.

addToExistingInboundMessageContextPredicate - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.PrepareOIDCInboundMessageContext

Should the peer entity context be added to an existing inbound message context or not.

allowedOrigins - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultRedirectUriCreationFunction

A set of 'allowed' origins that can be used as the scheme, host, and port portion of the redirectURI.

amrTranslator - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Incoming context translation function for converting OIDC ACRs into Principals.

apply(ClaimsSet) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultClaimSanitizationStrategy

apply(ClaimsSet, ClaimsSet) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultClaimMergingStrategy

apply(HttpServletRequest, ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultRedirectUriCreationFunction

apply(HttpResponse) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl.DefaultAccessTokenResponseDecoder

apply(HttpResponse) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl.DefaultUserInfoResponseDecoder

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.audit.impl.FixedStringAuditExtractor

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.audit.impl.ProxyAuthenticationFlowAuditExtractor

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AccessTokenToPrivateCredentialsMappingStrategy

apply(ProfileRequestContext, JWTClaimsSet) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.AuthenticationRequestNonceClaimLookupStrategy

apply(ProfileRequestContext, SubjectCanonicalizationContext, boolean) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.SimpleOIDCSubjectIdentifierCanonicalization.ActivationCondition

Helper method that runs either as part of the Predicate or directly from the SimpleOIDCSubjectIdentifierCanonicalization.doPreExecute(ProfileRequestContext, SubjectCanonicalizationContext) method above.

attributeContext - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Context for externally supplied inbound attributes.

attributeExtractionStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Pluggable strategy function for generalized extraction of data.

attributeFilterService - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Service used to get the engine used to filter attributes.

authenticationRequestLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestMessageHandler

Strategy used to locate the OIDCAuthenticationRequest.

authenticationRequestLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.AuthenticationRequestNonceClaimLookupStrategy

The strategy used to lookup the authentication request.

authenticationRequestLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.NonceValidationActivationCondition

The strategy used to lookup the authentication request.

AuthenticationRequestNonceClaimLookupStrategy - Class in net.shibboleth.idp.plugin.authn.oidc.rp.security.impl

Lookup strategy that finds the nonce from the OIDCAuthenticationRequest.

AuthenticationRequestNonceClaimLookupStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.AuthenticationRequestNonceClaimLookupStrategy

Constructor.

AuthenticationRequestNonceClaimLookupStrategy(Function<ProfileRequestContext, OIDCAuthenticationRequest>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.AuthenticationRequestNonceClaimLookupStrategy

Constructor.

authenticationResponse - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateAuthenticationResponseResult

Context containing the result to examine.

authnRequest - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction

OIDC authentication request built by the IdP.

authnRequest - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractOIDCAuthenticationResponseAction

OIDC authentication request built by the IdP.

authnRequest - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject

OIDC authentication request built by the IdP.

authnRequest - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler

OIDC authentication request built by the IdP.

authnRequest - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestMessageHandler

The stashed OIDCAuthenticationRequest.

authnResponse - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction

OIDC authentication response from upstream OP.

authnResponse - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractOIDCAuthenticationResponseAction

OIDC authentication response from upstream OP.

authorizationCallback(HttpServletRequest, HttpServletResponse) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AuthorizationController

Callback endpoint to accept the authorization response.

AuthorizationController - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

Servlet compatible with the ExternalAuthentication interface that begins, by HTTP redirect, an OpenID Connect authentication request to an OpenID Connect Provider (an OAuth 2.0 Authorization Server that supports OpenID Connect).

AuthorizationController() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AuthorizationController

Constructor.

authorizationRequest(HttpServletRequest, HttpServletResponse) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AuthorizationController

Begin an authorization request to the configured upstream OP.

AUTHORIZE_PATH_SEGMENT - Static variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AuthorizationController

The final part of the IdP URL path which is called to begin authorization.

B

buildErrorResponseString(AuthenticationErrorResponse) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateAuthenticationResponseResult

Build an error response string from the ErrorResponse object.

buildOrigin(URI) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultRedirectUriCreationFunction

Builds the 'origin' (see RFC 6454) from given URI.

BuildPlainRequestObjectJWT - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl

If the Request Object claims are present in the authentication request, convert them into a JWTClaimsSet inside a PlainJWT.

BuildPlainRequestObjectJWT() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.BuildPlainRequestObjectJWT

buildProxyPrincipal() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Construct a populated ProxyAuthenticationPrincipal based on the upstream OP (the issuer of the id_token).

buildRequestedAuthnContext(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddAuthenticationContextClassReferencesHandler

Build a list of ACRs if warranted.

BuildRequestObject - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

Action that creates a Request Object JWT, and sets it to the work context OIDCAuthenticationRequest located under InOutOperationContext.getOutboundMessageContext().

BuildRequestObject() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject

Constructor.

buildURIIgnoreDefaultPorts(String, String, int, String) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultRedirectUriCreationFunction

Build a URI from the given parameters.

C

CALLBACK_PATH_SEGMENT - Static variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AuthorizationController

The final part of the IdP URL path which is called to end authorization via the callback.

callbackServletPath - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultRedirectUriCreationFunction

The path, excluding the context and servlet paths, to the RP callback handler.

checkProviderSupportsResponseMode(ResponseMode) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddResponseTypeAndModeHandler

Check the OpenID Provider supports the response_mode from its metadata value response_modes_supported.

checkProviderSupportsResponseType(ResponseType) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddResponseTypeAndModeHandler

Check the OpenID Provider supports the response_type from its metadata value response_types_supported.

claimMergingStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims

The strategy used to merge UserInfo claims with id_token claims.

claimSanitizationStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims

The strategy used to sanitize claims in an input claimset.

claimsSet - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateTokenClaims

The parsed claimset.

claimsSetIsValidPredicate - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject

A hook to allow additional checking of the request object claims after it is built.

claimsValidator - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateTokenClaims

The JWT claims validator used to verify the claimsset.

cleanupHook - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateTokenClaims

A cleanup hook to execute after either a successful or unsuccessful claims validation.

clientAuthnContext - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction

The context used to store client authentication information for communication with a upstream OP.

