A B C D E F G H I J K L M N O P R S T U V
All Classes All Packages

A

AbstractAdminApiProfileAction - Class in net.shibboleth.idp.plugin.oidc.op.admin.impl

Base class for admin flow actions producing JSON responses.

AbstractAdminApiProfileAction() - Constructor for class net.shibboleth.idp.plugin.oidc.op.admin.impl.AbstractAdminApiProfileAction

AbstractBuildErrorResponseFromEvent<T extends com.nimbusds.oauth2.sdk.ErrorResponse> - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

This action is extended by error response actions.

AbstractBuildErrorResponseFromEvent() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractBuildErrorResponseFromEvent

Constructor.

AbstractEncryptTokenAction - Class in net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl

Action that encrypts a source object into an EncryptedJWT.

AbstractEncryptTokenAction() - Constructor for class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.AbstractEncryptTokenAction

Constructor.

AbstractInitializeOutboundResponseMessageContext - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Action that adds an outbound MessageContext and related OIDC contexts to the ProfileRequestContext.

AbstractInitializeOutboundResponseMessageContext() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractInitializeOutboundResponseMessageContext

Constructor.

AbstractOIDCAuthenticationRequestAction - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Abstract class for actions performing actions on AuthenticationRequest found via InOutOperationContext.getInboundMessageContext() and MessageContext.getMessage().

AbstractOIDCAuthenticationRequestAction() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCAuthenticationRequestAction

AbstractOIDCAuthenticationResponseAction - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Abstract class for actions performing actions on OIDCAuthenticationResponseContext located under InOutOperationContext.getOutboundMessageContext().

AbstractOIDCAuthenticationResponseAction() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCAuthenticationResponseAction

AbstractOIDCClientMetadataPopulationAction - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Abstract action for populating metadata from the ClientRegistrationRequest message to the response message.

AbstractOIDCClientMetadataPopulationAction() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCClientMetadataPopulationAction

Constructor.

AbstractOIDCRequestAction<T> - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Abstract class for actions performing actions on a oidc request found via InOutOperationContext.getInboundMessageContext() and MessageContext.getMessage().

AbstractOIDCRequestAction() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCRequestAction

AbstractOIDCResponseAction - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Abstract class for actions performing actions on OIDCAuthenticationResponseContext located under InOutOperationContext.getOutboundMessageContext().

AbstractOIDCResponseAction() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCResponseAction

AbstractOIDCSigningResponseAction - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Abstract action to be extended by oidc response actions requiring signing parameters.

AbstractOIDCSigningResponseAction() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCSigningResponseAction

Constructor.

AbstractOIDCTokenRequestAction - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Abstract class for actions performing actions on TokenRequest found via InOutOperationContext.getInboundMessageContext() and MessageContext.getMessage().

AbstractOIDCTokenRequestAction() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCTokenRequestAction

AbstractOIDCTokenResponseAction - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Abstract class for actions performing actions on OIDCAuthenticationResponseContext located under InOutOperationContext.getOutboundMessageContext().

AbstractOIDCTokenResponseAction() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCTokenResponseAction

AbstractOIDCUserInfoRequestAction - Class in net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl

Abstract class for actions performing actions on UserInfoRequest found via InOutOperationContext.getInboundMessageContext() and MessageContext.getMessage().

AbstractOIDCUserInfoRequestAction() - Constructor for class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.AbstractOIDCUserInfoRequestAction

AbstractOIDCUserInfoResponseAction - Class in net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl

Abstract class for actions performing actions on OIDCMetadataContext located under InOutOperationContext.getInboundMessageContext().

AbstractOIDCUserInfoResponseAction() - Constructor for class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.AbstractOIDCUserInfoResponseAction

AbstractOIDCUserInfoValidationResponseAction - Class in net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl

Abstract class for actions performing actions on OIDCAuthenticationResponseContext located under InOutOperationContext.getOutboundMessageContext().

AbstractOIDCUserInfoValidationResponseAction() - Constructor for class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.AbstractOIDCUserInfoValidationResponseAction

AbstractProcessTokenAction<T> - Class in net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl

Action that processes a token by validating it and populating the resulting JWTClaimsSet into an OAuth2TokenMgmtResponseContext placed beneath the outbound MessageContext.

AbstractProcessTokenAction() - Constructor for class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.AbstractProcessTokenAction

Constructor.

AbstractSignJWTAction - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Abstract action for signing JWT.

AbstractSignJWTAction() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractSignJWTAction

accessControlService - Variable in class net.shibboleth.idp.plugin.oidc.op.admin.impl.IssueRegistrationAccessToken

Access control service.

accessToken - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.FormOutboundTokenResponseMessage

access token for response.

accessToken - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRegistrationAccessToken

The registration access token to be validated.

accessTokenContextCreationStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.BuildAccessToken

Strategy used to create the subcontext to hold the token.

accessTokenContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.EncryptAccessToken

Strategy used to locate the subcontext with the token.

accessTokenContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.SetAccessTokenToResponseContext

Strategy used to locate the subcontext with the token.

accessTokenContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.SignAccessToken

Strategy used to locate the subcontext with the token.

accessTokenCtx - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.BuildAccessToken

Access token context.

accessTokenLifetimeLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.BuildAccessToken

Strategy used to obtain the access token lifetime.

accessTokenTypeLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.BuildAccessToken

Strategy used to obtain the access token type to issue.

acrAlwaysEssentialLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ProcessRequestedAuthnContext

Strategy used to obtain whether all arc claims requests should be treated as Essential.

acrClaim - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ProcessRequestedAuthnContext

requested acr claim.

acrLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ProcessRequestedAuthnContext

Strategy used to obtain the requested acr values.

acrValues - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ProcessRequestedAuthnContext

acr values.

AddAccessTokenHashToIDToken - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Action that adds access token hash claim to a IDTokenClaimsSet.

AddAccessTokenHashToIDToken() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddAccessTokenHashToIDToken

AddAcrToIDToken - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Action that adds acr claim to a IDTokenClaimsSet.

AddAcrToIDToken() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddAcrToIDToken

AddApplicationTypeToClientMetadata - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Adds the application_type to the OIDCClientRegistrationResponseContext.

AddApplicationTypeToClientMetadata() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddApplicationTypeToClientMetadata

AddAttributesToClaimsSet - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Action that adds claims to a ClaimsSet.

AddAttributesToClaimsSet() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddAttributesToClaimsSet

Constructor.

addAuthenticationClaims(ProfileRequestContext, RegistrationClaimsSet.Builder) - Method in class net.shibboleth.idp.plugin.oidc.op.admin.impl.IssueRegistrationAccessToken

Decorate the token with authentication-related claims.

AddAuthorizationCodeHashToIDToken - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Action that adds authorization code hash claim to a IDTokenClaimsSet.

AddAuthorizationCodeHashToIDToken() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddAuthorizationCodeHashToIDToken

AddAuthTimeToIDToken - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Action that adds auth_time claim to a IDTokenClaimsSet.

AddAuthTimeToIDToken() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddAuthTimeToIDToken

AddClientNameToClientMetadata - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Adds client name from the input metadata to the output OIDCClientMetadata.

AddClientNameToClientMetadata() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddClientNameToClientMetadata

AddContactsToClientMetadata - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Adds the contents of the contacts attribute from the input metadata to the output OIDCClientMetadata.

AddContactsToClientMetadata() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddContactsToClientMetadata

addGrantTypeIfEnabled(Set<GrantType>, GrantType, Predicate<ProfileRequestContext>, ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddGrantTypeToClientMetadata

Adds a given grant type to the given set of grant types, if the given predicate is true.

AddGrantTypeToClientMetadata - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

An action that adds the grant_type to the client metadata.

AddGrantTypeToClientMetadata() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddGrantTypeToClientMetadata

Constructor.

AddIDTokenShell - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Action that creates a IDTokenClaimsSet object shell, and sets it to work context OIDCAuthenticationResponseContext located under InOutOperationContext.getOutboundMessageContext().

AddIDTokenShell() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddIDTokenShell

Constructor.

AddJwksToClientMetadata - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

An action that adds the jwks or jwks_uri to the client metadata, if one of those were defined in the request.

AddJwksToClientMetadata() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddJwksToClientMetadata

Constructor.

AddLogoUrisToClientMetadata - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

This action adds the logo_uri(s) to the client metadata.

AddLogoUrisToClientMetadata() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddLogoUrisToClientMetadata

AddMetadataStatementToClientMetadata - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

An action that adds the trusted metadata_statement chain (containing OP's signed key) to the metadata_statement claim in the response metadata.

AddMetadataStatementToClientMetadata() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddMetadataStatementToClientMetadata

Constructor.

AddNonceToIDToken - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Action that adds nonce claim to a IDTokenClaimsSet.

AddNonceToIDToken() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddNonceToIDToken

Constructor.

AddPolicyUrisToClientMetadata - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

This action adds the policy_uri(s) to the client metadata.

AddPolicyUrisToClientMetadata() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddPolicyUrisToClientMetadata

AddRedirectUrisToClientMetadata - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Adds the (mandatory) redirect_uris to the output OIDCClientMetadata.

AddRedirectUrisToClientMetadata() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddRedirectUrisToClientMetadata

AddRemainingClaimsToClientMetadata - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Adds the remaining claims from the input metadata to the output OIDCClientMetadata, which haven't been added there already, but which are recognized in the metadata policy.

AddRemainingClaimsToClientMetadata() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddRemainingClaimsToClientMetadata

Constructor.

AddRequestObjectSecurityConfigurationToClientMetadata - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Verifies and adds the request object configuration details (request_object_signing_alg, request_object_encryption_alg and request_object_encryption_enc) to the client metadata.

AddRequestObjectSecurityConfigurationToClientMetadata() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddRequestObjectSecurityConfigurationToClientMetadata

Constructor.

addResponseTypeIfEnabled(Set<ResponseType>, ResponseType, Predicate<ProfileRequestContext>, ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddResponseTypesToClientMetadata

Adds a given response type to the given set of response types, if the given predicate is true.

AddResponseTypesToClientMetadata - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

An action that adds response_types to the OIDC client metadata.

AddResponseTypesToClientMetadata() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddResponseTypesToClientMetadata

Constructor.

AddScopeToClientMetadata - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Adds the Scope from the input metadata to the output OIDCClientMetadata.

AddScopeToClientMetadata() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddScopeToClientMetadata

Constructor.

AddSecurityConfigurationToClientMetadata - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Verifies and adds the security configuration details (*_response_alg and *_response_enc) to the client metadata.

AddSecurityConfigurationToClientMetadata() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddSecurityConfigurationToClientMetadata

Constructor.

AddSubjectTypeToClientMetadata - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

An action that adds the subject_type to the client metadata.

AddSubjectTypeToClientMetadata() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddSubjectTypeToClientMetadata

Constructor.

addToIDTokenByDefault - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddAttributesToClaimsSet

Whether we can add claims to IDToken by default i.e.

AddTokenDeliveryAttributesToClaimsSet - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Action that adds claims to a ClaimsSet.

AddTokenDeliveryAttributesToClaimsSet() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddTokenDeliveryAttributesToClaimsSet

Constructor.

AddTokenEndpointAuthMethodsToClientMetadata - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

An action that adds the token_endpoint_auth_method to the client metadata.

AddTokenEndpointAuthMethodsToClientMetadata() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddTokenEndpointAuthMethodsToClientMetadata

Constructor.

AddTosUrisToClientMetadata - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

This action adds the tos_uri(s) to the client metadata.

AddTosUrisToClientMetadata() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddTosUrisToClientMetadata

AddUserInfoShell - Class in net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl

Action that creates a UserInfo object shell, and sets it to work context OIDCAuthenticationResponseContext located under InOutOperationContext.getOutboundMessageContext().

AddUserInfoShell() - Constructor for class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.AddUserInfoShell

Constructor.

AlgorithmInfoMetadataValueResolver - Class in net.shibboleth.idp.plugin.oidc.op.metadata.impl

A MetadataValueResolver for resolving signing/encryption algorithm information from the current SecurityConfiguration.

AlgorithmInfoMetadataValueResolver() - Constructor for class net.shibboleth.idp.plugin.oidc.op.metadata.impl.AlgorithmInfoMetadataValueResolver

Constructor.

allowedAudienceLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.ValidateAudience

Strategy used to obtain the audience allowed for the client.

allowedScopeLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateScope

Strategy used to obtain the scope allowed for the client.

allowPKCEPlainCondition - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateCodeChallenge

Strategy used to determine whether to allow plaintext PKCE.

allowPKCEPlainCondition - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidatePKCE

Strategy used to determine whether to allow plaintext PKCE.

allowSignatureNone - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddRequestObjectSecurityConfigurationToClientMetadata

Whether signature algorithm none is allowed regardless of what list of Signature Validation Algs has.

alwaysIncludedAttributes - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddAttributesToClaimsSet

Attributes to include in ID token no matter what.

alwaysIncludedAttributes - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetTokenDeliveryAttributesToResponseContext

Attributes to include in ID token no matter what.

alwaysIncludedAttributesLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddAttributesToClaimsSet

Strategy used to obtain the set of attribute IDs to include in the ID token in all cases.

alwaysIncludedAttributesLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetTokenDeliveryAttributesToResponseContext

Strategy used to obtain the set of attribute IDs to include in the ID token in all cases.

appendSeparator(StringBuilder) - Method in class net.shibboleth.idp.plugin.oidc.op.cli.IssueRegistrationAccessTokenArguments

Append the proper parameter separator to the builder.

apply(JWTClaimsSet) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.logic.DefaultRootTokenIdentifierLookupStrategy

apply(JWTClaimsSet) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.logic.DefaultTokenRevocationLifetimeLookupStrategy

apply(Map<String, MetadataPolicy>, Map<String, MetadataPolicy>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.logic.DefaultMetadataPolicyMergingStrategy

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.audit.impl.AuthenticationContextReferenceAuditExtractor

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.audit.impl.ClaimsAuditExtractor

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.audit.impl.ClientIdRegistrationAuditExtractor

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.audit.impl.ForceAuthnAuditExtractor

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.audit.impl.IdTokenClaimsAuditExtractor

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.audit.impl.InboundMessageClassLookupFunction

The simple name of the message class in the inbound message context.

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.audit.impl.IsPassiveAuditExtractor

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.audit.impl.OutboundMessageClassLookupFunction

The simple name of the message class in the outbound message context.

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.audit.impl.RevokedTokenAuditExtractor

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.audit.impl.SubjectTypeAuditExtractor

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.audit.impl.SubjectValueAuditExtractor

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.encoding.impl.OIDCResponseEncoderFactory

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.logic.AttributeResolutionSubjectLookupFunction

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.logic.DefaultChainRevocationLifetimeLookupStrategy

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.logic.DefaultMetadataPolicyCriteriaLookupFunction

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.logic.DefaultSubjectTypeStrategy

apply(ProfileRequestContext, JWTClaimsSet) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.logic.ClientIDFromOIDCMetadataContextLookupFunction

Deprecated.

apply(ApplicationContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.spring.relyingparty.metadata.impl.ProviderMetadataResolverServiceStrategy

ArrayMetadataValueResolver - Class in net.shibboleth.idp.plugin.oidc.op.metadata.impl

An implementation to MetadataValueResolver that contains an array of other MetadataValueResolvers.

