Index (Shibboleth IdP :: Plugins :: OIDC Common :: Crypto Implementation 2.2.0 API)

A B C D E F G H I J K L M N O P R S T V
All Classes All Packages

A

AbstractEncryptionAlgorithmsLookupStrategy - Class in net.shibboleth.oidc.security.impl: A base class for lookup strategies that return encryption algorithms and make use of the AlgorithmRegistry.
AbstractEncryptionAlgorithmsLookupStrategy(AlgorithmRegistry) - Constructor for class net.shibboleth.oidc.security.impl.AbstractEncryptionAlgorithmsLookupStrategy: Constructor.
AccessTokenHashValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl: A validator that checks the access_token value matches its encoded at_hash representation in the id_token.
AccessTokenHashValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.AccessTokenHashValidator
accessTokenLookupStrategy - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AccessTokenHashValidator: Strategy to find the access_token.
ACRClaimsValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl: Check the ACR values requested were received.
ACRClaimsValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.ACRClaimsValidator
adapt(Function<ProfileRequestContext, T>) - Method in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler: Adapt a ProfileRequestContext function to a MessageContext function via composing with a lookup function.
additionalAudiencesLookupStrategy - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AudienceClaimsValidator: A strategy to lookup a list of additional audiences expected in the 'aud' claim.
alg - Variable in class net.shibboleth.oidc.security.credential.impl.EvaluableMACKeyLengthCredentialCriterion: Base criteria.
algorithmName - Variable in class net.shibboleth.oidc.security.credential.impl.KeyManagmentAlgorithmCriterion: Key algorithm type of resolved credentials.
algorithmRegistry - Variable in class net.shibboleth.oidc.security.impl.AbstractEncryptionAlgorithmsLookupStrategy: The AlgorithmRegistry used when processing algorithm URIs.
algorithmRegistry - Variable in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver: The AlgorithmRegistry used when processing algorithm URIs.
algorithmRegistry - Variable in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver: The AlgorithmRegistry used when processing algorithm URIs.
allowMissing - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AccessTokenHashValidator: Allow a missing at_hash claim.
allowMissing - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AudienceClaimsValidator: Allow a missing aud claim.
apply(CriteriaSet, Predicate<String>) - Method in class net.shibboleth.oidc.security.jose.impl.ClientInformationDataEncryptionAlgorithmsLookupStrategy
apply(CriteriaSet, Predicate<String>) - Method in class net.shibboleth.oidc.security.jose.impl.ClientInformationKeyTransportEncryptionAlgorithmsLookupStrategy
apply(CriteriaSet, Predicate<String>) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultDataEncryptionAlgorithmsLookupStrategy
apply(CriteriaSet, Predicate<String>) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultKeyTransportEncryptionAlgorithmsLookupStrategy
apply(CriteriaSet, Predicate<String>) - Method in class net.shibboleth.oidc.security.jose.impl.ProviderMetadataDataEncryptionAlgorithmsLookupStrategy
apply(CriteriaSet, Predicate<String>) - Method in class net.shibboleth.oidc.security.jose.impl.ProviderMetadataKeyTransportEncryptionAlgorithmsLookupStrategy
apply(ProfileRequestContext, JWTClaimsSet) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.RequestedEssentialACRClaimsLookupStrategy
AUDIENCE_CLAIM - net.shibboleth.oidc.security.jwt.claims.impl.JWTClaims: Audience(s) that this ID Token is intended for.
AudienceClaimsValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl: Verifies the Audience (aud) claim contains the appropriate value.
AudienceClaimsValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.AudienceClaimsValidator: Constructor.
audienceLookupStrategy - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AudienceClaimsValidator: Strategy to find the audience value from the context.
AUTHENTICATION_CONTEXT_CLASS_REFERENCE - net.shibboleth.oidc.security.jwt.claims.impl.IDTokenClaims: Authentication Context Class Reference.
AUTHENTICATION_METHODS_REFERENCES - net.shibboleth.oidc.security.jwt.claims.impl.IDTokenClaims: Authentication Methods References.
AUTHENTICATION_TIME - net.shibboleth.oidc.security.jwt.claims.impl.IDTokenClaims: Time when the End-User authentication occurred.
AuthenticationAudienceClaimsValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl: Verifies the Audience (aud) claim contains the appropriate value in JWT authentication.
AuthenticationAudienceClaimsValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationAudienceClaimsValidator: Constructor.
authenticationRequestLookupStrategy - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AuthTimeRequestedActivationCondition: Strategy to find the authentication request.
authenticationRequestLookupStrategy - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.RequestedEssentialACRClaimsLookupStrategy: Strategy to find the authentication request.
AuthenticationTimeClaimsValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl: Verifies the auth_time (when the End-User authentication took place): If the authnLifetimeLookup returns 0 seconds (e.g.
AuthenticationTimeClaimsValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationTimeClaimsValidator: Constructor.
authnLifetimeLookupStrategy - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationTimeClaimsValidator: Lookup strategy to find the amount of time for which a token is valid after if it was first issued.
authnRequestTimeLookupStrategy - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationTimeClaimsValidator: Lookup strategy to find the time at which the authentication request was made.
AUTHORIZED_PARTY - net.shibboleth.oidc.security.jwt.claims.impl.IDTokenClaims: Authorized party - the party to which the ID Token was issued.
AuthTimeRequestedActivationCondition - Class in net.shibboleth.oidc.security.jwt.claims.impl: Has the auth_time claim been requested?
AuthTimeRequestedActivationCondition(Function<ProfileRequestContext, OIDCAuthenticationRequest>) - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.AuthTimeRequestedActivationCondition: Constructor.

B

BaseJWTSignatureSecurityHandler - Class in net.shibboleth.oidc.security.impl: Base class for security message handlers which evaluate a JWT signature with a signature trust engine.
BaseJWTSignatureSecurityHandler() - Constructor for class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler: Constructor.
BaseSignedJWTTrustEngine<TrustBasisType> - Class in net.shibboleth.oidc.security.impl: A TrustEngine implementation for Signed JSON Web Tokens.
BaseSignedJWTTrustEngine(JOSEObjectCredentialResolver) - Constructor for class net.shibboleth.oidc.security.impl.BaseSignedJWTTrustEngine: Constructor.
BasicDecryptionConfiguration - Class in net.shibboleth.oidc.security.jose.impl: Basic implementation of DecryptionConfiguration for handling JWEs.
BasicDecryptionConfiguration() - Constructor for class net.shibboleth.oidc.security.jose.impl.BasicDecryptionConfiguration
BasicEncryptionConfiguration - Class in net.shibboleth.oidc.security.jose.impl: Basic implementation of EncryptionConfiguration for handling JWE encryption.
BasicEncryptionConfiguration() - Constructor for class net.shibboleth.oidc.security.jose.impl.BasicEncryptionConfiguration: Constructor.
BasicJOSEObjectCredentialResolver - Class in net.shibboleth.oidc.security.credential.impl: A basic implementation of JOSEObjectCredentialResolver.
BasicJOSEObjectCredentialResolver() - Constructor for class net.shibboleth.oidc.security.credential.impl.BasicJOSEObjectCredentialResolver
BasicSignatureSigningConfiguration - Class in net.shibboleth.oidc.security.jose.impl: The configuration information to use when generating an signed JWT.
BasicSignatureSigningConfiguration() - Constructor for class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningConfiguration: Constructor.
BasicSignatureSigningParametersResolver - Class in net.shibboleth.oidc.security.jose.impl: Basic implementation of an SignatureSigningParametersResolver.
BasicSignatureSigningParametersResolver() - Constructor for class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver: Constructor.
BasicSignatureValidationConfiguration - Class in net.shibboleth.oidc.security.jose.impl: Basic implementation of SignatureValidationConfiguration for signed JWTs.
BasicSignatureValidationConfiguration() - Constructor for class net.shibboleth.oidc.security.jose.impl.BasicSignatureValidationConfiguration
BasicSignatureValidationParametersResolver - Class in net.shibboleth.oidc.security.jose.impl: Basic implementation of SignatureValidationParametersResolver.
BasicSignatureValidationParametersResolver() - Constructor for class net.shibboleth.oidc.security.jose.impl.BasicSignatureValidationParametersResolver
buildContentEncryptionKeyAlgorithmCriteria(CriteriaSet, EncryptedJWT) - Method in class net.shibboleth.oidc.security.impl.JWETokenDecrypter: Optionally build decryption key 'enc' (encryption key algorithm) credential criteria according to information in the encrypted object.
buildCriteria(EncryptedJWT, List<Criterion>) - Method in class net.shibboleth.oidc.security.impl.JWETokenDecrypter: Build a criteria set using the additional criteria in the params, those supplied, and those that relate to the encrypted JWT.
buildCriteriaSet(String, MessageContext) - Method in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler
buildDirectEncryptionParameters(EncryptionParameters, CriteriaSet, List<EncryptionMethod>, JWEAlgorithm) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver: Build direct encryption parameters from the data encryption credentials input.
buildEncryptionKeyAlgorithmCriteria(CriteriaSet, JWEAlgorithm, EncryptionMethod) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver: Build criterion for credential resolvers from the JWE 'enc' header.
buildJWKCredential(JWK, String) - Method in class net.shibboleth.oidc.security.credential.impl.BasicJOSEObjectCredentialResolver
buildKeyAlgorithmCriteria(String) - Method in class net.shibboleth.oidc.security.impl.JWETokenDecrypter: Dynamically construct key algorithm credential criteria based on the specified algorithm URI.
buildKeyEncryptionOrAgreementParameters(EncryptionParameters, CriteriaSet, List<EncryptionMethod>, JWEAlgorithm) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver: Build key encryption parameters from the key transport encryption credentials input.
buildKeyLengthCriteria(String) - Method in class net.shibboleth.oidc.security.impl.JWETokenDecrypter: Dynamically construct key length credential criteria based on the specified algorithm URI.
buildKeyManagementAlgorithmCriteria(CriteriaSet, EncryptedJWT) - Method in class net.shibboleth.oidc.security.impl.JWETokenDecrypter: Optionally build decryption key 'alg' (key management algorithm) credential criteria according to information in the encrypted object.
buildKeyManagmentAlgorithmCriteria(CriteriaSet, JWEAlgorithm, EncryptionMethod) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver: Build criterion for credential resolvers from the JWE 'alg' header.
buildKeyWrappingParameters(EncryptionParameters, CriteriaSet, List<EncryptionMethod>, JWEAlgorithm) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver: Build key wrapping encryption parameters from the key transport encryption credentials input.

