Package net.shibboleth.idp.plugin.oidc.op.profile.impl

Class ValidateGrantTest

java.lang.Object

org.opensaml.core.testing.OpenSAMLInitBaseTestCase

net.shibboleth.idp.plugin.oidc.op.profile.impl.BaseOIDCResponseActionTest

net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateGrantTest

public class ValidateGrantTest
extends BaseOIDCResponseActionTest

ValidateGrant unit test.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
private static class	ValidateGrantTest.DeliveryClaimsSet

Nested classes/interfaces inherited from class net.shibboleth.idp.plugin.oidc.op.profile.impl.BaseOIDCResponseActionTest

BaseOIDCResponseActionTest.MockRevocationCache

Field Summary

Fields

Modifier and Type	Field	Description
(package private) TokenClaimsSet	acClaims
private net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateGrant	action
(package private) URI	callback
(package private) com.nimbusds.oauth2.sdk.AuthorizationGrant	codeGrant
(package private) TokenClaimsSet	rfClaims
(package private) com.nimbusds.oauth2.sdk.RefreshTokenGrant	rfGrant
(package private) String	rootTokenId
(package private) MemoryStorageService	storageService

Fields inherited from class net.shibboleth.idp.plugin.oidc.op.profile.impl.BaseOIDCResponseActionTest

clientId, credentialEC256, credentialEC384, credentialEC521, credentialHMAC, credentialRSA, idGenerator, metadataCtx, profileRequestCtx, request, requestCtx, respCtx, rpCtx, subject

Constructor Summary

Constructors

Constructor	Description
ValidateGrantTest()

Method Summary

Modifier and Type	Method	Description
static com.nimbusds.oauth2.sdk.AuthorizationCode	buildAuthorizationCode(String clientId, String issuer, String userPrincipal, String sub, String callbackUrl)
static com.nimbusds.oauth2.sdk.AuthorizationCode	buildAuthorizationCode(String clientId, String issuer, String userPrincipal, String sub, String callbackUrl, String scope)
static com.nimbusds.oauth2.sdk.AuthorizationCode	buildAuthorizationCode(String clientId, String issuer, String userPrincipal, String sub, String callbackUrl, String codeChallenge, String scope)
static com.nimbusds.oauth2.sdk.AuthorizationCode	buildAuthorizationCode(String clientId, String issuer, String userPrincipal, String sub, String callbackUrl, String codeChallenge, net.minidev.json.JSONObject deliveryClaims, net.minidev.json.JSONObject deliveryClaimsIDToken, net.minidev.json.JSONObject deliveryClaimsUserInfo, String scope)
static com.nimbusds.oauth2.sdk.AuthorizationCode	buildAuthorizationCode(String clientId, String issuer, String userPrincipal, String sub, String callbackUrl, String codeChallenge, net.minidev.json.JSONObject deliveryClaims, net.minidev.json.JSONObject deliveryClaimsIDToken, net.minidev.json.JSONObject deliveryClaimsUserInfo, String scope, Collection<String> aud)
protected RevocationCache	buildRevocationCache()
static TokenClaimsSet	buildTokenClaimsSet(String clientId, String issuer, String userPrincipal, String sub, String callbackUrl, String codeChallenge, net.minidev.json.JSONObject deliveryClaims, net.minidev.json.JSONObject deliveryClaimsIDToken, net.minidev.json.JSONObject deliveryClaimsUserInfo, String scope, Collection<String> aud)
private void	init()
private void	init(boolean refreshTokensEnabled)
private void	init(boolean refreshTokensEnabled, RevocationCache revocationCache, Function<ProfileRequestContext,Duration> revocationLifetimeLookup)
private void	init(boolean refreshTokensEnabled, RevocationCache revocationCache, Function<ProfileRequestContext,Duration> revocationLifetimeLookup, Instant authenticationTime)
private void	init(Instant authenticationTime)
protected void	setupStorage()
void	testAuthorizeCodeReplayed()
void	testAuthorizeCodeSuccess()
void	testClientCredentialsSuccess()
void	testExpired()
void	testMixGrant()
void	testNoDataSealer()
void	testNoReplayCache()
void	testNoRevocationCache()
void	testRefreshTokenAuthorizationGrantRevoked()
void	testRefreshTokenChainExpired()
void	testRefreshTokenNotEnabled()
void	testRefreshTokenReplayed()
void	testRefreshTokenRevokedShouldRevokeAuthorizationCode()
void	testRefreshTokenSuccess()
void	testTokenRevocationViaRevokedTokenFailsReturnsInvalidProfileConfig()
void	testWrongClient()