ArrayMetadataValueResolver() - Constructor for class net.shibboleth.idp.plugin.oidc.op.metadata.impl.ArrayMetadataValueResolver

Constructor.

AttributeConsentEnabledInTokenClaimsSetPredicate - Class in net.shibboleth.idp.plugin.oidc.op.profile.logic

A predicate implementation that checks if attribute consent flag is enabled.

AttributeConsentEnabledInTokenClaimsSetPredicate() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.logic.AttributeConsentEnabledInTokenClaimsSetPredicate

attributeContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddAttributesToClaimsSet

Strategy used to locate the AttributeContext associated with a given ProfileRequestContext.

attributeContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetConsentToResponseContext

Strategy used to locate the AttributeContext associated with a given ProfileRequestContext.

attributeContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetTokenDeliveryAttributesToResponseContext

Strategy used to locate the AttributeContext associated with a given ProfileRequestContext.

attributeContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.logic.AttributeResolutionSubjectLookupFunction

Strategy used to locate the AttributeContext associated with a given ProfileRequestContext.

attributeCtx - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddAttributesToClaimsSet

AttributeContext to use.

attributeCtx - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetConsentToResponseContext

AttributeContext to use.

attributeCtx - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetTokenDeliveryAttributesToResponseContext

AttributeContext to use.

AttributeFilterNamespaceHandler - Class in net.shibboleth.idp.plugin.oidc.op.attribute.filter.spring.impl

Namespace handler for the oidc specific attribute filter engine functions.

AttributeFilterNamespaceHandler() - Constructor for class net.shibboleth.idp.plugin.oidc.op.attribute.filter.spring.impl.AttributeFilterNamespaceHandler

AttributeInOIDCRequestedClaimsMatcher - Class in net.shibboleth.idp.plugin.oidc.op.attribute.filter.matcher.impl

Class for matching attribute to requested claims.

AttributeInOIDCRequestedClaimsMatcher() - Constructor for class net.shibboleth.idp.plugin.oidc.op.attribute.filter.matcher.impl.AttributeInOIDCRequestedClaimsMatcher

AttributeInOIDCRequestedClaimsRuleParser - Class in net.shibboleth.idp.plugin.oidc.op.attribute.filter.spring.matcher.impl

Bean definition parser for AttributeInOIDCRequestedClaimsMatcher.

AttributeInOIDCRequestedClaimsRuleParser() - Constructor for class net.shibboleth.idp.plugin.oidc.op.attribute.filter.spring.matcher.impl.AttributeInOIDCRequestedClaimsRuleParser

AttributeOIDCScopePolicyRule - Class in net.shibboleth.idp.plugin.oidc.op.attribute.filter.policyrule.impl

Compare the scopes of oidc authentication request with the provided value.

AttributeOIDCScopePolicyRule() - Constructor for class net.shibboleth.idp.plugin.oidc.op.attribute.filter.policyrule.impl.AttributeOIDCScopePolicyRule

AttributeOIDCScopeRuleParser - Class in net.shibboleth.idp.plugin.oidc.op.attribute.filter.spring.policyrule.impl

Bean definition parser for AttributeOIDCScopePolicyRule.

AttributeOIDCScopeRuleParser() - Constructor for class net.shibboleth.idp.plugin.oidc.op.attribute.filter.spring.policyrule.impl.AttributeOIDCScopeRuleParser

AttributeResolutionSubjectLookupFunction - Class in net.shibboleth.idp.plugin.oidc.op.profile.logic

A function that returns subject identifier from filtered claims.

AttributeResolutionSubjectLookupFunction() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.logic.AttributeResolutionSubjectLookupFunction

Constructor.

audienceRestrictionsLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddIDTokenShell

Strategy used to obtain the audiences to add.

audiences - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddIDTokenShell

Audiences to add.

authCtx - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthenticationContextClassReferenceToResponseContext

Authentication context.

authenticationContext - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ProcessRequestedAuthnContext

Authentication context.

AuthenticationContextReferenceAuditExtractor - Class in net.shibboleth.idp.plugin.oidc.op.audit.impl

Looks up the 'acr' value from the OIDC authentication response context.

AuthenticationContextReferenceAuditExtractor() - Constructor for class net.shibboleth.idp.plugin.oidc.op.audit.impl.AuthenticationContextReferenceAuditExtractor

Constructor.

AuthenticationContextReferenceAuditExtractor(Function<ProfileRequestContext, OIDCAuthenticationResponseContext>) - Constructor for class net.shibboleth.idp.plugin.oidc.op.audit.impl.AuthenticationContextReferenceAuditExtractor

Constructor.

authenticationRequest - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.BuildAccessToken

Authentication request in the case of such.

AuthenticationRequestClaimsAuditExtractor - Class in net.shibboleth.idp.plugin.oidc.op.audit.impl

A function that resolves a claim value from the authentication request.

AuthenticationRequestClaimsAuditExtractor(String) - Constructor for class net.shibboleth.idp.plugin.oidc.op.audit.impl.AuthenticationRequestClaimsAuditExtractor

Constructor.

authorizationCodeFlowPredicate - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddGrantTypeToClientMetadata

Predicate used to indicate whether authorization code flow is enabled.

authorizationCodeFlowPredicate - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddResponseTypesToClientMetadata

Predicate used to indicate whether authorization code flow is enabled.

authTimeLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthenticationTimeToResponseContext

Strategy used to obtain the requested claims of request.

authzCodeLifetime - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthorizationCodeToResponseContext

Authorization code lifetime.

authzCodeLifetimeLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthorizationCodeToResponseContext

Strategy used to obtain the authz code lifetime.

B

BaseOAuth2RequestDecoder<T extends com.nimbusds.oauth2.sdk.Request> - Class in net.shibboleth.idp.plugin.oidc.op.oauth2.decoding.impl

Base decoder for Nimbus OAuth2 request messages.

BaseOAuth2RequestDecoder() - Constructor for class net.shibboleth.idp.plugin.oidc.op.oauth2.decoding.impl.BaseOAuth2RequestDecoder

BasicJWKCredentialFactoryBean - Class in net.shibboleth.idp.plugin.oidc.op.profile.spring.factory

factory bean for Basic JSON Web Keys (JWK).

BasicJWKCredentialFactoryBean() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.spring.factory.BasicJWKCredentialFactoryBean

BuildAccessToken - Class in net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl

Action that creates an Access Token, and stores it to an AccessTokenContext.

BuildAccessToken() - Constructor for class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.BuildAccessToken

Constructor.

BuildAuthenticationErrorResponseFromEvent - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

This action reads an event from the configured EventContext lookup strategy, constructs an OIDC authentication error response message and attaches it as the outbound message.

BuildAuthenticationErrorResponseFromEvent() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.BuildAuthenticationErrorResponseFromEvent

Constructor.

BuildClientInformation - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

An action that uses the information from OIDCClientRegistrationResponseContext attached to the message context for creating a new ClientInformationResponse.

BuildClientInformation() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.BuildClientInformation

Constructor.

buildCriteriaSet(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCEncryptionParameters

Build the criteria used as input to the EncryptionParametersResolver.

buildErrorResponse(ErrorObject, ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.BuildIntrospectionErrorResponseFromEvent

buildErrorResponse(ErrorObject, ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.BuildRevokeTokenErrorResponseFromEvent

buildErrorResponse(ErrorObject, ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractBuildErrorResponseFromEvent

Method implemented by the extending class to create ErrorResponse.

buildErrorResponse(ErrorObject, ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.BuildAuthenticationErrorResponseFromEvent

Method implemented by the extending class to create ErrorResponse.

buildErrorResponse(ErrorObject, ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.BuildJSONErrorResponseFromEvent

Method implemented by the extending class to create ErrorResponse.

buildErrorResponse(ErrorObject, ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.BuildRegistrationErrorResponseFromEvent

Method implemented by the extending class to create ErrorResponse.

buildErrorResponse(ErrorObject, ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.BuildTokenErrorResponseFromEvent

Method implemented by the extending class to create ErrorResponse.

buildErrorResponse(ErrorObject, ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.BuildUserInfoErrorResponseFromEvent

Method implemented by the extending class to create ErrorResponse.

buildHttpContext(HttpUriRequest) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRequestObjectToResponseContext

Build the HttpClientContext instance to be used by the HttpClient.

BuildIntrospectionErrorResponseFromEvent - Class in net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl

This action reads an event from the configured EventContext lookup strategy, constructs an OAuth2 Token Introspection error response message and attaches it as the outbound message.

BuildIntrospectionErrorResponseFromEvent() - Constructor for class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.BuildIntrospectionErrorResponseFromEvent

BuildJSONErrorResponseFromEvent - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

This action reads an event from the configured EventContext lookup strategy, constructs a json error response message and attaches it as the outbound message.

BuildJSONErrorResponseFromEvent() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.BuildJSONErrorResponseFromEvent

BuildRegistrationErrorResponseFromEvent - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

This action reads an event from the configured EventContext lookup strategy, constructs an OIDC client registration error response message and attaches it as the outbound message.

BuildRegistrationErrorResponseFromEvent() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.BuildRegistrationErrorResponseFromEvent

BuildRevokeTokenErrorResponseFromEvent - Class in net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl

This action reads an event from the configured EventContext lookup strategy, constructs an OAuth2 Token Revocation error response message and attaches it as the outbound message.

BuildRevokeTokenErrorResponseFromEvent() - Constructor for class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.BuildRevokeTokenErrorResponseFromEvent

BuildTokenErrorResponseFromEvent - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

This action reads an event from the configured EventContext lookup strategy, constructs an OIDC token error response message and attaches it as the outbound message.

BuildTokenErrorResponseFromEvent() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.BuildTokenErrorResponseFromEvent

BuildUserInfoErrorResponseFromEvent - Class in net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl

This action reads an event from the configured EventContext lookup strategy, constructs an OIDC user info error response message and attaches it as the outbound message.

BuildUserInfoErrorResponseFromEvent() - Constructor for class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.BuildUserInfoErrorResponseFromEvent

C

chainRevocationLifetimeLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.RevokeToken

Lookup function to supply chain revocation lifetime.

chainRevocationLifetimeLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateGrant

Lookup function to supply chain revocation lifetime.

checkAccess(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.admin.impl.IssueRegistrationAccessToken

Check access policies.

checkForbiddenHostname(Set<URI>, String) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.CheckRedirectURIs

Checks whether a given hostname is found from the given set of URIs.

checkForbiddenScheme(Set<URI>, String) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.CheckRedirectURIs

Checks whether a given scheme is found from the given set of URIs.

CheckRedirectURIs - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

The action that verifies the redirect_uris from the request.

CheckRedirectURIs() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.CheckRedirectURIs

Constructor.

checkScheme(Set<URI>, String) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.CheckRedirectURIs

Checks whether a given scheme is used by every item in the given set of URIs.

ClaimsAuditExtractor - Class in net.shibboleth.idp.plugin.oidc.op.audit.impl

Function that returns the released claims for the endpoint.

ClaimsAuditExtractor() - Constructor for class net.shibboleth.idp.plugin.oidc.op.audit.impl.ClaimsAuditExtractor

Constructor.

ClaimsAuditExtractor(Function<ProfileRequestContext, ClaimsSet>, Function<ProfileRequestContext, ClaimsSet>) - Constructor for class net.shibboleth.idp.plugin.oidc.op.audit.impl.ClaimsAuditExtractor

Constructor.

claimsSet - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.RevokeToken

The claims set to operate on.

claimsSet - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.SignAccessToken

Source of claims set to sign.

claimsSet - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddAttributesToClaimsSet

Claims Set to use.

claimsSet - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddTokenDeliveryAttributesToClaimsSet

Claims Set to use.

claimsValidator - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.AbstractProcessTokenAction

The claims validator to use.

claimsValidator - Variable in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.ValidateAccessToken

The claims validator to use.

claimsValidatorLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.authn.impl.JWTCredentialValidator

Strategy used to obtain ClaimsValidator.

claimsValidatorLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.AbstractProcessTokenAction

Lookup strategy for claims validator.

claimsValidatorLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.ValidateAccessToken

Lookup strategy for claims validator.

classRefLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthenticationContextClassReferenceToResponseContext

Strategy used to determine the AuthnContextClassRef.

CLIENT_ID - Static variable in class net.shibboleth.idp.plugin.oidc.op.admin.impl.DoClientManagementOperation

Flow variable indicating ID of storage key.

clientAuthContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.authn.impl.JWTCredentialValidator

Strategy that will return OAuth2ClientAuthenticationContext.

clientAuthentication - Variable in class net.shibboleth.idp.plugin.oidc.op.authn.impl.ValidateClientAuthenticationType

The extracted client authentication information.

clientAuthMethodsLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.authn.impl.ExtractClientAuthenticationFromRequest

Lookup strategy for enabled client authentication methods.

clientId - Variable in class net.shibboleth.idp.plugin.oidc.op.admin.impl.DoClientManagementOperation

Client ID to operate on.

clientId - Variable in class net.shibboleth.idp.plugin.oidc.op.admin.impl.IssueRegistrationAccessToken

The client identifier.

clientId - Variable in class net.shibboleth.idp.plugin.oidc.op.cli.ClientManagementArguments

EntityID.

clientId - Variable in class net.shibboleth.idp.plugin.oidc.op.cli.IssueRegistrationAccessTokenArguments

Requested client identifier for the access token to be issued.

clientId - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeRelyingPartyContext

OIDC client id.

ClientIDFromOIDCMetadataContextLookupFunction - Class in net.shibboleth.idp.plugin.oidc.op.profile.logic

Deprecated, for removal: This API element is subject to removal in a future version.

As of 3.1.0, moved to net.shibboleth.oidc.profile.logic.ClientIDFromOIDCMetadataContextLookupFunction

ClientIDFromOIDCMetadataContextLookupFunction() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.logic.ClientIDFromOIDCMetadataContextLookupFunction

Deprecated.

Constructor.

clientIdLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.admin.impl.IssueRegistrationAccessToken

Lookup function for the client identifier.

clientIDLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.messaging.impl.SetEntityIdToSAMLPeerEntityContext

Strategy used to obtain the client id value for authorize/token request.

clientIDLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.BuildAccessToken

Strategy used to obtain the original client ID.

clientIDLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeRelyingPartyContext

Strategy used to obtain the client id value for authorize/token request.

clientIDLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.OIDCMetadataLookupHandler

Strategy used to obtain the client id value for authorize/token request.

clientIdPolicyName - Variable in class net.shibboleth.idp.plugin.oidc.op.admin.impl.IssueRegistrationAccessToken

Name of access control policy governing clientId acceptance.

ClientIdRegistrationAuditExtractor - Class in net.shibboleth.idp.plugin.oidc.op.audit.impl

Looks up the client ID value from the OIDC client registration response context.

