Package net.shibboleth.idp.plugin.oidc.op.profile.flow

Class AuthorizeFlowTest

java.lang.Object

org.springframework.test.context.testng.AbstractTestNGSpringContextTests

net.shibboleth.idp.test.flows.AbstractFlowTest

net.shibboleth.idp.plugin.oidc.op.profile.flow.AbstractOidcFlowTest

net.shibboleth.idp.plugin.oidc.op.profile.flow.AuthorizeFlowTest

All Implemented Interfaces:

Aware, ApplicationContextAware, org.testng.IHookable, org.testng.ITestNGListener

public class AuthorizeFlowTest
extends AbstractOidcFlowTest

Tests for the authorize-flow.

Field Summary

Fields

Modifier and Type	Field	Description
(package private) String	clientId
(package private) String	clientIdCustomTokens
(package private) String	clientIdIssInResponse
(package private) String	clientSecret
static String	FLOW_ID
(package private) String	issuer
(package private) String	redirectUri
(package private) String	resource
(package private) com.nimbusds.oauth2.sdk.Scope	scope
(package private) StorageService	storageService

Fields inherited from class net.shibboleth.idp.plugin.oidc.op.profile.flow.AbstractOidcFlowTest

ecKey, END_STATE_ID, endStateId, flowId, rsaPrivateKey, rsaPublicKey

Fields inherited from class net.shibboleth.idp.test.flows.AbstractFlowTest

builderFactory, certFactoryBean, directoryServer, END_STATE_OUTPUT_ATTR_EXPR, END_STATE_OUTPUT_ATTR_NAME, externalContext, flowExecutor, idGenerator, IDP_ENTITY_ID, idpCredential, IP_ADDRESS_AUTHN_FLOW_ID, IP_ADDRESS_AUTHN_MAP_BEAN_NAME, KEYSTORE_FILE, LDIF_FILE, marshallerFactory, parserPool, request, response, SAML1_TRANSFORM_C14N_BEAN_NAME, SAML2_TRANSFORM_C14N_BEAN_NAME, SP_ACS_URL, SP_ENTITY_ID, SP_RELAY_STATE, spCredential, unmarshallerFactory

Fields inherited from class org.springframework.test.context.testng.AbstractTestNGSpringContextTests

applicationContext, logger

Constructor Summary

Constructors

Constructor	Description
AuthorizeFlowTest()