C

ChainingJOSEObjectCredentialResolver - Class in net.shibboleth.oidc.security.credential.impl: A concrete implementation of AbstractChainingCredentialResolver which is scoped to the simple JOSEObjectCredentialResolver type.
ChainingJOSEObjectCredentialResolver(List<JOSEObjectCredentialResolver>) - Constructor for class net.shibboleth.oidc.security.credential.impl.ChainingJOSEObjectCredentialResolver: Constructor.
ChainingJWTClaimsValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl: A ClaimsValidator implementation that validates a JWT claims set from a chain of configured validators.
ChainingJWTClaimsValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.ChainingJWTClaimsValidator: Constructor.
CheckClientJWTDecryptionConfiguration - Class in net.shibboleth.oidc.security.impl: An action that uses a OIDCClientInformation to verify the encryption parameters of an incoming encrypted JWT are compliant with configuration in the client metadata.
CheckClientJWTDecryptionConfiguration() - Constructor for class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration
CheckClientJWTSignatureAlgorithmHandler - Class in net.shibboleth.oidc.security.impl: A MessageHandler that uses a OIDCClientInformation to verify the signature of a signed JWT uses expected algorithm.
CheckClientJWTSignatureAlgorithmHandler() - Constructor for class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler
checkCredentialSupportsAlgorithm(Credential, JWEAlgorithm) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver: Determine if the given credential matches the given algorithm.
checkCredentialSupportsEncryptionMethod(Credential, EncryptionMethod) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver: Determine if the given credential supports the given encryption method.
checkKeyAlgorithmAndLength(Credential, String) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver: Evaluate whether the specified credential is supported for use with the specified algorithm URI and the key length matches.
checkKeyWithAlgorithm(JWKCredential, JWEAlgorithm) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver: Check the credential supports the algorithm given.
checkParams(SignedJWT, CriteriaSet) - Method in class net.shibboleth.oidc.security.impl.BaseSignedJWTTrustEngine: Check the signed JWT and supplied criteria for required values.
ClaimExistsActivationCondition - Class in net.shibboleth.oidc.security.jwt.claims.impl: Activation condition to check a claim exists in the claims set.
ClaimExistsActivationCondition(String) - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.ClaimExistsActivationCondition: Constructor.
claimName - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.ExactMatchClaimsValidator: The name of the claim to match from the ID token.
claimName - Variable in enum net.shibboleth.oidc.security.jwt.claims.impl.IDTokenClaims: The registered claim name.
claimName - Variable in enum net.shibboleth.oidc.security.jwt.claims.impl.JWTClaims: The IANA registered claim name.
claimsSet - Variable in class net.shibboleth.oidc.security.impl.JWTMessageSignatureSecurityHandler: The stashed claims set belonging to the JWT.
claimsToSignLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.SignJWTHandler: Strategy used to locate the payload to encrypt.
claimToCheck - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.ClaimExistsActivationCondition: The name of the claim to check exists in the claims set.
claimToCheck - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.NumberOfClaimValuesActivationCondition: The name of the claim to check exists in the claims set.
claimValidators - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.ChainingJWTClaimsValidator: List of claim validators.
clientEncryptionMethodLookupStrategy - Variable in class net.shibboleth.oidc.security.jose.impl.ClientInformationDataEncryptionAlgorithmsLookupStrategy: A strategy to locate the encryption method ('enc') appropriate for the JWT to be encrypted.
clientInformation - Variable in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler: The client information found from the lookup strategy.
ClientInformationCredentialResolver - Class in net.shibboleth.oidc.security.credential.impl: A JOSEObjectCredentialResolver that resolves credentials from the jwks or contents of jwks_uri of a ClientInformation.
ClientInformationCredentialResolver() - Constructor for class net.shibboleth.oidc.security.credential.impl.ClientInformationCredentialResolver
ClientInformationDataEncryptionAlgorithmsLookupStrategy - Class in net.shibboleth.oidc.security.jose.impl: A lookup strategy that finds data/content encryption algorithms from local configuration that are compatible with those advertised by the RP/client information.
ClientInformationDataEncryptionAlgorithmsLookupStrategy(Function<OIDCClientInformation, String>) - Constructor for class net.shibboleth.oidc.security.jose.impl.ClientInformationDataEncryptionAlgorithmsLookupStrategy: Constructor.
ClientInformationDataEncryptionAlgorithmsLookupStrategy(Function<OIDCClientInformation, String>, AlgorithmRegistry) - Constructor for class net.shibboleth.oidc.security.jose.impl.ClientInformationDataEncryptionAlgorithmsLookupStrategy: Constructor.
ClientInformationJWTTrustEngine - Class in net.shibboleth.oidc.security.impl: An implementation of SignatureTrustEngine which evaluates the validity and trustworthiness of JWT signatures.
ClientInformationJWTTrustEngine(CredentialResolver, JOSEObjectCredentialResolver, Function<OIDCClientInformation, String>, String) - Constructor for class net.shibboleth.oidc.security.impl.ClientInformationJWTTrustEngine: Constructor.
ClientInformationKeyTransportEncryptionAlgorithmsLookupStrategy - Class in net.shibboleth.oidc.security.jose.impl: A lookup strategy that finds key transport algorithms from local configuration that are compatible with those configured to RP.
ClientInformationKeyTransportEncryptionAlgorithmsLookupStrategy(Function<OIDCClientInformation, String>) - Constructor for class net.shibboleth.oidc.security.jose.impl.ClientInformationKeyTransportEncryptionAlgorithmsLookupStrategy: Constructor.
ClientInformationKeyTransportEncryptionAlgorithmsLookupStrategy(Function<OIDCClientInformation, String>, AlgorithmRegistry) - Constructor for class net.shibboleth.oidc.security.jose.impl.ClientInformationKeyTransportEncryptionAlgorithmsLookupStrategy: Constructor.
clientInformationLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler: Function that looks up client information from the given message context.
clientInformationLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration: Function that looks up client information from the given profile context.
clientInformationLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler: Function that looks up client information from the given message context.
ClientInformationSignatureSigningParametersResolver - Class in net.shibboleth.oidc.security.jose.impl: An implementation of an SignatureSigningParametersResolver that extends the BasicSignatureSigningParametersResolver functionality by adding a configurable lookup strategy for fetching the desired algorithm value from OIDCClientInformation.
ClientInformationSignatureSigningParametersResolver(Function<OIDCClientInformation, String>, String) - Constructor for class net.shibboleth.oidc.security.jose.impl.ClientInformationSignatureSigningParametersResolver: Constructor.
clientKeyTransportAlgorithmLookupStrategy - Variable in class net.shibboleth.oidc.security.jose.impl.ClientInformationKeyTransportEncryptionAlgorithmsLookupStrategy: A strategy to locate the algorithm ('alg') appropriate for the JWT to be encrypted.
ClientSecretCriterionCredentialResolver - Class in net.shibboleth.oidc.security.credential.impl: Extracts a credential held inside the ClientSecretCredentialCriterion from the given criteria set.
ClientSecretCriterionCredentialResolver() - Constructor for class net.shibboleth.oidc.security.credential.impl.ClientSecretCriterionCredentialResolver
clockSkew - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationTimeClaimsValidator: Positive clock skew adjustment to consider when checking auth_time is not in the future or has expired.
clockSkew - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.ExpiryClaimsValidator: Positive clock skew adjustment to consider when checking JWT expiration (Default value: 60 seconds).
clockSkew - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.IssuedAtClaimsValidator: Clock skew adjustment in both directions to consider still acceptable (Default value: 1 minute).
clockSkew - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierClaimsValidator: Clock skew adjustment in both directions to consider still acceptable (Default value: 1 minute).
clockSkew - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.NotBeforeClaimsValidator: Positive clock skew adjustment to consider when checking JWT not before and expiration (Default value: 60 seconds).
collection - Variable in class net.shibboleth.oidc.security.credential.impl.CollectionJOSEObjectCredentialResolver: List of credentials held by this resolver.
collection - Variable in class net.shibboleth.oidc.security.credential.impl.ReturnAllCollectionJOSEObjectCredentialResolver: List of credentials held by this resolver.
CollectionJOSEObjectCredentialResolver - Class in net.shibboleth.oidc.security.credential.impl: An implementation of BasicJOSEObjectCredentialResolver that uses a Collection as the underlying credential source.
CollectionJOSEObjectCredentialResolver(List<Credential>) - Constructor for class net.shibboleth.oidc.security.credential.impl.CollectionJOSEObjectCredentialResolver: Constructor.
CollectionJOSEObjectCredentialResolver(Credential) - Constructor for class net.shibboleth.oidc.security.credential.impl.CollectionJOSEObjectCredentialResolver: Constructor.
contentEncryptionKeyCredentialResolver - Variable in class net.shibboleth.oidc.security.jose.impl.BasicDecryptionConfiguration: The content encryption key (CEK) resolver.
contentEncryptionKeyCredentialResolver - Variable in class net.shibboleth.oidc.security.jose.impl.BasicEncryptionConfiguration: The content encryption key (CEK) resolver.
context - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierRevocationValidator: Context in revocation cache.
convertIntoListIfEnabled(String, List<String>) - Method in class net.shibboleth.oidc.security.jose.impl.ClientInformationSignatureSigningParametersResolver: Returns the given algorithm in a List if it was enabled in the list of enabled algorithms.
convertStringAlgorithmURIsToJwkAlgorithms(List<String>) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver: Convert the algorithms represented as Strings into Nimbus Algorithms for later comparison.
convertStringEncryptionMethodURIsToEncryptionMethods(List<String>) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver: Convert the encryption methods represented as Strings into Nimbus EncryptionMethods for later comparison.
convertSupportAlgorithmsToJwkAlgorithms(List<String>) - Method in class net.shibboleth.oidc.security.jose.impl.RelyingPartySigningParametersResolver: Convert the algorithms represented as strings, into Nimbus Algorithms for later comparison.
credential - Variable in class net.shibboleth.oidc.security.impl.SignJWTHandler: resolved credential.
credentialResolver - Variable in class net.shibboleth.oidc.security.impl.ExplicitKeySignedJWTTrustEngine: Resolver used for resolving trusted credentials.
credentialSupportsAlgorithm(Credential, String) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver: Evaluate whether the specified credential is supported for use with the specified algorithm URI.
credentialSupportsSigningAlgorithm(Credential, String) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver: Evaluate whether the specified credential is supported for use with the specified signing algorithm.

