Package net.shibboleth.idp.plugin.oidc.op.profile.flow

Class AbstractOidcFlowTest

java.lang.Object

org.springframework.test.context.testng.AbstractTestNGSpringContextTests

net.shibboleth.idp.test.flows.AbstractFlowTest

net.shibboleth.idp.plugin.oidc.op.profile.flow.AbstractOidcFlowTest

All Implemented Interfaces:

Aware, ApplicationContextAware, org.testng.IHookable, org.testng.ITestNGListener

Direct Known Subclasses:

AbstractIssuedJWTSecurityTest, AbstractOidcApiFlowTest, AuthorizeFlowTest, ConfigurationFlowTest, IssueRegistrationAccessTokenFlowTest, KeySetFlowTest, RegistrationFlowTest, RegistrationManagementFlowTest

@ContextConfiguration(locations="classpath*:/META-INF/net.shibboleth.idp/postconfig.xml")
public abstract class AbstractOidcFlowTest
extends net.shibboleth.idp.test.flows.AbstractFlowTest

Abstract unit test for the OIDC flows.

Field Summary

Fields

Modifier and Type	Field	Description
private DataSealer	dataSealer
(package private) com.nimbusds.jose.jwk.ECKey	ecKey
static String	END_STATE_ID
protected String	endStateId
protected String	flowId
(package private) RSAPrivateKey	rsaPrivateKey
(package private) RSAPublicKey	rsaPublicKey
(package private) StorageService	storageService

Fields inherited from class net.shibboleth.idp.test.flows.AbstractFlowTest

builderFactory, certFactoryBean, directoryServer, END_STATE_OUTPUT_ATTR_EXPR, END_STATE_OUTPUT_ATTR_NAME, externalContext, flowExecutor, idGenerator, IDP_ENTITY_ID, idpCredential, IP_ADDRESS_AUTHN_FLOW_ID, IP_ADDRESS_AUTHN_MAP_BEAN_NAME, KEYSTORE_FILE, LDIF_FILE, marshallerFactory, parserPool, request, response, SAML1_TRANSFORM_C14N_BEAN_NAME, SAML2_TRANSFORM_C14N_BEAN_NAME, SP_ACS_URL, SP_ENTITY_ID, SP_RELAY_STATE, spCredential, unmarshallerFactory

Fields inherited from class org.springframework.test.context.testng.AbstractTestNGSpringContextTests

applicationContext, logger

Constructor Summary

Constructors

Modifier	Constructor	Description
protected	AbstractOidcFlowTest(String id)
protected	AbstractOidcFlowTest(String id, String endId)