Method Summary

Modifier and Type	Method	Description
protected void	assertErrorResponseWithIssuer(FlowExecutionResult result)
protected void	assertErrorResponseWithNoIssuer(FlowExecutionResult result)
protected void	assertRequestObjectError(com.nimbusds.jwt.JWT requestObject)
protected void	assertRequestObjectError(com.nimbusds.jwt.JWT requestObject, com.nimbusds.jose.JWSAlgorithm requestObjectSigAlg)
protected void	assertRequestObjectError(com.nimbusds.jwt.JWT requestObject, com.nimbusds.jose.JWSAlgorithm requestObjectSigAlg, PublicKey publicKey)
protected void	assertRequestObjectError(String requestObject, com.nimbusds.jose.JWSAlgorithm requestObjectSigAlg, PublicKey publicKey, com.nimbusds.jose.JWEAlgorithm requestObjectEncAlg, com.nimbusds.jose.EncryptionMethod requestObjectEncMethod)
protected void	assertSuccessRequestObjectWithClaimsRequestResponse(com.nimbusds.jwt.JWT requestObject)
protected void	assertSuccessRequestObjectWithClaimsRequestResponse(com.nimbusds.jwt.JWT requestObject, com.nimbusds.jose.JWSAlgorithm requestObjectSigAlg)
protected void	assertSuccessRequestObjectWithClaimsRequestResponse(com.nimbusds.jwt.JWT requestObject, com.nimbusds.jose.JWSAlgorithm requestObjectSigAlg, PublicKey publicKey)
protected void	assertSuccessRequestObjectWithClaimsRequestResponse(com.nimbusds.jwt.JWT requestObject, com.nimbusds.jose.JWSAlgorithm requestObjectSigAlg, PublicKey publicKey, com.nimbusds.jose.JWEAlgorithm requestObjectEncAlg, com.nimbusds.jose.EncryptionMethod requestObjectEncMethod)
protected void	assertSuccessRequestObjectWithClaimsRequestResponse(String requestObject, com.nimbusds.jose.JWSAlgorithm requestObjectSigAlg, PublicKey publicKey, com.nimbusds.jose.JWEAlgorithm requestObjectEncAlg, com.nimbusds.jose.EncryptionMethod requestObjectEncMethod)
Object[]	createAccessTokenSecurityTests()
Object[]	createIdTokenSecurityTests()
Object[]	createRequestObjectSecurityTests()
protected static String	getRequestObjectWithClaimsRequestPayload(String clientId, String redirectUri)
protected String	getSidFromAuthorizeCodeClaimsSet(com.nimbusds.openid.connect.sdk.AuthenticationSuccessResponse successResponse)
protected String	getSidFromIDToken(com.nimbusds.openid.connect.sdk.AuthenticationSuccessResponse successResponse)
protected String	getSidFromJWTAccessTokenClaimsSet(com.nimbusds.openid.connect.sdk.AuthenticationSuccessResponse successResponse)
protected String	getSidFromOpaqueAccessTokenClaimsSet(com.nimbusds.openid.connect.sdk.AuthenticationSuccessResponse successResponse)
void	removeMetadata()
protected void	setRequestParameters(List<Pair<String,String>> pairs)
protected static void	setRequestParameters(MockHttpServletRequest request, List<Pair<String,String>> pairs)
void	setup()
void	testWithAuthorizationCodeFlow()
void	testWithAuthorizationCodeFlowAndResource()
void	testWithAuthorizationCodeFlowForcedPlainPKCEMissingChallenge()
void	testWithAuthorizationCodeFlowForcedPlainPKCEUnknownChallenge()
void	testWithAuthorizationCodeFlowForcedPlainPKCEValidChallenge()
void	testWithAuthorizationCodeFlowForcedS256PKCEPlainChallenge()
void	testWithAuthorizationCodeFlowForcedS256PKCEUnknownChallenge()
void	testWithAuthorizationCodeFlowForcedS256PKCEValidChallenge()
void	testWithAuthorizationCodeFlowIssInResponse()
void	testWithAuthorizationCodeFlowNoOpenidMetadataContainsResource()
void	testWithAuthorizationCodeFlowNoOpenidMetadataNotContainingResource()
void	testWithAuthorizationCodeFlowNoRedirectURI()
void	testWithAuthorizationCodeFlowNoScopesRegistered()
void	testWithAuthorizationCodeFlowNoScopesRegisteredIssInResponse()
void	testWithAuthorizationCodeFlowRequestObjectEnforcedNoRO()
void	testWithAuthorizationCodeFlowUnforcedPKCE()
void	testWithAuthorizationCodeFlowUsingSAMLMetadata()
void	testWithAuthorizationCodeFlowUsingUntrustedRP()
void	testWithAuthorizationCodeFlowWithCustomClaimInCode()
void	testWithAuthorizationCodeFlowWithIDTokenClaims()
void	testWithAuthorizationCodeFlowWithUIClaims()
void	testWithES256SignedReqObjectNoTrustedKey()
void	testWithES256SignedReqObjectWrongKey()
void	testWithHS256SignedReqObjectNoAudience()
void	testWithHS256SignedReqObjectNoIssuer()
void	testWithHS256SignedReqObjectOverwriteRedirectUri()
void	testWithHS256SignedReqObjectWrongAudience()
void	testWithHS256SignedReqObjectWrongIssuer()
void	testWithHS256SignedReqObjectWrongSecret()
void	testWithHybridIdTokenFlow()
void	testWithHybridIdTokenFlowAndResource()
void	testWithHybridIdTokenFlowIssInResponse()
void	testWithHybridIdTokenFlowNoNonce()
void	testWithHybridIdTokenFlowRequestObjectEnforcedNoRO()
void	testWithHybridIdTokenTokenFlow()
void	testWithHybridIdTokenTokenFlowAndResource()
void	testWithHybridIdTokenTokenFlowNoNonce()
void	testWithHybridIdTokenTokenFlowNoOpenidScopeRegistered()
void	testWithHybridIdTokenTokenFlowNoOpenidScopeRequested()
void	testWithHybridIdTokenTokenFlowRequestObjectEnforcedNoRO()
void	testWithHybridIdTokenTokenFlowWithCustomTokenClaim()
void	testWithHybridTokenFlow()
void	testWithHybridTokenFlowAndResource()
void	testWithHybridTokenFlowNoOpenidScopeRegistered()
void	testWithHybridTokenFlowNoOpenidScopeRequested()
void	testWithHybridTokenFlowRequestObjectEnforcedNoRO()
void	testWithImplicitFlow()
void	testWithImplicitFlowAndResource()
void	testWithImplicitFlowIssInResponse()
void	testWithImplicitFlowNoNonce()
void	testWithImplicitFlowNoRedirectURI()
void	testWithImplicitFlowRequestObjectEnforcedNoRO()
void	testWithImplicitOidcFlowNoOpenIdScopeRegistered()
void	testWithImplicitOidcFlowNoOpenIdScopeRequested()
void	testWithImplicitTokenFlow()
void	testWithImplicitTokenFlowAndResource()
void	testWithImplicitTokenFlowIssInResponse()
void	testWithImplicitTokenFlowNoNonce()
void	testWithImplicitTokenFlowRequestObjectEnforcedNoRO()
void	testWithPlainReqObjectClaimsRequest()
void	testWithPlainReqObjectExpired()
void	testWithPlainReqObjectNbfInFuture()
void	testWithPlainReqObjectOverwriteRedirectUri()
void	testWithPlainReqObjectOverwriteRedirectUriROEnforced()
void	testWithRS256SignedReqObjectNoTrustedKey()
void	testWithRS256SignedReqObjectWrongKey()