D

DataEncryptionAlgorithmCriterion - Class in net.shibboleth.oidc.security.credential.impl: An implementation of an Criterion which specifies content encryption algorithm criteria.
DataEncryptionAlgorithmCriterion(String) - Constructor for class net.shibboleth.oidc.security.credential.impl.DataEncryptionAlgorithmCriterion: Constructor.
dataEncryptionAlgorithmLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration: A lookup function for the data encryption algorithm in the client metadata.
dataEncryptionAlgorithms - Variable in class net.shibboleth.oidc.security.jose.impl.BasicEncryptionConfiguration: Data encryption algorithm URIs.
dataEncryptionAlgorithmsLookupStrategy - Variable in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver: A lookup strategy to locate data encryption algorithms from the given criteria set and includesExcludes predicate.
decrypt(EncryptedJWT) - Method in class net.shibboleth.oidc.security.impl.JWETokenDecrypter: Decrypt a JWE object using credentials resolved from the CEK and KEK resolvers inside the decryption parameters.
decrypter - Variable in class net.shibboleth.oidc.security.impl.DecryptJWE: The decryption object.
DecryptJWE - Class in net.shibboleth.oidc.security.impl: Decrypt the located JWE using the decryption parameters stored in the security context.
DecryptJWE() - Constructor for class net.shibboleth.oidc.security.impl.DecryptJWE: Constructor.
decryptUsingDirectEncryption(EncryptedJWT) - Method in class net.shibboleth.oidc.security.impl.JWETokenDecrypter: Decrypt the encrypted JWT using direct encryption.
decryptUsingKeyAgreement(EncryptedJWT) - Method in class net.shibboleth.oidc.security.impl.JWETokenDecrypter: Decrypt the encrypted JWT by computing the content encryption key using Elliptic Curve Diffie-Hellman key agreement.
decryptUsingKeyEncryption(EncryptedJWT) - Method in class net.shibboleth.oidc.security.impl.JWETokenDecrypter: Decrypt the encrypted JWT by first decrypting the content encryption key using one of the (asymmetric) key encryption keys resolved by the DecryptionParameters.getKEKCredentialResolver() resolver.
decryptUsingKeyWrapping(EncryptedJWT) - Method in class net.shibboleth.oidc.security.impl.JWETokenDecrypter: Decrypt the encrypted JWT by first decrypting the wrapped content encryption key using one of the shared key wrapping keys derived from a symmetric key resolved by the DecryptionParameters.getKEKCredentialResolver() resolver.
defaultAlgorithmValue - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler: The default algorithm value used if lookup strategy returned null.
defaultAlgorithmValue - Variable in class net.shibboleth.oidc.security.impl.ClientInformationJWTTrustEngine: The default algorithm value used if lookup strategy returned null.
defaultAlgorithmValue - Variable in class net.shibboleth.oidc.security.jose.impl.ClientInformationSignatureSigningParametersResolver: The default algorithm value used if lookup strategy returned null.
DefaultDataEncryptionAlgorithmsLookupStrategy - Class in net.shibboleth.oidc.security.jose.impl: A BiFunction which pulls data encryption (content encryption) algorithms to use from the encryption configuration and filters them.
DefaultDataEncryptionAlgorithmsLookupStrategy(AlgorithmRegistry) - Constructor for class net.shibboleth.oidc.security.jose.impl.DefaultDataEncryptionAlgorithmsLookupStrategy: Constructor.
DefaultDecryptionParametersResolver - Class in net.shibboleth.oidc.security.jose.impl: Basic implementation of DecryptionParametersResolver.
DefaultDecryptionParametersResolver() - Constructor for class net.shibboleth.oidc.security.jose.impl.DefaultDecryptionParametersResolver
DefaultEncryptionParametersResolver - Class in net.shibboleth.oidc.security.jose.impl: Default implementation of an EncryptionParametersResolver.
DefaultEncryptionParametersResolver() - Constructor for class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver: Constructor.
DefaultKeyTransportEncryptionAlgorithmsLookupStrategy - Class in net.shibboleth.oidc.security.jose.impl: A BiFunction that retrieves and filters the key transport encryption algorithms from the EncryptionConfiguration inside the criteria set.
DefaultKeyTransportEncryptionAlgorithmsLookupStrategy(AlgorithmRegistry) - Constructor for class net.shibboleth.oidc.security.jose.impl.DefaultKeyTransportEncryptionAlgorithmsLookupStrategy: Constructor.
deriveClientSecretCredential(ClientSecretCredential, CriteriaSet) - Method in class net.shibboleth.oidc.security.credential.impl.BasicJOSEObjectCredentialResolver: Use the usage type and algorithm information in the criteria to build a suitable signing or encryption credential.
doExecute(ProfileRequestContext) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration
doExecute(ProfileRequestContext) - Method in class net.shibboleth.oidc.security.impl.DecryptJWE
doInitialize() - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration
doInitialize() - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler
doInitialize() - Method in class net.shibboleth.oidc.security.impl.DecryptJWE
doInitialize() - Method in class net.shibboleth.oidc.security.impl.EncryptJWTHandler
doInitialize() - Method in class net.shibboleth.oidc.security.impl.JWTMessageSignatureSecurityHandler
doInitialize() - Method in class net.shibboleth.oidc.security.impl.SignJWTHandler
doInitialize() - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AccessTokenHashValidator
doInitialize() - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ACRClaimsValidator
doInitialize() - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AudienceClaimsValidator
doInitialize() - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ChainingJWTClaimsValidator
doInitialize() - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ExactMatchClaimsValidator
doInitialize() - Method in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierClaimsValidator
doInitialize() - Method in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierRevocationValidator
doInvoke(MessageContext) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler
doInvoke(MessageContext) - Method in class net.shibboleth.oidc.security.impl.EncryptJWTHandler
doInvoke(MessageContext) - Method in class net.shibboleth.oidc.security.impl.JWTMessageSignatureSecurityHandler
doInvoke(MessageContext) - Method in class net.shibboleth.oidc.security.impl.SignJWTHandler
doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration
doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.oidc.security.impl.DecryptJWE
doPreInvoke(MessageContext) - Method in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler
doPreInvoke(MessageContext) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler
doPreInvoke(MessageContext) - Method in class net.shibboleth.oidc.security.impl.EncryptJWTHandler
doPreInvoke(MessageContext) - Method in class net.shibboleth.oidc.security.impl.JWTMessageSignatureSecurityHandler
doPreInvoke(MessageContext) - Method in class net.shibboleth.oidc.security.impl.SignJWTHandler
doValidate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AccessTokenHashValidator
doValidate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ACRClaimsValidator
doValidate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AudienceClaimsValidator
doValidate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationTimeClaimsValidator
doValidate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ExactMatchClaimsValidator
doValidate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ExpiryClaimsValidator
doValidate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.FunctionClaimsValidator
doValidate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.IssuedAtClaimsValidator
doValidate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierClaimsValidator
doValidate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierRevocationValidator
doValidate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.NotBeforeClaimsValidator
doValidate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ProhibitedClaimsValidator
doValidate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.RequiredClaimsValidator
doValidate(SignedJWT, CriteriaSet) - Method in class net.shibboleth.oidc.security.impl.BaseSignedJWTTrustEngine: Validate the signed JWT using the supplied trust criteria.
doValidate(SignedJWT, CriteriaSet) - Method in class net.shibboleth.oidc.security.impl.ClientInformationJWTTrustEngine: Validate the signed JWT using the supplied trust criteria.
doValidate(SignedJWT, CriteriaSet) - Method in class net.shibboleth.oidc.security.impl.ExplicitKeySignedJWTTrustEngine

E

encAlgorithm - Variable in class net.shibboleth.oidc.security.credential.impl.DataEncryptionAlgorithmCriterion: Key algorithm type of resolved credentials.
encryptedJwt - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration: The extracted encrypted JWT that is to be processed.
encryptedJwt - Variable in class net.shibboleth.oidc.security.impl.DecryptJWE: The extracted encrypted JWT that is to be validated.
encryptionOptional - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration: Whether encryption is optional.
encryptionOptionalPredicate - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration: Predicate to determine how to proceed if JWT token was not encrypted.
encryptionParameters - Variable in class net.shibboleth.oidc.security.impl.EncryptJWTHandler: The signature signing parameters.
EncryptJWTHandler - Class in net.shibboleth.oidc.security.impl: A MessageHandler that encrypts a JWT using the EncryptionParameters found in the SecurityParametersContext.
EncryptJWTHandler() - Constructor for class net.shibboleth.oidc.security.impl.EncryptJWTHandler: Constructor.
endpointReplacement - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationAudienceClaimsValidator: The replacement substring for the endpoint containing any ones configured at AuthenticationAudienceClaimsValidator.endpointTargets.
endpointTargets - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationAudienceClaimsValidator: The substrings to replace from resolved endpoint with one configured at AuthenticationAudienceClaimsValidator.endpointReplacement.
equals(Object) - Method in class net.shibboleth.oidc.security.credential.impl.DataEncryptionAlgorithmCriterion
equals(Object) - Method in class net.shibboleth.oidc.security.credential.impl.EvaluableKeyIDCredentialCriterion
equals(Object) - Method in class net.shibboleth.oidc.security.credential.impl.EvaluableMACKeyLengthCredentialCriterion
equals(Object) - Method in class net.shibboleth.oidc.security.credential.impl.KeyManagmentAlgorithmCriterion
errorEventId - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration: Event identifier to publish if token parameters are not compliant with the configuration.
errorEventId - Variable in class net.shibboleth.oidc.security.impl.DecryptJWE: Event identifier to publish in the case of decryption errors.
EvaluableKeyIDCredentialCriterion - Class in net.shibboleth.oidc.security.credential.impl: Instance of evaluable credential criteria for evaluating credential key IDs.
EvaluableKeyIDCredentialCriterion(String) - Constructor for class net.shibboleth.oidc.security.credential.impl.EvaluableKeyIDCredentialCriterion: Constructor.
EvaluableKeyIDCredentialCriterion(KeyIdCriterion) - Constructor for class net.shibboleth.oidc.security.credential.impl.EvaluableKeyIDCredentialCriterion: Constructor.
EvaluableMACKeyLengthCredentialCriterion - Class in net.shibboleth.oidc.security.credential.impl: Instance of evaluable credential criteria for evaluating if the key length of the secret key inside the credential is compatible with the MAC algorithm given.
EvaluableMACKeyLengthCredentialCriterion(JWSAlgorithm) - Constructor for class net.shibboleth.oidc.security.credential.impl.EvaluableMACKeyLengthCredentialCriterion: Constructor.
evaluateTrust(Credential, Iterable<Credential>) - Method in class net.shibboleth.oidc.security.impl.ExplicitKeySignedJWTTrustEngine
evaluateTrust(Credential, TrustBasisType) - Method in class net.shibboleth.oidc.security.impl.BaseSignedJWTTrustEngine: Evaluate the untrusted KeyInfo-derived credential with respect to the specified trusted information.
ExactMatchClaimsValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl: Validator that checks a JWT claim exactly matches (by Object equality) a value returned by a lookup strategy.
ExactMatchClaimsValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.ExactMatchClaimsValidator
EXPIRATION_TIME_CLAIM - net.shibboleth.oidc.security.jwt.claims.impl.JWTClaims: Expiration time on or after which the ID Token MUST NOT be accepted for processing.
ExpiryClaimsValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl: Iff an expiration time (exp) claim is present, verifies that it is ahead of the current time, else the JWT claims set is rejected.
ExpiryClaimsValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.ExpiryClaimsValidator: Constructor.
ExplicitKeySignedJWTTrustEngine - Class in net.shibboleth.oidc.security.impl: An implementation of SignatureTrustEngine which evaluates the validity and trustworthiness of JWT signatures.
ExplicitKeySignedJWTTrustEngine(CredentialResolver, JOSEObjectCredentialResolver) - Constructor for class net.shibboleth.oidc.security.impl.ExplicitKeySignedJWTTrustEngine: Constructor.
ExplicitKeyTrustEvaluator - Class in net.shibboleth.oidc.security.impl: Auxillary trust evaluator for evaluating an untrusted key or credential against a trusted key or credential.
ExplicitKeyTrustEvaluator() - Constructor for class net.shibboleth.oidc.security.impl.ExplicitKeyTrustEvaluator
extraAudienceValidation - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AudienceClaimsValidator: If enabled, any extra audience must be contained in the List returned from the additionalAudiencesLookupStrategy.
extractKeyIdFromCriteria(CriteriaSet) - Method in class net.shibboleth.oidc.security.credential.impl.BasicJOSEObjectCredentialResolver: Extract a KeyId from the criteria set if one exists.

