Package net.shibboleth.oidc.security.jose.impl

Class ClientInformationKeyTransportEncryptionAlgorithmsLookupStrategy

java.lang.Object

net.shibboleth.oidc.security.impl.AbstractEncryptionAlgorithmsLookupStrategy

net.shibboleth.oidc.security.jose.impl.DefaultKeyTransportEncryptionAlgorithmsLookupStrategy

net.shibboleth.oidc.security.jose.impl.ClientInformationKeyTransportEncryptionAlgorithmsLookupStrategy

All Implemented Interfaces:

BiFunction<CriteriaSet,Predicate<String>,List<String>>

public class ClientInformationKeyTransportEncryptionAlgorithmsLookupStrategy
extends DefaultKeyTransportEncryptionAlgorithmsLookupStrategy

A lookup strategy that finds key transport algorithms from local configuration that are compatible with those configured to RP.

The set of supported and configured key transport ('alg') algorithms are derived from the intersection of those supported by local configuration and the one configured for RP.

Field Summary

Fields

Modifier and Type	Field	Description
private Function<com.nimbusds.openid.connect.sdk.rp.OIDCClientInformation,String>	clientKeyTransportAlgorithmLookupStrategy	A strategy to locate the algorithm ('alg') appropriate for the JWT to be encrypted.
private org.slf4j.Logger	log	Logger.

Constructor Summary

Constructors

Constructor	Description
ClientInformationKeyTransportEncryptionAlgorithmsLookupStrategy(Function<com.nimbusds.openid.connect.sdk.rp.OIDCClientInformation,String> strategy)	Constructor.
ClientInformationKeyTransportEncryptionAlgorithmsLookupStrategy(Function<com.nimbusds.openid.connect.sdk.rp.OIDCClientInformation,String> strategy, AlgorithmRegistry registry)	Constructor.

Method Summary

Modifier and Type	Method	Description
List<String>	apply(CriteriaSet criteria, Predicate<String> includeExcludePredicate)

Methods inherited from class net.shibboleth.oidc.security.jose.impl.DefaultKeyTransportEncryptionAlgorithmsLookupStrategy

getKeyTransportAlgorithmsFromConfiguration

Methods inherited from class net.shibboleth.oidc.security.impl.AbstractEncryptionAlgorithmsLookupStrategy

findAlgorithmIntersection, getAlgorithmRegistry, getAlgorithmRuntimeSupportedPredicate

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface java.util.function.BiFunction

andThen

Field Detail

log

@Nonnull
private final org.slf4j.Logger log

Logger.

clientKeyTransportAlgorithmLookupStrategy

@Nonnull
private final Function<com.nimbusds.openid.connect.sdk.rp.OIDCClientInformation,String> clientKeyTransportAlgorithmLookupStrategy

A strategy to locate the algorithm ('alg') appropriate for the JWT to be encrypted. Can return null if the metadata does not describe its supported algorithms (which is optional).

Constructor Detail

ClientInformationKeyTransportEncryptionAlgorithmsLookupStrategy

public ClientInformationKeyTransportEncryptionAlgorithmsLookupStrategy(@Nonnull @ParameterName(name="clientKeyTransportAlgorithmsLookupStrategy")
                                                                       Function<com.nimbusds.openid.connect.sdk.rp.OIDCClientInformation,String> strategy,
                                                                       @Nullable @ParameterName(name="AlgorithmRegistry")
                                                                       AlgorithmRegistry registry)

Constructor.

Parameters:

strategy - the strategy used to locate the algorithm ('alg') from the client metadata appropriate for the JWT to be encrypted.

registry - the algorithm registry to used when resolving algorithm URIs. Can be null.

ClientInformationKeyTransportEncryptionAlgorithmsLookupStrategy

public ClientInformationKeyTransportEncryptionAlgorithmsLookupStrategy(@Nonnull @ParameterName(name="clientKeyTransportAlgorithmLookupStrategy")
                                                                       Function<com.nimbusds.openid.connect.sdk.rp.OIDCClientInformation,String> strategy)

Constructor.

Parameters:

strategy - the strategy used to locate the algorithm ('alg') from the client metadata appropriate for the JWT to be encrypted.

Method Detail

apply

@Nonnull
public List<String> apply(CriteriaSet criteria,
                          Predicate<String> includeExcludePredicate)

Specified by:

apply in interface BiFunction<CriteriaSet,Predicate<String>,List<String>>

Overrides:

apply in class DefaultKeyTransportEncryptionAlgorithmsLookupStrategy