ClientIdRegistrationAuditExtractor() - Constructor for class net.shibboleth.idp.plugin.oidc.op.audit.impl.ClientIdRegistrationAuditExtractor

Constructor.

ClientIdRegistrationAuditExtractor(Function<ProfileRequestContext, OIDCClientRegistrationResponseContext>) - Constructor for class net.shibboleth.idp.plugin.oidc.op.audit.impl.ClientIdRegistrationAuditExtractor

Constructor.

clientInformation - Variable in class net.shibboleth.idp.plugin.oidc.op.authn.impl.OIDCClientInfoCredentialValidator

Client information.

ClientInformationCriterion - Class in net.shibboleth.idp.plugin.oidc.op.criterion

Client information criterion to make decisions based on client information.

ClientInformationCriterion(OIDCClientInformation) - Constructor for class net.shibboleth.idp.plugin.oidc.op.criterion.ClientInformationCriterion

Constructor.

clientInformationManager - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.StoreClientInformation

The client information manager used for storing the information.

ClientManagementArguments - Class in net.shibboleth.idp.plugin.oidc.op.cli

Command line processing for OIDC client mgmt flow.

ClientManagementArguments() - Constructor for class net.shibboleth.idp.plugin.oidc.op.cli.ClientManagementArguments

clientResolver - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.OIDCMetadataLookupHandler

Resolver used to look up OIDC client information.

clockSkew - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.logic.DefaultChainRevocationLifetimeLookupStrategy

Positive clock skew adjustment to consider when calculating revocation lifetime.

clockSkew - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.logic.DefaultTokenRevocationLifetimeLookupStrategy

Positive clock skew adjustment to consider when calculating revocation lifetime.

codeChallenge - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthorizationCodeToResponseContext

Code challenge and the code challenge method stored to authz code.

codeChallenge - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateCodeChallenge

PKCE code challenge.

codeChallenge - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidatePKCE

PKCE code challenge.

codeChallengeLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthorizationCodeToResponseContext

Strategy used to locate the code challenge.

codeChallengeLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateCodeChallenge

Strategy used to locate the code challenge.

codeChallengeMethod - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateCodeChallenge

PKCE code challenge method.

codeChallengeMethodLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthorizationCodeToResponseContext

Strategy used to locate the code challenge method.

codeChallengeMethodLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateCodeChallenge

Strategy used to locate the code challenge method.

codeHashCalculationStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddAuthorizationCodeHashToIDToken

The strategy used for calculating the authorization code hash value.

codeVerifier - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidatePKCE

PKCE code verifier.

codeVerifierLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidatePKCE

Strategy used to locate the PKCE Code Verifier value.

configurationLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCEncryptionParameters

Strategy used to look up a per-request EncryptionConfiguration list.

configurationLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCSignatureSigningParameters

Strategy used to look up a per-request SignatureSigningConfiguration list.

configurationLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCSignatureSigningParametersHandler

Strategy used to look up a per-request SignatureSigningConfiguration list.

consentContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.BuildAccessToken

Strategy used to locate the OIDCAuthenticationResponseConsentContext.

consentContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddAttributesToClaimsSet

Strategy used to locate the OIDCAuthenticationResponseConsentContext.

consentContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthorizationCodeToResponseContext

Strategy used to locate the OIDCAuthenticationResponseConsentContext.

consentedAttributesLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetConsentFromTokenToResponseContext

Strategy used to obtain the consented attributes.

consentEnabledPredicate - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.BuildAccessToken

Predicate used to check if consent is enabled with a given ProfileRequestContext.

consentEnabledPredicate - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthorizationCodeToResponseContext

Predicate used to check if consent is enabled with a given ProfileRequestContext.

consentEnabledPredicate - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetConsentToResponseContext

Predicate used to check if consent is enabled.

containsKeys(JWKSet) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddJwksToClientMetadata

Checks that the given JWK set contains at least one key.

context - Variable in class net.shibboleth.idp.plugin.oidc.op.security.jwt.claims.impl.RootTokenIdRevocationValidator

Context in revocation cache.

contextType - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractInitializeOutboundResponseMessageContext

Type of subcontext to create.

convertAndPublishToList(List<Credential>, List<JWK>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.FormOutboundKeySetResponseMessage

Converts the given credentials into JWK and adds all the successfully converted JWKs to the given list.

convertToJWSAlgorithmList(List<String>) - Method in class net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationSignatureValidationParametersResolver

Convert algorithm string list to JWSAlgorithm list.

credential - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractSignJWTAction

resolved credential.

CredentialMetadataValueResolver - Class in net.shibboleth.idp.plugin.oidc.op.metadata.impl

An implementation of MetadataValueResolver that converts public parts of the attached Credential to the value.

CredentialMetadataValueResolver() - Constructor for class net.shibboleth.idp.plugin.oidc.op.metadata.impl.CredentialMetadataValueResolver

Constructor.

credentialResolver - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.AbstractProcessTokenAction

Source of signing keys.

credentialResolver - Variable in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.ParseAccessToken

Source of signing keys.

ctxLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.audit.impl.AuthenticationContextReferenceAuditExtractor

Lookup strategy for the context to find the subject value from.

ctxLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.audit.impl.ClientIdRegistrationAuditExtractor

Lookup strategy for the context to find the subject value from.

ctxLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.audit.impl.SubjectTypeAuditExtractor

Lookup strategy for the context to find the subject type from.

ctxLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.audit.impl.SubjectValueAuditExtractor

Lookup strategy for the context to find the subject value from.

curveMatchesESAlgorithm(Curve, JWSAlgorithm) - Method in class net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationSignatureSigningParametersResolver

Helper to match ECKey curve to JWS algorithm ES256, ES384 and ES512.

curveMatchesESAlgorithm(Curve, JWSAlgorithm) - Method in class net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationSignatureValidationParametersResolver

Helper to match ECKey curve to JWS algorithm ES256, ES384 and ES512.

D

dataEncryptionAlgorithmsLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddRequestObjectSecurityConfigurationToClientMetadata

Strategy to obtain list of supported data encryption algorithms.

dataEncryptionAlgorithmsLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddSecurityConfigurationToClientMetadata

Strategy to obtain list of supported data encryption algorithms.

dataSealer - Variable in class net.shibboleth.idp.plugin.oidc.op.admin.impl.IssueRegistrationAccessToken

Data sealer for handling access token.

dataSealer - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.AbstractProcessTokenAction

Data sealer for unwrapping token.

dataSealer - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.BuildAccessToken

Sealer to use for opaque tokens.

dataSealer - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthorizationCodeToResponseContext

Data sealer for handling authorization code.

dataSealer - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRefreshTokenToResponseContext

Data sealer for handling access token.

dataSealer - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateGrant

Data sealer for unwrapping authorization code.

dataSealer - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRegistrationAccessToken

Data sealer for unwrapping authorization code.

dataSealer - Variable in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.ParseAccessToken

Data sealer for unwrapping authorization code.

decodeAttribute(ProfileRequestContext, Collection<TranscodingRule>, JSONObject, Multimap<String, IdPAttribute>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRequestedClaimsToResponseContext

Access the registry of transcoding rules to decode the input object.

decryptRequestObject(EncryptedJWT) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.DecryptRequestObject

Decrypt request object.

DecryptRequestObject - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Action decrypts request object if it is encrypted.

DecryptRequestObject() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.DecryptRequestObject

Constructor.

DEFAULT_ERROR_CODE - Static variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractBuildErrorResponseFromEvent

Default value for the error code in the error response messages.

DEFAULT_HTTP_STATUS_CODE - Static variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractBuildErrorResponseFromEvent

Default value for the HTTP response status code in the HTTP responses.

DEFAULT_MAPPINGS - Static variable in class net.shibboleth.idp.plugin.oidc.op.servlet.RegisterFilterServletContextInitializer

The value for the filter mappings, if no custom configuration is set.

DEFAULT_TEMPLATE_ID - Static variable in class net.shibboleth.idp.plugin.oidc.op.encoding.impl.NimbusResponseEncoder

Default template ID for using FORM POST response mode.

DefaultChainRevocationLifetimeLookupStrategy - Class in net.shibboleth.idp.plugin.oidc.op.profile.logic

Default lookup function for fetching the chain revocation lifetime.

DefaultChainRevocationLifetimeLookupStrategy() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.logic.DefaultChainRevocationLifetimeLookupStrategy

Constructor.

defaultCode - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractBuildErrorResponseFromEvent

The code for unmapped events.

defaultCode - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetResponseStatusCodeFromEvent

The status code for unmapped events.

defaultLanguage - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeOutboundAuthenticationResponseMessageContext

The default language when it has not been defined in the metadata.

DefaultMetadataPolicyCriteriaLookupFunction - Class in net.shibboleth.idp.plugin.oidc.op.profile.logic

A function returning a CriteriaSet which contains the metadata policy document location as ResourceLocationCriterion.

DefaultMetadataPolicyCriteriaLookupFunction() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.logic.DefaultMetadataPolicyCriteriaLookupFunction

DefaultMetadataPolicyMergingStrategy - Class in net.shibboleth.idp.plugin.oidc.op.profile.logic

A function that merges two maps of metadata policies according to the rules specified in the OIDC federation spec (draft 17), section 5.1.3.1:

DefaultMetadataPolicyMergingStrategy() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.logic.DefaultMetadataPolicyMergingStrategy

DefaultRootTokenIdentifierLookupStrategy - Class in net.shibboleth.idp.plugin.oidc.op.profile.logic

Default lookup function for fetching the root token identifier from the given claims set.

DefaultRootTokenIdentifierLookupStrategy() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.logic.DefaultRootTokenIdentifierLookupStrategy

defaultScope - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddScopeToClientMetadata

The default Scope if it was not defined in the request.

defaultStatusCode - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractBuildErrorResponseFromEvent

The status code for unmapped events.

defaultSubjectType - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddSubjectTypeToClientMetadata

The default SubjectType if it was not defined in the request.

DefaultSubjectTypeStrategy - Class in net.shibboleth.idp.plugin.oidc.op.profile.logic

Function to decide on subject type.

DefaultSubjectTypeStrategy() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.logic.DefaultSubjectTypeStrategy

Constructor.

defaultTokenLifetime - Variable in class net.shibboleth.idp.plugin.oidc.op.admin.impl.IssueRegistrationAccessToken

The token lifetime.

DefaultTokenRevocationLifetimeLookupStrategy - Class in net.shibboleth.idp.plugin.oidc.op.profile.logic

Default lookup function for fetching the token revocation lifetime from the given claims set.

DefaultTokenRevocationLifetimeLookupStrategy() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.logic.DefaultTokenRevocationLifetimeLookupStrategy

Constructor.

deliveryClaimsLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetTokenDeliveryAttributesFromTokenToResponseContext

Strategy used to obtain the delivery claims.

deniedUserInfoAttributes - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddAttributesToClaimsSet

Attributes to omit from UserInfo token.

deniedUserInfoAttributes - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetTokenDeliveryAttributesToResponseContext

Attributes to omit from UserInfo token.

deniedUserInfoAttributesLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddAttributesToClaimsSet

Strategy used to obtain the set of attribute IDs to omit from the UserInfo token.

deniedUserInfoAttributesLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetTokenDeliveryAttributesToResponseContext

Strategy used to obtain the set of attribute IDs to omit from the UserInfo token.

digester - Variable in class net.shibboleth.idp.plugin.oidc.op.authn.impl.OIDCClientInfoCredentialValidator

Digester for SHA-1.

doBuildURL(StringBuilder) - Method in class net.shibboleth.idp.plugin.oidc.op.cli.ClientManagementArguments

doBuildURL(StringBuilder) - Method in class net.shibboleth.idp.plugin.oidc.op.cli.IssueRegistrationAccessTokenArguments

DoClientManagementOperation - Class in net.shibboleth.idp.plugin.oidc.op.admin.impl

Action that implements a JSON REST API for querying and deleting OIDC client information.

DoClientManagementOperation() - Constructor for class net.shibboleth.idp.plugin.oidc.op.admin.impl.DoClientManagementOperation

doCreateInstance() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.spring.factory.BasicJWKCredentialFactoryBean

doDecode() - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.decoding.impl.BaseOAuth2RequestDecoder

doEncode() - Method in class net.shibboleth.idp.plugin.oidc.op.encoding.impl.NimbusResponseEncoder

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.admin.impl.DoClientManagementOperation

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.admin.impl.IssueRegistrationAccessToken

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.AbstractEncryptTokenAction

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.AbstractProcessTokenAction

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.BuildAccessToken

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.FormOutboundIntrospectionResponseMessage

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.FormOutboundRevokeTokenResponseMessage

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.RevokeToken

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.SetAccessTokenToResponseContext

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.ValidateAudience

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractBuildErrorResponseFromEvent

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractInitializeOutboundResponseMessageContext

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractSignJWTAction

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddAccessTokenHashToIDToken

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddAcrToIDToken

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddApplicationTypeToClientMetadata

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddAttributesToClaimsSet

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddAuthorizationCodeHashToIDToken

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddAuthTimeToIDToken

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddClientNameToClientMetadata

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddContactsToClientMetadata

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddGrantTypeToClientMetadata

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddIDTokenShell

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddJwksToClientMetadata

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddLogoUrisToClientMetadata

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddMetadataStatementToClientMetadata

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddNonceToIDToken

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddPolicyUrisToClientMetadata

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddRedirectUrisToClientMetadata

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddRemainingClaimsToClientMetadata

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddRequestObjectSecurityConfigurationToClientMetadata

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddResponseTypesToClientMetadata

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddScopeToClientMetadata

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddSecurityConfigurationToClientMetadata

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddSubjectTypeToClientMetadata

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddTokenDeliveryAttributesToClaimsSet

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddTokenEndpointAuthMethodsToClientMetadata

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddTosUrisToClientMetadata

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.BuildClientInformation

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.CheckRedirectURIs

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.DecryptRequestObject

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.FormOutboundAuthenticationResponseMessage

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.FormOutboundDiscoveryResponse

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.FormOutboundKeySetResponseMessage

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.FormOutboundTokenResponseMessage

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.GenerateClientID

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.GenerateClientSecret

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeAuthenticationContext

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeOutboundAuthenticationResponseMessageContext

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeOutboundRegistrationResponseMessageContext

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeOutboundResponseMessageContext

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeRegistrationMetadataPolicyContext

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeRelyingPartyContext

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeSubjectContext

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeUnverifiedRelyingPartyContext

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ManipulateClaimsForIDToken

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCEncryptionParameters

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ProcessRequestedAuthnContext

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.RevokeConsent

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthenticationContextClassReferenceFromAuthzCodeToResponseContext

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthenticationContextClassReferenceToResponseContext

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthenticationTimeToResponseContext

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthorizationCodeToResponseContext

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetConsentFromTokenToResponseContext

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetConsentToResponseContext

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRefreshTokenToResponseContext

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRequestedClaimsToResponseContext

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRequestedSubjectToResponseContext

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRequestObjectToResponseContext

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetResponseStatusCodeFromEvent

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetSectorIdentifierForAttributeResolution

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetSubjectToResponseContext

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetTokenDeliveryAttributesFromTokenToResponseContext

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetTokenDeliveryAttributesToResponseContext

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.StoreClientInformation

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateCodeChallenge

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateGrant

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateGrantType

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidatePKCE

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRedirectURI

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRegistrationAccessToken

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRegistrationRequestMetadata

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRequestObject

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateResponseType

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateScope

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.VerifyRequestedSubjectIdentifier

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.AddUserInfoShell

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.FormOutboundUserInfoResponseMessage

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.ParseAccessToken

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.ValidateAccessToken

doExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.oidc.op.authn.impl.ExtractClientAuthenticationFromRequest

doExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.oidc.op.authn.impl.ValidateClientAuthenticationType

doInitialize() - Method in class net.shibboleth.idp.plugin.oidc.op.admin.impl.AbstractAdminApiProfileAction

doInitialize() - Method in class net.shibboleth.idp.plugin.oidc.op.admin.impl.DoClientManagementOperation

doInitialize() - Method in class net.shibboleth.idp.plugin.oidc.op.admin.impl.IssueRegistrationAccessToken

doInitialize() - Method in class net.shibboleth.idp.plugin.oidc.op.authn.impl.OIDCClientInfoCredentialValidator

doInitialize() - Method in class net.shibboleth.idp.plugin.oidc.op.encoding.impl.OIDCResponseEncoderFactory

doInitialize() - Method in class net.shibboleth.idp.plugin.oidc.op.metadata.impl.ArrayMetadataValueResolver

doInitialize() - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.BuildAccessToken

doInitialize() - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.RevokeToken

doInitialize() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddAttributesToClaimsSet

doInitialize() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddAuthorizationCodeHashToIDToken

doInitialize() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddGrantTypeToClientMetadata

doInitialize() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddJwksToClientMetadata

doInitialize() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddResponseTypesToClientMetadata

doInitialize() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.CheckRedirectURIs

doInitialize() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.FormOutboundDiscoveryResponse

doInitialize() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.OIDCMetadataLookupHandler

doInitialize() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCEncryptionParameters

doInitialize() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCSignatureSigningParameters

doInitialize() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCSignatureSigningParametersHandler

doInitialize() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthenticationContextClassReferenceToResponseContext

doInitialize() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthorizationCodeToResponseContext

doInitialize() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRefreshTokenToResponseContext

doInitialize() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRequestedClaimsToResponseContext

doInitialize() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRequestObjectToResponseContext

doInitialize() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetTokenDeliveryAttributesToResponseContext

doInitialize() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.StoreClientInformation

doInitialize() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateGrant

doInitialize() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRegistrationAccessToken

doInitialize() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRequestObject

doInitialize() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.logic.AttributeResolutionSubjectLookupFunction

doInitialize() - Method in class net.shibboleth.idp.plugin.oidc.op.security.jwt.claims.impl.RootTokenIdRevocationValidator

doInitialize() - Method in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.AddUserInfoShell

doInitialize() - Method in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.ParseAccessToken

doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.messaging.impl.PopulateOIDCMetadataContext

doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.messaging.impl.SetEntityIdToSAMLPeerEntityContext

doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.OIDCMetadataLookupHandler

doInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCSignatureSigningParametersHandler

doLookup(AuthenticationRequest) - Method in class net.shibboleth.idp.plugin.oidc.op.audit.impl.AuthenticationRequestClaimsAuditExtractor

doNativeParse(Element, ParserContext, BeanDefinitionBuilder) - Method in class net.shibboleth.idp.plugin.oidc.op.attribute.filter.spring.matcher.impl.AttributeInOIDCRequestedClaimsRuleParser

doPostEncode(AuthorizationResponse) - Method in class net.shibboleth.idp.plugin.oidc.op.encoding.impl.NimbusResponseEncoder

Set response message to FORM POST velocity context.

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.admin.impl.AbstractAdminApiProfileAction

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.admin.impl.DoClientManagementOperation

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.admin.impl.IssueRegistrationAccessToken

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.AbstractEncryptTokenAction

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.AbstractProcessTokenAction

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.BuildAccessToken

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.EncryptAccessToken

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.RevokeToken

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.SetAccessTokenToResponseContext

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.SignAccessToken

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractBuildErrorResponseFromEvent

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCAuthenticationResponseAction

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCClientMetadataPopulationAction

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCRequestAction

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCResponseAction

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCSigningResponseAction

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCTokenResponseAction

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractSignJWTAction

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddAttributesToClaimsSet

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddIDTokenShell

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddRemainingClaimsToClientMetadata

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddRequestObjectSecurityConfigurationToClientMetadata

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddSecurityConfigurationToClientMetadata

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddTokenDeliveryAttributesToClaimsSet

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.BuildAuthenticationErrorResponseFromEvent

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.BuildClientInformation

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.CheckRedirectURIs

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.DecryptRequestObject

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.FormOutboundAuthenticationResponseMessage

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.FormOutboundDiscoveryResponse

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.FormOutboundKeySetResponseMessage

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.FormOutboundTokenResponseMessage

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.GenerateClientID

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.GenerateClientSecret

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeOutboundAuthenticationResponseMessageContext

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeRegistrationMetadataPolicyContext

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeRelyingPartyContext

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeSubjectContext

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ManipulateClaimsForIDToken

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCEncryptionParameters

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCSignatureSigningParameters

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ProcessRequestedAuthnContext

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthenticationContextClassReferenceFromAuthzCodeToResponseContext

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthenticationContextClassReferenceToResponseContext

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthorizationCodeToResponseContext

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetConsentToResponseContext

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRefreshTokenToResponseContext

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRequestedSubjectToResponseContext

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRequestObjectToResponseContext

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetTokenDeliveryAttributesToResponseContext

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SignIDToken

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.StoreClientInformation

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateCodeChallenge

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateGrant

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateGrantType

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidatePKCE

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRegistrationAccessToken

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRegistrationRequestMetadata

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRequestObject

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.AbstractOIDCUserInfoResponseAction

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.AbstractOIDCUserInfoValidationResponseAction

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.AddUserInfoShell

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.SignUserInfoResponse

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.ValidateAccessToken

doPreExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.oidc.op.authn.impl.ExtractClientAuthenticationFromRequest

doPreExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.oidc.op.authn.impl.ValidateClientAuthenticationType

doPreInvoke(MessageContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCSignatureSigningParametersHandler

doValidate(JWTClaimsSet, ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.security.jwt.claims.impl.RootTokenIdRevocationValidator

doValidate(ProfileRequestContext, AuthenticationContext, UsernamePasswordContext, CredentialValidator.WarningHandler, CredentialValidator.ErrorHandler) - Method in class net.shibboleth.idp.plugin.oidc.op.authn.impl.OIDCClientInfoCredentialValidator

doValidate(ProfileRequestContext, AuthenticationContext, CredentialValidator.WarningHandler, CredentialValidator.ErrorHandler) - Method in class net.shibboleth.idp.plugin.oidc.op.authn.impl.JWTCredentialValidator

doValidate(ProfileRequestContext, AuthenticationContext, CredentialValidator.WarningHandler, CredentialValidator.ErrorHandler) - Method in class net.shibboleth.idp.plugin.oidc.op.authn.impl.OIDCClientInfoCredentialValidator

DynamicFilesystemProviderMetadataResolver - Class in net.shibboleth.idp.plugin.oidc.op.metadata.impl

An extension to FilesystemProviderMetadataResolver that enables some of the claims to be dynamically updated outside the file.

DynamicFilesystemProviderMetadataResolver(Timer, Resource) - Constructor for class net.shibboleth.idp.plugin.oidc.op.metadata.impl.DynamicFilesystemProviderMetadataResolver

Constructor.

DynamicFilesystemProviderMetadataResolver(Resource) - Constructor for class net.shibboleth.idp.plugin.oidc.op.metadata.impl.DynamicFilesystemProviderMetadataResolver

Constructor.

dynamicResolvers - Variable in class net.shibboleth.idp.plugin.oidc.op.metadata.impl.DynamicFilesystemProviderMetadataResolver

The map of dynamic metadata value resolvers, key corresponding to the name of the metadata field.

E

embeddedResolvers - Variable in class net.shibboleth.idp.plugin.oidc.op.metadata.impl.ArrayMetadataValueResolver

The list of resolvers whose value is added to the result of this resolver.

enabledMethods - Variable in class net.shibboleth.idp.plugin.oidc.op.authn.impl.ValidateClientAuthenticationType

Enabled client authn methods.

enabledTypes - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateGrantType

Enabled grant types.

encodeAttribute(AttributeTranscoderRegistry, ProfileRequestContext, IdPAttribute) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetTokenDeliveryAttributesToResponseContext

Access the registry of transcoding rules to transform the input attribute into claims.

encodeAttribute(AttributeTranscoderRegistry, ProfileRequestContext, IdPAttribute, Collection<JSONObject>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddAttributesToClaimsSet

Access the registry of transcoding rules to transform the input attribute into claims.

encodeConsentPredicate - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetConsentToResponseContext

Predicate used to check if consent should be embedded in tokens.

encodedAttributes - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetTokenDeliveryAttributesToResponseContext

Attributes to encode for recovery.

encodedAttributesLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetTokenDeliveryAttributesToResponseContext

Strategy used to obtain the set of attribute IDs to encode for back-channel recovery.

encParamsresolver - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCEncryptionParameters

Resolver for parameters to store into context.

EncryptAccessToken - Class in net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl

Action that handles JWT access token encryption.

EncryptAccessToken() - Constructor for class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.EncryptAccessToken

Constructor.

encryptionConfigurations - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCEncryptionParameters

Active configurations to feed into resolver.

encryptionContext - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCEncryptionParameters

Context to populate.

encryptionContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.AbstractEncryptTokenAction

Strategy used to look up the EncryptionContext to store parameters in.

encryptionContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.DecryptRequestObject

Strategy used to look up the EncryptionContext to store parameters in.

encryptionContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCEncryptionParameters

Strategy used to look up the EncryptionContext to store parameters in.

encryptionOptional - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCEncryptionParameters

Whether encryption is optional.

encryptionOptionalPredicate - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCEncryptionParameters

Predicate to determine how to proceed if no encryption parameters are resolved.

EncryptProcessedToken - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Action that serves both id token and user info response encryption.

EncryptProcessedToken() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.EncryptProcessedToken

enforceRefreshTokenRotationCondition - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRefreshTokenToResponseContext

Strategy used to determine whether to revoke refresh tokens once they're used.

entityContextClass - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.messaging.impl.SetEntityIdToSAMLPeerEntityContext

The context class representing the SAML entity for whom data is to be attached.

equals(Object) - Method in class net.shibboleth.idp.plugin.oidc.op.criterion.IssuerCriterion

errorObject - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.messaging.impl.OAuth2RevocationErrorResponse

Error Object.

eventContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractBuildErrorResponseFromEvent

Strategy function for access to EventContext to check.

eventContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetResponseStatusCodeFromEvent

Strategy function for access to EventContext to check.

existingParametersContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCSignatureSigningParameters

Strategy used to look up an existing SecurityParametersContext to copy.

existingParametersContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCSignatureSigningParametersHandler

Strategy used to look up an existing SecurityParametersContext to copy.

ExtractClientAuthenticationFromRequest - Class in net.shibboleth.idp.plugin.oidc.op.authn.impl

Extracts OAuth 2 client authentication details from a request and stores them in an OAuth2ClientAuthenticationContext beneath the AuthenticationContext for subsequent validation.

ExtractClientAuthenticationFromRequest() - Constructor for class net.shibboleth.idp.plugin.oidc.op.authn.impl.ExtractClientAuthenticationFromRequest

Constructor.

F

FilesystemMetadataValueResolver - Class in net.shibboleth.idp.plugin.oidc.op.metadata.impl

An implementation to RefreshableMetadataValueResolver that fetches the information from a file.

FilesystemMetadataValueResolver(Timer, Resource) - Constructor for class net.shibboleth.idp.plugin.oidc.op.metadata.impl.FilesystemMetadataValueResolver

Constructor.

FilesystemMetadataValueResolver(Resource) - Constructor for class net.shibboleth.idp.plugin.oidc.op.metadata.impl.FilesystemMetadataValueResolver

Constructor.

FilesystemProviderMetadataResolver - Class in net.shibboleth.idp.plugin.oidc.op.metadata.impl

Based on FilesystemMetadataResolver.

FilesystemProviderMetadataResolver(Timer, Resource) - Constructor for class net.shibboleth.idp.plugin.oidc.op.metadata.impl.FilesystemProviderMetadataResolver

Constructor.

FilesystemProviderMetadataResolver(Resource) - Constructor for class net.shibboleth.idp.plugin.oidc.op.metadata.impl.FilesystemProviderMetadataResolver

Constructor.

FILTER_NAME_DYNAMIC_OIDC_RESPONSE_HEADER - Static variable in class net.shibboleth.idp.plugin.oidc.op.servlet.RegisterFilterServletContextInitializer

The filter name for the dynamic response header filter for the OP's flows.

ForceAuthnAuditExtractor - Class in net.shibboleth.idp.plugin.oidc.op.audit.impl

Function that returns true is prompt contains login in AuthenticationRequest.

ForceAuthnAuditExtractor(Function<ProfileRequestContext, AuthenticationRequest>) - Constructor for class net.shibboleth.idp.plugin.oidc.op.audit.impl.ForceAuthnAuditExtractor

Constructor.

forceAuthnPredicate - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeAuthenticationContext

Extracts forceAuthn property from profile config.

forcePKCE - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateCodeChallenge

Whether PKCE is mandatory.

forcePKCE - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidatePKCE

Whether PKCE is mandatory.

forcePKCECondition - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateCodeChallenge

Strategy used to determine whether to require PKCE.

forcePKCECondition - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidatePKCE

Strategy used to determine whether to require PKCE.

forDecryption - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCEncryptionParameters

Whether we resolve encryption or decryption parameters.

FormOutboundAuthenticationResponseMessage - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Action that forms outbound message based on request and response context.

FormOutboundAuthenticationResponseMessage() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.FormOutboundAuthenticationResponseMessage

Constructor.

FormOutboundDiscoveryResponse - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

This action builds a response for the OP configuration discovery request.

FormOutboundDiscoveryResponse() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.FormOutboundDiscoveryResponse

FormOutboundIntrospectionResponseMessage - Class in net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl

Action that forms outbound token introspection success message.

FormOutboundIntrospectionResponseMessage() - Constructor for class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.FormOutboundIntrospectionResponseMessage

FormOutboundKeySetResponseMessage - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Action that forms outbound message containing keyset.

FormOutboundKeySetResponseMessage() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.FormOutboundKeySetResponseMessage

Constructor.

FormOutboundRevokeTokenResponseMessage - Class in net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl

Action that forms outbound token revocation success message.