F

filterAlreadyContained(List<Credential>, List<Credential>) - Method in class net.shibboleth.oidc.security.credential.impl.LocalJOSEObjectCredentialResolver: Return a new list of credentials based on the credentialsToFilter that are not contained in credentialsToFilterOn.
filterForProviderSupportedAlgorithms(CriteriaSet, List<String>) - Method in class net.shibboleth.oidc.security.jose.impl.RelyingPartySigningParametersResolver: Filter the set of algorithms against the set supported by the OpenID Provider.
findAlgorithmIntersection(List<String>, List<String>) - Method in class net.shibboleth.oidc.security.impl.AbstractEncryptionAlgorithmsLookupStrategy: Return a new list of algorithms that represents the set intersection of the two input algorithm lists.
findCompatibleAlgorithmAndCredential(List<String>, List<Credential>, SignatureSigningParameters) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver: Loop through the algorithms and find the first compatible credential.
ForcedAuthenticationActivationCondition - Class in net.shibboleth.oidc.security.jwt.claims.impl: Has forced authentication been requested?
ForcedAuthenticationActivationCondition() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.ForcedAuthenticationActivationCondition
FunctionClaimsValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl: A ClaimsValidator that relies on an injected BiFunction.
FunctionClaimsValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.FunctionClaimsValidator

G

getAlgorithm() - Method in class net.shibboleth.oidc.security.credential.impl.KeyManagmentAlgorithmCriterion: Get the algorithm criteria.
getAlgorithmRegistry() - Method in class net.shibboleth.oidc.security.impl.AbstractEncryptionAlgorithmsLookupStrategy: Get the algorithm registry.
getAlgorithmRegistry() - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver: Get the AlgorithmRegistry instance used when resolving algorithm URIs.
getAlgorithmRegistry() - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver: Get the AlgorithmRegistry instance used when resolving algorithm URIs.
getAlgorithmRuntimeSupportedPredicate() - Method in class net.shibboleth.oidc.security.impl.AbstractEncryptionAlgorithmsLookupStrategy: Get a predicate which evaluates whether a cryptographic algorithm is supported by the runtime environment.
getAlgorithmRuntimeSupportedPredicate() - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver: Get a predicate which evaluates whether a cryptographic algorithm is supported by the runtime environment.
getAlgorithmRuntimeSupportedPredicate() - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver: Get a predicate which evaluates whether a cryptographic algorithm is supported by the runtime environment.
getClaimName() - Method in enum net.shibboleth.oidc.security.jwt.claims.impl.IDTokenClaims: Get the registered claim name.
getClaimName() - Method in enum net.shibboleth.oidc.security.jwt.claims.impl.JWTClaims: Get the IANA registered claim name.
getClientInformation(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.ClientInformationSignatureSigningParametersResolver: Returns the client information from the given criteria set, if one was found.
getContentEncryptionKeyCredentialResolver() - Method in class net.shibboleth.oidc.security.jose.impl.BasicDecryptionConfiguration
getContentEncryptionKeyCredentialResolver() - Method in class net.shibboleth.oidc.security.jose.impl.BasicEncryptionConfiguration
getCredentialResolver() - Method in class net.shibboleth.oidc.security.impl.ExplicitKeySignedJWTTrustEngine
getDataEncryptionAlgorithms() - Method in class net.shibboleth.oidc.security.jose.impl.BasicEncryptionConfiguration
getDataEncryptionAlgorithmsFromConfiguration(CriteriaSet, Predicate<String>) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultDataEncryptionAlgorithmsLookupStrategy: Get the data encryption 'enc' algorithms from the EncryptionConfiguration inside the criteria set.
getEffectiveDataEncryptionCredentials(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver: Get the effective list of data/content encryption credentials to consider.
getEffectiveKeyTransportCredentials(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver: Get the effective list of key transport credentials to consider.
getEffectiveSignatureAlgorithms(CriteriaSet, Predicate<String>) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver: Get the effective list of signature algorithm URIs to consider, including application of include/exclude policy.
getEffectiveSignatureAlgorithms(CriteriaSet, Predicate<String>) - Method in class net.shibboleth.oidc.security.jose.impl.ClientInformationSignatureSigningParametersResolver: Get the effective list of signature algorithm URIs to consider, including application of include/exclude policy.
getEffectiveSigningCredentials(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver: Get the effective list of signing credentials to consider.
getEffectiveSigningCredentials(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.ClientInformationSignatureSigningParametersResolver: Get the effective list of signing credentials to consider.
getEncAlgorithm() - Method in class net.shibboleth.oidc.security.credential.impl.DataEncryptionAlgorithmCriterion: Get the encryption algorithm criteria.
getExpectedAlgorithm(OIDCClientInformation) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler: Fetches the expected signature algorithm from the OIDCClientInformation.
getExpectedAlgorithm(ClientInformationCriterion) - Method in class net.shibboleth.oidc.security.impl.ClientInformationJWTTrustEngine: Fetches the expected signature algorithm from the OIDCClientInformation.
getIncludeExcludePredicate(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver: Get a predicate which implements the effective configured include/exclude policy.
getIncludeExcludePredicate(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver: Get a predicate which implements the effective configured include/exclude policy.
getKEKCredentialResolver() - Method in class net.shibboleth.oidc.security.jose.impl.BasicDecryptionConfiguration
getKEKCredentialResolver() - Method in class net.shibboleth.oidc.security.jose.impl.BasicEncryptionConfiguration
getKeyId() - Method in class net.shibboleth.oidc.security.credential.impl.EvaluableKeyIDCredentialCriterion: Get the keyId.
getKeyTransportAlgorithmsFromConfiguration(CriteriaSet, Predicate<String>) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultKeyTransportEncryptionAlgorithmsLookupStrategy: Get the key transport algorithms from the EncryptionConfiguration inside the criteria set.
getKeyTransportDecryptionCredentials() - Method in class net.shibboleth.oidc.security.impl.OIDCDecryptionParameters: Deprecated.

Get the list of decryption credentials.
getKeyTransportEncryptionAlgorithms() - Method in class net.shibboleth.oidc.security.jose.impl.BasicEncryptionConfiguration
getLocalCredentialResolver() - Method in class net.shibboleth.oidc.security.credential.impl.LocalJOSEObjectCredentialResolver: Get the resolver for local credentials.
getOIDCPeerEntityContext() - Method in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler: Get the OIDCPeerEntityContext associated with the message.
getSignatureAlgorithms() - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningConfiguration
getSignatureTrustEngine() - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureValidationConfiguration: Get the signature trust engine to use.
getSigner(Algorithm) - Method in class net.shibboleth.oidc.security.impl.SignJWTHandler: Returns correct implementation of signer based on algorithm type.
getSigningCredentials() - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningConfiguration
getValidationCredentials() - Method in class net.shibboleth.oidc.security.impl.OIDCSignatureValidationParameters: Deprecated.

Get the list of validation credentials.

H

hashCode() - Method in class net.shibboleth.oidc.security.credential.impl.DataEncryptionAlgorithmCriterion
hashCode() - Method in class net.shibboleth.oidc.security.credential.impl.EvaluableKeyIDCredentialCriterion
hashCode() - Method in class net.shibboleth.oidc.security.credential.impl.EvaluableMACKeyLengthCredentialCriterion
hashCode() - Method in class net.shibboleth.oidc.security.credential.impl.KeyManagmentAlgorithmCriterion

I

IDTokenClaims - Enum in net.shibboleth.oidc.security.jwt.claims.impl: Enum of those OIDC ID token claims that are not part of the standard JWT claims set.
IDTokenClaims(String) - Constructor for enum net.shibboleth.oidc.security.jwt.claims.impl.IDTokenClaims: Constructor.
initialize() - Method in class net.shibboleth.oidc.security.credential.impl.ClientInformationCredentialResolver
initialize() - Method in class net.shibboleth.oidc.security.credential.impl.ProviderMetadataCredentialResolver
initializeVerifier(Algorithm, Credential) - Static method in class net.shibboleth.oidc.security.impl.BaseSignedJWTTrustEngine: Initializes a JWSVerifier for the given algorithm, using the provided Credential.
initializeVerifier(Algorithm, Credential) - Static method in class net.shibboleth.oidc.security.impl.JWTSignatureValidationUtil: Initializes a JWSVerifier for the given algorithm, using the provided Credential.
isDataEncryptionAlgorithm(String) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver: Evaluate whether the specified algorithm is a data encryption algorithm.
isInitialized - Variable in class net.shibboleth.oidc.security.credential.impl.ClientInformationCredentialResolver: Initialization flag.
isInitialized - Variable in class net.shibboleth.oidc.security.credential.impl.ProviderMetadataCredentialResolver: Initialization flag.
isInitialized() - Method in class net.shibboleth.oidc.security.credential.impl.ClientInformationCredentialResolver
isInitialized() - Method in class net.shibboleth.oidc.security.credential.impl.ProviderMetadataCredentialResolver
isKeyEncryptionAlgorithm(String) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver: Evaluate whether the specified algorithm is a key encryption or key wrapping algorithm.
isLocalCredential(Credential) - Method in class net.shibboleth.oidc.security.credential.impl.LocalJOSEObjectCredentialResolver: Determine whether the credential is a local credential.
ISSUED_AT_CLAIM - net.shibboleth.oidc.security.jwt.claims.impl.JWTClaims: Time at which the JWT was issued.
IssuedAtClaimsValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl: If the 'iat' claim is present in the JWT, verifies it is not to far away from the current time.
IssuedAtClaimsValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.IssuedAtClaimsValidator: Constructor.
ISSUER_CLAIM - net.shibboleth.oidc.security.jwt.claims.impl.JWTClaims: Issuer Identifier for the Issuer of the response.