CODE_PARAMETER - Static variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AuthorizationController

The name of the Http parameter that stores the authorisation code.

constructClientAuthentication(String, String, ClientSecretCredential) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationContext

Construct the client authentication from the given client authentication record.

contextClassLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.metadata.impl.OIDCProviderMetadataLookupHandler

Strategy to resolve the context class to add the resolved metadata too.

contextToPrivateCredentialsMappingStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

A hook to map context information to private credentials.

convertHttpRequest(HTTPRequest) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.DefaultAuthCodeTokenRequestEncoder

Convert the internally used HTTPRequest to the externally presented HttpUriRequest.

convertSecretKeyToString(SecretKey) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationContext

Convert the encoded byte array representing the secret into a UTF-8 String.

copyContextStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.metadata.impl.OIDCProviderMetadataLookupHandler

Optional strategy for resolving an existing metadata context from which to copy data.

D

decodeAttribute(AttributeTranscoderRegistry, ProfileRequestContext, JSONObject, Multimap<String, IdPAttribute>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Access the registry of transcoding rules to transform (decode) the input claims to IdP Attributes.

DEFAULT_METRIC_NAME - Static variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Default prefix for metrics.

DEFAULT_RESPONSE_TYPE - Static variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddResponseTypeAndModeHandler

The Default response type if none is selected.

DefaultAccessTokenResponseDecoder - Class in net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl

Default access token response decoder, which converts a successful HTTP response into an OIDCTokenResponse.

DefaultAccessTokenResponseDecoder() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl.DefaultAccessTokenResponseDecoder

DefaultAuthCodeTokenRequestEncoder - Class in net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl

A token request encoder that builds an OAuth2.0 Access Token Request for an authorization_code grant and returns an HttpUriRequest.

DefaultAuthCodeTokenRequestEncoder() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.DefaultAuthCodeTokenRequestEncoder

DefaultClaimMergingStrategy - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

A default merging strategy for combing claims in the UserInfo response with those from the id_token.

DefaultClaimMergingStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultClaimMergingStrategy

DefaultClaimSanitizationStrategy - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

Produce a claims set from the JWT claims set without the validation claims, leaving the identity, authorization, and misc.

DefaultClaimSanitizationStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultClaimSanitizationStrategy

Constructor.

DefaultRedirectUriCreationFunction - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

Constructive, pure, function that returns a redirect_uri from one of (ordered): A pre-registered redirect_uri on the OAuth2ClientContext.getRedirectUriOverride().

DefaultRedirectUriCreationFunction() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultRedirectUriCreationFunction

Constructor.

DefaultUserInfoRequestEncoder - Class in net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl

Default encoder for UserInfo requests.

DefaultUserInfoRequestEncoder() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.DefaultUserInfoRequestEncoder

Constructor.

DefaultUserInfoResponseDecoder - Class in net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl

Response decoder for UserInfo responses.

DefaultUserInfoResponseDecoder() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl.DefaultUserInfoResponseDecoder

disabled - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.SimpleOIDCSubjectIdentifierCanonicalization.ActivationCondition

Disable this C14N no matter how appropriate the context?

doApply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction

Encode a HttpUriRequest from the given context.

doApply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.DefaultAuthCodeTokenRequestEncoder

doApply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.DefaultUserInfoRequestEncoder

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.audit.impl.TransitionActionWriteAuditLog

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeAuthorizationRequest

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeBlankOutboundResponseMessageContext

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationContext

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientContext

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOutboundAuthorizationRequestMessageContext

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeRelyingPartyContext

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeUnverifiedRelyingPartyContext

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.PrepareOIDCInboundMessageContext

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.UnsupportedResponseTypeAction

doExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject

doExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ExchangeCodeForAccessToken

doExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims

doExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.UserInfoEndpointLookup

doExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateAuthenticationResponseResult

doExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateExternalAuthenticationContext

doExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOAuthAccessTokenResponse

doExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

doExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateResponseState

doExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateTokenClaims

doExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateUserInfoJSONObjectClaims

doExecute(ProfileRequestContext, SubjectCanonicalizationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.SimpleOIDCSubjectIdentifierCanonicalization

doInitialize() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl.AbstractJSONResponseDecoderFunction

doInitialize() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction

doInitialize() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultRedirectUriCreationFunction

doInitialize() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.PrepareOIDCInboundMessageContext

doInitialize() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

doInitialize() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateTokenClaims

doInitialize() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddRedirectURIHandler

doInitialize() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddStateHandler

doInitialize() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.metadata.impl.OIDCProviderMetadataLookupHandler

doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddAuthenticationContextClassReferencesHandler

doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddEndpointURIHandler

doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddForceAuthenticationHandler

doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddLoginHintHandler

doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddMaxAgeHandler

doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddNonceHandler

doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddRedirectURIHandler

doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddRequestedClaimsHandler

doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddResponseTypeAndModeHandler

doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddScopesHandler

doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddStateHandler

doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.BuildPlainRequestObjectJWT

doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.SetAuthenticationRequestTimeHandler

doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.metadata.impl.OIDCProviderMetadataLookupHandler

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeAuthorizationRequest

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationContext

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientContext

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOutboundAuthorizationRequestMessageContext

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeRelyingPartyContext

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.PrepareOIDCInboundMessageContext

doPreExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractOIDCAuthenticationResponseAction

doPreExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject

doPreExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims

doPreExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateAuthenticationResponseResult

doPreExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateExternalAuthenticationContext

doPreExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

doPreExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateTokenClaims

doPreExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateUserInfoJSONObjectClaims

doPreExecute(ProfileRequestContext, SubjectCanonicalizationContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.SimpleOIDCSubjectIdentifierCanonicalization

doPreInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler

doPreInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestMessageHandler

E

embeddedPredicate - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.SimpleOIDCSubjectIdentifierCanonicalization

Supplies logic for pre-execute test.

endUserClaimsContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims

Strategy used to look up the EndUserClaimsContext to set the parameters for.

endUserClaimsContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Strategy used to look up the EndUserClaimsContext to set the parameters for.

endUserContext - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

The context with claims pertaining to the end-user of this authentication.

ExchangeCodeForAccessToken - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

Action to exchange the authorization code in the authentication response for an OAuth access token which contains an OIDC id_token.

ExchangeCodeForAccessToken() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ExchangeCodeForAccessToken

Constructor.

executeHttpRequest(HttpUriRequest, AbstractAuthenticatableOIDCContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction

Performs a call to an HTTP endpoint using the configured HttpClient and security parameters.

extContext - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateExternalAuthenticationContext

Context containing the result to examine.

extractKeyFromState(String) - Static method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.OIDCProxySupport

Extract the key component from the state.

extractNonceFromState(String) - Static method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.OIDCProxySupport

Extract the nonce component from the state.

F

filterAttributes(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Check for inbound attributes and apply filtering.

FixedStringAuditExtractor - Class in net.shibboleth.idp.plugin.authn.oidc.rp.audit.impl

A simple audit extractor that allows a fixed string to be logged.

FixedStringAuditExtractor(String) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.audit.impl.FixedStringAuditExtractor

Constructor.

formatErrorResponse(ErrorObject) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction

Format an error message string from the ErrorObject provided.

G

generateNonce(Integer) - Static method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.OIDCProxySupport

Generates a random identifier to be used as a nonce.

generateState(String, String) - Static method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.OIDCProxySupport

Generate a state parameter from a nonce component and an execution key component.

getAuthenticationRequest() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction

Returns the authentication request build by this IdP.

getAuthenticationRequest() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractOIDCAuthenticationResponseAction

Returns the authentication request build by this IdP.

getAuthenticationRequest() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler

Returns the authentication request build by this IdP.

getAuthenticationRequest() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestMessageHandler

Get the authentication request.

getAuthenticationResponse() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction

Returns the authentication response from the upstream OP.

getAuthenticationResponse() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractOIDCAuthenticationResponseAction

Returns the authentication response from the upstream OP.

getClientAuthenticationContext() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction

Get the client authentication context.

getHttpRequestEncoderStrategy() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction

Get the HTTP request encoder strategy.

getHttpResponseDecoderStrategy() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction

Get the HTTP response decoder strategy.

getHttpServletRequest() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler

Get the HTTP servlet request supplier.

getHttpServletRequestSupplier() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler

Get the supplier for HTTP request if available.

getObjectMapper() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl.AbstractJSONResponseDecoderFunction

Get the object mapper.

getOutboundMessageContext() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestMessageHandler

Get the outbound message context.

getProfileConfiguration() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler

Returns the profile configuration associated with this request.

getProviderMetadata() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler

Returns the OpenID Provider metadata.

getProviderMetadataContext() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction

Returns the OIDC provider metadata context.

getProviderMetadataContext() - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractOIDCAuthenticationResponseAction

Returns the OIDC provider metadata context.

H

handleRequest(ProfileRequestContext, AbstractAuthenticatableOIDCContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction

Encode the request using the supplied request encoder strategy.

httpClient - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction

HttpClient for contacting the endpoint.

httpClientSecurityParameters - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction

HTTP client security parameters.

httpMethodLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.DefaultUserInfoRequestEncoder

Strategy used to look up the HttpMethod used for this request.

httpRequestEncoderStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction

The message encoder to encode the HTTP request into a HttpUriRequest.

httpResponseDecoderStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction

The message decoder to decode the HTTP response.

HTTPS - Static variable in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.DefaultUserInfoRequestEncoder

The HTTPS scheme.

httpServletRequestSupplier - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler

Current HTTP request, if available.

I

identifier - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.PrepareOIDCInboundMessageContext

The identifier of the OP/RP to base the inbound context on.

identifierLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.PrepareOIDCInboundMessageContext

Strategy to lookup the identifier of the OP/RP to base the inbound context on.

idTokenClaims - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims

The stashed id_token claims.

idTokenClaims - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateUserInfoJSONObjectClaims

The stashed id_token claims.

InitializeAuthorizationRequest - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

An action that creates an OIDCAuthenticationRequest shell to populate in future steps, and sets it to the outbound message context.

InitializeAuthorizationRequest() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeAuthorizationRequest

Constructor.

InitializeBlankOutboundResponseMessageContext - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

Action that adds an outbound MessageContext to the outbound message context inside the ProfileRequestContext.

InitializeBlankOutboundResponseMessageContext() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeBlankOutboundResponseMessageContext

InitializeOAuth2ClientAuthenticationContext - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

An action that resolves the Client Authentication method for the chosen upstream OpenID Provider (issuer) from the profile configuration.

InitializeOAuth2ClientAuthenticationContext() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationContext

Constructor.

InitializeOAuth2ClientContext - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

An action that resolves the client identifier and redirect URI for the chosen provider (issuer).

InitializeOAuth2ClientContext() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientContext

Constructor.