Methods inherited from class net.shibboleth.idp.plugin.oidc.op.profile.flow.AbstractOidcFlowTest

assertErrorCode, assertErrorDescriptionContains, buildJsonForLegacyToken, buildJWKSet, buildMetadataSkeleton, buildToken, buildToken, buildToken, createEncryptedJWT, createEncryptedJWT, createEncryptedJWT, createPrivateKeyJWT, createPrivateKeyJWT, createPrivateKeyJWT, createSecretJWT, createSecretJWT, generateNewKeyPair, generateNewKeyPair, getDataSealer, initializeECKey, initializeMocks, initializeThreadLocals, initKeys, loadCredential, loadEncryptionCredential, loadES384SigningCredential, loadES512SigningCredential, loadESSigningCredential, loadRSSigningCredential, parseErrorResponse, parseResponse, parseSuccessResponse, removeMetadata, setBasicAuth, setHttpFormRequest, setHttpFormRequest, setJsonRequest, setRequest, setRequest, storeConsent, storeMetadata, storeMetadata, storeMetadata, storeMetadata, storeMetadata, storeMetadata, storeMetadata, storeMetadata, storeMetadata, storeMetadata, storeMetadata, storeMetadataObject

Methods inherited from class net.shibboleth.idp.test.flows.AbstractFlowTest

assertFlowExecutionOutcome, assertFlowExecutionOutcome, assertFlowExecutionResult, assertProfileRequestContext, buildSOAP11Envelope, clearThreadLocals, getFlow, initializeFlowExecutor, initializeXMLObjectSupport, overrideEndStateOutput, overrideEndStateOutput, registerFlowsInParentRegistry, retrieveProfileRequestContext, setupDirectoryServer, teardownDirectoryServer

Methods inherited from class org.springframework.test.context.testng.AbstractTestNGSpringContextTests

run, setApplicationContext, springTestContextAfterTestClass, springTestContextAfterTestMethod, springTestContextBeforeTestClass, springTestContextBeforeTestMethod, springTestContextPrepareTestInstance

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

FLOW_ID

public static final String FLOW_ID

See Also:

Constant Field Values

resource

String resource

issuer

String issuer

redirectUri

String redirectUri

clientId

String clientId

clientIdIssInResponse

String clientIdIssInResponse

clientIdCustomTokens

String clientIdCustomTokens

clientSecret

String clientSecret

scope

com.nimbusds.oauth2.sdk.Scope scope

storageService

@Autowired
@Qualifier("shibboleth.StorageService")
StorageService storageService

Constructor Detail

AuthorizeFlowTest

public AuthorizeFlowTest()

Method Detail

setup

@BeforeMethod
public void setup()

testWithAuthorizationCodeFlow

public void testWithAuthorizationCodeFlow()
                                   throws IOException,
                                          net.shibboleth.idp.session.SessionException

Throws:

IOException

net.shibboleth.idp.session.SessionException

testWithAuthorizationCodeFlowRequestObjectEnforcedNoRO

public void testWithAuthorizationCodeFlowRequestObjectEnforcedNoRO()
                                                            throws IOException,
                                                                   net.shibboleth.idp.session.SessionException

Throws:

IOException

net.shibboleth.idp.session.SessionException

testWithAuthorizationCodeFlowAndResource

public void testWithAuthorizationCodeFlowAndResource()
                                              throws IOException,
                                                     net.shibboleth.idp.session.SessionException

Throws:

IOException

net.shibboleth.idp.session.SessionException

testWithAuthorizationCodeFlowIssInResponse

public void testWithAuthorizationCodeFlowIssInResponse()
                                                throws IOException,
                                                       net.shibboleth.idp.session.SessionException

Throws:

IOException

net.shibboleth.idp.session.SessionException

testWithAuthorizationCodeFlowNoOpenidMetadataContainsResource

public void testWithAuthorizationCodeFlowNoOpenidMetadataContainsResource()
                                                                   throws IOException,
                                                                          net.shibboleth.idp.session.SessionException

Throws:

IOException

net.shibboleth.idp.session.SessionException

testWithAuthorizationCodeFlowNoOpenidMetadataNotContainingResource

public void testWithAuthorizationCodeFlowNoOpenidMetadataNotContainingResource()
                                                                        throws IOException,
                                                                               net.shibboleth.idp.session.SessionException

Throws:

IOException

net.shibboleth.idp.session.SessionException

testWithAuthorizationCodeFlowNoRedirectURI

public void testWithAuthorizationCodeFlowNoRedirectURI()
                                                throws IOException,
                                                       net.shibboleth.idp.session.SessionException