FormOutboundRevokeTokenResponseMessage() - Constructor for class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.FormOutboundRevokeTokenResponseMessage

FormOutboundTokenResponseMessage - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Action that forms outbound message based on token request and response context.

FormOutboundTokenResponseMessage() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.FormOutboundTokenResponseMessage

FormOutboundUserInfoResponseMessage - Class in net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl

Action that forms outbound message based on response context.

FormOutboundUserInfoResponseMessage() - Constructor for class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.FormOutboundUserInfoResponseMessage

G

GenerateClientID - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Creates the client ID for the registration.

GenerateClientID() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.GenerateClientID

Constructor.

GenerateClientSecret - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Creates a new client secret with the IdentifierGenerationStrategy attached to this action.

GenerateClientSecret() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.GenerateClientSecret

Constructor.

generateSymmetricKey(byte[], JWEAlgorithm) - Method in class net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationEncryptionParametersResolver

Generate symmetric key from client secret.

getAccessTokenLog(AccessToken) - Static method in class net.shibboleth.idp.plugin.oidc.op.decoding.impl.RequestUtil

Helper method for getting protocol log message for access token object.

getAuthenticationRequest() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCAuthenticationRequestAction

Returns OIDC authentication request.

getAuthorizationCodeFlowEnabled() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddGrantTypeToClientMetadata

Get predicate used to indicate whether authorization code flow is enabled.

getAuthorizationCodeFlowEnabled() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddResponseTypesToClientMetadata

Get predicate used to indicate whether authorization code flow is enabled.

getAuthorizationGrantLog(AuthorizationGrant) - Static method in class net.shibboleth.idp.plugin.oidc.op.decoding.impl.RequestUtil

Helper method for getting protocol log message for authorization grant object.

getClaimsSetToSign() - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.SignAccessToken

Called to get claim set to sign.

getClaimsSetToSign() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractSignJWTAction

Called to get claim set to sign.

getClaimsSetToSign() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SignIDToken

Sets id token claims as input for signing.

getClaimsSetToSign() - Method in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.SignUserInfoResponse

Sets user info claims as input for signing.

getClientAuthenticationLog(ClientAuthentication) - Static method in class net.shibboleth.idp.plugin.oidc.op.decoding.impl.RequestUtil

Helper method for getting protocol log message for client authentication object.

getClientID() - Method in class net.shibboleth.idp.plugin.oidc.op.authn.impl.ValidateClientAuthenticationType

Parses the client ID from OIDC metadata or client authentication, if exists.

getClientInformationManager() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.StoreClientInformation

Get the client information manager used for storing the information.

getDefaultScope() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddScopeToClientMetadata

Get the default Scope to be used if it was not defined in the request.

getErrorObject() - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.messaging.impl.OAuth2RevocationErrorResponse

getImplicitFlowEnabled() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddGrantTypeToClientMetadata

Get predicate used to indicate whether hybrid flow is enabled.

getImplicitFlowEnabled() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddResponseTypesToClientMetadata

Get predicate used to indicate whether hybrid flow is enabled.

getInputMetadata() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCClientMetadataPopulationAction

Get the OIDCClientMetadata to populate metadata from.

getIssuer() - Method in class net.shibboleth.idp.plugin.oidc.op.criterion.IssuerCriterion

Gets the issuer.

getKey(OIDCProviderMetadata) - Method in class net.shibboleth.idp.plugin.oidc.op.metadata.impl.FilesystemProviderMetadataResolver

getKey(Object) - Method in class net.shibboleth.idp.plugin.oidc.op.metadata.impl.FilesystemMetadataValueResolver

getLogPrefix() - Method in class net.shibboleth.idp.plugin.oidc.op.attribute.filter.matcher.impl.AttributeInOIDCRequestedClaimsMatcher

Return a string which is to be prepended to all log messages.

getMatchingValues(IdPAttribute, AttributeFilterContext) - Method in class net.shibboleth.idp.plugin.oidc.op.attribute.filter.matcher.impl.AttributeInOIDCRequestedClaimsMatcher

getMatchIRequestedClaimsSilent() - Method in class net.shibboleth.idp.plugin.oidc.op.attribute.filter.matcher.impl.AttributeInOIDCRequestedClaimsMatcher

Gets whether to matched if the request contains no requested claims.

getMatchOnlyIDToken() - Method in class net.shibboleth.idp.plugin.oidc.op.attribute.filter.matcher.impl.AttributeInOIDCRequestedClaimsMatcher

Gets whether to match only id token part of the requested claims.

getMatchOnlyUserInfo() - Method in class net.shibboleth.idp.plugin.oidc.op.attribute.filter.matcher.impl.AttributeInOIDCRequestedClaimsMatcher

Gets whether to match only user info part of the requested claims.

getMessageToLog(TokenIntrospectionRequest) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.decoding.impl.OAuth2IntrospectionRequestDecoder

Get the string representation of what will be logged as the protocol message.

getMessageToLog(TokenRequest) - Method in class net.shibboleth.idp.plugin.oidc.op.decoding.impl.OIDCTokenRequestDecoder

Get the string representation of what will be logged as the protocol message.

getMessageToLog(TokenRevocationRequest) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.decoding.impl.OAuth2RevocationRequestDecoder

Get the string representation of what will be logged as the protocol message.

getMessageToLog(AuthenticationRequest) - Method in class net.shibboleth.idp.plugin.oidc.op.decoding.impl.OIDCAuthenticationRequestDecoder

Get the string representation of what will be logged as the protocol message.

getMessageToLog(OIDCClientRegistrationRequest) - Method in class net.shibboleth.idp.plugin.oidc.op.decoding.impl.OIDCClientRegistrationRequestDecoder

Get the string representation of what will be logged as the protocol message.

getMessageToLog(UserInfoRequest) - Method in class net.shibboleth.idp.plugin.oidc.op.decoding.impl.OIDCUserInfoRequestDecoder

Get the string representation of what will be logged as the protocol message.

getMessageToLog(T) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.decoding.impl.BaseOAuth2RequestDecoder

Get the string representation of what will be logged as the protocol message.

getMetadataContext() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCAuthenticationResponseAction

Returns the OIDC Metadata context.

getMetadataContext() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCResponseAction

Returns the OIDC Metadata context.

getMetadataContext() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCTokenResponseAction

Returns the OIDC Metadata context.

getMetadataContext() - Method in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.AbstractOIDCUserInfoResponseAction

Returns the OIDC Metadata context.

getMetadataUpdateTime() - Method in class net.shibboleth.idp.plugin.oidc.op.metadata.impl.DynamicFilesystemProviderMetadataResolver

getNativeBeanClass() - Method in class net.shibboleth.idp.plugin.oidc.op.attribute.filter.spring.matcher.impl.AttributeInOIDCRequestedClaimsRuleParser

getNativeBeanClass() - Method in class net.shibboleth.idp.plugin.oidc.op.attribute.filter.spring.policyrule.impl.AttributeOIDCScopeRuleParser

getObjectMapper() - Method in class net.shibboleth.idp.plugin.oidc.op.admin.impl.AbstractAdminApiProfileAction

Get the JSON ObjectMapper to use for serialization.

getObjectType() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.spring.factory.BasicJWKCredentialFactoryBean

getOidcClientInformation() - Method in class net.shibboleth.idp.plugin.oidc.op.criterion.ClientInformationCriterion

Get client information.

getOIDCMetadataContextLookupStrategy() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeOutboundAuthenticationResponseMessageContext

Get the mechanism to lookup the OIDCMetadataContext from the ProfileRequestContext.

getOidcResponseContext() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCAuthenticationResponseAction

Returns oidc response context.

getOidcResponseContext() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCResponseAction

Returns oidc response context.

getOidcResponseContext() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCTokenResponseAction

Returns oidc response context.

getOidcResponseContext() - Method in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.AbstractOIDCUserInfoValidationResponseAction

Returns oidc response context.

getOnlyIfEssential() - Method in class net.shibboleth.idp.plugin.oidc.op.attribute.filter.matcher.impl.AttributeInOIDCRequestedClaimsMatcher

Gets whether to drop non essential claims.

getOutputMetadata() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCClientMetadataPopulationAction

Get the OIDCClientMetadata to populate metadata to.

getPayload(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.AbstractEncryptTokenAction

Get the payload to encrypt.

getPayload(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.EncryptAccessToken

Get the payload to encrypt.

getPayload(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.EncryptProcessedToken

Get the payload to encrypt.

getProtocolMessage(Response) - Static method in class net.shibboleth.idp.plugin.oidc.op.encoding.impl.ResponseUtil

Helper method for getting protocol message for a Nimbus response object.

getProtocolMessageForAuthenticationResponse(AuthenticationResponse) - Static method in class net.shibboleth.idp.plugin.oidc.op.encoding.impl.ResponseUtil

Helper method for getting protocol message for OIDC authentication response.

getProtocolMessageForClientInformation(ClientInformation) - Static method in class net.shibboleth.idp.plugin.oidc.op.encoding.impl.ResponseUtil

Helper method for getting protocol message for client information object.

getProtocolMessageForErrorObject(ErrorObject) - Static method in class net.shibboleth.idp.plugin.oidc.op.encoding.impl.ResponseUtil

Helper method for getting protocol message for error object.

getProtocolMessageForIntrospectionResponse(TokenIntrospectionResponse) - Static method in class net.shibboleth.idp.plugin.oidc.op.encoding.impl.ResponseUtil

Helper method for getting protocol message for introspection response.

getProtocolMessageForJSONSuccessResponse(Response) - Static method in class net.shibboleth.idp.plugin.oidc.op.encoding.impl.ResponseUtil

Helper method for getting protocol message for JSON success response.

getProtocolMessageForRegistrationResponse(OIDCClientInformationResponse) - Static method in class net.shibboleth.idp.plugin.oidc.op.encoding.impl.ResponseUtil

Helper method for getting protocol message for OIDC registration response.

getProtocolMessageForRevocationResponse(Response) - Static method in class net.shibboleth.idp.plugin.oidc.op.encoding.impl.ResponseUtil

Helper method for getting protocol message for revocation response.

getProtocolMessageForTokenResponse(TokenResponse) - Static method in class net.shibboleth.idp.plugin.oidc.op.encoding.impl.ResponseUtil

Helper method for getting protocol message for token response.

getProtocolMessageForTokens(Tokens) - Static method in class net.shibboleth.idp.plugin.oidc.op.encoding.impl.ResponseUtil

Helper method for getting protocol message for tokens object.

getProtocolMessageForUserInfoResponse(UserInfoResponse) - Static method in class net.shibboleth.idp.plugin.oidc.op.encoding.impl.ResponseUtil

Helper method for getting protocol message for OIDC user info response.

getProtocolMessageLog() - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.decoding.impl.BaseOAuth2RequestDecoder

Get the protocol message logger.

getRefreshTokenLog(RefreshToken) - Static method in class net.shibboleth.idp.plugin.oidc.op.decoding.impl.RequestUtil

Helper method for getting protocol log message for refresh token object.

getRefreshTokensEnabled() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddGrantTypeToClientMetadata

Get predicate used to indicate whether refresh tokens are enabled.

getRelyingPartyContextLookupStrategy() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeOutboundAuthenticationResponseMessageContext

Get the mechanism to lookup the RelyingPartyContext from the ProfileRequestContext.

getRequest() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCRequestAction

Returns request.

getSAMLMetadataContextLookupStrategy() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeOutboundAuthenticationResponseMessageContext

Get the mechanism to lookup the SAMLMetadataContext from the ProfileRequestContext.

getSignatureSigningParameters() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCSigningResponseAction

Get the signing parameters to apply.

getSigner(Algorithm) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractSignJWTAction

Returns correct implementation of signer based on algorithm type.

getSubjectTypeLookupStrategy() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.logic.PublicSubjectActivationCondition

Get the strategy used to locate subject type.

getSupportedResponseTypes() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddResponseTypesToClientMetadata

Get map of supported response types and their corresponding predicates.

getToken(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.AbstractProcessTokenAction

Get the token to process.

getToken(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.ProcessTokenForIntrospection

Get the token to process.

getToken(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.ProcessTokenForRevocation

Get the token to process.

getTokenRequest() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCTokenRequestAction

Returns OIDC token request.

getUserInfoRequest() - Method in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.AbstractOIDCUserInfoRequestAction

Returns OIDC user info request.

grantTypesLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateGrantType

Strategy to obtain enabled grant types.

H

handleNullRequestedURI(ProfileRequestContext, Set<URI>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRedirectURI

Handles the missing requested redirect URI case: it may be missing if it's not required to exist and the registered and valid records contain only single matching value.

hashCode() - Method in class net.shibboleth.idp.plugin.oidc.op.criterion.IssuerCriterion

httpClient - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddJwksToClientMetadata

The HttpClient to use.

httpClient - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.CheckRedirectURIs

The HttpClient to use.

httpClient - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRequestObjectToResponseContext

HTTP Client used to post the data.

httpClientSecurityParameters - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddJwksToClientMetadata

HTTP client security parameters.

httpClientSecurityParameters - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.CheckRedirectURIs

HTTP client security parameters.

httpClientSecurityParameters - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRequestObjectToResponseContext

HTTP client security parameters.

I

idGenerator - Variable in class net.shibboleth.idp.plugin.oidc.op.admin.impl.IssueRegistrationAccessToken

The identifier generator to use.

idGenerator - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.BuildAccessToken

The generator to use.

idGenerator - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.GenerateClientSecret

The client secret generator to use.

idGenerator - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthorizationCodeToResponseContext

The generator to use.

idGenerator - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRefreshTokenToResponseContext

The generator to use.

idGeneratorLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.admin.impl.IssueRegistrationAccessToken

Strategy used to locate the IdentifierGenerationStrategy to use.

idGeneratorLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.BuildAccessToken

Strategy used to locate the IdentifierGenerationStrategy to use.

idGeneratorLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.GenerateClientSecret

Strategy used to locate the IdentifierGenerationStrategy to use.

idGeneratorLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthorizationCodeToResponseContext

Strategy used to locate the IdentifierGenerationStrategy to use.

idGeneratorLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRefreshTokenToResponseContext

Strategy used to locate the IdentifierGenerationStrategy to use.

idToken - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.FormOutboundTokenResponseMessage

ID token for response.

idToken - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ManipulateClaimsForIDToken

The id_token to operate on.

IDTOKEN_ENCRYPTION - net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationEncryptionParametersResolver.ParameterType

Type for id_token encryption.

IDTOKEN_SIGNING - net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationSignatureSigningParametersResolver.ParameterType

Type for id_token signing.

idTokenClaims - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRequestedSubjectToResponseContext

id token claims in requested claims.

idTokenClaims - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SignIDToken

token claims set to sign.

IdTokenClaimsAuditExtractor - Class in net.shibboleth.idp.plugin.oidc.op.audit.impl

A function that resolves a claim value from the id_token claims set.

