Package net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl

Class ValidateRequestObject

java.lang.Object

net.shibboleth.utilities.java.support.component.AbstractInitializableComponent

org.opensaml.profile.action.AbstractProfileAction

org.opensaml.profile.action.AbstractConditionalProfileAction

net.shibboleth.idp.profile.AbstractProfileAction

net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCRequestAction<com.nimbusds.oauth2.sdk.AuthorizationRequest>

net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.AbstractOAuthAuthorizationRequestAction

net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.AbstractOAuthAuthorizationResponseAction

net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.ValidateRequestObject

All Implemented Interfaces:

Component, DestructableComponent, InitializableComponent, ProfileAction, Aware, MessageSource, MessageSourceAware, Action

public class ValidateRequestObject
extends AbstractOAuthAuthorizationResponseAction

Action validates request object in response context.

Field Summary

Fields

Modifier and Type	Field	Description
private org.slf4j.Logger	log	Class logger.
private net.shibboleth.oidc.jwt.claims.ClaimsValidator	plainClaimsValidator	The claims validator to be applied for validating the plain/unsigned request object.
private com.nimbusds.jwt.JWT	requestObject	Request Object.
private Function<ProfileRequestContext,net.shibboleth.oidc.security.jose.context.SecurityParametersContext>	securityParametersLookupStrategy	Strategy used to locate the SecurityParametersContext to use for signing.
private net.shibboleth.oidc.jwt.claims.ClaimsValidator	signedClaimsValidator	The claims validator to be applied for validating the signed request object.

Constructor Summary

Constructors

Constructor	Description
ValidateRequestObject()	Constructor.

Method Summary

Modifier and Type	Method	Description
protected void	doExecute(ProfileRequestContext profileRequestContext)
protected void	doInitialize()
protected boolean	doPreExecute(ProfileRequestContext profileRequestContext)
void	setPlainClaimsValidator(net.shibboleth.oidc.jwt.claims.ClaimsValidator validator)	Set the claims validator used for validating the plain/unsigned request object.
void	setSecurityParametersLookupStrategy(Function<ProfileRequestContext,net.shibboleth.oidc.security.jose.context.SecurityParametersContext> strategy)	Set the strategy used to locate the SecurityParametersContext to use.
void	setSignedClaimsValidator(net.shibboleth.oidc.jwt.claims.ClaimsValidator validator)	Set the claims validator used for validating the signed request object.

Methods inherited from class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.AbstractOAuthAuthorizationResponseAction

getMetadataContext, getOidcResponseContext

Methods inherited from class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.AbstractOAuthAuthorizationRequestAction

getAuthorizationRequest

Methods inherited from class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCRequestAction

getRequest

Methods inherited from class net.shibboleth.idp.profile.AbstractProfileAction

doExecute, execute, getBean, getBean, getMessage, getMessage, getMessage, getParameter, getParameter, getProfileContextLookupStrategy, getRequestContext, getResult, setMessageSource, setProfileContextLookupStrategy

Methods inherited from class org.opensaml.profile.action.AbstractConditionalProfileAction

getActivationCondition, setActivationCondition

Methods inherited from class org.opensaml.profile.action.AbstractProfileAction

doPostExecute, doPostExecute, execute, getHttpServletRequest, getHttpServletRequestSupplier, getHttpServletResponse, getHttpServletResponseSupplier, getLogPrefix, setHttpServletRequest, setHttpServletRequestSupplier, setHttpServletResponse, setHttpServletResponseSupplier

Methods inherited from class net.shibboleth.utilities.java.support.component.AbstractInitializableComponent

destroy, doDestroy, initialize, isDestroyed, isInitialized

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface net.shibboleth.utilities.java.support.component.InitializableComponent

initialize, isInitialized

Field Detail

log

@Nonnull
private org.slf4j.Logger log

Class logger.

securityParametersLookupStrategy

@Nonnull
private Function<ProfileRequestContext,net.shibboleth.oidc.security.jose.context.SecurityParametersContext> securityParametersLookupStrategy

Strategy used to locate the SecurityParametersContext to use for signing.

requestObject

@Nullable
private com.nimbusds.jwt.JWT requestObject

Request Object.

signedClaimsValidator

@NonnullAfterInit
private net.shibboleth.oidc.jwt.claims.ClaimsValidator signedClaimsValidator

The claims validator to be applied for validating the signed request object.

plainClaimsValidator

@NonnullAfterInit
private net.shibboleth.oidc.jwt.claims.ClaimsValidator plainClaimsValidator

The claims validator to be applied for validating the plain/unsigned request object.

Constructor Detail

ValidateRequestObject

public ValidateRequestObject()

Constructor.

Method Detail

setSecurityParametersLookupStrategy

public void setSecurityParametersLookupStrategy(@Nonnull
                                                Function<ProfileRequestContext,net.shibboleth.oidc.security.jose.context.SecurityParametersContext> strategy)

Set the strategy used to locate the SecurityParametersContext to use.

Parameters:

strategy - lookup strategy

setSignedClaimsValidator

public void setSignedClaimsValidator(@Nonnull
                                     net.shibboleth.oidc.jwt.claims.ClaimsValidator validator)

Set the claims validator used for validating the signed request object.

Parameters:

validator - What to set

setPlainClaimsValidator

public void setPlainClaimsValidator(@Nonnull
                                    net.shibboleth.oidc.jwt.claims.ClaimsValidator validator)

Set the claims validator used for validating the plain/unsigned request object.

Parameters:

validator - What to set

doInitialize

protected void doInitialize()
                     throws ComponentInitializationException

Overrides:

doInitialize in class AbstractInitializableComponent

Throws:

ComponentInitializationException

doPreExecute

protected boolean doPreExecute(@Nonnull
                               ProfileRequestContext profileRequestContext)

Overrides:

doPreExecute in class AbstractOAuthAuthorizationResponseAction

doExecute

protected void doExecute(@Nonnull
                         ProfileRequestContext profileRequestContext)

Overrides:

doExecute in class AbstractProfileAction