J

joseHeaderLookupStrategy - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AccessTokenHashValidator: Strategy to find the JOSE headers relating to the id_token the at_hash is taken from.
joseObjectCredentialResolver - Variable in class net.shibboleth.oidc.security.impl.BaseSignedJWTTrustEngine: Resolver of credentials from JOSEObject headers.
JWETokenDecrypter - Class in net.shibboleth.oidc.security.impl: Supports decryption of encrypted JSON Web Tokens using the JSON Web Encryption standard.
JWETokenDecrypter(DecryptionParameters) - Constructor for class net.shibboleth.oidc.security.impl.JWETokenDecrypter: Constructor.
JWT_ID_CLAIM - net.shibboleth.oidc.security.jwt.claims.impl.JWTClaims: The "jti" (JWT ID) claim provides a unique identifier for the JWT.
JWTClaims - Enum in net.shibboleth.oidc.security.jwt.claims.impl: Enum that represents the standard set of registered JWT claims.
JWTClaims(String) - Constructor for enum net.shibboleth.oidc.security.jwt.claims.impl.JWTClaims: Constructor.
jwtClaimSetToSign - Variable in class net.shibboleth.oidc.security.impl.SignJWTHandler: The claims to sign.
JWTIdentifierClaimsValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl: Verifies the identifier (jit) from the JWT against replay via configurable ReplayCache.
JWTIdentifierClaimsValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierClaimsValidator: Constructor.
JWTIdentifierRevocationValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl: Verifies the identifier (jit) from the JWT against revocation via configurable RevocationCache.
JWTIdentifierRevocationValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierRevocationValidator
JWTMessageSignatureSecurityHandler - Class in net.shibboleth.oidc.security.impl: A MessageHandler that uses a TrustEngine to evaluate the signature of a signed JWT.
JWTMessageSignatureSecurityHandler() - Constructor for class net.shibboleth.oidc.security.impl.JWTMessageSignatureSecurityHandler
JWTSignatureValidationUtil - Class in net.shibboleth.oidc.security.impl: Generic utility class for helping JWT signature validation.
JWTSignatureValidationUtil() - Constructor for class net.shibboleth.oidc.security.impl.JWTSignatureValidationUtil: Private constructor.
jwtTokenLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration: Function that looks up an encrypted JWT token from the given profile context to validate .
jwtTokenLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler: Function that looks up a signed JWT token from the given message context to validate .
jwtTokenLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.DecryptJWE: Function that looks up a signed JWT token from the given message context to validate.
jwtTokenLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.JWTMessageSignatureSecurityHandler: Function that looks up a signed JWT token from the given message context to validate.
jwtUpdateConsumer - Variable in class net.shibboleth.oidc.security.impl.EncryptJWTHandler: A consumer that takes the EncryptedJWT and updates the correct object inside the MessageContext.
jwtUpdateConsumer - Variable in class net.shibboleth.oidc.security.impl.SignJWTHandler: A consumer that takes the Signed JWT and updates the correct object inside the MessageContext.
jwtUpdateStrategy - Variable in class net.shibboleth.oidc.security.impl.DecryptJWE: A consumer that sets the JWT produced from this decryption operation back into the profile request context.

K

kekKeyCredentialResolver - Variable in class net.shibboleth.oidc.security.jose.impl.BasicDecryptionConfiguration: The EncryptedKey's credential resolver.
kekKeyCredentialResolver - Variable in class net.shibboleth.oidc.security.jose.impl.BasicEncryptionConfiguration: The EncryptedKey's credential resolver.
keyFetchInterval - Variable in class net.shibboleth.oidc.security.credential.impl.ClientInformationCredentialResolver: The remote key refresh interval.
keyFetchInterval - Variable in class net.shibboleth.oidc.security.credential.impl.ProviderMetadataCredentialResolver: The remote key refresh interval.
keyId - Variable in class net.shibboleth.oidc.security.credential.impl.EvaluableKeyIDCredentialCriterion: Base criteria.
KeyManagmentAlgorithmCriterion - Class in net.shibboleth.oidc.security.credential.impl: An implementation of Criterion which specifies key management algorithm criteria.
KeyManagmentAlgorithmCriterion(String) - Constructor for class net.shibboleth.oidc.security.credential.impl.KeyManagmentAlgorithmCriterion: Constructor.
keyTransportDecryptionCredentials - Variable in class net.shibboleth.oidc.security.impl.OIDCDecryptionParameters: Deprecated.

The list of decryption credentials.
keyTransportEncryptionAlgorithmLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration: A lookup function for the key transport algorithm in the client metadata.
keyTransportEncryptionAlgorithms - Variable in class net.shibboleth.oidc.security.jose.impl.BasicEncryptionConfiguration: Key transport encryption algorithm URIs.
keyTransportEncryptionAlgorithmsLookupStrategy - Variable in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver: A lookup strategy to locate key encryption algorithms from the given criteria set and includesExcludes predicate.
keyTrust - Variable in class net.shibboleth.oidc.security.impl.ExplicitKeySignedJWTTrustEngine: The external explicit key trust engine to use as a basis for trust in this implementation.

L

localCredResolver - Variable in class net.shibboleth.oidc.security.credential.impl.LocalJOSEObjectCredentialResolver: The resolver which is used to resolve local credentials.
LocalJOSEObjectCredentialResolver - Class in net.shibboleth.oidc.security.credential.impl: A simple specialization of BasicJOSEObjectCredentialResolver which is capable of resolving local credentials from a supplied CredentialResolver which manages local credentials.
LocalJOSEObjectCredentialResolver(JOSEObjectCredentialResolver) - Constructor for class net.shibboleth.oidc.security.credential.impl.LocalJOSEObjectCredentialResolver: Constructor.
log - Variable in class net.shibboleth.oidc.security.credential.impl.BasicJOSEObjectCredentialResolver: Logger.
log - Variable in class net.shibboleth.oidc.security.credential.impl.ClientInformationCredentialResolver: Class logger.
log - Variable in class net.shibboleth.oidc.security.credential.impl.ClientSecretCriterionCredentialResolver: Class logger.
log - Variable in class net.shibboleth.oidc.security.credential.impl.EvaluableKeyIDCredentialCriterion: Logger.
log - Variable in class net.shibboleth.oidc.security.credential.impl.EvaluableMACKeyLengthCredentialCriterion: Logger.
log - Variable in class net.shibboleth.oidc.security.credential.impl.LocalJOSEObjectCredentialResolver: Class logger.
log - Variable in class net.shibboleth.oidc.security.credential.impl.ProviderMetadataCredentialResolver: Class logger.
log - Variable in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler: Class logger.
log - Variable in class net.shibboleth.oidc.security.impl.BaseSignedJWTTrustEngine: Logger.
log - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration: Logger.
log - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler: Logger.
log - Variable in class net.shibboleth.oidc.security.impl.ClientInformationJWTTrustEngine: Class logger.
log - Variable in class net.shibboleth.oidc.security.impl.DecryptJWE: Class logger.
log - Variable in class net.shibboleth.oidc.security.impl.EncryptJWTHandler: Class logger.
log - Variable in class net.shibboleth.oidc.security.impl.ExplicitKeySignedJWTTrustEngine: Class logger.
log - Variable in class net.shibboleth.oidc.security.impl.ExplicitKeyTrustEvaluator: Class logger.
log - Variable in class net.shibboleth.oidc.security.impl.JWETokenDecrypter: Class logger.
log - Variable in class net.shibboleth.oidc.security.impl.JWTMessageSignatureSecurityHandler: Logger.
log - Static variable in class net.shibboleth.oidc.security.impl.JWTSignatureValidationUtil: Class logger.
log - Variable in class net.shibboleth.oidc.security.impl.SignJWTHandler: Class logger.
log - Variable in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningConfiguration: Class logger.
log - Variable in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver: Class logger.
log - Variable in class net.shibboleth.oidc.security.jose.impl.BasicSignatureValidationParametersResolver: Logger.
log - Variable in class net.shibboleth.oidc.security.jose.impl.ClientInformationDataEncryptionAlgorithmsLookupStrategy: Logger.
log - Variable in class net.shibboleth.oidc.security.jose.impl.ClientInformationKeyTransportEncryptionAlgorithmsLookupStrategy: Logger.
log - Variable in class net.shibboleth.oidc.security.jose.impl.ClientInformationSignatureSigningParametersResolver: Class logger.
log - Variable in class net.shibboleth.oidc.security.jose.impl.DefaultDecryptionParametersResolver: Logger.
log - Variable in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver: Logger.
log - Variable in class net.shibboleth.oidc.security.jose.impl.ProviderMetadataDataEncryptionAlgorithmsLookupStrategy: Logger.
log - Variable in class net.shibboleth.oidc.security.jose.impl.ProviderMetadataKeyTransportEncryptionAlgorithmsLookupStrategy: Logger.
log - Variable in class net.shibboleth.oidc.security.jose.impl.RelyingPartySigningParametersResolver: Logger.
log - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AccessTokenHashValidator: Class logger.
log - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationTimeClaimsValidator: Class logger.
log - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AuthTimeRequestedActivationCondition: Class logger.
log - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.ChainingJWTClaimsValidator: Class logger.
log - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.ExactMatchClaimsValidator: Class logger.
logEncryption(String, String, String) - Method in class net.shibboleth.oidc.security.impl.EncryptJWTHandler: A convince method to log encryption parameters.
logJWT(JWT) - Method in class net.shibboleth.oidc.security.impl.DecryptJWE: Log (on trace) the JWT.
logName - Variable in class net.shibboleth.oidc.security.impl.EncryptJWTHandler: A friendly name to log as the subject of encryption.
logName - Variable in class net.shibboleth.oidc.security.impl.SignJWTHandler: A friendly name to log as the subject of signing.
logResult(DecryptionParameters) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultDecryptionParametersResolver: Log the resolved parameters.
logResult(EncryptionParameters) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver: Log the resolved parameters.
logResult(SignatureSigningParameters) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver: Log the resolved parameters.
logResult(SignatureValidationParameters) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureValidationParametersResolver: Log the resolved parameters.

M

messageLifetime - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.IssuedAtClaimsValidator: Amount of time for which a message is valid after it is issued (Default value: 1 minute).

N

net.shibboleth.oidc.security.credential.impl - package net.shibboleth.oidc.security.credential.impl: Credential resolver implementation classes.
net.shibboleth.oidc.security.impl - package net.shibboleth.oidc.security.impl: Utility classes for security related functions.
net.shibboleth.oidc.security.jose.impl - package net.shibboleth.oidc.security.jose.impl: Implementation of cryptographic primitives that support JOSE objects.
net.shibboleth.oidc.security.jwt.claims.impl - package net.shibboleth.oidc.security.jwt.claims.impl: Validation functions for JWT claims.
NONCE - net.shibboleth.oidc.security.jwt.claims.impl.IDTokenClaims: String value used to associate a Client session with an ID Token, and to mitigate replay attacks.
NonceValidationActivationCondition - Class in net.shibboleth.oidc.security.jwt.claims.impl: Determines if nonce validation should occur.
NonceValidationActivationCondition() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.NonceValidationActivationCondition
NOT_BEFORE_CLAIM - net.shibboleth.oidc.security.jwt.claims.impl.JWTClaims: The "nbf" (not before) claim identifies the time before which the JWT MUST NOT be accepted for processing.
NotBeforeClaimsValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl: Iff a not-before-time (nbf) claim is present, makes sure it is before the current time.
NotBeforeClaimsValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.NotBeforeClaimsValidator: Constructor.
NumberOfClaimValuesActivationCondition - Class in net.shibboleth.oidc.security.jwt.claims.impl: Activation condition to check the number of values a claim has against a given predicate.
NumberOfClaimValuesActivationCondition(String, IntPredicate) - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.NumberOfClaimValuesActivationCondition: Constructor.
numberOfValuesPredicate - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.NumberOfClaimValuesActivationCondition: The predicate used to determine if the claim has the correct number of values.