Method Summary

Modifier and Type	Method	Description
protected void	assertErrorCode(FlowExecutionResult result, String errorCode)
protected void	assertErrorDescriptionContains(FlowExecutionResult result, String errorDescription)
protected String	buildJsonForLegacyToken(String subject, String clientId, com.nimbusds.oauth2.sdk.Scope scope, String type, String... consentedClaims)
protected static com.nimbusds.jose.jwk.JWKSet	buildJWKSet(PublicKey... publicKeys)
protected static com.nimbusds.openid.connect.sdk.rp.OIDCClientMetadata	buildMetadataSkeleton()
protected com.nimbusds.oauth2.sdk.token.BearerAccessToken	buildToken(String clientId, String subject, com.nimbusds.oauth2.sdk.Scope scope)
protected com.nimbusds.oauth2.sdk.token.BearerAccessToken	buildToken(String clientId, String subject, com.nimbusds.oauth2.sdk.Scope scope, com.nimbusds.openid.connect.sdk.claims.ClaimsSet userInfoDeliverySet)
protected com.nimbusds.oauth2.sdk.token.BearerAccessToken	buildToken(String clientId, String subject, com.nimbusds.oauth2.sdk.Scope scope, com.nimbusds.openid.connect.sdk.claims.ClaimsSet userInfoDeliverySet, String id, String rootId)
protected static com.nimbusds.jwt.EncryptedJWT	createEncryptedJWT(String contents, com.nimbusds.jose.JWEAlgorithm algorithm, com.nimbusds.jose.EncryptionMethod method)
protected static com.nimbusds.jwt.EncryptedJWT	createEncryptedJWT(String contents, com.nimbusds.jose.JWEAlgorithm algorithm, com.nimbusds.jose.EncryptionMethod method, net.shibboleth.oidc.security.credential.BasicJWKCredential credential, String clientSecret)
protected static com.nimbusds.jwt.EncryptedJWT	createEncryptedJWT(String contents, com.nimbusds.jose.JWEAlgorithm algorithm, com.nimbusds.jose.EncryptionMethod method, net.shibboleth.oidc.security.credential.BasicJWKCredential credential, String clientSecret, boolean setKid)
protected static com.nimbusds.jwt.SignedJWT	createPrivateKeyJWT(com.nimbusds.jwt.JWTClaimsSet claimsSet, ECPrivateKey ecPrivateKey, com.nimbusds.jose.JWSAlgorithm algorithm)
protected static com.nimbusds.jwt.SignedJWT	createPrivateKeyJWT(com.nimbusds.jwt.JWTClaimsSet claimsSet, RSAPrivateKey rsaPrivateKey)
protected static com.nimbusds.jwt.SignedJWT	createPrivateKeyJWT(com.nimbusds.jwt.JWTClaimsSet claimsSet, RSAPrivateKey rsaPrivateKey, com.nimbusds.jose.JWSAlgorithm algorithm)
protected static com.nimbusds.jwt.SignedJWT	createSecretJWT(com.nimbusds.jwt.JWTClaimsSet claimsSet, String clientSecret)
protected static com.nimbusds.jwt.SignedJWT	createSecretJWT(com.nimbusds.jwt.JWTClaimsSet claimsSet, String clientSecret, com.nimbusds.jose.JWSAlgorithm algorithm)
protected KeyPair	generateNewKeyPair()
protected KeyPair	generateNewKeyPair(String algorithm, int size)
protected DataSealer	getDataSealer()
protected com.nimbusds.jose.jwk.ECKey	initializeECKey(com.nimbusds.jose.jwk.Curve curve, String kid)
void	initializeMocks()	Initialize mock request, response, and external context.
void	initializeThreadLocals()	HttpServletRequestResponseContext.loadCurrent(HttpServletRequest, HttpServletResponse)
void	initKeys()
protected static net.shibboleth.oidc.security.credential.BasicJWKCredential	loadCredential(String classPathLocation)
protected static net.shibboleth.oidc.security.credential.BasicJWKCredential	loadEncryptionCredential()
protected static net.shibboleth.oidc.security.credential.BasicJWKCredential	loadES384SigningCredential()
protected static net.shibboleth.oidc.security.credential.BasicJWKCredential	loadES512SigningCredential()
protected static net.shibboleth.oidc.security.credential.BasicJWKCredential	loadESSigningCredential()
protected static net.shibboleth.oidc.security.credential.BasicJWKCredential	loadRSSigningCredential()
protected com.nimbusds.oauth2.sdk.ErrorResponse	parseErrorResponse(FlowExecutionResult result)
protected com.nimbusds.oauth2.sdk.Response	parseResponse(FlowExecutionResult result)
protected <AResponseType extends com.nimbusds.oauth2.sdk.Response> AResponseType	parseSuccessResponse(FlowExecutionResult result, Class<AResponseType> clazz)
protected void	removeMetadata(StorageService storageService, String clientId)
protected void	setBasicAuth(String username, String password)
protected void	setHttpFormRequest(String method, Map<String,String> parameters)
