Package net.shibboleth.oidc.security.credential.impl

Class ClientSecretCriterionCredentialResolver

java.lang.Object

org.opensaml.security.credential.impl.AbstractCredentialResolver

org.opensaml.security.credential.impl.AbstractCriteriaFilteringCredentialResolver

net.shibboleth.oidc.security.credential.impl.BasicJOSEObjectCredentialResolver

net.shibboleth.oidc.security.credential.impl.ClientSecretCriterionCredentialResolver

All Implemented Interfaces:

JOSEObjectCredentialResolver, Resolver<Credential,CriteriaSet>, CredentialResolver

public class ClientSecretCriterionCredentialResolver
extends BasicJOSEObjectCredentialResolver

Extracts a credential held inside the ClientSecretCredentialCriterion from the given criteria set. Supports credential filtering via evaluable criterion.

A different key credential is derived for different usage types. MAC ('signing') keys are generated directly off the UTF-8 octets of the client_secret. Encryption/Decryption keys are generated specifically for the key management mode and encryption algorithm pulled out of the criteria set —and as such, if these criteria do not exist, resolution for encryption keys will fail.

Field Summary

Fields

Modifier and Type	Field	Description
private org.slf4j.Logger	log	Class logger.

Constructor Summary

Constructors

Constructor	Description
ClientSecretCriterionCredentialResolver()

Method Summary

Modifier and Type	Method	Description
protected Iterable<Credential>	resolveFromSource(CriteriaSet criteriaSet)

Methods inherited from class net.shibboleth.oidc.security.credential.impl.BasicJOSEObjectCredentialResolver

buildJWKCredential, deriveClientSecretCredential, extractKeyIdFromCriteria, populateCredentialsFromKeySet, postProcess, processJWEHeader, processJWSHeader

Methods inherited from class org.opensaml.security.credential.impl.AbstractCriteriaFilteringCredentialResolver

isSatisfyAllPredicates, resolve, setSatisfyAllPredicates

Methods inherited from class org.opensaml.security.credential.impl.AbstractCredentialResolver

resolveSingle

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface net.shibboleth.utilities.java.support.resolver.Resolver

resolve, resolveSingle

Field Detail

log

@Nonnull
private final org.slf4j.Logger log

Class logger.

Constructor Detail

ClientSecretCriterionCredentialResolver

public ClientSecretCriterionCredentialResolver()

Method Detail

resolveFromSource

@Nonnull
protected Iterable<Credential> resolveFromSource(@Nonnull
                                                 CriteriaSet criteriaSet)
                                          throws ResolverException

Overrides:

resolveFromSource in class BasicJOSEObjectCredentialResolver

Throws:

ResolverException