IdTokenClaimsAuditExtractor(String) - Constructor for class net.shibboleth.idp.plugin.oidc.op.audit.impl.IdTokenClaimsAuditExtractor

Constructor.

idTokenClaimsLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.audit.impl.ClaimsAuditExtractor

Lookup strategy for id token claims to read from.

idTokenClaimsLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.audit.impl.IdTokenClaimsAuditExtractor

Lookup strategy for id token claims to read from.

idTokenDeliveryClaimsLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetTokenDeliveryAttributesFromTokenToResponseContext

Strategy used to obtain the id token delivery claims.

idTokenHint - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRequestedSubjectToResponseContext

id token hint.

idTokenLifetimeLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddIDTokenShell

Strategy used to obtain the ID token lifetime.

idTokenManipulationStrategyLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ManipulateClaimsForIDToken

Lookup function to supply strategy bi-function for manipulating id_token claims.

ignoringUnencodableAttributes - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddAttributesToClaimsSet

Whether attributes that result in an AttributeEncodingException when being encoded should be ignored or result in an IdPEventIds.UNABLE_ENCODE_ATTRIBUTE transition.

ignoringUnencodableAttributes - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetTokenDeliveryAttributesToResponseContext

Whether attributes that result in an AttributeEncodingException when being encoded should be ignored or result in an IdPEventIds.UNABLE_ENCODE_ATTRIBUTE transition.

implicitFlowPredicate - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddGrantTypeToClientMetadata

Predicate used to indicate whether implicit flow is enabled.

implicitFlowPredicate - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddResponseTypesToClientMetadata

Predicate used to indicate whether implicit flow is enabled.

impliesFormPost(Object) - Method in class net.shibboleth.idp.plugin.oidc.op.encoding.impl.NimbusResponseEncoder

Whether we should use FORM POST response encoding.

inbound - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeRelyingPartyContext

Use the inbound message tree?

InboundMessageClassLookupFunction - Class in net.shibboleth.idp.plugin.oidc.op.audit.impl

Looks up the value of the simple class name from the inbound message context's message object.

InboundMessageClassLookupFunction() - Constructor for class net.shibboleth.idp.plugin.oidc.op.audit.impl.InboundMessageClassLookupFunction

includeIssuerInResponsePredicate - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.BuildAuthenticationErrorResponseFromEvent

Predicate to signal whether or not to include iss-parameter to the response.

includeIssuerInResponsePredicate - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.FormOutboundAuthenticationResponseMessage

Predicate to signal whether or not to include iss-parameter to the response.

indicatesSuccess() - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.messaging.impl.OAuth2RevocationErrorResponse

indicatesSuccess() - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.messaging.impl.OAuth2RevocationSuccessResponse

init() - Method in class net.shibboleth.idp.plugin.oidc.op.attribute.filter.spring.impl.AttributeFilterNamespaceHandler

InitializeAuthenticationContext - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

An action that creates an AuthenticationContext and attaches it to the current ProfileRequestContext.

InitializeAuthenticationContext() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeAuthenticationContext

Constructor.

InitializeOutboundAuthenticationResponseMessageContext - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Action that adds an outbound MessageContext and related OIDC contexts to the ProfileRequestContext based on the identity of a relying party accessed via a lookup strategy, by default an immediate child of the profile request context.

InitializeOutboundAuthenticationResponseMessageContext() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeOutboundAuthenticationResponseMessageContext

Constructor.

InitializeOutboundRegistrationResponseMessageContext - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Action that adds an outbound MessageContext and related OIDC context to the ProfileRequestContext.

InitializeOutboundRegistrationResponseMessageContext() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeOutboundRegistrationResponseMessageContext

Constructor.

InitializeOutboundResponseMessageContext - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Action that adds an outbound MessageContext typed to generic Response to ProfileRequestContext.

InitializeOutboundResponseMessageContext() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeOutboundResponseMessageContext

InitializeOutboundTokenMgmtResponseMessageContext - Class in net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl

Action that adds an outbound MessageContext and related contexts to the ProfileRequestContext.

InitializeOutboundTokenMgmtResponseMessageContext() - Constructor for class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.InitializeOutboundTokenMgmtResponseMessageContext

Constructor.

InitializeOutboundTokenResponseMessageContext - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Action that adds an outbound MessageContext and related OIDC contexts to the ProfileRequestContext not knowing the relying party yet.

InitializeOutboundTokenResponseMessageContext() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeOutboundTokenResponseMessageContext

InitializeOutboundUserInfoResponseMessageContext - Class in net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl

Action that adds an outbound MessageContext and related OIDC contexts to the ProfileRequestContext not knowing the relying party yet.

InitializeOutboundUserInfoResponseMessageContext() - Constructor for class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.InitializeOutboundUserInfoResponseMessageContext

InitializeRegistrationMetadataPolicyContext - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Initializes the OIDCClientRegistrationMetadataPolicyContext and attaches it as a subcontext for the incoming MessageContext.

InitializeRegistrationMetadataPolicyContext() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeRegistrationMetadataPolicyContext

Constructor.

InitializeRelyingPartyContext - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Action that adds a RelyingPartyContext to the current ProfileRequestContext tree via a creation function.

InitializeRelyingPartyContext() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeRelyingPartyContext

Constructor.

InitializeSubjectContext - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

An action that creates an SubjectContext and attaches it to the current ProfileRequestContext.

InitializeSubjectContext() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeSubjectContext

InitializeUnverifiedRelyingPartyContext - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Action that adds a RelyingPartyContext to the current ProfileRequestContext tree via a creation function.

InitializeUnverifiedRelyingPartyContext() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeUnverifiedRelyingPartyContext

Constructor.

inputMetadata - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCClientMetadataPopulationAction

The OIDCClientMetadata to populate metadata from.

IsPassiveAuditExtractor - Class in net.shibboleth.idp.plugin.oidc.op.audit.impl

Function that returns true is prompt contains 'none' in AuthenticationRequest.

IsPassiveAuditExtractor(Function<ProfileRequestContext, AuthenticationRequest>) - Constructor for class net.shibboleth.idp.plugin.oidc.op.audit.impl.IsPassiveAuditExtractor

Constructor.

IssueIDTokenCondition - Class in net.shibboleth.idp.plugin.oidc.op.profile.logic

Activation condition returning true if validated scope contains 'openid' scope.

IssueIDTokenCondition() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.logic.IssueIDTokenCondition

Constructor.

issuer - Variable in class net.shibboleth.idp.plugin.oidc.op.admin.impl.IssueRegistrationAccessToken

The token issuer.

issuer - Variable in class net.shibboleth.idp.plugin.oidc.op.criterion.IssuerCriterion

The issuer.

issuer - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.BuildAuthenticationErrorResponseFromEvent

Issuer value to included in the response message, if configured to be included.

issuer - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.FormOutboundAuthenticationResponseMessage

Issuer value to included in the response message, if configured to be included.

IssuerCriterion - Class in net.shibboleth.idp.plugin.oidc.op.criterion

A Criterion representing an OIDC (provider) issuer.

IssuerCriterion(Issuer) - Constructor for class net.shibboleth.idp.plugin.oidc.op.criterion.IssuerCriterion

Constructor.

IssueRegistrationAccessToken - Class in net.shibboleth.idp.plugin.oidc.op.admin.impl

Action that issues access token to be used for the OIDC dynamic registration endpoint.

IssueRegistrationAccessToken() - Constructor for class net.shibboleth.idp.plugin.oidc.op.admin.impl.IssueRegistrationAccessToken

Constructor.

IssueRegistrationAccessTokenArguments - Class in net.shibboleth.idp.plugin.oidc.op.cli

Command line processing for issue-registration-access-token flow.

IssueRegistrationAccessTokenArguments() - Constructor for class net.shibboleth.idp.plugin.oidc.op.cli.IssueRegistrationAccessTokenArguments

issuerId - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddIDTokenShell

EntityID to populate into Issuer element.

issuerId - Variable in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.AddUserInfoShell

OP ID to populate into Issuer element.

issuerLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.admin.impl.IssueRegistrationAccessToken

Lookup function for the token issuer.

issuerLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.BuildAccessToken

Strategy used to obtain the response issuer value.

issuerLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddIDTokenShell

Strategy used to obtain the response issuer value.

issuerLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.BuildAuthenticationErrorResponseFromEvent

Strategy used to obtain the response issuer value.

issuerLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.FormOutboundAuthenticationResponseMessage

Strategy used to obtain the response issuer value.

issuerLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthorizationCodeToResponseContext

Strategy used to obtain the response issuer value.

issuerLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.AddUserInfoShell

Strategy used to obtain the response issuer value.

J

jwkResource - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.spring.factory.BasicJWKCredentialFactoryBean

Where the private key is to be found.

JWTCredentialValidator - Class in net.shibboleth.idp.plugin.oidc.op.authn.impl

A validator that handles authentication via signed JWT.

JWTCredentialValidator() - Constructor for class net.shibboleth.idp.plugin.oidc.op.authn.impl.JWTCredentialValidator

Constructor.

jwtTokenType - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.BuildAccessToken

Use a JWT for the token.

K

key - Variable in class net.shibboleth.idp.plugin.oidc.op.audit.impl.AuthenticationRequestClaimsAuditExtractor

The claim whose value is to be extracted.

key - Variable in class net.shibboleth.idp.plugin.oidc.op.audit.impl.IdTokenClaimsAuditExtractor

The claim whose value is to be extracted.

keyFetchInterval - Variable in class net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationEncryptionParametersResolver

The remote key refresh interval.

keyFetchInterval - Variable in class net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationSignatureValidationParametersResolver

The remote key refresh interval.

keyTransportEncryptionAlgorithmsLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddRequestObjectSecurityConfigurationToClientMetadata

Strategy to obtain list of supported key transport encryption algorithms.

keyTransportEncryptionAlgorithmsLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddSecurityConfigurationToClientMetadata

Strategy to obtain list of supported key transport encryption algorithms.

L

lifetime - Variable in class net.shibboleth.idp.plugin.oidc.op.cli.IssueRegistrationAccessTokenArguments

Lifetime for the access token to be issued.

lifetime - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddIDTokenShell

ID token lifetime.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.admin.impl.AbstractAdminApiProfileAction

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.admin.impl.DoClientManagementOperation

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.admin.impl.IssueRegistrationAccessToken

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.attribute.filter.matcher.impl.AttributeInOIDCRequestedClaimsMatcher

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.attribute.filter.policyrule.impl.AttributeOIDCScopePolicyRule

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.audit.impl.AuthenticationRequestClaimsAuditExtractor

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.authn.impl.ExtractClientAuthenticationFromRequest

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.authn.impl.JWTCredentialValidator

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.authn.impl.OIDCClientInfoCredentialValidator

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.authn.impl.ValidateClientAuthenticationType

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.decoding.impl.OIDCAuthenticationRequestDecoder

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.decoding.impl.OIDCClientRegistrationRequestDecoder

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.decoding.impl.OIDCTokenRequestDecoder

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.decoding.impl.OIDCUserInfoRequestDecoder

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.encoding.impl.NimbusResponseEncoder

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.encoding.impl.OIDCResponseEncoderFactory

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.metadata.impl.AlgorithmInfoMetadataValueResolver

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.metadata.impl.ArrayMetadataValueResolver

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.metadata.impl.CredentialMetadataValueResolver

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.metadata.impl.DynamicFilesystemProviderMetadataResolver

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.metadata.impl.FilesystemProviderMetadataResolver

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.decoding.impl.BaseOAuth2RequestDecoder

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.decoding.impl.OAuth2IntrospectionRequestDecoder

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.decoding.impl.OAuth2RevocationRequestDecoder

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.messaging.impl.PopulateOIDCMetadataContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.messaging.impl.SetEntityIdToSAMLPeerEntityContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.AbstractEncryptTokenAction

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.AbstractProcessTokenAction

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.BuildAccessToken

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.EncryptAccessToken

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.FormOutboundIntrospectionResponseMessage

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.RevokeToken

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.SetAccessTokenToResponseContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.SignAccessToken

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.ValidateAudience

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractBuildErrorResponseFromEvent

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractInitializeOutboundResponseMessageContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCAuthenticationRequestAction

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCAuthenticationResponseAction

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCClientMetadataPopulationAction

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCRequestAction

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCResponseAction

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCSigningResponseAction

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCTokenResponseAction

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractSignJWTAction

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddAccessTokenHashToIDToken

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddAcrToIDToken

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddApplicationTypeToClientMetadata

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddAttributesToClaimsSet

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddAuthorizationCodeHashToIDToken

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddAuthTimeToIDToken

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddClientNameToClientMetadata

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddContactsToClientMetadata

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddGrantTypeToClientMetadata

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddIDTokenShell

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddJwksToClientMetadata

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddLogoUrisToClientMetadata

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddMetadataStatementToClientMetadata

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddNonceToIDToken

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddPolicyUrisToClientMetadata

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddRedirectUrisToClientMetadata

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddRemainingClaimsToClientMetadata

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddRequestObjectSecurityConfigurationToClientMetadata

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddResponseTypesToClientMetadata

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddScopeToClientMetadata

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddSecurityConfigurationToClientMetadata

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddSubjectTypeToClientMetadata

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddTokenDeliveryAttributesToClaimsSet

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddTokenEndpointAuthMethodsToClientMetadata

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddTosUrisToClientMetadata

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.BuildAuthenticationErrorResponseFromEvent

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.BuildClientInformation

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.CheckRedirectURIs

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.DecryptRequestObject

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.FormOutboundAuthenticationResponseMessage

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.FormOutboundDiscoveryResponse

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.FormOutboundKeySetResponseMessage

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.FormOutboundTokenResponseMessage

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.GenerateClientID

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.GenerateClientSecret

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeAuthenticationContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeOutboundAuthenticationResponseMessageContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeOutboundRegistrationResponseMessageContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeOutboundResponseMessageContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeRegistrationMetadataPolicyContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeRelyingPartyContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeSubjectContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeUnverifiedRelyingPartyContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ManipulateClaimsForIDToken

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.OIDCMetadataLookupHandler

Logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCEncryptionParameters

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCSignatureSigningParameters

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCSignatureSigningParametersHandler

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ProcessRequestedAuthnContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.RevokeConsent

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthenticationContextClassReferenceFromAuthzCodeToResponseContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthenticationContextClassReferenceToResponseContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthenticationTimeToResponseContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthorizationCodeToResponseContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetConsentFromTokenToResponseContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetConsentToResponseContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRefreshTokenToResponseContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRequestedClaimsToResponseContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRequestedSubjectToResponseContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRequestObjectToResponseContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetResponseStatusCodeFromEvent

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetSectorIdentifierForAttributeResolution

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetSubjectToResponseContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetTokenDeliveryAttributesFromTokenToResponseContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetTokenDeliveryAttributesToResponseContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SignIDToken

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.StoreClientInformation

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateCodeChallenge

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateGrant

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateGrantType

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidatePKCE

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRedirectURI

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRegistrationAccessToken

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRegistrationRequestMetadata

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRequestObject

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateResponseType

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateScope

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.VerifyRequestedSubjectIdentifier

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.logic.AttributeResolutionSubjectLookupFunction

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.logic.DefaultChainRevocationLifetimeLookupStrategy

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.logic.DefaultMetadataPolicyCriteriaLookupFunction

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.logic.DefaultMetadataPolicyMergingStrategy

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.logic.DefaultRootTokenIdentifierLookupStrategy

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.logic.DefaultSubjectTypeStrategy

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.logic.DefaultTokenRevocationLifetimeLookupStrategy

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.spring.factory.BasicJWKCredentialFactoryBean

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationEncryptionParametersResolver

Logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationSignatureSigningParametersResolver

Logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationSignatureValidationParametersResolver

Logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.servlet.RegisterFilterServletContextInitializer

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.AbstractOIDCUserInfoResponseAction

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.AbstractOIDCUserInfoValidationResponseAction

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.AddUserInfoShell

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.FormOutboundUserInfoResponseMessage

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.ParseAccessToken

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.SignUserInfoResponse

Class logger.

log - Variable in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.ValidateAccessToken

Class logger.

loginHintLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeAuthenticationContext

Strategy used to obtain the request login hint value.

logPrefix - Variable in class net.shibboleth.idp.plugin.oidc.op.attribute.filter.matcher.impl.AttributeInOIDCRequestedClaimsMatcher

The String used to prefix log message.