Throws:

IOException

net.shibboleth.idp.session.SessionException

testWithImplicitFlowNoNonce

public void testWithImplicitFlowNoNonce()
                                 throws IOException,
                                        net.shibboleth.idp.session.SessionException

Throws:

IOException

net.shibboleth.idp.session.SessionException

testWithImplicitFlow

public void testWithImplicitFlow()
                          throws IOException,
                                 net.shibboleth.idp.session.SessionException

Throws:

IOException

net.shibboleth.idp.session.SessionException

testWithImplicitFlowRequestObjectEnforcedNoRO

public void testWithImplicitFlowRequestObjectEnforcedNoRO()
                                                   throws IOException,
                                                          net.shibboleth.idp.session.SessionException

Throws:

IOException

net.shibboleth.idp.session.SessionException

testWithImplicitFlowIssInResponse

public void testWithImplicitFlowIssInResponse()
                                       throws IOException,
                                              net.shibboleth.idp.session.SessionException,
                                              ParseException

Throws:

IOException

net.shibboleth.idp.session.SessionException

ParseException

testWithImplicitFlowAndResource

public void testWithImplicitFlowAndResource()
                                     throws IOException,
                                            net.shibboleth.idp.session.SessionException

Throws:

IOException

net.shibboleth.idp.session.SessionException

testWithImplicitTokenFlow

public void testWithImplicitTokenFlow()
                               throws IOException,
                                      net.shibboleth.idp.session.SessionException,
                                      DataSealerException,
                                      ParseException

Throws:

IOException

net.shibboleth.idp.session.SessionException

DataSealerException

ParseException

testWithImplicitTokenFlowRequestObjectEnforcedNoRO

public void testWithImplicitTokenFlowRequestObjectEnforcedNoRO()
                                                        throws IOException,
                                                               net.shibboleth.idp.session.SessionException

Throws:

IOException

net.shibboleth.idp.session.SessionException

testWithImplicitTokenFlowIssInResponse

public void testWithImplicitTokenFlowIssInResponse()
                                            throws IOException,
                                                   net.shibboleth.idp.session.SessionException,
                                                   DataSealerException,
                                                   ParseException

Throws:

IOException

net.shibboleth.idp.session.SessionException

DataSealerException

ParseException

testWithImplicitTokenFlowAndResource

public void testWithImplicitTokenFlowAndResource()
                                          throws IOException,
                                                 net.shibboleth.idp.session.SessionException,
                                                 ParseException

Throws:

IOException

net.shibboleth.idp.session.SessionException

ParseException

testWithImplicitTokenFlowNoNonce

public void testWithImplicitTokenFlowNoNonce()
                                      throws IOException,
                                             net.shibboleth.idp.session.SessionException

Throws:

IOException

net.shibboleth.idp.session.SessionException

testWithImplicitOidcFlowNoOpenIdScopeRequested

public void testWithImplicitOidcFlowNoOpenIdScopeRequested()
                                                    throws IOException,
                                                           net.shibboleth.idp.session.SessionException

Throws:

IOException

net.shibboleth.idp.session.SessionException

testWithImplicitOidcFlowNoOpenIdScopeRegistered

public void testWithImplicitOidcFlowNoOpenIdScopeRegistered()
                                                     throws IOException,
                                                            net.shibboleth.idp.session.SessionException

Throws:

IOException

net.shibboleth.idp.session.SessionException

testWithImplicitFlowNoRedirectURI

public void testWithImplicitFlowNoRedirectURI()
                                       throws IOException,
                                              net.shibboleth.idp.session.SessionException

Throws:

IOException

net.shibboleth.idp.session.SessionException

testWithHybridIdTokenFlow

public void testWithHybridIdTokenFlow()
                               throws IOException,
                                      net.shibboleth.idp.session.SessionException,
                                      ParseException

Throws:

IOException

net.shibboleth.idp.session.SessionException

ParseException

testWithHybridIdTokenFlowRequestObjectEnforcedNoRO

public void testWithHybridIdTokenFlowRequestObjectEnforcedNoRO()
                                                        throws IOException,
                                                               net.shibboleth.idp.session.SessionException

Throws:

IOException

net.shibboleth.idp.session.SessionException

testWithHybridIdTokenFlowIssInResponse

public void testWithHybridIdTokenFlowIssInResponse()
                                            throws IOException,
                                                   net.shibboleth.idp.session.SessionException

Throws:

IOException

net.shibboleth.idp.session.SessionException

testWithHybridIdTokenFlowAndResource

public void testWithHybridIdTokenFlowAndResource()
                                          throws IOException,
                                                 net.shibboleth.idp.session.SessionException

Throws:

IOException

net.shibboleth.idp.session.SessionException

testWithHybridIdTokenFlowNoNonce

public void testWithHybridIdTokenFlowNoNonce()
                                      throws IOException,
                                             net.shibboleth.idp.session.SessionException