O

OIDCDecryptionParameters - Class in net.shibboleth.oidc.security.impl: Deprecated, for removal: This API element is subject to removal in a future version.
OIDCDecryptionParameters() - Constructor for class net.shibboleth.oidc.security.impl.OIDCDecryptionParameters: Deprecated.
OIDCSignatureValidationParameters - Class in net.shibboleth.oidc.security.impl: Deprecated, for removal: This API element is subject to removal in a future version.
OIDCSignatureValidationParameters() - Constructor for class net.shibboleth.oidc.security.impl.OIDCSignatureValidationParameters: Deprecated.

P

params - Variable in class net.shibboleth.oidc.security.impl.JWETokenDecrypter: The JWT decryption parameters.
payloadToEncryptLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.EncryptJWTHandler: Strategy used to locate the payload to encrypt.
peerContext - Variable in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler: The context representing the OIDC peer entity.
populateCredentialsFromKeySet(JWKSet, Collection<Credential>) - Method in class net.shibboleth.oidc.security.credential.impl.BasicJOSEObjectCredentialResolver: Convert the RSA and EC keys from the given JWKSet into the collection of credentials.
postProcess(CriteriaSet, JOSEObject, List<Credential>) - Method in class net.shibboleth.oidc.security.credential.impl.BasicJOSEObjectCredentialResolver: Hook for subclasses to do post-processing of the credential set after all JOSE header keys have been processed.
postProcess(CriteriaSet, JOSEObject, List<Credential>) - Method in class net.shibboleth.oidc.security.credential.impl.LocalJOSEObjectCredentialResolver
PRC_LOOKUP - Static variable in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler: Lookup function for parent ProfileRequestContext.
processJWEHeader(JWEHeader) - Method in class net.shibboleth.oidc.security.credential.impl.BasicJOSEObjectCredentialResolver
processJWSHeader(JWSHeader) - Method in class net.shibboleth.oidc.security.credential.impl.BasicJOSEObjectCredentialResolver: Process credentials indicated by a JWS header.
profileConfiguration - Variable in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler: Applicable stashed profile configuration appropriate for OAuth clients.
prohibitedClaims - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.ProhibitedClaimsValidator: The names of the JWT claims that must not be present, empty set if none.
ProhibitedClaimsValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl: Verify the claims set does not contain any of the described set of claims.
ProhibitedClaimsValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.ProhibitedClaimsValidator: Constructor.
providerEncryptionMethodsLookupStrategy - Variable in class net.shibboleth.oidc.security.jose.impl.ProviderMetadataDataEncryptionAlgorithmsLookupStrategy: A strategy to locate the encryption methods ('enc') appropriate for the JWT to be encrypted.
providerKeyTransportAlgorithmsLookupStrategy - Variable in class net.shibboleth.oidc.security.jose.impl.ProviderMetadataKeyTransportEncryptionAlgorithmsLookupStrategy: A strategy to locate the algorithms ('alg') appropriate for the JWT to be encrypted.
providerMetadata - Variable in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler: The provider metadata found from the lookup strategy.
providerMetadataAlgorithmLookupStrategy - Variable in class net.shibboleth.oidc.security.jose.impl.RelyingPartySigningParametersResolver: A strategy to pull out the correct set of supported algorithms from the OIDCProviderMetadata.
ProviderMetadataCredentialResolver - Class in net.shibboleth.oidc.security.credential.impl: A LocalJOSEObjectCredentialResolver that resolves credentials from the jwks_uri of an OpenID Provider.
ProviderMetadataCredentialResolver() - Constructor for class net.shibboleth.oidc.security.credential.impl.ProviderMetadataCredentialResolver
ProviderMetadataDataEncryptionAlgorithmsLookupStrategy - Class in net.shibboleth.oidc.security.jose.impl: A lookup strategy that finds data/content encryption algorithms from local configuration that are compatible with those advertised by the OpenID Provider.
ProviderMetadataDataEncryptionAlgorithmsLookupStrategy(Function<OIDCProviderMetadata, List<String>>) - Constructor for class net.shibboleth.oidc.security.jose.impl.ProviderMetadataDataEncryptionAlgorithmsLookupStrategy: Constructor.
ProviderMetadataDataEncryptionAlgorithmsLookupStrategy(Function<OIDCProviderMetadata, List<String>>, AlgorithmRegistry) - Constructor for class net.shibboleth.oidc.security.jose.impl.ProviderMetadataDataEncryptionAlgorithmsLookupStrategy: Constructor.
ProviderMetadataKeyTransportEncryptionAlgorithmsLookupStrategy - Class in net.shibboleth.oidc.security.jose.impl: A lookup strategy that finds key transport algorithms from local configuration that are compatible with those advertised by the downstream OpenID Provider.
ProviderMetadataKeyTransportEncryptionAlgorithmsLookupStrategy(Function<OIDCProviderMetadata, List<String>>) - Constructor for class net.shibboleth.oidc.security.jose.impl.ProviderMetadataKeyTransportEncryptionAlgorithmsLookupStrategy: Constructor.
ProviderMetadataKeyTransportEncryptionAlgorithmsLookupStrategy(Function<OIDCProviderMetadata, List<String>>, AlgorithmRegistry) - Constructor for class net.shibboleth.oidc.security.jose.impl.ProviderMetadataKeyTransportEncryptionAlgorithmsLookupStrategy: Constructor.
providerMetadataLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler: Function that looks up provider metadata from the given message context.

R

relyingPartyContextLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler: Lookup function for relying party context.
RelyingPartySigningParametersResolver - Class in net.shibboleth.oidc.security.jose.impl: A specialization of BasicSignatureSigningParametersResolver which supports selecting signing credentials from client_secret credential criterion (e.g.
RelyingPartySigningParametersResolver() - Constructor for class net.shibboleth.oidc.security.jose.impl.RelyingPartySigningParametersResolver: Constructor.
remoteJwkSetCache - Variable in class net.shibboleth.oidc.security.credential.impl.ClientInformationCredentialResolver: The cache for remote JWK key sets.
remoteJwkSetCache - Variable in class net.shibboleth.oidc.security.credential.impl.ProviderMetadataCredentialResolver: The cache for remote JWK key sets.
replayCache - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierClaimsValidator: Message replay cache instance to use.
requested - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationTimeClaimsValidator: Has the auth_time been requested, either explicitly or from the max_age parameter? Defaults to true.
RequestedEssentialACRClaimsLookupStrategy - Class in net.shibboleth.oidc.security.jwt.claims.impl: Strategy that looks up any requested ACR claims from the requested claims object that have to be contained in the token's claims set.
RequestedEssentialACRClaimsLookupStrategy(Function<ProfileRequestContext, OIDCAuthenticationRequest>) - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.RequestedEssentialACRClaimsLookupStrategy: Constructor.
requestedEssentialAcrsClaimLookupStrategy - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.ACRClaimsValidator: Strategy to find the essential requested ACR claim values.
requireAll - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.ChainingJWTClaimsValidator: Require all of the validators to be successful.
requiredClaims - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.RequiredClaimsValidator: The names of the JWT claims that must be present, if empty no claims are required.
RequiredClaimsValidator - Class in net.shibboleth.oidc.security.jwt.claims.impl: Verify the claims set contains the given set of required claims.
RequiredClaimsValidator() - Constructor for class net.shibboleth.oidc.security.jwt.claims.impl.RequiredClaimsValidator: Constructor.
requiredRule - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.IssuedAtClaimsValidator: Whether this rule is required to be met.
resolve(CriteriaSet) - Method in class net.shibboleth.oidc.security.credential.impl.ReturnAllCollectionJOSEObjectCredentialResolver
resolve(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver
resolve(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureValidationParametersResolver
resolve(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultDecryptionParametersResolver
resolve(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
resolveAcceptedAudiences(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AudienceClaimsValidator: Resolve the set of accepted audiences.
resolveAcceptedAudiences(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationAudienceClaimsValidator: Resolve the set of accepted audiences.
resolveAlgorithm() - Method in class net.shibboleth.oidc.security.impl.SignJWTHandler: Resolves JWS algorithm from signature signing parameters.
resolveAndPopulateCredentialAndSignatureAlgorithm(SignatureSigningParameters, CriteriaSet, Predicate<String>) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver: Resolve and populate the signing credential and signature method algorithm URI on the supplied parameters instance.
resolveAndPopulateCredentialAndSignatureAlgorithm(SignatureSigningParameters, CriteriaSet, Predicate<String>) - Method in class net.shibboleth.oidc.security.jose.impl.RelyingPartySigningParametersResolver
resolveAndPopulateCredentialsAndAlgorithms(EncryptionParameters, CriteriaSet, Predicate<String>) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver: Resolve and populate the data encryption and key transport credentials and algorithm URIs.
resolveContentEncryptionKeyCredentialResolver(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultDecryptionParametersResolver: Resolve and return the effective CredentialResolver used to resolve the content encryption key.
resolveContentEncryptionKeyCredentialResolver(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver: Resolve and return the effective CredentialResolver used to resolve the content encryption key.
resolveCredentialForSupportedAlgorithm(CriteriaSet, List<JWEAlgorithm>, List<EncryptionMethod>, EncryptionParameters) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver: Resolve a credential (key) compatible with one-of the supported algorithms.
resolveEncryptionMethod(List<EncryptionMethod>) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver: Return the first encryption method in the supported list, or null otherwise.
resolveFromMetadata(CriteriaSet, OIDCProviderMetadata) - Method in class net.shibboleth.oidc.security.credential.impl.ProviderMetadataCredentialResolver: Fetch the remote JWK Set from the jwk_uri in the OpenID Provider's metadata.
resolveFromMetadata(CriteriaSet, OIDCClientInformation) - Method in class net.shibboleth.oidc.security.credential.impl.ClientInformationCredentialResolver: Fetch the remote JWK Set from the jwk_uri in the RP/Client metadata.
resolveFromSource(CriteriaSet) - Method in class net.shibboleth.oidc.security.credential.impl.BasicJOSEObjectCredentialResolver
resolveFromSource(CriteriaSet) - Method in class net.shibboleth.oidc.security.credential.impl.ClientInformationCredentialResolver
resolveFromSource(CriteriaSet) - Method in class net.shibboleth.oidc.security.credential.impl.ClientSecretCriterionCredentialResolver
resolveFromSource(CriteriaSet) - Method in class net.shibboleth.oidc.security.credential.impl.CollectionJOSEObjectCredentialResolver
resolveFromSource(CriteriaSet) - Method in class net.shibboleth.oidc.security.credential.impl.ProviderMetadataCredentialResolver
resolveKEKCredentialResolver(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultDecryptionParametersResolver: Resolve and return the effective CredentialResolver used to decrypt content encryption keys.
resolveKEKCredentialResolver(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver: Resolve and return the effective CredentialResolver used to encrypt/wrap content encryption keys.
resolveKeyIdFromJoseHeader(Header) - Method in class net.shibboleth.oidc.security.credential.impl.LocalJOSEObjectCredentialResolver: Return the KeyId from either a JWSHeader or a JWEHeader.
resolveLocalCredentialsByCriteria(CriteriaSet) - Method in class net.shibboleth.oidc.security.credential.impl.LocalJOSEObjectCredentialResolver: Resolve credentials using the LocalJOSEObjectCredentialResolver.localCredResolver and the supplied criteria.
resolveSignatureTrustEngine(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureValidationParametersResolver: Resolve and return the effective SignatureTrustEngine.
resolveSingle(CriteriaSet) - Method in class net.shibboleth.oidc.security.credential.impl.ReturnAllCollectionJOSEObjectCredentialResolver
resolveSingle(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver
resolveSingle(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureValidationParametersResolver
resolveSingle(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultDecryptionParametersResolver
resolveSingle(CriteriaSet) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver
resolveTokenCredentials(SignedJWT) - Method in class net.shibboleth.oidc.security.impl.BaseSignedJWTTrustEngine: Resolve any credentials indicated in the token, such as by inline JWK.
resolveTrustEngine(MessageContext) - Method in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler
responderIdLookupStrategy - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationAudienceClaimsValidator: Lookup function for the responder identifier.
ReturnAllCollectionJOSEObjectCredentialResolver - Class in net.shibboleth.oidc.security.credential.impl: An implementation of JOSEObjectCredentialResolver that uses a Collection as the underlying credential source.
ReturnAllCollectionJOSEObjectCredentialResolver(List<Credential>) - Constructor for class net.shibboleth.oidc.security.credential.impl.ReturnAllCollectionJOSEObjectCredentialResolver: Constructor.
ReturnAllCollectionJOSEObjectCredentialResolver(Credential) - Constructor for class net.shibboleth.oidc.security.credential.impl.ReturnAllCollectionJOSEObjectCredentialResolver: Constructor.
revocationCache - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierRevocationValidator: Message replay cache instance to use.