protected static void	setHttpFormRequest(MockHttpServletRequest request, String method, Map<String,String> parameters)
protected void	setJsonRequest(String method, String body)
protected void	setRequest(String method, String body, String contentType)
protected static void	setRequest(MockHttpServletRequest request, String method, String body, String contentType)
protected void	storeConsent(StorageService storageService, String uid, String clientId, String... ids)
protected void	storeMetadata(StorageService storageService, String clientId, String secret, com.nimbusds.oauth2.sdk.Scope scope, boolean addResources, String... redirectUri)
protected void	storeMetadata(StorageService storageService, String clientId, String secret, com.nimbusds.oauth2.sdk.Scope scope, com.nimbusds.jose.JWSAlgorithm tokenEndpointSigAlg, com.nimbusds.jose.JWEAlgorithm tokenEncAlg, com.nimbusds.jose.EncryptionMethod encMethod, com.nimbusds.oauth2.sdk.auth.ClientAuthenticationMethod tokenEndpointMethod, com.nimbusds.jose.JWSAlgorithm userInfoSigAlg, PublicKey publicKey, boolean addResources, com.nimbusds.jose.JWSAlgorithm requestObjectSigAlg, com.nimbusds.jose.JWEAlgorithm requestObjectEncAlg, com.nimbusds.jose.EncryptionMethod requestObjectEncMethod, String... redirectUri)
protected void	storeMetadata(StorageService storageService, String clientId, String secret, com.nimbusds.oauth2.sdk.Scope scope, com.nimbusds.jose.JWSAlgorithm tokenEndpointSigAlg, com.nimbusds.jose.JWEAlgorithm tokenEncAlg, com.nimbusds.jose.EncryptionMethod encMethod, com.nimbusds.oauth2.sdk.auth.ClientAuthenticationMethod tokenEndpointMethod, com.nimbusds.jose.JWSAlgorithm userInfoSigAlg, PublicKey publicKey, boolean addResources, com.nimbusds.jose.JWSAlgorithm requestObjectSigAlg, String... redirectUri)
protected void	storeMetadata(StorageService storageService, String clientId, String secret, com.nimbusds.oauth2.sdk.Scope scope, com.nimbusds.jose.JWSAlgorithm tokenEndpointSigAlg, com.nimbusds.jose.JWEAlgorithm tokenEncAlg, com.nimbusds.jose.EncryptionMethod encMethod, com.nimbusds.oauth2.sdk.auth.ClientAuthenticationMethod tokenEndpointMethod, com.nimbusds.jose.JWSAlgorithm userInfoSigAlg, PublicKey publicKey, String... redirectUri)
protected void	storeMetadata(StorageService storageService, String clientId, String secret, com.nimbusds.oauth2.sdk.Scope scope, com.nimbusds.jose.JWSAlgorithm tokenEndpointSigAlg, com.nimbusds.oauth2.sdk.auth.ClientAuthenticationMethod tokenEndpointMethod, com.nimbusds.jose.JWSAlgorithm userInfoSigAlg, String... redirectUri)
protected void	storeMetadata(StorageService storageService, String clientId, String secret, com.nimbusds.oauth2.sdk.Scope scope, com.nimbusds.jose.JWSAlgorithm tokenEndpointSigAlg, com.nimbusds.oauth2.sdk.auth.ClientAuthenticationMethod tokenEndpointMethod, com.nimbusds.jose.JWSAlgorithm userInfoSigAlg, PublicKey publicKey, String... redirectUri)
protected void	storeMetadata(StorageService storageService, String clientId, String secret, com.nimbusds.oauth2.sdk.Scope scope, com.nimbusds.jose.JWSAlgorithm tokenEndpointSigAlg, com.nimbusds.oauth2.sdk.auth.ClientAuthenticationMethod tokenEndpointMethod, String... redirectUri)
protected void	storeMetadata(StorageService storageService, String clientId, String secret, com.nimbusds.oauth2.sdk.Scope scope, com.nimbusds.jose.JWSAlgorithm requestObjectSigAlg, String... redirectUri)
protected void	storeMetadata(StorageService storageService, String clientId, String secret, com.nimbusds.oauth2.sdk.Scope scope, com.nimbusds.jose.JWSAlgorithm requestObjectSigAlg, PublicKey publicKey, com.nimbusds.jose.JWEAlgorithm requestObjectEncAlg, com.nimbusds.jose.EncryptionMethod requestObjectEncMethod, String... redirectUri)
protected void	storeMetadata(StorageService storageService, String clientId, String secret, com.nimbusds.oauth2.sdk.Scope scope, com.nimbusds.jose.JWSAlgorithm requestObjectSigAlg, PublicKey publicKey, String... redirectUri)
protected void	storeMetadata(StorageService storageService, String clientId, String secret, com.nimbusds.oauth2.sdk.Scope scope, String... redirectUri)
protected static void	storeMetadataObject(StorageService storageService, String clientId, String secret, com.nimbusds.openid.connect.sdk.rp.OIDCClientMetadata metadata)