Throws:

IOException

net.shibboleth.idp.session.SessionException

testWithHybridTokenFlow

public void testWithHybridTokenFlow()
                             throws IOException,
                                    net.shibboleth.idp.session.SessionException,
                                    ParseException,
                                    DataSealerException

Throws:

IOException

net.shibboleth.idp.session.SessionException

ParseException

DataSealerException

testWithHybridTokenFlowRequestObjectEnforcedNoRO

public void testWithHybridTokenFlowRequestObjectEnforcedNoRO()
                                                      throws IOException,
                                                             net.shibboleth.idp.session.SessionException

Throws:

IOException

net.shibboleth.idp.session.SessionException

testWithHybridTokenFlowNoOpenidScopeRequested

public void testWithHybridTokenFlowNoOpenidScopeRequested()
                                                   throws IOException,
                                                          net.shibboleth.idp.session.SessionException,
                                                          ParseException,
                                                          DataSealerException

Throws:

IOException

net.shibboleth.idp.session.SessionException

ParseException

DataSealerException

testWithHybridTokenFlowNoOpenidScopeRegistered

public void testWithHybridTokenFlowNoOpenidScopeRegistered()
                                                    throws IOException,
                                                           net.shibboleth.idp.session.SessionException,
                                                           ParseException,
                                                           DataSealerException

Throws:

IOException

net.shibboleth.idp.session.SessionException

ParseException

DataSealerException

testWithHybridTokenFlowAndResource

public void testWithHybridTokenFlowAndResource()
                                        throws IOException,
                                               net.shibboleth.idp.session.SessionException,
                                               ParseException

Throws:

IOException

net.shibboleth.idp.session.SessionException

ParseException

testWithHybridIdTokenTokenFlow

public void testWithHybridIdTokenTokenFlow()
                                    throws IOException,
                                           net.shibboleth.idp.session.SessionException,
                                           ParseException,
                                           DataSealerException

Throws:

IOException

net.shibboleth.idp.session.SessionException

ParseException

DataSealerException

testWithHybridIdTokenTokenFlowRequestObjectEnforcedNoRO

public void testWithHybridIdTokenTokenFlowRequestObjectEnforcedNoRO()
                                                             throws IOException,
                                                                    net.shibboleth.idp.session.SessionException

Throws:

IOException

net.shibboleth.idp.session.SessionException

testWithHybridIdTokenTokenFlowNoOpenidScopeRequested

public void testWithHybridIdTokenTokenFlowNoOpenidScopeRequested()
                                                          throws IOException,
                                                                 net.shibboleth.idp.session.SessionException,
                                                                 ParseException,
                                                                 DataSealerException

Throws:

IOException

net.shibboleth.idp.session.SessionException

ParseException

DataSealerException

testWithHybridIdTokenTokenFlowNoOpenidScopeRegistered

public void testWithHybridIdTokenTokenFlowNoOpenidScopeRegistered()
                                                           throws IOException,
                                                                  net.shibboleth.idp.session.SessionException,
                                                                  ParseException,
                                                                  DataSealerException

Throws:

IOException

net.shibboleth.idp.session.SessionException

ParseException

DataSealerException

testWithHybridIdTokenTokenFlowWithCustomTokenClaim

public void testWithHybridIdTokenTokenFlowWithCustomTokenClaim()
                                                        throws IOException,
                                                               net.shibboleth.idp.session.SessionException,
                                                               ParseException,
                                                               DataSealerException,
                                                               com.nimbusds.oauth2.sdk.ParseException

Throws:

IOException

net.shibboleth.idp.session.SessionException

ParseException

DataSealerException

testWithHybridIdTokenTokenFlowAndResource

public void testWithHybridIdTokenTokenFlowAndResource()
                                               throws IOException,
                                                      net.shibboleth.idp.session.SessionException,
                                                      ParseException

Throws:

IOException

net.shibboleth.idp.session.SessionException

ParseException

testWithHybridIdTokenTokenFlowNoNonce

public void testWithHybridIdTokenTokenFlowNoNonce()
                                           throws IOException,
                                                  net.shibboleth.idp.session.SessionException

Throws:

IOException

net.shibboleth.idp.session.SessionException

testWithAuthorizationCodeFlowUnforcedPKCE

public void testWithAuthorizationCodeFlowUnforcedPKCE()
                                               throws IOException,
                                                      net.shibboleth.idp.session.SessionException

Throws:

IOException

net.shibboleth.idp.session.SessionException

testWithAuthorizationCodeFlowForcedPlainPKCEMissingChallenge

public void testWithAuthorizationCodeFlowForcedPlainPKCEMissingChallenge()
                                                                  throws IOException,
                                                                         net.shibboleth.idp.session.SessionException

Throws:

IOException

net.shibboleth.idp.session.SessionException

testWithAuthorizationCodeFlowForcedPlainPKCEUnknownChallenge

public void testWithAuthorizationCodeFlowForcedPlainPKCEUnknownChallenge()
                                                                  throws IOException,
                                                                         net.shibboleth.idp.session.SessionException

Throws:

IOException

net.shibboleth.idp.session.SessionException

testWithAuthorizationCodeFlowForcedPlainPKCEValidChallenge

public void testWithAuthorizationCodeFlowForcedPlainPKCEValidChallenge()
                                                                throws IOException,
                                                                       net.shibboleth.idp.session.SessionException

Throws:

IOException

net.shibboleth.idp.session.SessionException

testWithAuthorizationCodeFlowForcedS256PKCEPlainChallenge

public void testWithAuthorizationCodeFlowForcedS256PKCEPlainChallenge()
                                                               throws IOException,
                                                                      net.shibboleth.idp.session.SessionException

Throws:

IOException

net.shibboleth.idp.session.SessionException

testWithAuthorizationCodeFlowForcedS256PKCEUnknownChallenge

public void testWithAuthorizationCodeFlowForcedS256PKCEUnknownChallenge()
                                                                 throws IOException,
                                                                        net.shibboleth.idp.session.SessionException

Throws:

IOException

net.shibboleth.idp.session.SessionException

testWithAuthorizationCodeFlowForcedS256PKCEValidChallenge

public void testWithAuthorizationCodeFlowForcedS256PKCEValidChallenge()
                                                               throws IOException,
                                                                      net.shibboleth.idp.session.SessionException

Throws:

IOException

net.shibboleth.idp.session.SessionException

testWithAuthorizationCodeFlowNoScopesRegistered

public void testWithAuthorizationCodeFlowNoScopesRegistered()
                                                     throws IOException,
                                                            net.shibboleth.idp.session.SessionException

Throws:

IOException

net.shibboleth.idp.session.SessionException

testWithAuthorizationCodeFlowNoScopesRegisteredIssInResponse

public void testWithAuthorizationCodeFlowNoScopesRegisteredIssInResponse()
                                                                  throws IOException,
                                                                         net.shibboleth.idp.session.SessionException

Throws:

IOException

net.shibboleth.idp.session.SessionException

testWithAuthorizationCodeFlowWithIDTokenClaims

public void testWithAuthorizationCodeFlowWithIDTokenClaims()
                                                    throws IOException,
                                                           net.shibboleth.idp.session.SessionException,
                                                           DataSealerException,
                                                           ParseException

Throws:

IOException

net.shibboleth.idp.session.SessionException

DataSealerException

ParseException

testWithAuthorizationCodeFlowWithUIClaims

public void testWithAuthorizationCodeFlowWithUIClaims()
                                               throws IOException,
                                                      net.shibboleth.idp.session.SessionException,
                                                      DataSealerException,
                                                      ParseException

Throws:

IOException

net.shibboleth.idp.session.SessionException

DataSealerException

ParseException

testWithAuthorizationCodeFlowWithCustomClaimInCode

public void testWithAuthorizationCodeFlowWithCustomClaimInCode()
                                                        throws IOException,
                                                               net.shibboleth.idp.session.SessionException,
                                                               DataSealerException,
                                                               ParseException

Throws:

IOException

net.shibboleth.idp.session.SessionException

DataSealerException

ParseException

testWithAuthorizationCodeFlowUsingSAMLMetadata

public void testWithAuthorizationCodeFlowUsingSAMLMetadata()
                                                    throws IOException,
                                                           net.shibboleth.idp.session.SessionException

Throws:

IOException

net.shibboleth.idp.session.SessionException

testWithAuthorizationCodeFlowUsingUntrustedRP

public void testWithAuthorizationCodeFlowUsingUntrustedRP()
                                                   throws IOException,
                                                          net.shibboleth.idp.session.SessionException

Throws:

IOException

net.shibboleth.idp.session.SessionException

testWithPlainReqObjectExpired

public void testWithPlainReqObjectExpired()
                                   throws IOException,
                                          net.shibboleth.idp.session.SessionException

Throws:

IOException

net.shibboleth.idp.session.SessionException

testWithPlainReqObjectNbfInFuture

public void testWithPlainReqObjectNbfInFuture()
                                       throws IOException,
                                              net.shibboleth.idp.session.SessionException

Throws:

IOException

net.shibboleth.idp.session.SessionException

testWithPlainReqObjectOverwriteRedirectUri

public void testWithPlainReqObjectOverwriteRedirectUri()
                                                throws IOException,
                                                       net.shibboleth.idp.session.SessionException

Throws:

IOException

net.shibboleth.idp.session.SessionException

testWithPlainReqObjectOverwriteRedirectUriROEnforced

public void testWithPlainReqObjectOverwriteRedirectUriROEnforced()
                                                          throws IOException,
                                                                 net.shibboleth.idp.session.SessionException