S

securityParametersContextLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler: Strategy used to look up the SecurityParametersContext.
securityParametersLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.EncryptJWTHandler: Strategy used to locate the SecurityParametersContext to use for signing.
securityParametersLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.SignJWTHandler: Strategy used to locate the SecurityParametersContext to use for signing.
securityParamsLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.DecryptJWE: Strategy used to locate the SecurityParametersContext.
setAccessTokenLookupStrategy(Function<ProfileRequestContext, AccessToken>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AccessTokenHashValidator: Set the lookup strategy used to locate the access_token.
setAdditionalAudiencesLookupStrategy(BiFunction<ProfileRequestContext, JWTClaimsSet, Set<String>>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AudienceClaimsValidator: Set the strategy used to lookup the list of additional audiences to find in the 'aud' claim.
setAlgorithm(String) - Method in class net.shibboleth.oidc.security.credential.impl.KeyManagmentAlgorithmCriterion: Set the algorithm criteria.
setAlgorithmRegistry(AlgorithmRegistry) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver: Set the AlgorithmRegistry instance used when resolving algorithm URIs.
setAlgorithmRegistry(AlgorithmRegistry) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver: Set the AlgorithmRegistry instance used when resolving algorithm URIs.
setAllowMissing(boolean) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AccessTokenHashValidator: Set whether a missing 'at_hash' claim is valid or not.
setAllowMissing(boolean) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AudienceClaimsValidator: Set whether a missing 'aud' claim is valid or not.
setAudienceLookupStrategy(BiFunction<ProfileRequestContext, JWTClaimsSet, String>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AudienceClaimsValidator: Set the audience lookup strategy.
setAuthnLifetime(Duration) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationTimeClaimsValidator: Sets the amount of time for which a token is valid from when the original authentication took place.
setAuthnLifetimeLookupStrategy(Function<ProfileRequestContext, Duration>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationTimeClaimsValidator: Set the lookup strategy used to locate the amount of time for which a token is valid from when the original authentication took place.
setAuthnRequestTimeLookupStrategy(Function<ProfileRequestContext, Instant>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationTimeClaimsValidator: Set the lookup strategy to find out when the authentication request (if any) was made.
setClaimName(String) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ExactMatchClaimsValidator: Set the name of the claim to match.
setClaimsToSignLookupStrategy(Function<MessageContext, JWTClaimsSet>) - Method in class net.shibboleth.oidc.security.impl.SignJWTHandler: Set the strategy used to locate the JWTClaimsSet to sign.
setClaimValidators(List<ClaimsValidator>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ChainingJWTClaimsValidator: Set the list of validators to use.
setClientInformationLookupStrategy(Function<MessageContext, OIDCClientInformation>) - Method in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler: Set the lookup strategy to locate the client information.
setClientInformationLookupStrategy(Function<MessageContext, OIDCClientInformation>) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler: Set the lookup strategy to locate the client information.
setClientInformationLookupStrategy(Function<ProfileRequestContext, OIDCClientInformation>) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration: Set the lookup strategy to locate the client information.
setClockSkew(Duration) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationTimeClaimsValidator: Set the clock skew.
setClockSkew(Duration) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ExpiryClaimsValidator: Set the clock skew.
setClockSkew(Duration) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.IssuedAtClaimsValidator: Set the clock skew.
setClockSkew(Duration) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierClaimsValidator: Set the clock skew.
setClockSkew(Duration) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.NotBeforeClaimsValidator: Set the clock skew.
setContentEncryptionKeyCredentialResolver(JOSEObjectCredentialResolver) - Method in class net.shibboleth.oidc.security.jose.impl.BasicDecryptionConfiguration: Set the KeyInfoCredentialResolver to use when processing the encrypted content.
setContentEncryptionKeyCredentialResolver(CredentialResolver) - Method in class net.shibboleth.oidc.security.jose.impl.BasicEncryptionConfiguration: Set the CredentialResolver to resolve the content encryption key.
setContext(String) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierRevocationValidator: Set the revocation cache context that partitions entries.
setDataEncryptionAlgorithmLookupStrategy(Function<OIDCClientInformation, String>) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration: Set the strategy used to look up the data encryption algorithm in the client metadata.
setDataEncryptionAlgorithms(List<String>) - Method in class net.shibboleth.oidc.security.jose.impl.BasicEncryptionConfiguration: Set the data encryption algorithms to use.
setDataEncryptionAlgorithmsLookupStrategy(BiFunction<CriteriaSet, Predicate<String>, List<String>>) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver: Set the data encryption algorithms lookup strategy to use.
setDefaultAlgorithmValue(String) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler: Set the default algorithm value used if lookup strategy returned null.
setEncAlgorithm(String) - Method in class net.shibboleth.oidc.security.credential.impl.DataEncryptionAlgorithmCriterion: Set the encryption algorithm criteria.
setEncryptionOptionalPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration: Sets the condition to apply to determine how to proceed if encryption parameter resolution fails.
setEndpointReplacement(String) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationAudienceClaimsValidator: Set the replacement substring for the endpoint containing any ones configured at AuthenticationAudienceClaimsValidator.endpointTargets.
setEndpointTargets(List<String>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationAudienceClaimsValidator: Set the substrings to replace from resolved endpoint with one configured at AuthenticationAudienceClaimsValidator.endpointReplacement.
setErrorEventId(String) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration: Sets the event identifier to publish if token parameters are not compliant with the configuration.
setErrorEventId(String) - Method in class net.shibboleth.oidc.security.impl.DecryptJWE: Sets the event identifier to publish in the case of decryption errors.
setExtraAudienceValidation(boolean) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AudienceClaimsValidator: Set whether to enable extra audience validation.
setJoseHeaderLookupStrategy(Function<ProfileRequestContext, JWSHeader>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AccessTokenHashValidator: Set the lookup strategy used to locate the JWS header of the id_token.
setJwtTokenLookupStrategy(Function<MessageContext, SignedJWT>) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler: Set the strategy used to look up a SignedJWT.
setJwtTokenLookupStrategy(Function<MessageContext, SignedJWT>) - Method in class net.shibboleth.oidc.security.impl.JWTMessageSignatureSecurityHandler: Set the strategy used to look up a signed JWT token.
setJwtTokenLookupStrategy(Function<ProfileRequestContext, EncryptedJWT>) - Method in class net.shibboleth.oidc.security.impl.DecryptJWE: Set the strategy used to look up a encrypted JWT token.
setJwtTokenLookupStrategy(Function<ProfileRequestContext, JWT>) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration: Set the strategy used to look up a JWT.
setJwtUpdateConsumer(BiConsumer<JWT, MessageContext>) - Method in class net.shibboleth.oidc.security.impl.EncryptJWTHandler: Set the consumer used to update the MessageContext with the supplied EncryptedJWT.
setJwtUpdateConsumer(BiConsumer<JWT, MessageContext>) - Method in class net.shibboleth.oidc.security.impl.SignJWTHandler: Set the consumer used to update the MessageContext with the supplied EncryptedJWT.
setJwtUpdateStrategy(BiConsumer<ProfileRequestContext, JWT>) - Method in class net.shibboleth.oidc.security.impl.DecryptJWE: Set the strategy used to update the profile request context with the JWT produced as a result of this decryption operation.
setKEKCredentialResolver(JOSEObjectCredentialResolver) - Method in class net.shibboleth.oidc.security.jose.impl.BasicDecryptionConfiguration: Set the CredentialResolver to use when processing the EncryptedKey (the Key Encryption Key or KEK).
setKEKCredentialResolver(CredentialResolver) - Method in class net.shibboleth.oidc.security.jose.impl.BasicEncryptionConfiguration: Set the CredentialResolver to resolve the key encryption or key wrapping key.
setKeyFetchInterval(Duration) - Method in class net.shibboleth.oidc.security.credential.impl.ClientInformationCredentialResolver: Set the remote key refresh interval.
setKeyFetchInterval(Duration) - Method in class net.shibboleth.oidc.security.credential.impl.ProviderMetadataCredentialResolver: Set the remote key refresh interval.
setKeyTransportEncryptionAlgorithmLookupStrategy(Function<OIDCClientInformation, String>) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTDecryptionConfiguration: Set the strategy used to look up the data encryption algorithm in the client metadata.
setKeyTransportEncryptionAlgorithms(List<String>) - Method in class net.shibboleth.oidc.security.jose.impl.BasicEncryptionConfiguration: Set the key transport encryption algorithms to use.
setKeyTransportEncryptionAlgorithmsLookupStrategy(BiFunction<CriteriaSet, Predicate<String>, List<String>>) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver: Set the key transport encryption algorithms lookup strategy to use.
setLogName(String) - Method in class net.shibboleth.oidc.security.impl.EncryptJWTHandler: Set the friendly name to log as the subject of encryption.
setLogName(String) - Method in class net.shibboleth.oidc.security.impl.SignJWTHandler: Set the friendly name to log as the subject of signing.
setMessageLifetime(Duration) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.IssuedAtClaimsValidator: Sets the amount of time for which a message is valid.
setPayloadToEncryptLookupStrategy(Function<MessageContext, Payload>) - Method in class net.shibboleth.oidc.security.impl.EncryptJWTHandler: Set the strategy used to locate the Payload to encrypt.
setProhibitedClaims(Collection<String>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ProhibitedClaimsValidator: Set the prohibited claims.
setProviderMetadataAlgorithmLookupStrategy(Function<OIDCProviderMetadata, List<String>>) - Method in class net.shibboleth.oidc.security.jose.impl.RelyingPartySigningParametersResolver: Set the strategy used to locate the supported signing algorithms from the OP's metadata for this resolver instance.
setProviderMetadataLookupStrategy(Function<MessageContext, OIDCProviderMetadata>) - Method in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler: Set the lookup strategy to locate the OpenID providers metadata.
setRelyingPartyContextLookupStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler: Set lookup strategy for relying party context.
setRemoteJwkSetCache(RemoteJwkSetCache) - Method in class net.shibboleth.oidc.security.credential.impl.ClientInformationCredentialResolver: Set the cache for remote JWK key sets.
setRemoteJwkSetCache(RemoteJwkSetCache) - Method in class net.shibboleth.oidc.security.credential.impl.ProviderMetadataCredentialResolver: Set the cache for remote JWK key sets.
setReplayCache(ReplayCache) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierClaimsValidator: Set the replay cache instance to use.
setRequested(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationTimeClaimsValidator: Deprecated, for removal: This API element is subject to removal in a future version.
use the activation condition in the base class instead.
setRequestedEssentialAcrsClaimLookupStrategy(BiFunction<ProfileRequestContext, JWTClaimsSet, List<String>>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ACRClaimsValidator: Set the strategy to locate the requested ACR claim values, if any.
setRequireAll(boolean) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ChainingJWTClaimsValidator: Set whether to require all validators to be successful.
setRequiredClaims(Collection<String>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.RequiredClaimsValidator: Set the required claims.
setRequiredRule(boolean) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.IssuedAtClaimsValidator: Sets whether this rule is required to be met.
setResponderIdLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationAudienceClaimsValidator: Set the lookup function for the responder identifier.
setRevocationCache(RevocationCache) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierRevocationValidator: Set the revocation cache instance to use.
setSecurityParametersContextLookupStrategy(Function<MessageContext, SecurityParametersContext>) - Method in class net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler: Set the strategy used to look up the SecurityParametersContext to set the parameters for.
setSecurityParametersContextLookupStrategy(Function<ProfileRequestContext, SecurityParametersContext>) - Method in class net.shibboleth.oidc.security.impl.DecryptJWE: Set the strategy used to locate the SecurityParametersContext associated with a given ProfileRequestContext.
setSecurityParametersLookupStrategy(Function<MessageContext, SecurityParametersContext>) - Method in class net.shibboleth.oidc.security.impl.EncryptJWTHandler: Set the strategy used to locate the SecurityParametersContext to use.
setSecurityParametersLookupStrategy(Function<MessageContext, SecurityParametersContext>) - Method in class net.shibboleth.oidc.security.impl.SignJWTHandler: Set the strategy used to locate the SecurityParametersContext to use.
setSignatureAlgorithmLookupStrategy(Function<OIDCClientInformation, String>) - Method in class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler: Set the strategy used to look up the signature algorithm in the client metadata.
setSignatureAlgorithms(List<String>) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningConfiguration: Set the signature algorithms to use when signing.
setSignatureTrustEngine(TrustEngine<SignedJWT>) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureValidationConfiguration: Set the signature trust engine to use.
setSigningCredentials(List<Credential>) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningConfiguration: Set the signing credentials to use when signing.
setTypeHeader(String) - Method in class net.shibboleth.oidc.security.impl.SignJWTHandler: Sets the value to be inserted as a "typ" header for the JWS.
setValidator(BiFunction<JWTClaimsSet, ProfileRequestContext, JWTValidationException>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.FunctionClaimsValidator: Set the function to run.
setValueToMatchLookupStrategy(BiFunction<ProfileRequestContext, JWTClaimsSet, String>) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ExactMatchClaimsValidator: Set the value to match lookup strategy.
signatureAlgorithmLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler: A lookup function for the signature algorithm in the client metadata.
signatureAlgorithmLookupStrategy - Variable in class net.shibboleth.oidc.security.impl.ClientInformationJWTTrustEngine: A lookup function for the signature algorithm in the client metadata.
signatureAlgorithmLookupStrategy - Variable in class net.shibboleth.oidc.security.jose.impl.ClientInformationSignatureSigningParametersResolver: A lookup function for the signature algorithm.
signatureAlgorithms - Variable in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningConfiguration: Signature method algorithm URIs.
signatureSigningParameters - Variable in class net.shibboleth.oidc.security.impl.SignJWTHandler: The signature signing parameters.
signatureTrustEngine - Variable in class net.shibboleth.oidc.security.jose.impl.BasicSignatureValidationConfiguration: The signature trust engine to use.
signedJwt - Variable in class net.shibboleth.oidc.security.impl.CheckClientJWTSignatureAlgorithmHandler: The extracted signed JWT that is to be validated.
signedJwt - Variable in class net.shibboleth.oidc.security.impl.JWTMessageSignatureSecurityHandler: The extracted signed JWT that is to be validated.
signingCredentials - Variable in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningConfiguration: Signing credentials.
SignJWTHandler - Class in net.shibboleth.oidc.security.impl: Message handler that signs a JWT and sets it back to the message context via an update consumer.
SignJWTHandler() - Constructor for class net.shibboleth.oidc.security.impl.SignJWTHandler: Constructor.
SUBJECT_CLAIM - net.shibboleth.oidc.security.jwt.claims.impl.JWTClaims: Subject Identifier.