Methods inherited from class net.shibboleth.idp.test.flows.AbstractFlowTest

assertFlowExecutionOutcome, assertFlowExecutionOutcome, assertFlowExecutionResult, assertProfileRequestContext, buildSOAP11Envelope, clearThreadLocals, getFlow, initializeFlowExecutor, initializeXMLObjectSupport, overrideEndStateOutput, overrideEndStateOutput, registerFlowsInParentRegistry, retrieveProfileRequestContext, setupDirectoryServer, teardownDirectoryServer

Methods inherited from class org.springframework.test.context.testng.AbstractTestNGSpringContextTests

run, setApplicationContext, springTestContextAfterTestClass, springTestContextAfterTestMethod, springTestContextBeforeTestClass, springTestContextBeforeTestMethod, springTestContextPrepareTestInstance

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

END_STATE_ID

public static final String END_STATE_ID

See Also:

Constant Field Values

flowId

protected String flowId

endStateId

protected String endStateId

dataSealer

@Autowired
@Qualifier("shibboleth.oidc.TokenSealer")
private DataSealer dataSealer

storageService

@Autowired
@Qualifier("shibboleth.StorageService")
StorageService storageService

rsaPrivateKey

RSAPrivateKey rsaPrivateKey

rsaPublicKey

RSAPublicKey rsaPublicKey

ecKey

com.nimbusds.jose.jwk.ECKey ecKey

Constructor Detail

AbstractOidcFlowTest

protected AbstractOidcFlowTest(String id)

AbstractOidcFlowTest

protected AbstractOidcFlowTest(String id,
                               String endId)

Method Detail

initializeMocks

@BeforeMethod
public void initializeMocks()

Initialize mock request, response, and external context. Overrides to remove authorization header.

Overrides:

initializeMocks in class net.shibboleth.idp.test.flows.AbstractFlowTest

initializeThreadLocals

@BeforeMethod
public void initializeThreadLocals()

HttpServletRequestResponseContext.loadCurrent(HttpServletRequest, HttpServletResponse)

Overrides:

initializeThreadLocals in class net.shibboleth.idp.test.flows.AbstractFlowTest

initKeys

@BeforeClass
public void initKeys()
              throws NoSuchAlgorithmException,
                     com.nimbusds.jose.JOSEException

Throws:

NoSuchAlgorithmException

com.nimbusds.jose.JOSEException

initializeECKey

protected com.nimbusds.jose.jwk.ECKey initializeECKey(com.nimbusds.jose.jwk.Curve curve,
                                                      String kid)

generateNewKeyPair

protected KeyPair generateNewKeyPair()
                              throws NoSuchAlgorithmException

Throws:

NoSuchAlgorithmException

generateNewKeyPair

protected KeyPair generateNewKeyPair(String algorithm,
                                     int size)
                              throws NoSuchAlgorithmException

Throws:

NoSuchAlgorithmException

getDataSealer

protected DataSealer getDataSealer()

parseResponse

protected com.nimbusds.oauth2.sdk.Response parseResponse(FlowExecutionResult result)

parseErrorResponse

protected com.nimbusds.oauth2.sdk.ErrorResponse parseErrorResponse(FlowExecutionResult result)

parseSuccessResponse

protected <AResponseType extends com.nimbusds.oauth2.sdk.Response> AResponseType parseSuccessResponse(FlowExecutionResult result,
                                                                                                      Class<AResponseType> clazz)

assertErrorCode

protected void assertErrorCode(FlowExecutionResult result,
                               String errorCode)

assertErrorDescriptionContains

protected void assertErrorDescriptionContains(FlowExecutionResult result,
                                              String errorDescription)

setJsonRequest

protected void setJsonRequest(String method,
                              String body)

setHttpFormRequest

protected void setHttpFormRequest(String method,
                                  Map<String,String> parameters)

setHttpFormRequest

protected static void setHttpFormRequest(MockHttpServletRequest request,
                                         String method,
                                         Map<String,String> parameters)

setBasicAuth

protected void setBasicAuth(String username,
                            String password)

setRequest

protected void setRequest(String method,
                          String body,
                          String contentType)

setRequest

protected static void setRequest(MockHttpServletRequest request,
                                 String method,
                                 String body,
                                 String contentType)

storeMetadata

protected void storeMetadata(StorageService storageService,
                             String clientId,
                             String secret,
                             com.nimbusds.oauth2.sdk.Scope scope,
                             String... redirectUri)
                      throws IOException