M

manager - Variable in class net.shibboleth.idp.plugin.oidc.op.admin.impl.DoClientManagementOperation

ClientInformationManager to operate on.

ManipulateClaimsForIDToken - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

An action that can be used for manipulating id_token claims via configurable strategy (bi-function).

ManipulateClaimsForIDToken() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.ManipulateClaimsForIDToken

Constructor.

manipulationStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.BuildAccessToken

The strategy used for manipulating the token claims set.

manipulationStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ManipulateClaimsForIDToken

The strategy used for manipulating the id_token.

manipulationStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthorizationCodeToResponseContext

The strategy used for manipulating the token claims set.

manipulationStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRefreshTokenToResponseContext

The strategy used for manipulating the token claims set.

mappedErrors - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractBuildErrorResponseFromEvent

Map of eventIds to pre-configured error objects.

mappedErrors - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetResponseStatusCodeFromEvent

Map of eventIds to status codes.

matches(AttributeFilterContext) - Method in class net.shibboleth.idp.plugin.oidc.op.attribute.filter.policyrule.impl.AttributeOIDCScopePolicyRule

Compare the authentication request scopes with the provided string.

matchIfRequestedClaimsSilent - Variable in class net.shibboleth.idp.plugin.oidc.op.attribute.filter.matcher.impl.AttributeInOIDCRequestedClaimsMatcher

Whether to return a match if the request contains no requested claims.

matchOnlyIDToken - Variable in class net.shibboleth.idp.plugin.oidc.op.attribute.filter.matcher.impl.AttributeInOIDCRequestedClaimsMatcher

Whether to look for a match only in id token part.

matchOnlyUserInfo - Variable in class net.shibboleth.idp.plugin.oidc.op.attribute.filter.matcher.impl.AttributeInOIDCRequestedClaimsMatcher

Whether to look for a match only in user info part.

maxAgeLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeAuthenticationContext

Strategy used to obtain the request max_age value.

messageContext - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.BuildClientInformation

The MessageContext to operate on.

messageEncoder - Variable in class net.shibboleth.idp.plugin.oidc.op.encoding.impl.OIDCResponseEncoderFactory

The message encoder to be returned by this factory.

metadata - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.FormOutboundDiscoveryResponse

metadata to publish.

metadataContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCSignatureSigningParameters

Strategy used to look up a SAML metadata context.

metadataContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCSignatureSigningParametersHandler

Strategy used to look up a SAML metadata context.

metadataPolicy - Variable in class net.shibboleth.idp.plugin.oidc.op.admin.impl.IssueRegistrationAccessToken

The resolved metadata policy.

metadataPolicy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddRemainingClaimsToClientMetadata

The metadata policy used for finding out remaining claims.

metadataPolicy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRegistrationRequestMetadata

The metadata policy used for validation.

metadataPolicyContext - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeRegistrationMetadataPolicyContext

The metadata policy context to operate on.

metadataPolicyEnforcer - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRegistrationRequestMetadata

Function used for enforcing the metadata policy.

metadataPolicyLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.admin.impl.IssueRegistrationAccessToken

Lookup function for the metadata policy.

metadataPolicyMergingStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeRegistrationMetadataPolicyContext

The strategy used for merging profile and token based metadata policies.

metadataPolicyValidationStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeRegistrationMetadataPolicyContext

The strategy used for validating token and merged metadata policies.

metadataResolver - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.FormOutboundDiscoveryResponse

The resolver for the metadata that is being distributed.

N

NAMESPACE - Static variable in class net.shibboleth.idp.plugin.oidc.op.attribute.filter.spring.impl.AttributeFilterNamespaceHandler

oidc namespace.

net.shibboleth.idp.plugin.oidc.op - package net.shibboleth.idp.plugin.oidc.op

Top level OIDC OP plugin classes.

net.shibboleth.idp.plugin.oidc.op.admin.impl - package net.shibboleth.idp.plugin.oidc.op.admin.impl

Classes implementing administrative functionality.

net.shibboleth.idp.plugin.oidc.op.attribute.filter.matcher.impl - package net.shibboleth.idp.plugin.oidc.op.attribute.filter.matcher.impl

This is package for all OIDC matchers.

net.shibboleth.idp.plugin.oidc.op.attribute.filter.policyrule.impl - package net.shibboleth.idp.plugin.oidc.op.attribute.filter.policyrule.impl

Package for OIDC attribute filter policy rule implementations.

net.shibboleth.idp.plugin.oidc.op.attribute.filter.spring.impl - package net.shibboleth.idp.plugin.oidc.op.attribute.filter.spring.impl

Package for OIDC attribute filter name handlers.

net.shibboleth.idp.plugin.oidc.op.attribute.filter.spring.matcher.impl - package net.shibboleth.idp.plugin.oidc.op.attribute.filter.spring.matcher.impl

Package for OIDC attribute filter matcher parsers.

net.shibboleth.idp.plugin.oidc.op.attribute.filter.spring.policyrule.impl - package net.shibboleth.idp.plugin.oidc.op.attribute.filter.spring.policyrule.impl

Package for OIDC attribute filter policy rule parsers.

net.shibboleth.idp.plugin.oidc.op.audit.impl - package net.shibboleth.idp.plugin.oidc.op.audit.impl

Package for audit extractors related to OIDC.

net.shibboleth.idp.plugin.oidc.op.authn.impl - package net.shibboleth.idp.plugin.oidc.op.authn.impl

Implementation classes supporting OIDC/OAuth client authentication.

net.shibboleth.idp.plugin.oidc.op.cli - package net.shibboleth.idp.plugin.oidc.op.cli

Classes related to the CLI tool for the registration access token issuance.

net.shibboleth.idp.plugin.oidc.op.criterion - package net.shibboleth.idp.plugin.oidc.op.criterion

Criteria related to OIDC entity resolution.

net.shibboleth.idp.plugin.oidc.op.decoding.impl - package net.shibboleth.idp.plugin.oidc.op.decoding.impl

Message decoders related to OIDC messaging.

net.shibboleth.idp.plugin.oidc.op.encoding.impl - package net.shibboleth.idp.plugin.oidc.op.encoding.impl

Message encoders related to OIDC messaging.

net.shibboleth.idp.plugin.oidc.op.metadata.impl - package net.shibboleth.idp.plugin.oidc.op.metadata.impl

Implementation classes related to resolution of OIDC metadata (or client information).

net.shibboleth.idp.plugin.oidc.op.oauth2.decoding.impl - package net.shibboleth.idp.plugin.oidc.op.oauth2.decoding.impl

Message decoders related to OAuth2 messaging.

net.shibboleth.idp.plugin.oidc.op.oauth2.messaging.impl - package net.shibboleth.idp.plugin.oidc.op.oauth2.messaging.impl

OAuth2 message implementations.

net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl - package net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl

Profile action implementations related to OAuth2.

net.shibboleth.idp.plugin.oidc.op.profile.impl - package net.shibboleth.idp.plugin.oidc.op.profile.impl

Profile action implementations related to OIDC.

net.shibboleth.idp.plugin.oidc.op.profile.logic - package net.shibboleth.idp.plugin.oidc.op.profile.logic

Functions and predicates supporting common oidc profile behavior.

net.shibboleth.idp.plugin.oidc.op.profile.spring.factory - package net.shibboleth.idp.plugin.oidc.op.profile.spring.factory

Factory beans for idp-oidc-extension-impl project.

net.shibboleth.idp.plugin.oidc.op.profile.spring.relyingparty.metadata.impl - package net.shibboleth.idp.plugin.oidc.op.profile.spring.relyingparty.metadata.impl

Spring-aware tools for resolving OIDC entities.

net.shibboleth.idp.plugin.oidc.op.security.impl - package net.shibboleth.idp.plugin.oidc.op.security.impl

Classes related to signing, signature validation, encryption and decryption parameter resolution.

net.shibboleth.idp.plugin.oidc.op.security.jwt.claims.impl - package net.shibboleth.idp.plugin.oidc.op.security.jwt.claims.impl

Validation functions for JWT claims.

net.shibboleth.idp.plugin.oidc.op.servlet - package net.shibboleth.idp.plugin.oidc.op.servlet

Classes extending/exploiting the Java Servlet API.

net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl - package net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl

Classes supporting the implementation of the UserInfo endpoint.

NimbusResponseEncoder - Class in net.shibboleth.idp.plugin.oidc.op.encoding.impl

A message encodes that encodes the Nimbus Response in the message context inside the attached HttpServletResponse.

NimbusResponseEncoder() - Constructor for class net.shibboleth.idp.plugin.oidc.op.encoding.impl.NimbusResponseEncoder

noResultIsError - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCSignatureSigningParameters

Whether failure to resolve parameters should be raised as an error.

noResultIsError - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCSignatureSigningParametersHandler

Whether failure to resolve parameters should be raised as an error.

O

OAuth2IntrospectionRequestDecoder - Class in net.shibboleth.idp.plugin.oidc.op.oauth2.decoding.impl

Message decoder decoding OpenID Connect TokenIntrospectionRequests.

OAuth2IntrospectionRequestDecoder() - Constructor for class net.shibboleth.idp.plugin.oidc.op.oauth2.decoding.impl.OAuth2IntrospectionRequestDecoder

OAuth2RevocationErrorResponse - Class in net.shibboleth.idp.plugin.oidc.op.oauth2.messaging.impl

OAuth2 Token Revocation Error message class.

OAuth2RevocationErrorResponse(ErrorObject) - Constructor for class net.shibboleth.idp.plugin.oidc.op.oauth2.messaging.impl.OAuth2RevocationErrorResponse

Constructor.

OAuth2RevocationRequestDecoder - Class in net.shibboleth.idp.plugin.oidc.op.oauth2.decoding.impl

Message decoder decoding OpenID Connect TokenRevocationRequests.

OAuth2RevocationRequestDecoder() - Constructor for class net.shibboleth.idp.plugin.oidc.op.oauth2.decoding.impl.OAuth2RevocationRequestDecoder

OAuth2RevocationSuccessResponse - Class in net.shibboleth.idp.plugin.oidc.op.oauth2.messaging.impl

OAuth2 Token Revocation Success message class.

OAuth2RevocationSuccessResponse() - Constructor for class net.shibboleth.idp.plugin.oidc.op.oauth2.messaging.impl.OAuth2RevocationSuccessResponse

objectMapper - Variable in class net.shibboleth.idp.plugin.oidc.op.admin.impl.AbstractAdminApiProfileAction

JSON object mapper.

objectMapper - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRegistrationAccessToken

JSON object mapper.

objectName - Variable in class net.shibboleth.idp.plugin.oidc.op.metadata.impl.ArrayMetadataValueResolver

The name of the JSON object, can be null to return only values of embedded resolvers.

OIDCAuthenticationRequestDecoder - Class in net.shibboleth.idp.plugin.oidc.op.decoding.impl

Message decoder decoding OpenID Connect AuthenticationRequests.

OIDCAuthenticationRequestDecoder() - Constructor for class net.shibboleth.idp.plugin.oidc.op.decoding.impl.OIDCAuthenticationRequestDecoder

OIDCClientInfoCredentialValidator - Class in net.shibboleth.idp.plugin.oidc.op.authn.impl

A password validator that authenticates against OIDC client metadata (which may itself be emulated via SAML metadata).

OIDCClientInfoCredentialValidator() - Constructor for class net.shibboleth.idp.plugin.oidc.op.authn.impl.OIDCClientInfoCredentialValidator

Constructor.

oidcClientInformation - Variable in class net.shibboleth.idp.plugin.oidc.op.criterion.ClientInformationCriterion

Client information.

OIDCClientInformationEncryptionParametersResolver - Class in net.shibboleth.idp.plugin.oidc.op.security.impl

A specialization of BasicEncryptionParametersResolver which resolves both encryption and decryption credentials and algorithm preferences using client registration data of OIDC client.

OIDCClientInformationEncryptionParametersResolver() - Constructor for class net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationEncryptionParametersResolver

Constructor.

OIDCClientInformationEncryptionParametersResolver.ParameterType - Enum in net.shibboleth.idp.plugin.oidc.op.security.impl

Whether to create parameters for request object decryption, id token encryption or userinfo response encryption.

OIDCClientInformationSignatureSigningParametersResolver - Class in net.shibboleth.idp.plugin.oidc.op.security.impl

A specialization of BasicSignatureSigningParametersResolver which supports selecting signing credentials based on client registration data and instantiating HS credentials when needed.

OIDCClientInformationSignatureSigningParametersResolver() - Constructor for class net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationSignatureSigningParametersResolver

OIDCClientInformationSignatureSigningParametersResolver.ParameterType - Enum in net.shibboleth.idp.plugin.oidc.op.security.impl

Whether to create parameters for id token signing or userinfo response signing.

OIDCClientInformationSignatureValidationParametersResolver - Class in net.shibboleth.idp.plugin.oidc.op.security.impl

A specialization of BasicSignatureSigningParametersResolver which supports selecting signature validation credentials based on client registration data.

OIDCClientInformationSignatureValidationParametersResolver() - Constructor for class net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationSignatureValidationParametersResolver

OIDCClientInformationSignatureValidationParametersResolver.ParameterType - Enum in net.shibboleth.idp.plugin.oidc.op.security.impl

Whether to create parameters for request object signature validation or token endpoint JWT validation.

OIDCClientRegistrationRequestDecoder - Class in net.shibboleth.idp.plugin.oidc.op.decoding.impl

Message decoder decoding OpenID Connect ClientRegistrationRequests.