Throws:

IOException

net.shibboleth.idp.session.SessionException

testWithPlainReqObjectClaimsRequest

public void testWithPlainReqObjectClaimsRequest()
                                         throws IOException,
                                                net.shibboleth.idp.session.SessionException,
                                                DataSealerException,
                                                ParseException

Throws:

IOException

net.shibboleth.idp.session.SessionException

DataSealerException

ParseException

testWithHS256SignedReqObjectNoIssuer

public void testWithHS256SignedReqObjectNoIssuer()
                                          throws IOException,
                                                 net.shibboleth.idp.session.SessionException,
                                                 com.nimbusds.jose.JOSEException

Throws:

IOException

net.shibboleth.idp.session.SessionException

com.nimbusds.jose.JOSEException

testWithHS256SignedReqObjectNoAudience

public void testWithHS256SignedReqObjectNoAudience()
                                            throws IOException,
                                                   net.shibboleth.idp.session.SessionException,
                                                   com.nimbusds.jose.JOSEException

Throws:

IOException

net.shibboleth.idp.session.SessionException

com.nimbusds.jose.JOSEException

testWithHS256SignedReqObjectWrongIssuer

public void testWithHS256SignedReqObjectWrongIssuer()
                                             throws IOException,
                                                    net.shibboleth.idp.session.SessionException,
                                                    com.nimbusds.jose.JOSEException

Throws:

IOException

net.shibboleth.idp.session.SessionException

com.nimbusds.jose.JOSEException

testWithHS256SignedReqObjectWrongAudience

public void testWithHS256SignedReqObjectWrongAudience()
                                               throws IOException,
                                                      net.shibboleth.idp.session.SessionException,
                                                      com.nimbusds.jose.JOSEException

Throws:

IOException

net.shibboleth.idp.session.SessionException

com.nimbusds.jose.JOSEException

testWithHS256SignedReqObjectWrongSecret

public void testWithHS256SignedReqObjectWrongSecret()
                                             throws IOException,
                                                    net.shibboleth.idp.session.SessionException,
                                                    com.nimbusds.jose.JOSEException

Throws:

IOException

net.shibboleth.idp.session.SessionException

com.nimbusds.jose.JOSEException

testWithRS256SignedReqObjectWrongKey

public void testWithRS256SignedReqObjectWrongKey()
                                          throws IOException,
                                                 net.shibboleth.idp.session.SessionException,
                                                 com.nimbusds.jose.JOSEException,
                                                 NoSuchAlgorithmException

Throws:

IOException

net.shibboleth.idp.session.SessionException

com.nimbusds.jose.JOSEException

NoSuchAlgorithmException

testWithRS256SignedReqObjectNoTrustedKey

public void testWithRS256SignedReqObjectNoTrustedKey()
                                              throws IOException,
                                                     net.shibboleth.idp.session.SessionException,
                                                     com.nimbusds.jose.JOSEException,
                                                     NoSuchAlgorithmException

Throws:

IOException

net.shibboleth.idp.session.SessionException

com.nimbusds.jose.JOSEException

NoSuchAlgorithmException

testWithES256SignedReqObjectWrongKey

public void testWithES256SignedReqObjectWrongKey()
                                          throws IOException,
                                                 net.shibboleth.idp.session.SessionException,
                                                 com.nimbusds.jose.JOSEException,
                                                 NoSuchAlgorithmException

Throws:

IOException

net.shibboleth.idp.session.SessionException

com.nimbusds.jose.JOSEException

NoSuchAlgorithmException

testWithES256SignedReqObjectNoTrustedKey

public void testWithES256SignedReqObjectNoTrustedKey()
                                              throws IOException,
                                                     net.shibboleth.idp.session.SessionException,
                                                     com.nimbusds.jose.JOSEException,
                                                     NoSuchAlgorithmException

Throws:

IOException

net.shibboleth.idp.session.SessionException

com.nimbusds.jose.JOSEException

NoSuchAlgorithmException

testWithHS256SignedReqObjectOverwriteRedirectUri

public void testWithHS256SignedReqObjectOverwriteRedirectUri()
                                                      throws IOException,
                                                             ParseException,
                                                             net.shibboleth.idp.session.SessionException,
                                                             com.nimbusds.jose.JOSEException

Throws:

IOException

ParseException

net.shibboleth.idp.session.SessionException

com.nimbusds.jose.JOSEException

createIdTokenSecurityTests

@Factory
public Object[] createIdTokenSecurityTests()

createAccessTokenSecurityTests

@Factory
public Object[] createAccessTokenSecurityTests()

createRequestObjectSecurityTests

@Factory
public Object[] createRequestObjectSecurityTests()

getRequestObjectWithClaimsRequestPayload

protected static String getRequestObjectWithClaimsRequestPayload(String clientId,
                                                                 String redirectUri)

assertSuccessRequestObjectWithClaimsRequestResponse

protected void assertSuccessRequestObjectWithClaimsRequestResponse(com.nimbusds.jwt.JWT requestObject)
                                                            throws ParseException,
                                                                   DataSealerException,
                                                                   IOException