Throws:

IOException

storeMetadata

protected void storeMetadata(StorageService storageService,
                             String clientId,
                             String secret,
                             com.nimbusds.oauth2.sdk.Scope scope,
                             com.nimbusds.jose.JWSAlgorithm requestObjectSigAlg,
                             String... redirectUri)
                      throws IOException

Throws:

IOException

storeMetadata

protected void storeMetadata(StorageService storageService,
                             String clientId,
                             String secret,
                             com.nimbusds.oauth2.sdk.Scope scope,
                             com.nimbusds.jose.JWSAlgorithm requestObjectSigAlg,
                             PublicKey publicKey,
                             String... redirectUri)
                      throws IOException

Throws:

IOException

storeMetadata

protected void storeMetadata(StorageService storageService,
                             String clientId,
                             String secret,
                             com.nimbusds.oauth2.sdk.Scope scope,
                             com.nimbusds.jose.JWSAlgorithm requestObjectSigAlg,
                             PublicKey publicKey,
                             com.nimbusds.jose.JWEAlgorithm requestObjectEncAlg,
                             com.nimbusds.jose.EncryptionMethod requestObjectEncMethod,
                             String... redirectUri)
                      throws IOException

Throws:

IOException

storeMetadata

protected void storeMetadata(StorageService storageService,
                             String clientId,
                             String secret,
                             com.nimbusds.oauth2.sdk.Scope scope,
                             boolean addResources,
                             String... redirectUri)
                      throws IOException

Throws:

IOException

storeMetadata

protected void storeMetadata(StorageService storageService,
                             String clientId,
                             String secret,
                             com.nimbusds.oauth2.sdk.Scope scope,
                             com.nimbusds.jose.JWSAlgorithm tokenEndpointSigAlg,
                             com.nimbusds.oauth2.sdk.auth.ClientAuthenticationMethod tokenEndpointMethod,
                             String... redirectUri)
                      throws IOException

Throws:

IOException

storeMetadata

protected void storeMetadata(StorageService storageService,
                             String clientId,
                             String secret,
                             com.nimbusds.oauth2.sdk.Scope scope,
                             com.nimbusds.jose.JWSAlgorithm tokenEndpointSigAlg,
                             com.nimbusds.oauth2.sdk.auth.ClientAuthenticationMethod tokenEndpointMethod,
                             com.nimbusds.jose.JWSAlgorithm userInfoSigAlg,
                             String... redirectUri)
                      throws IOException

Throws:

IOException

storeMetadata

protected void storeMetadata(StorageService storageService,
                             String clientId,
                             String secret,
                             com.nimbusds.oauth2.sdk.Scope scope,
                             com.nimbusds.jose.JWSAlgorithm tokenEndpointSigAlg,
                             com.nimbusds.oauth2.sdk.auth.ClientAuthenticationMethod tokenEndpointMethod,
                             com.nimbusds.jose.JWSAlgorithm userInfoSigAlg,
                             PublicKey publicKey,
                             String... redirectUri)
                      throws IOException

Throws:

IOException

storeMetadata

protected void storeMetadata(StorageService storageService,
                             String clientId,
                             String secret,
                             com.nimbusds.oauth2.sdk.Scope scope,
                             com.nimbusds.jose.JWSAlgorithm tokenEndpointSigAlg,
                             com.nimbusds.jose.JWEAlgorithm tokenEncAlg,
                             com.nimbusds.jose.EncryptionMethod encMethod,
                             com.nimbusds.oauth2.sdk.auth.ClientAuthenticationMethod tokenEndpointMethod,
                             com.nimbusds.jose.JWSAlgorithm userInfoSigAlg,
                             PublicKey publicKey,
                             String... redirectUri)
                      throws IOException

Throws:

IOException

storeMetadata

protected void storeMetadata(StorageService storageService,
                             String clientId,
                             String secret,
                             com.nimbusds.oauth2.sdk.Scope scope,
                             com.nimbusds.jose.JWSAlgorithm tokenEndpointSigAlg,
                             com.nimbusds.jose.JWEAlgorithm tokenEncAlg,
                             com.nimbusds.jose.EncryptionMethod encMethod,
                             com.nimbusds.oauth2.sdk.auth.ClientAuthenticationMethod tokenEndpointMethod,
                             com.nimbusds.jose.JWSAlgorithm userInfoSigAlg,
                             PublicKey publicKey,
                             boolean addResources,
                             com.nimbusds.jose.JWSAlgorithm requestObjectSigAlg,
                             String... redirectUri)
                      throws IOException

Throws:

IOException

storeMetadata

protected void storeMetadata(StorageService storageService,
                             String clientId,
                             String secret,
                             com.nimbusds.oauth2.sdk.Scope scope,
                             com.nimbusds.jose.JWSAlgorithm tokenEndpointSigAlg,
                             com.nimbusds.jose.JWEAlgorithm tokenEncAlg,
                             com.nimbusds.jose.EncryptionMethod encMethod,
                             com.nimbusds.oauth2.sdk.auth.ClientAuthenticationMethod tokenEndpointMethod,
                             com.nimbusds.jose.JWSAlgorithm userInfoSigAlg,
                             PublicKey publicKey,
                             boolean addResources,
                             com.nimbusds.jose.JWSAlgorithm requestObjectSigAlg,
                             com.nimbusds.jose.JWEAlgorithm requestObjectEncAlg,
                             com.nimbusds.jose.EncryptionMethod requestObjectEncMethod,
                             String... redirectUri)
                      throws IOException

Throws:

IOException

storeMetadataObject

protected static void storeMetadataObject(StorageService storageService,
                                          String clientId,
                                          String secret,
                                          com.nimbusds.openid.connect.sdk.rp.OIDCClientMetadata metadata)
                                   throws IOException

Throws:

IOException

buildMetadataSkeleton

protected static com.nimbusds.openid.connect.sdk.rp.OIDCClientMetadata buildMetadataSkeleton()

buildJWKSet

protected static com.nimbusds.jose.jwk.JWKSet buildJWKSet(PublicKey... publicKeys)

removeMetadata

protected void removeMetadata(StorageService storageService,
                              String clientId)
                       throws IOException

Throws:

IOException

storeConsent

protected void storeConsent(StorageService storageService,
                            String uid,
                            String clientId,
                            String... ids)
                     throws IOException

Throws:

IOException

buildJsonForLegacyToken

protected String buildJsonForLegacyToken(String subject,
                                         String clientId,
                                         com.nimbusds.oauth2.sdk.Scope scope,
                                         String type,
                                         String... consentedClaims)

createSecretJWT

protected static com.nimbusds.jwt.SignedJWT createSecretJWT(com.nimbusds.jwt.JWTClaimsSet claimsSet,
                                                            String clientSecret)
                                                     throws com.nimbusds.jose.JOSEException

Throws:

com.nimbusds.jose.JOSEException

createSecretJWT

protected static com.nimbusds.jwt.SignedJWT createSecretJWT(com.nimbusds.jwt.JWTClaimsSet claimsSet,
                                                            String clientSecret,
                                                            com.nimbusds.jose.JWSAlgorithm algorithm)

createPrivateKeyJWT

protected static com.nimbusds.jwt.SignedJWT createPrivateKeyJWT(com.nimbusds.jwt.JWTClaimsSet claimsSet,
                                                                RSAPrivateKey rsaPrivateKey)
                                                         throws com.nimbusds.jose.JOSEException

Throws:

com.nimbusds.jose.JOSEException

createPrivateKeyJWT

protected static com.nimbusds.jwt.SignedJWT createPrivateKeyJWT(com.nimbusds.jwt.JWTClaimsSet claimsSet,
                                                                RSAPrivateKey rsaPrivateKey,
                                                                com.nimbusds.jose.JWSAlgorithm algorithm)
                                                         throws com.nimbusds.jose.JOSEException

Throws:

com.nimbusds.jose.JOSEException

createPrivateKeyJWT

protected static com.nimbusds.jwt.SignedJWT createPrivateKeyJWT(com.nimbusds.jwt.JWTClaimsSet claimsSet,
                                                                ECPrivateKey ecPrivateKey,
                                                                com.nimbusds.jose.JWSAlgorithm algorithm)
                                                         throws com.nimbusds.jose.JOSEException