T

test(ProfileRequestContext, JWTClaimsSet) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.AuthTimeRequestedActivationCondition
test(ProfileRequestContext, JWTClaimsSet) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ClaimExistsActivationCondition
test(ProfileRequestContext, JWTClaimsSet) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ForcedAuthenticationActivationCondition
test(ProfileRequestContext, JWTClaimsSet) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.NonceValidationActivationCondition
test(ProfileRequestContext, JWTClaimsSet) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.NumberOfClaimValuesActivationCondition
test(Credential) - Method in class net.shibboleth.oidc.security.credential.impl.EvaluableKeyIDCredentialCriterion
test(Credential) - Method in class net.shibboleth.oidc.security.credential.impl.EvaluableMACKeyLengthCredentialCriterion
toString() - Method in class net.shibboleth.oidc.security.credential.impl.DataEncryptionAlgorithmCriterion
toString() - Method in class net.shibboleth.oidc.security.credential.impl.EvaluableKeyIDCredentialCriterion
toString() - Method in class net.shibboleth.oidc.security.credential.impl.EvaluableMACKeyLengthCredentialCriterion
toString() - Method in class net.shibboleth.oidc.security.credential.impl.KeyManagmentAlgorithmCriterion
typeHeader - Variable in class net.shibboleth.oidc.security.impl.SignJWTHandler: "typ" header to insert while signing.

V

validate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.oidc.security.jwt.claims.impl.ChainingJWTClaimsValidator
validate(SignedJWT, CriteriaSet) - Method in class net.shibboleth.oidc.security.impl.BaseSignedJWTTrustEngine
validate(SignedJWT, TrustBasisType) - Method in class net.shibboleth.oidc.security.impl.BaseSignedJWTTrustEngine: Attempt to establish trust by resolving token verification credentials from the token itself.
validate(Key, Iterable<Key>) - Method in class net.shibboleth.oidc.security.impl.ExplicitKeyTrustEvaluator: Evaluate trust.
validate(Key, Key) - Method in class net.shibboleth.oidc.security.impl.ExplicitKeyTrustEvaluator: Evaluate trust.
validate(EncryptionParameters, boolean) - Method in class net.shibboleth.oidc.security.jose.impl.DefaultEncryptionParametersResolver: Validate that the EncryptionParameters instance has all the required properties populated.
validate(SignatureSigningParameters) - Method in class net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningParametersResolver: Validate that the SignatureSigningParameters instance has all the required properties populated.
validate(Credential, Iterable<Credential>) - Method in class net.shibboleth.oidc.security.impl.ExplicitKeyTrustEvaluator: Evaluate trust.
validate(Credential, Credential) - Method in class net.shibboleth.oidc.security.impl.ExplicitKeyTrustEvaluator: Evaluate trust.
validateAlgorithmURI(String) - Method in class net.shibboleth.oidc.security.impl.JWETokenDecrypter: Validate the supplied algorithm URI against the configured include and exclude lists.
validateContentEncryptionAlgorithm(EncryptedJWT) - Method in class net.shibboleth.oidc.security.impl.JWETokenDecrypter: Validates the 'enc' algorithm in the header against the include and exclude algorithm URI lists.
validateContentEncryptionAlgorithm(EncryptedJWT, JWKCredential) - Method in class net.shibboleth.oidc.security.impl.JWETokenDecrypter: Validates the 'enc' algorithm in the header matches the encryption algorithm specified for the credential, and validates against the include and exclude algorithm URI lists.
validateKeyManagmentAlgorithm(EncryptedJWT, JWKCredential) - Method in class net.shibboleth.oidc.security.impl.JWETokenDecrypter: If the credential contains algorithm 'alg' information, validate the 'alg' algorithm in the JWT JOSE header matches the algorithm specified for the credential.
validateSignature(List<JWKCredential>, SignedJWT, String) - Static method in class net.shibboleth.oidc.security.impl.JWTSignatureValidationUtil: Deprecated, for removal: This API element is subject to removal in a future version.
validateSignature(SecurityParametersContext, SignedJWT, String) - Static method in class net.shibboleth.oidc.security.impl.JWTSignatureValidationUtil: Deprecated, for removal: This API element is subject to removal in a future version.
validateSignatureEx(Collection<? extends Credential>, SignedJWT, String) - Static method in class net.shibboleth.oidc.security.impl.JWTSignatureValidationUtil: Validates the signature of the given JWS against the given list of credentials.
validationCredentials - Variable in class net.shibboleth.oidc.security.impl.OIDCSignatureValidationParameters: Deprecated.

The list of validation credentials.
validator - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.FunctionClaimsValidator: The function to run.
valueOf(String) - Static method in enum net.shibboleth.oidc.security.jwt.claims.impl.IDTokenClaims: Returns the enum constant of this type with the specified name.
valueOf(String) - Static method in enum net.shibboleth.oidc.security.jwt.claims.impl.JWTClaims: Returns the enum constant of this type with the specified name.
values() - Static method in enum net.shibboleth.oidc.security.jwt.claims.impl.IDTokenClaims: Returns an array containing the constants of this enum type, in the order they are declared.
values() - Static method in enum net.shibboleth.oidc.security.jwt.claims.impl.JWTClaims: Returns an array containing the constants of this enum type, in the order they are declared.
valueToMatchLookupStrategy - Variable in class net.shibboleth.oidc.security.jwt.claims.impl.ExactMatchClaimsValidator: Strategy to retrieve the value to match to an ID Token claim.
verifySignature(SignedJWT, Credential) - Method in class net.shibboleth.oidc.security.impl.BaseSignedJWTTrustEngine: Attempt to verify a signature using the key from the supplied credential.

A B C D E F G H I J K L M N O P R S T V
All Classes All Packages