Throws:

ParseException

DataSealerException

IOException

assertSuccessRequestObjectWithClaimsRequestResponse

protected void assertSuccessRequestObjectWithClaimsRequestResponse(com.nimbusds.jwt.JWT requestObject,
                                                                   com.nimbusds.jose.JWSAlgorithm requestObjectSigAlg)
                                                            throws ParseException,
                                                                   DataSealerException,
                                                                   IOException

Throws:

ParseException

DataSealerException

IOException

assertSuccessRequestObjectWithClaimsRequestResponse

protected void assertSuccessRequestObjectWithClaimsRequestResponse(com.nimbusds.jwt.JWT requestObject,
                                                                   com.nimbusds.jose.JWSAlgorithm requestObjectSigAlg,
                                                                   PublicKey publicKey)
                                                            throws ParseException,
                                                                   DataSealerException,
                                                                   IOException

Throws:

ParseException

DataSealerException

IOException

assertSuccessRequestObjectWithClaimsRequestResponse

protected void assertSuccessRequestObjectWithClaimsRequestResponse(com.nimbusds.jwt.JWT requestObject,
                                                                   com.nimbusds.jose.JWSAlgorithm requestObjectSigAlg,
                                                                   PublicKey publicKey,
                                                                   com.nimbusds.jose.JWEAlgorithm requestObjectEncAlg,
                                                                   com.nimbusds.jose.EncryptionMethod requestObjectEncMethod)
                                                            throws ParseException,
                                                                   DataSealerException,
                                                                   IOException

Throws:

ParseException

DataSealerException

IOException

assertSuccessRequestObjectWithClaimsRequestResponse

protected void assertSuccessRequestObjectWithClaimsRequestResponse(String requestObject,
                                                                   com.nimbusds.jose.JWSAlgorithm requestObjectSigAlg,
                                                                   PublicKey publicKey,
                                                                   com.nimbusds.jose.JWEAlgorithm requestObjectEncAlg,
                                                                   com.nimbusds.jose.EncryptionMethod requestObjectEncMethod)
                                                            throws ParseException,
                                                                   DataSealerException,
                                                                   IOException

Throws:

ParseException

DataSealerException

IOException

assertRequestObjectError

protected void assertRequestObjectError(com.nimbusds.jwt.JWT requestObject)
                                 throws IOException

Throws:

IOException

assertRequestObjectError

protected void assertRequestObjectError(com.nimbusds.jwt.JWT requestObject,
                                        com.nimbusds.jose.JWSAlgorithm requestObjectSigAlg)
                                 throws IOException

Throws:

IOException

assertRequestObjectError

protected void assertRequestObjectError(com.nimbusds.jwt.JWT requestObject,
                                        com.nimbusds.jose.JWSAlgorithm requestObjectSigAlg,
                                        PublicKey publicKey)
                                 throws IOException

Throws:

IOException

assertRequestObjectError

protected void assertRequestObjectError(String requestObject,
                                        com.nimbusds.jose.JWSAlgorithm requestObjectSigAlg,
                                        PublicKey publicKey,
                                        com.nimbusds.jose.JWEAlgorithm requestObjectEncAlg,
                                        com.nimbusds.jose.EncryptionMethod requestObjectEncMethod)
                                 throws IOException

Throws:

IOException

assertErrorResponseWithNoIssuer

protected void assertErrorResponseWithNoIssuer(FlowExecutionResult result)

assertErrorResponseWithIssuer

protected void assertErrorResponseWithIssuer(FlowExecutionResult result)

getSidFromAuthorizeCodeClaimsSet

protected String getSidFromAuthorizeCodeClaimsSet(com.nimbusds.openid.connect.sdk.AuthenticationSuccessResponse successResponse)

getSidFromOpaqueAccessTokenClaimsSet

protected String getSidFromOpaqueAccessTokenClaimsSet(com.nimbusds.openid.connect.sdk.AuthenticationSuccessResponse successResponse)

getSidFromJWTAccessTokenClaimsSet

protected String getSidFromJWTAccessTokenClaimsSet(com.nimbusds.openid.connect.sdk.AuthenticationSuccessResponse successResponse)

getSidFromIDToken

protected String getSidFromIDToken(com.nimbusds.openid.connect.sdk.AuthenticationSuccessResponse successResponse)

setRequestParameters

protected void setRequestParameters(List<Pair<String,String>> pairs)

setRequestParameters

protected static void setRequestParameters(MockHttpServletRequest request,
                                           List<Pair<String,String>> pairs)

removeMetadata

@AfterMethod
public void removeMetadata()
                    throws IOException

Throws:

IOException