InitializeOutboundAuthorizationRequestMessageContext - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

Initialize an outbound message context with an OIDC peer entity context ready for an authorization/authentication request to be built.

InitializeOutboundAuthorizationRequestMessageContext() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOutboundAuthorizationRequestMessageContext

Constructor.

InitializeRelyingPartyContext - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

Action that adds a RelyingPartyContext to the current ProfileRequestContext tree via a creation function.

InitializeRelyingPartyContext() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeRelyingPartyContext

Constructor.

InitializeUnverifiedRelyingPartyContext - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

Action that adds an unverified RelyingPartyContext to the current ProfileRequestContext tree via a creation function.

InitializeUnverifiedRelyingPartyContext() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeUnverifiedRelyingPartyContext

Constructor.

J

jwtLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateTokenClaims

Strategy used to pull out a JWT to validate from the context.

L

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl.DefaultAccessTokenResponseDecoder

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl.DefaultUserInfoResponseDecoder

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.DefaultAuthCodeTokenRequestEncoder

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.DefaultUserInfoRequestEncoder

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractOIDCAuthenticationResponseAction

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AuthorizationController

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultClaimMergingStrategy

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultRedirectUriCreationFunction

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ExchangeCodeForAccessToken

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeAuthorizationRequest

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeBlankOutboundResponseMessageContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOutboundAuthorizationRequestMessageContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeRelyingPartyContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeUnverifiedRelyingPartyContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.PrepareOIDCInboundMessageContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.SimpleOIDCSubjectIdentifierCanonicalization

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.UnsupportedResponseTypeAction

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.UserInfoEndpointLookup

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateAuthenticationResponseResult

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateExternalAuthenticationContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOAuthAccessTokenResponse

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateResponseState

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateTokenClaims

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateUserInfoJSONObjectClaims

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestMessageHandler

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddAuthenticationContextClassReferencesHandler

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddEndpointURIHandler

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddForceAuthenticationHandler

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddLoginHintHandler

Logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddMaxAgeHandler

Logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddNonceHandler

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddRedirectURIHandler

Logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddRequestedClaimsHandler

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddResponseTypeAndModeHandler

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddScopesHandler

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddStateHandler

Logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.BuildPlainRequestObjectJWT

Logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.SetAuthenticationRequestTimeHandler

Logger.

log - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.metadata.impl.OIDCProviderMetadataLookupHandler

Logger.

lookupProfileRequestContext(MessageContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler

Lookup the profile request context from the given message context using the function PRC_LOOKUP.

M

ManyValuesIntegerComparisonPredicate - Class in net.shibboleth.idp.plugin.authn.oidc.rp.security.impl

Predicate that returns true if the test integer is greater than 1.

ManyValuesIntegerComparisonPredicate() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.ManyValuesIntegerComparisonPredicate

metadataResolver - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Optional supplemental metadata source for filtering.

N

net.shibboleth.idp.plugin.authn.oidc.rp - package net.shibboleth.idp.plugin.authn.oidc.rp

Shibboleth relying-party proxy implementation.

net.shibboleth.idp.plugin.authn.oidc.rp.audit.impl - package net.shibboleth.idp.plugin.authn.oidc.rp.audit.impl

Package that contains RP specific audit extractors.

net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl - package net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl

This package has decoders for various OIDC/OAuth2 responses.

net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl - package net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl

This package has encoders for various OIDC/OAuth2 requests.

net.shibboleth.idp.plugin.authn.oidc.rp.impl - package net.shibboleth.idp.plugin.authn.oidc.rp.impl

This package has an authentication implementation for OpenID Connect authentication providers.

net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl - package net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl

Package that contains message handlers.

net.shibboleth.idp.plugin.authn.oidc.rp.metadata.impl - package net.shibboleth.idp.plugin.authn.oidc.rp.metadata.impl

Package that OpenID Provider and RelyingParty metadata lookup functions.

net.shibboleth.idp.plugin.authn.oidc.rp.security.impl - package net.shibboleth.idp.plugin.authn.oidc.rp.security.impl

Package that RP specific security functions.

nonceGenerationStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddNonceHandler

Strategy used to generate a nonce.

NonceValidationActivationCondition - Class in net.shibboleth.idp.plugin.authn.oidc.rp.security.impl

Determines if nonce validation should occur.

NonceValidationActivationCondition() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.NonceValidationActivationCondition

Constructor.

NonceValidationActivationCondition(Function<ProfileRequestContext, OIDCAuthenticationRequest>) - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.NonceValidationActivationCondition

Constructor.

O

oauth2ClientAuthenticationContext - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationContext

The stashed OAuth2 client authentication context.

oauth2ClientAuthenticationContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction

The strategy used to lookup or create the OAuth2ClientAuthenticationContext.

oauth2ClientAuthenticationContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationContext

The strategy used to lookup or create the OAuth2ClientAuthenticationContext for storing the client authentication.

oauth2ClientContext - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeAuthorizationRequest

The stashed OAuth2 client context.

oauth2ClientContext - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientContext

The stashed OAuth2 client context.

oauth2ClientContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AuthorizationController

The strategy used to lookup or create the OAuth2ClientContext for storing the client_id.

oauth2ClientContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultRedirectUriCreationFunction

The strategy used to lookup or create the OAuth2ClientContext for storing the client_id.

oauth2ClientContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeAuthorizationRequest

The strategy used to lookup or create the OAuth2ClientContext for storing the client_id.

oauth2ClientContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientContext

The strategy used to lookup or create the OAuth2ClientContext for storing the client_id.

objectMapper - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl.AbstractJSONResponseDecoderFunction

JSON object mapper.

oidcClientMetadataCtxLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOutboundAuthorizationRequestMessageContext

Strategy function to lookup the OIDCMetadataContext that represents this client during communication with the given OIDC peer.

oidcContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AuthorizationController

Lookup strategy to locate the SAML context.

oidcProviderMetadataContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeRelyingPartyContext

Strategy that will return OIDCMetadataContext.

OIDCProviderMetadataLookupHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.metadata.impl

Handler for inbound OIDC protocol messages that attempts to locate OIDC metadata for a OP (issuer), and attaches it with a OIDCMetadataContext as a child of a pre-existing instance of MessageContext.

OIDCProviderMetadataLookupHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.metadata.impl.OIDCProviderMetadataLookupHandler

Constructor.

OIDCProxySupport - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

Support class for OIDC proxy related implementations.

OIDCProxySupport() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.OIDCProxySupport

Private constructor.

OIDCRPModule - Class in net.shibboleth.idp.plugin.authn.oidc.rp

IdP Module implementation.

OIDCRPModule() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.OIDCRPModule

Constructor.

OIDCRPPlugin - Class in net.shibboleth.idp.plugin.authn.oidc.rp

Plugin description about the OIDC-RP plugin.

OIDCRPPlugin() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.OIDCRPPlugin

Constructor.

outboundMessageContext - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestMessageHandler

The stashed OutboundMessageHandlerContext.

outboundMessageHandlerContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestMessageHandler

Strategy to locate the OutboundMessageHandlerContext.

P

parseResponseMode(String) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddResponseTypeAndModeHandler

Parse the response_mode into a known ResponseMode.

parseResponseType(String) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddResponseTypeAndModeHandler

Parse the response_type into a known ResponseType.

peerEntityContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeRelyingPartyContext

Strategy used to look up the SAMLPeerEntityContext to draw from.

peerEntityCtx - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOutboundAuthorizationRequestMessageContext

The OIDCPeerEntityContext to base the outbound context on.

peerEntityCtx - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeRelyingPartyContext

OIDC peer entity context to populate from.

populateFilterContext(ProfileRequestContext, AttributeFilterContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Fill in the filter context data.

populateSubject(Subject) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

prc - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

The profile request context.

PRC_LOOKUP - Static variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler

Lookup function for parent ProfileRequestContext.

PrepareOIDCInboundMessageContext - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

Action that adds an inbound MessageContext and a OIDCPeerEntityContext to the ProfileRequestContext based on the identity of a relying party, by default from the AuthenticationContext.getAuthenticatingAuthority().

PrepareOIDCInboundMessageContext() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.PrepareOIDCInboundMessageContext

Constructor.

processAttributes(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Process the inbound OIDC claims.

ProcessEndUserClaims - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

Process the end-user claims from the id_token and possible UserInfo claims sets.

ProcessEndUserClaims() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims

Constructor.

profileConfiguration - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationContext

Applicable stashed profile configuration.

profileConfiguration - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientContext

Applicable stashed profile configuration.

profileConfiguration - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Store off profile config.

profileConfiguration - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler

Applicable profile configuration.

profileRequestContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AuthorizationController

Lookup strategy to locate the nested ProfileRequestContext.

providerMetadata - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject

OpenID Provider metadata .

providerMetadata - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler

OpenID Provider metadata .

providerMetadataContext - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction

OIDC Metadata context.

providerMetadataContext - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractOIDCAuthenticationResponseAction

OIDC Metadata context.

providerMetadataLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction

Lookup strategy to locate the OP metadata to use.

providerMetadataLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractOIDCAuthenticationResponseAction

Lookup strategy to locate the OP metadata to use.

providerMetadataLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject

Lookup strategy to locate the OpenID Provider metadata to use.

providerMetadataLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler

Lookup strategy to locate the OpenID Provider metadata to use.

providerResolver - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.metadata.impl.OIDCProviderMetadataLookupHandler

Resolver used to look up OIDC provider information.

ProxyAuthenticationFlowAuditExtractor - Class in net.shibboleth.idp.plugin.authn.oidc.rp.audit.impl

A Function that returns the authentication flow ID from the attempted flow of the parent context used to satisfy a request.

ProxyAuthenticationFlowAuditExtractor() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.audit.impl.ProxyAuthenticationFlowAuditExtractor

R

redirectUriCreationStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddRedirectURIHandler

Function to create a suitable redirect URI from the given servlet request and profile request context.

redirectUriOverrideLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientContext

A redirect_uri lookup strategy which can pull out an override redirect_uri from the profile request context.

relyingPartyContextCreationStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeRelyingPartyContext

Strategy that will return or create a RelyingPartyContext.

relyingPartyContextCreationStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeUnverifiedRelyingPartyContext

Strategy that will return or create a RelyingPartyContext.

relyingPartyContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject

Lookup function for relying party context.

relyingPartyContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationContext

Lookup function for relying party context.

relyingPartyContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientContext

Lookup function for relying party context.

relyingPartyContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Strategy used to look up a RelyingPartyContext for configuration options.

relyingPartyContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler

Lookup function for relying party context.

relyingPartyCtxLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOutboundAuthorizationRequestMessageContext

Strategy used to locate the RelyingPartyContext associated with a given ProfileRequestContext.

requestedClaimsHook - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddRequestedClaimsHandler

A hook that creates requested claims JSON Object from the profile request object.

requestObjectToBeSignedPredicate - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject

Is the request object going to be signed? if so the 'iss' and 'aud' claims will be set.

resolveClaimsSet(UserInfoResponse) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateUserInfoJSONObjectClaims

Resolve the UserInfo claims from the user info response.

resolveExisting(MessageContext, String) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.metadata.impl.OIDCProviderMetadataLookupHandler

Attempt to resolve an existing OIDCProviderMetadataContext from which to copy.