Methods inherited from class net.shibboleth.idp.plugin.oidc.op.profile.impl.BaseOIDCResponseActionTest

addEntryToMap, getDataSealer, initializeDataSealer, setAuthenticationRequest, setIdTokenToResponseContext, setTokenRequest, setUp, setUserInfoRequest, setUserInfoResponseToResponseContext, signIdTokenInResponseContext, signUserInfoResponseInResponseContext

Methods inherited from class org.opensaml.core.testing.OpenSAMLInitBaseTestCase

initOpenSAML

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

action

private net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateGrant action

acClaims

TokenClaimsSet acClaims

rfClaims

TokenClaimsSet rfClaims

codeGrant

com.nimbusds.oauth2.sdk.AuthorizationGrant codeGrant

rfGrant

com.nimbusds.oauth2.sdk.RefreshTokenGrant rfGrant

callback

URI callback

storageService

MemoryStorageService storageService

rootTokenId

String rootTokenId

Constructor Detail

ValidateGrantTest

public ValidateGrantTest()

Method Detail

setupStorage

@BeforeMethod
protected void setupStorage()
                     throws ComponentInitializationException

Throws:

ComponentInitializationException

init

private void init()
           throws Exception

Throws:

Exception

init

private void init(boolean refreshTokensEnabled)
           throws Exception

Throws:

Exception

init

private void init(Instant authenticationTime)
           throws Exception

Throws:

Exception

init

private void init(boolean refreshTokensEnabled,
                  RevocationCache revocationCache,
                  Function<ProfileRequestContext,Duration> revocationLifetimeLookup)
           throws Exception

Throws:

Exception

init

private void init(boolean refreshTokensEnabled,
                  RevocationCache revocationCache,
                  Function<ProfileRequestContext,Duration> revocationLifetimeLookup,
                  Instant authenticationTime)
           throws Exception

Throws:

Exception

buildAuthorizationCode

public static com.nimbusds.oauth2.sdk.AuthorizationCode buildAuthorizationCode(String clientId,
                                                                               String issuer,
                                                                               String userPrincipal,
                                                                               String sub,
                                                                               String callbackUrl)
                                                                        throws Exception

Throws:

Exception

buildAuthorizationCode

public static com.nimbusds.oauth2.sdk.AuthorizationCode buildAuthorizationCode(String clientId,
                                                                               String issuer,
                                                                               String userPrincipal,
                                                                               String sub,
                                                                               String callbackUrl,
                                                                               String scope)
                                                                        throws Exception

Throws:

Exception

buildAuthorizationCode

public static com.nimbusds.oauth2.sdk.AuthorizationCode buildAuthorizationCode(String clientId,
                                                                               String issuer,
                                                                               String userPrincipal,
                                                                               String sub,
                                                                               String callbackUrl,
                                                                               String codeChallenge,
                                                                               String scope)
                                                                        throws Exception

Throws:

Exception

buildAuthorizationCode

public static com.nimbusds.oauth2.sdk.AuthorizationCode buildAuthorizationCode(String clientId,
                                                                               String issuer,
                                                                               String userPrincipal,
                                                                               String sub,
                                                                               String callbackUrl,
                                                                               String codeChallenge,
                                                                               net.minidev.json.JSONObject deliveryClaims,
                                                                               net.minidev.json.JSONObject deliveryClaimsIDToken,
                                                                               net.minidev.json.JSONObject deliveryClaimsUserInfo,
                                                                               String scope)
                                                                        throws Exception

Throws:

Exception

buildAuthorizationCode

public static com.nimbusds.oauth2.sdk.AuthorizationCode buildAuthorizationCode(String clientId,
                                                                               String issuer,
                                                                               String userPrincipal,
                                                                               String sub,
                                                                               String callbackUrl,
                                                                               String codeChallenge,
                                                                               net.minidev.json.JSONObject deliveryClaims,
                                                                               net.minidev.json.JSONObject deliveryClaimsIDToken,
                                                                               net.minidev.json.JSONObject deliveryClaimsUserInfo,
                                                                               String scope,
                                                                               Collection<String> aud)
                                                                        throws Exception

Throws:

Exception

buildTokenClaimsSet

public static TokenClaimsSet buildTokenClaimsSet(String clientId,
                                                 String issuer,
                                                 String userPrincipal,
                                                 String sub,
                                                 String callbackUrl,
                                                 String codeChallenge,
                                                 net.minidev.json.JSONObject deliveryClaims,
                                                 net.minidev.json.JSONObject deliveryClaimsIDToken,
                                                 net.minidev.json.JSONObject deliveryClaimsUserInfo,
                                                 String scope,
                                                 Collection<String> aud)
                                          throws Exception

Throws:

Exception

testAuthorizeCodeSuccess

public void testAuthorizeCodeSuccess()
                              throws Exception

Throws:

Exception

testAuthorizeCodeReplayed

public void testAuthorizeCodeReplayed()
                               throws Exception

Throws:

Exception

testRefreshTokenSuccess

public void testRefreshTokenSuccess()
                             throws Exception

Throws:

Exception

testRefreshTokenChainExpired

public void testRefreshTokenChainExpired()
                                  throws Exception

Throws:

Exception

testRefreshTokenNotEnabled

public void testRefreshTokenNotEnabled()
                                throws Exception

Throws:

Exception

testRefreshTokenReplayed

public void testRefreshTokenReplayed()
                              throws Exception

Throws:

Exception

testRefreshTokenAuthorizationGrantRevoked

public void testRefreshTokenAuthorizationGrantRevoked()
                                               throws Exception

Throws:

Exception

testRefreshTokenRevokedShouldRevokeAuthorizationCode

public void testRefreshTokenRevokedShouldRevokeAuthorizationCode()
                                                          throws Exception

Throws:

Exception

buildRevocationCache

protected RevocationCache buildRevocationCache()
                                        throws ComponentInitializationException

Throws:

ComponentInitializationException

testTokenRevocationViaRevokedTokenFailsReturnsInvalidProfileConfig

public void testTokenRevocationViaRevokedTokenFailsReturnsInvalidProfileConfig()
                                                                        throws Exception

Throws:

Exception

testMixGrant

public void testMixGrant()
                  throws Exception

Throws:

Exception

testWrongClient

public void testWrongClient()
                     throws Exception

Throws:

Exception

testExpired

public void testExpired()
                 throws Exception

Throws:

Exception

testClientCredentialsSuccess

public void testClientCredentialsSuccess()
                                  throws Exception

Throws:

Exception

testNoRevocationCache

public void testNoRevocationCache()
                           throws ComponentInitializationException,
                                  NoSuchAlgorithmException

Throws:

ComponentInitializationException

NoSuchAlgorithmException

testNoReplayCache

public void testNoReplayCache()
                       throws ComponentInitializationException,
                              NoSuchAlgorithmException

Throws:

ComponentInitializationException

NoSuchAlgorithmException

testNoDataSealer

public void testNoDataSealer()