Throws:

com.nimbusds.jose.JOSEException

createEncryptedJWT

protected static com.nimbusds.jwt.EncryptedJWT createEncryptedJWT(String contents,
                                                                  com.nimbusds.jose.JWEAlgorithm algorithm,
                                                                  com.nimbusds.jose.EncryptionMethod method)
                                                           throws com.nimbusds.jose.JOSEException,
                                                                  ParseException

Throws:

com.nimbusds.jose.JOSEException

ParseException

createEncryptedJWT

protected static com.nimbusds.jwt.EncryptedJWT createEncryptedJWT(String contents,
                                                                  com.nimbusds.jose.JWEAlgorithm algorithm,
                                                                  com.nimbusds.jose.EncryptionMethod method,
                                                                  net.shibboleth.oidc.security.credential.BasicJWKCredential credential,
                                                                  String clientSecret)
                                                           throws com.nimbusds.jose.JOSEException,
                                                                  ParseException

Throws:

com.nimbusds.jose.JOSEException

ParseException

createEncryptedJWT

protected static com.nimbusds.jwt.EncryptedJWT createEncryptedJWT(String contents,
                                                                  com.nimbusds.jose.JWEAlgorithm algorithm,
                                                                  com.nimbusds.jose.EncryptionMethod method,
                                                                  net.shibboleth.oidc.security.credential.BasicJWKCredential credential,
                                                                  String clientSecret,
                                                                  boolean setKid)
                                                           throws com.nimbusds.jose.JOSEException,
                                                                  ParseException

Throws:

com.nimbusds.jose.JOSEException

ParseException

loadEncryptionCredential

protected static net.shibboleth.oidc.security.credential.BasicJWKCredential loadEncryptionCredential()

loadRSSigningCredential

protected static net.shibboleth.oidc.security.credential.BasicJWKCredential loadRSSigningCredential()

loadESSigningCredential

protected static net.shibboleth.oidc.security.credential.BasicJWKCredential loadESSigningCredential()

loadES384SigningCredential

protected static net.shibboleth.oidc.security.credential.BasicJWKCredential loadES384SigningCredential()

loadES512SigningCredential

protected static net.shibboleth.oidc.security.credential.BasicJWKCredential loadES512SigningCredential()

loadCredential

protected static net.shibboleth.oidc.security.credential.BasicJWKCredential loadCredential(String classPathLocation)

buildToken

protected com.nimbusds.oauth2.sdk.token.BearerAccessToken buildToken(String clientId,
                                                                     String subject,
                                                                     com.nimbusds.oauth2.sdk.Scope scope)
                                                              throws URISyntaxException,
                                                                     NoSuchAlgorithmException,
                                                                     DataSealerException,
                                                                     ComponentInitializationException

Throws:

URISyntaxException

NoSuchAlgorithmException

DataSealerException

ComponentInitializationException

buildToken

protected com.nimbusds.oauth2.sdk.token.BearerAccessToken buildToken(String clientId,
                                                                     String subject,
                                                                     com.nimbusds.oauth2.sdk.Scope scope,
                                                                     com.nimbusds.openid.connect.sdk.claims.ClaimsSet userInfoDeliverySet)
                                                              throws URISyntaxException,
                                                                     NoSuchAlgorithmException,
                                                                     DataSealerException,
                                                                     ComponentInitializationException

Throws:

URISyntaxException

NoSuchAlgorithmException

DataSealerException

ComponentInitializationException

buildToken

protected com.nimbusds.oauth2.sdk.token.BearerAccessToken buildToken(String clientId,
                                                                     String subject,
                                                                     com.nimbusds.oauth2.sdk.Scope scope,
                                                                     com.nimbusds.openid.connect.sdk.claims.ClaimsSet userInfoDeliverySet,
                                                                     String id,
                                                                     String rootId)
                                                              throws URISyntaxException,
                                                                     NoSuchAlgorithmException,
                                                                     DataSealerException,
                                                                     ComponentInitializationException

Throws:

URISyntaxException

NoSuchAlgorithmException

DataSealerException

ComponentInitializationException