S

setAccessTokenResponseContextLookupStrategy(Function<ProfileRequestContext, AccessTokenResponseContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims

Set the strategy used to look up a AccessTokenResponseContext.

setAddToExistingInboundMessageContext(boolean) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.PrepareOIDCInboundMessageContext

Set whether to append any defined subcontexts to the existing inbound message context, or to a new one.

setAddToExistingInboundMessageContextPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.PrepareOIDCInboundMessageContext

Set a predicate to determine whether to append any defined subcontexts to the existing inbound message context, or to a new one.

setAllowedOrigins(Set<String>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultRedirectUriCreationFunction

Set the allowed origins to use if a redirect_uri is computed.

setAttributeExtractionStrategy(Function<ProfileRequestContext, Collection<IdPAttribute>>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Sets the strategy function to invoke for generalized extraction of data into IdPAttribute objects for inclusion in the AuthenticationResult.

setAttributeFilter(ReloadableService<AttributeFilter>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Sets the filter service to use for inbound attributes.

setAuthenticationRequestLookupStrategy(Function<MessageContext, OIDCAuthenticationRequest>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestMessageHandler

Set the strategy used to locate the OIDCAuthenticationRequest to use.

SetAuthenticationRequestTimeHandler - Class in net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl

Handler that adds the authentication request time to the authentication request.

SetAuthenticationRequestTimeHandler() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.SetAuthenticationRequestTimeHandler

setCallbackServletPath(String) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultRedirectUriCreationFunction

Set the path segment relative to the servlet path of the callback endpoint.

setClaimIfPresent(ClaimsSet, String, Object) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject

Set the claim onto the claims set if not null.

setClaimMergingStrategy(BinaryOperator<ClaimsSet>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims

Set the strategy used to merge UserInfo claims with id_token claims.

setClaimSanitizationStrategy(UnaryOperator<ClaimsSet>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims

Set the strategy used to sanitize claims from both the id_token and UserInfo claims set to produce a clean claims set.

setClaimsSetIsValidPredicate(Predicate<ClaimsSet>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject

Set a hook that allows the built request object to be validated before it is used.

setClaimsValidator(ClaimsValidator) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateTokenClaims

Set the JWT claims verifier to use.

setCleanupHook(Consumer<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateTokenClaims

Set the cleanup hook to execute after either a successful or unsuccessful claims validation.

setContextClassLookupStrategy(Function<MessageContext, ? extends AbstractOIDCEntityContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.metadata.impl.OIDCProviderMetadataLookupHandler

Set the context class lookup strategy.

setContextToPrivateCredentialsMappingStrategy(Function<ProfileRequestContext, Collection<Principal>>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Set the context to principal mapping strategy for mapping context information into principal collections to place in the private credentials set of the subject.

setCopyContextStrategy(Function<MessageContext, OIDCProviderMetadataContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.metadata.impl.OIDCProviderMetadataLookupHandler

Set the optional strategy for resolving an existing metadata context from which to copy data.

setEnableClaimSanitizationStrategy(boolean) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims

Set whether to enable claim sanitization.

setEndUserClaimsContextLookupStrategy(Function<ProfileRequestContext, EndUserClaimsContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims

Set the strategy used to lookup a EndUserClaimsContext.

setHttpClient(HttpClient) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction

Set the HttpClient to use.

setHttpClientSecurityParameters(HttpClientSecurityParameters) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction

Set the optional client security parameters.

setHttpMethodLookupStrategy(Function<ProfileRequestContext, OAuth2AuthorizationProfileConfiguration.HttpRequestMethod>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.DefaultUserInfoRequestEncoder

Set the strategy used to lookup the HTTP method to use in this request.

setHttpRequestEncoderStrategy(Function<ProfileRequestContext, HttpUriRequest>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction

Set the strategy used to map a HTTP request to a HttpUriRequest object.

setHttpResponseDecoderStrategy(Function<HttpResponse, T>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractHttpOIDCAuthenticationAction

Set the strategy used to map a HTTP response the response type.

setHttpServletRequestSupplier(NonnullSupplier<HttpServletRequest>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler

Set the HTTP servlet request supplier.

setIdentiferLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.PrepareOIDCInboundMessageContext

Set the lookup strategy to identify the OP/RP.

setJwtLookupStrategy(Function<ProfileRequestContext, JWT>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateTokenClaims

Set the lookup strategy that locates the JWT to validate from the context.

setMetadataResolver(MetadataResolver) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Set a metadata source to use during filtering.

setNonceGenerationStrategy(Function<ProfileRequestContext, Nonce>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddNonceHandler

Set the nonce generation strategy to use.

setOAuth2ClientAuthenticationContextLookupStrategy(Function<ProfileRequestContext, OAuth2ClientAuthenticationContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationContext

Set the strategy to lookup the OAuth2ClientAuthenticationContext from the ProfileRequestContext.

setOAuth2ClientContextLookupStrategy(Function<ProfileRequestContext, OAuth2ClientContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AuthorizationController

Set the strategy to lookup the OAuth2ClientContext from the ProfileRequestContext.

setOAuth2ClientContextLookupStrategy(Function<ProfileRequestContext, OAuth2ClientContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultRedirectUriCreationFunction

Set the strategy to lookup the OAuth2ClientContext from the ProfileRequestContext.

setOAuth2ClientContextLookupStrategy(Function<ProfileRequestContext, OAuth2ClientContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeAuthorizationRequest

Set the strategy to lookup the OAuth2ClientContext from the ProfileRequestContext.

setOAuth2ClientContextLookupStrategy(Function<ProfileRequestContext, OAuth2ClientContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientContext

Set the strategy to lookup the OAuth2ClientContext from the ProfileRequestContext.

setObjectMapper(ObjectMapper) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl.AbstractJSONResponseDecoderFunction

Set the JSON Object Mapper to use.

setOidcAuthnContextLookupStrategy(Function<ProfileRequestContext, OIDCAuthnContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AuthorizationController

Set the lookup strategy used to locate the OIDCAuthnContext.

setOIDCClientAuthenticationContextContextLookupStrategy(Function<ProfileRequestContext, OAuth2ClientAuthenticationContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction

Set the strategy to lookup the OAuth2ClientAuthenticationContext.

setOIDCClientMetadataContextLookupStrategy(Function<ProfileRequestContext, OIDCMetadataContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOutboundAuthorizationRequestMessageContext

Set the strategy to lookup the OIDCMetadataContext from the ProfileRequestContext.

setOidcProviderMetadataContextLookupStrategy(Function<ProfileRequestContext, OIDCProviderMetadataContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeRelyingPartyContext

Set the strategy used to return the OIDCProviderMetadataContext.

setOutboundMessageHandlerContextLookupStrategy(Function<MessageContext, OutboundMessageHandlerContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestMessageHandler

Set the strategy used to locate the OutboundMessageHandlerContext.

setPeerEntityContextLookupStrategy(Function<ProfileRequestContext, OIDCPeerEntityContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeRelyingPartyContext

Set the strategy used to look up the OIDCPeerEntityContext to draw from.

setProfileRequestContextLookupStrategy(Function<ProfileRequestContext, ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AuthorizationController

Set the lookup strategy used to locate the nested ProfileRequestContext.

setProviderMetadataLookupStrategy(Function<MessageContext, OIDCProviderMetadataContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler

Set the lookup strategy to locate the OpenID providers metadata.

setProviderMetadataLookupStrategy(Function<ProfileRequestContext, OIDCProviderMetadataContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.AbstractRequestEncoderFunction

Set the lookup strategy to locate the OpenID providers metadata.

setProviderMetadataLookupStrategy(Function<ProfileRequestContext, OIDCProviderMetadataContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AbstractOIDCAuthenticationResponseAction

Set the lookup strategy to locate the OpenID providers metadata.

setProviderMetadataLookupStrategy(Function<ProfileRequestContext, OIDCProviderMetadataContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject

Set the lookup strategy to locate the OpenID providers metadata.

setProviderMetadataResolver(ProviderMetadataResolver) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.metadata.impl.OIDCProviderMetadataLookupHandler

Set the ProviderMetadataResolver to use.

setRedirectUriCreationStrategy(BiFunction<HttpServletRequest, ProfileRequestContext, URI>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddRedirectURIHandler

Set the creation strategy used to compute or lookup a redirect URI.

setRedirectUriOverrideLookupStrategy(Function<ProfileRequestContext, URI>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientContext

Set the redirect_uri lookup strategy to locate an explicitly set redirect_uri.

setRelyingPartyContextCreationStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeRelyingPartyContext

Set the strategy used to return or create the RelyingPartyContext .

setRelyingPartyContextCreationStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeUnverifiedRelyingPartyContext

Set the strategy used to return or create the RelyingPartyContext.

setRelyingPartyContextLookupStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject

Set the strategy used to locate the RelyingPartyContext associated with a given ProfileRequestContext.

setRelyingPartyContextLookupStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientAuthenticationContext

Set lookup strategy for relying party context.

setRelyingPartyContextLookupStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientContext

Set lookup strategy for relying party context.

setRelyingPartyContextLookupStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOutboundAuthorizationRequestMessageContext

Set the strategy used to locate the RelyingPartyContext associated with a given ProfileRequestContext.

setRelyingPartyContextLookupStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Set the strategy used to return the RelyingPartyContext for configuration options.

setRelyingPartyContextLookupStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AbstractOIDCAuthenticationRequestActionMessageHandler

Set the strategy used to locate the RelyingPartyContext associated with a given ProfileRequestContext.

setRequestedClaimsHook(Function<ProfileRequestContext, OIDCClaimsRequest>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddRequestedClaimsHandler

Set the hook that generates a requested claims JSON Object from the given profile request object.

setRequestObjectToBeSignedPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject

Set a predicate to determine if the request object will be 'eventually' signed.

setStateGenerationStrategy(Function<MessageContext, String>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddStateHandler

Set the creation strategy used to compute the 'state'.

setTokenResponseContextLookupStrategy(Function<ProfileRequestContext, AccessTokenResponseContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.DefaultUserInfoRequestEncoder

Set the strategy used to lookup the AccessTokenResponseContext.

setTokenResponseContextLookupStrategy(Function<ProfileRequestContext, AccessTokenResponseContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ExchangeCodeForAccessToken

Set the strategy used to look up a AccessTokenResponseContext.

setTokenResponseContextLookupStrategy(Function<ProfileRequestContext, AccessTokenResponseContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOAuthAccessTokenResponse

Set the strategy used to look up a AccessTokenResponseContext.

setTokenResponseContextLookupStrategy(Function<ProfileRequestContext, AccessTokenResponseContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateUserInfoJSONObjectClaims

Set the strategy used to look up a AccessTokenResponseContext.

setTranscoderRegistry(ReloadableService<AttributeTranscoderRegistry>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Sets the registry of transcoding rules to apply to encode attributes.

setUserInfoResponseContextLookupStrategy(Function<ProfileRequestContext, UserInfoResponseContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims

Set the strategy used to look up a UserInfoResponseContext.

setUserInfoResponseContextLookupStrategy(Function<ProfileRequestContext, UserInfoResponseContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.UserInfoEndpointLookup

Set the strategy used to look up a UserInfoResponseContext.

setUserInfoResponseContextLookupStrategy(Function<ProfileRequestContext, UserInfoResponseContext>) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateUserInfoJSONObjectClaims

Set the strategy used to look up a UserInfoResponseContext.

SimpleOIDCSubjectIdentifierCanonicalization - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

An action that operates on a SubjectCanonicalizationContext child of the current ProfileRequestContext, and transforms the input Subject into a principal name by searching for one and only one OIDCSubjectIdentifierPrincipal custom principal.

SimpleOIDCSubjectIdentifierCanonicalization() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.SimpleOIDCSubjectIdentifierCanonicalization

Constructor.

SimpleOIDCSubjectIdentifierCanonicalization.ActivationCondition - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

A predicate that determines if this action can run or not.

STATE_CLAIM - Static variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddStateHandler

The 'state' claim name.

STATE_PARAMETER - Static variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AuthorizationController

The name of the Http parameter that stores the state value.

stateGenerationStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.messaging.impl.AddStateHandler

Function to create a suitable 'state' to add to the authentication request.

subjectIdentifierPrincipal - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.SimpleOIDCSubjectIdentifierCanonicalization

The custom Principal to operate on.

T

test(int) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.ManyValuesIntegerComparisonPredicate

test(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.SimpleOIDCSubjectIdentifierCanonicalization.ActivationCondition

test(ProfileRequestContext, JWTClaimsSet) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.security.impl.NonceValidationActivationCondition

tokenResponseContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.encoding.impl.DefaultUserInfoRequestEncoder

Strategy used to look up the AccessTokenResponseContext to set the parameters for.

tokenResponseContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.AccessTokenToPrivateCredentialsMappingStrategy

Strategy used to look up the AccessTokenResponseContext to set the parameters for.

tokenResponseContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ExchangeCodeForAccessToken

Strategy used to look up the AccessTokenResponseContext to set the parameters for.

tokenResponseContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOAuthAccessTokenResponse

Strategy used to look up the AccessTokenResponseContext to validate.

tokenResponseContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateUserInfoJSONObjectClaims

Strategy used to look up the AccessTokenResponseContext.

transcoderRegistry - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Transcoder registry service object.

TransitionActionWriteAuditLog - Class in net.shibboleth.idp.plugin.authn.oidc.rp.audit.impl

A simple extension of the WriteAuditLog action that creates an Event with the string literal 'success', such that the write audit log action can be used inside a transition and does not prevent the transition from proceeding.

TransitionActionWriteAuditLog() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.audit.impl.TransitionActionWriteAuditLog

U

UnsupportedResponseTypeAction - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

Simple action to log the response from an unsupported grant type.

UnsupportedResponseTypeAction() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.UnsupportedResponseTypeAction

USERINFO_ERROR_RESPONSE_HEADER - Static variable in class net.shibboleth.idp.plugin.authn.oidc.rp.decoding.impl.DefaultUserInfoResponseDecoder

The UserInfo response header that carries error information.

userInfoClaims - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims

The stashed UserInfo claims.

userInfoCtx - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateUserInfoJSONObjectClaims

The stashed user info response context.

UserInfoEndpointLookup - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

Request information from the UserInfo OAuth2.0 endpoint using the access_token already present in the context.

UserInfoEndpointLookup() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.UserInfoEndpointLookup

Constructor.

userInfoResponseContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ProcessEndUserClaims

Strategy used to look up the UserInfoResponseContext.

userInfoResponseContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.UserInfoEndpointLookup

Strategy used to look up the AccessTokenResponseContext to set the parameters for.

userInfoResponseContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateUserInfoJSONObjectClaims

Strategy used to look up the UserInfoResponseContext.

V

ValidateAuthenticationResponseResult - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

An action that checks the inbound authentication response indicated success as opposed to an error.

ValidateAuthenticationResponseResult() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateAuthenticationResponseResult

ValidateExternalAuthenticationContext - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

An action that checks for a ExternalAuthenticationContext for a signalled event via the ExternalAuthenticationContext.getAuthnError() method.

ValidateExternalAuthenticationContext() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateExternalAuthenticationContext

ValidateOAuthAccessTokenResponse - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

Validation action that validates the OAuth Access Token Response against RFC 6749 section 5.1 and OpenID Connect Core 1.0 section 3.1.3.3.

ValidateOAuthAccessTokenResponse() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOAuthAccessTokenResponse

Constructor.

ValidateOIDCAuthentication - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

An action that builds an AuthenticationResult based on an inbound OIDC authentication response.

ValidateOIDCAuthentication() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication

Constructor.

validateRequestObject(ProfileRequestContext, ClaimsSet) - Method in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.BuildRequestObject

Ensure the request object is valid by assessing the claims are correct.

ValidateResponseState - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

Authentication action that validates the authentication response state parameter (which is required in the Proxy flow) matches that in the authentication request.

ValidateResponseState() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateResponseState

ValidateTokenClaims - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

Action that validates the claims of a JWT using the supplied claims validator.

ValidateTokenClaims() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateTokenClaims

ValidateUserInfoJSONObjectClaims - Class in net.shibboleth.idp.plugin.authn.oidc.rp.impl

Validate a successful UserInfo JSON Object Response according to section 5.3.2 of OpenID Connect Core 1.0.

ValidateUserInfoJSONObjectClaims() - Constructor for class net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateUserInfoJSONObjectClaims

Constructor.

validationClaims - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultClaimSanitizationStrategy

The set of validation claims to filter out of the input claims.

value - Variable in class net.shibboleth.idp.plugin.authn.oidc.rp.audit.impl.FixedStringAuditExtractor

The fixed string to log.

A B C D E F G H I J L M N O P R S T U V
All Classes All Packages