OIDCClientRegistrationRequestDecoder() - Constructor for class net.shibboleth.idp.plugin.oidc.op.decoding.impl.OIDCClientRegistrationRequestDecoder

oidcInputMetadataLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCClientMetadataPopulationAction

Strategy used to locate the OIDCClientMetadata associated with the request (input).

oidcMetadataContext - Variable in class net.shibboleth.idp.plugin.oidc.op.authn.impl.ValidateClientAuthenticationType

The attached OIDC metadata context.

oidcMetadataContext - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCAuthenticationResponseAction

OIDC Metadata context.

oidcMetadataContext - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCResponseAction

OIDC Metadata context.

oidcMetadataContext - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCTokenResponseAction

OIDC Metadata context.

oidcMetadataContext - Variable in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.AbstractOIDCUserInfoResponseAction

OIDC Metadata context.

oidcMetadataContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.authn.impl.OIDCClientInfoCredentialValidator

Strategy that will return OIDCMetadataContext.

oidcMetadataContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.authn.impl.ValidateClientAuthenticationType

Strategy that will return OIDCMetadataContext.

oidcMetadataContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeRelyingPartyContext

Strategy that will return OIDCMetadataContext.

oidcMetadataContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCEncryptionParameters

Strategy used to look up a OIDC metadata context.

oidcMetadataContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCSignatureSigningParameters

Strategy used to look up a OIDC metadata context.

oidcMetadataContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCSignatureSigningParametersHandler

Strategy used to look up a OIDC metadata context.

oidcMetadataContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.logic.ClientIDFromOIDCMetadataContextLookupFunction

Deprecated.

Strategy that will return OIDCMetadataContext.

oidcMetadataContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.logic.DefaultSubjectTypeStrategy

Strategy function to lookup OIDC metadata context .

oidcMetadataCtx - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeOutboundAuthenticationResponseMessageContext

The OIDC metadata context used as a source for the SAML metadata context.

oidcMetadataCtxLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeOutboundAuthenticationResponseMessageContext

Strategy function to lookup the OIDCMetadataContext.

OIDCMetadataLookupHandler - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Handler for inbound OIDC protocol messages that attempts to locate OIDC metadata for a rp, and attaches it with a OIDCMetadataContext as a child of a pre-existing instance of MessageContext.

OIDCMetadataLookupHandler() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.OIDCMetadataLookupHandler

Constructor.

OIDCOPModule - Class in net.shibboleth.idp.plugin.oidc.op

IdPModule implementation.

OIDCOPModule() - Constructor for class net.shibboleth.idp.plugin.oidc.op.OIDCOPModule

Constructor.

OIDCOPPlugin - Class in net.shibboleth.idp.plugin.oidc.op

Details about the OIDC OP plugin.

OIDCOPPlugin() - Constructor for class net.shibboleth.idp.plugin.oidc.op.OIDCOPPlugin

Constructor.

oidcOutputMetadataLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCClientMetadataPopulationAction

Strategy used to locate the OIDCClientMetadata associated with the response (output).

oidcResponseContext - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCAuthenticationResponseAction

oidc response context.

oidcResponseContext - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCResponseAction

oidc response context.

oidcResponseContext - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCTokenResponseAction

oidc response context.

oidcResponseContext - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.BuildClientInformation

The OIDCClientRegistrationResponseContext to operate on.

oidcResponseContext - Variable in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.AbstractOIDCUserInfoValidationResponseAction

oidc response context.

oidcResponseContextCreationStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeOutboundRegistrationResponseMessageContext

Strategy that will return or create a OIDCClientRegistrationResponseContext.

oidcResponseContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.BuildClientInformation

Strategy used to locate the OIDCClientRegistrationResponseContext associated with a given MessageContext.

oidcResponseContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.GenerateClientID

Strategy used to locate the OIDCClientRegistrationResponseContext associated with a given request.

oidcResponseContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.GenerateClientSecret

Strategy used to locate the OIDCClientRegistrationResponseContext associated with a given MessageContext.

oidcResponseContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.StoreClientInformation

Strategy used to locate the OIDCClientRegistrationResponseContext associated with a given MessageContext.

oidcResponseCtx - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.GenerateClientID

The OIDCClientRegistrationResponseContext to create the client ID to.

oidcResponseCtx - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.GenerateClientSecret

The OIDCClientRegistrationResponseContext to create the client secret to.

OIDCResponseEncoderFactory - Class in net.shibboleth.idp.plugin.oidc.op.encoding.impl

A source of encoders that first verifies a message being an instance of Nimbus Response and then returns the attached MessageEncoder.

OIDCResponseEncoderFactory() - Constructor for class net.shibboleth.idp.plugin.oidc.op.encoding.impl.OIDCResponseEncoderFactory

OIDCTokenRequestDecoder - Class in net.shibboleth.idp.plugin.oidc.op.decoding.impl

Message decoder decoding OpenID Connect TokenRequests.

OIDCTokenRequestDecoder() - Constructor for class net.shibboleth.idp.plugin.oidc.op.decoding.impl.OIDCTokenRequestDecoder

OIDCUserInfoRequestDecoder - Class in net.shibboleth.idp.plugin.oidc.op.decoding.impl

Message decoder decoding OpenID Connect UserInfoRequests.

OIDCUserInfoRequestDecoder() - Constructor for class net.shibboleth.idp.plugin.oidc.op.decoding.impl.OIDCUserInfoRequestDecoder

onlyIfEssential - Variable in class net.shibboleth.idp.plugin.oidc.op.attribute.filter.matcher.impl.AttributeInOIDCRequestedClaimsMatcher

Whether to drop non essential claims.

onStartup(Set<Class<?>>, ServletContext) - Method in class net.shibboleth.idp.plugin.oidc.op.servlet.RegisterFilterServletContextInitializer

OutboundMessageClassLookupFunction - Class in net.shibboleth.idp.plugin.oidc.op.audit.impl

Looks up the value of the simple class name from the outbound message context's message object.

OutboundMessageClassLookupFunction() - Constructor for class net.shibboleth.idp.plugin.oidc.op.audit.impl.OutboundMessageClassLookupFunction

Constructor.

outputMetadata - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCClientMetadataPopulationAction

The OIDCClientMetadata to populate metadata to.

P

PairwiseSubjectActivationCondition - Class in net.shibboleth.idp.plugin.oidc.op.profile.logic

Activation condition returning true if pairwise subject is requested.

PairwiseSubjectActivationCondition() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.logic.PairwiseSubjectActivationCondition

ParameterType() - Constructor for enum net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationEncryptionParametersResolver.ParameterType

ParameterType() - Constructor for enum net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationSignatureSigningParametersResolver.ParameterType

ParameterType() - Constructor for enum net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationSignatureValidationParametersResolver.ParameterType

params - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.AbstractEncryptTokenAction

Encryption parameters for encrypting payload.

params - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.DecryptRequestObject

Decryption parameters for decrypting payload.

parse(byte[]) - Method in class net.shibboleth.idp.plugin.oidc.op.metadata.impl.FilesystemMetadataValueResolver

parse(byte[]) - Method in class net.shibboleth.idp.plugin.oidc.op.metadata.impl.FilesystemProviderMetadataResolver

parseAccessToken(AccessToken) - Method in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.ParseAccessToken

Attempt to parse token.

parseAccessToken(Token) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.AbstractProcessTokenAction

Attempt to parse token.

ParseAccessToken - Class in net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl

Action that parses an access token and initially populates the claims for later validation.

ParseAccessToken() - Constructor for class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.ParseAccessToken

parseJwkCredential(Credential) - Method in class net.shibboleth.idp.plugin.oidc.op.metadata.impl.CredentialMetadataValueResolver

Set the credential to be resolved as JSON.

parseMessage() - Method in class net.shibboleth.idp.plugin.oidc.op.decoding.impl.OIDCAuthenticationRequestDecoder

Parses the message into the exact type of the request message.

parseMessage() - Method in class net.shibboleth.idp.plugin.oidc.op.decoding.impl.OIDCClientRegistrationRequestDecoder

Parses the message into the exact type of the request message.

parseMessage() - Method in class net.shibboleth.idp.plugin.oidc.op.decoding.impl.OIDCTokenRequestDecoder

Parses the message into the exact type of the request message.

parseMessage() - Method in class net.shibboleth.idp.plugin.oidc.op.decoding.impl.OIDCUserInfoRequestDecoder

Parses the message into the exact type of the request message.

parseMessage() - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.decoding.impl.BaseOAuth2RequestDecoder

Parses the message into the exact type of the request message.

parseMessage() - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.decoding.impl.OAuth2IntrospectionRequestDecoder

Parses the message into the exact type of the request message.

parseMessage() - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.decoding.impl.OAuth2RevocationRequestDecoder

Parses the message into the exact type of the request message.

parseRefreshToken(Token) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.AbstractProcessTokenAction

Attempt to parse refresh token.

plainClaimsValidator - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRequestObject

The claims validator to be applied for validating the plain/unsigned request object.

plainPKCE - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateCodeChallenge

Whether plain PKCE is allowed.

plainPKCE - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidatePKCE

Whether plain PKCE is allowed.

policyId - Variable in class net.shibboleth.idp.plugin.oidc.op.admin.impl.IssueRegistrationAccessToken

The policy identifier.

policyId - Variable in class net.shibboleth.idp.plugin.oidc.op.cli.IssueRegistrationAccessTokenArguments

Metadata policy identifier for the access token to be issued.

policyIdLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.admin.impl.IssueRegistrationAccessToken

Lookup function for the policy identifier.

policyIdPolicyName - Variable in class net.shibboleth.idp.plugin.oidc.op.admin.impl.IssueRegistrationAccessToken

Name of access control policy governing policyId acceptance.

policyLocation - Variable in class net.shibboleth.idp.plugin.oidc.op.admin.impl.IssueRegistrationAccessToken

The policy location.

policyLocation - Variable in class net.shibboleth.idp.plugin.oidc.op.cli.IssueRegistrationAccessTokenArguments

Metadata policy to embed in the token.

policyLocationLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.admin.impl.IssueRegistrationAccessToken

Lookup function for the policy location.

policyLocationPolicyName - Variable in class net.shibboleth.idp.plugin.oidc.op.admin.impl.IssueRegistrationAccessToken

Name of access control policy governing policyLocation acceptance.

PopulateOIDCEncryptionParameters - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Action that resolves and populates EncryptionParameters on an EncryptionContext created/accessed via a lookup function, by default on a RelyingPartyContext child of the profile request context.

PopulateOIDCEncryptionParameters() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCEncryptionParameters

Constructor.

PopulateOIDCMetadataContext - Class in net.shibboleth.idp.plugin.oidc.op.oauth2.messaging.impl

A message handler that attempts to locate OIDC client information from the SAML entity descriptor containing role descriptor of type SPSSODescriptor.

PopulateOIDCMetadataContext() - Constructor for class net.shibboleth.idp.plugin.oidc.op.oauth2.messaging.impl.PopulateOIDCMetadataContext

Constructor.

PopulateOIDCSignatureSigningParameters - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Action that resolves and populates SignatureSigningParameters on a SecurityParametersContext created/accessed via a lookup function, by default on the outbound message context.

PopulateOIDCSignatureSigningParameters(ContextDataLookupFunction<ProfileRequestContext, MessageContext>) - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCSignatureSigningParameters

Constructor.

PopulateOIDCSignatureSigningParametersHandler - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Handler that resolves and populates SignatureSigningParameters on a SecurityParametersContext created/accessed via a lookup function, by default as an immediate child context of the target MessageContext.

PopulateOIDCSignatureSigningParametersHandler() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCSignatureSigningParametersHandler

Constructor.

populateSubject(ClientID, SignedJWT) - Method in class net.shibboleth.idp.plugin.oidc.op.authn.impl.JWTCredentialValidator

Builds a subject with "standard" content from the validation.

preferredPrincipalContext - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthenticationContextClassReferenceToResponseContext

preferred principal context.

ProcessRequestedAuthnContext - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

An action that creates an RequestedPrincipalContext or PreferredPrincipalContext and attaches it to the current AuthenticationContext.

ProcessRequestedAuthnContext() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.ProcessRequestedAuthnContext

Constructor.

ProcessTokenForIntrospection - Class in net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl

Action that processes a token for introspection.

ProcessTokenForIntrospection() - Constructor for class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.ProcessTokenForIntrospection

ProcessTokenForRevocation - Class in net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl

Action that processes a token for revocation.

ProcessTokenForRevocation() - Constructor for class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.ProcessTokenForRevocation

profileMetadataPolicyLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeRegistrationMetadataPolicyContext

The strategy used to locate the request metadata policy configured for the profile.

promptLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeAuthenticationContext

Strategy used to obtain the requested prompt value.

promptLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.RevokeConsent

Strategy used to obtain the requested prompt value.

protocolMessageLog - Variable in class net.shibboleth.idp.plugin.oidc.op.encoding.impl.NimbusResponseEncoder

Used to log protocol messages.

protocolMessageLog - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.decoding.impl.BaseOAuth2RequestDecoder

Used to log protocol messages.

ProviderMetadataResolverServiceStrategy - Class in net.shibboleth.idp.plugin.oidc.op.profile.spring.relyingparty.metadata.impl

Strategy for summoning up a ProviderMetadataResolver from a populated ApplicationContext.

ProviderMetadataResolverServiceStrategy() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.spring.relyingparty.metadata.impl.ProviderMetadataResolverServiceStrategy

proxiedRequesterContextCreationStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.ValidateAudience

Strategy used for locating/creating the proxy context.

PublicSubjectActivationCondition - Class in net.shibboleth.idp.plugin.oidc.op.profile.logic

Activation condition returning true if public subject is requested.

PublicSubjectActivationCondition() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.logic.PublicSubjectActivationCondition

Constructor.

R

redirectURILookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRedirectURI

Strategy used to obtain the redirect uri value in request.

refreshTokenLifetime - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRefreshTokenToResponseContext

Refresh Token lifetime.

refreshTokenLifetimeLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRefreshTokenToResponseContext

Strategy used to obtain the refresh token lifetime.

refreshTokensEnabledPredicate - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateGrant

Predicate used to indicate whether refresh tokens are enabled.

refreshTokensPredicate - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddGrantTypeToClientMetadata

Predicate used to indicate whether refresh tokens are enabled.

registeredRedirectURIsLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRedirectURI

Strategy used to obtain registered redirect uris to compare if request had no redirect uri value.

RegisterFilterServletContextInitializer - Class in net.shibboleth.idp.plugin.oidc.op.servlet

A ServletContainerInitializer implementation that registers dynamic response header filter for enabling configurable headers.

RegisterFilterServletContextInitializer() - Constructor for class net.shibboleth.idp.plugin.oidc.op.servlet.RegisterFilterServletContextInitializer

registrationClaimsContextCreationStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRegistrationAccessToken

Strategy to create or return a OIDCClientRegistrationTokenClaimsContext.

registrationMetadataPolicyContext - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRegistrationRequestMetadata

The metadata policy context to operate on.

registrationMetadataPolicyContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddRemainingClaimsToClientMetadata

Strategy that will return OIDCClientRegistrationMetadataPolicyContext.

registrationMetadataPolicyContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRegistrationRequestMetadata

Strategy that will return OIDCClientRegistrationMetadataPolicyContext.

registrationPolicyContextCreationStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeRegistrationMetadataPolicyContext

The strategy used to create or locate the metadata policy context.

registrationTokenContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.GenerateClientID

Strategy used to locate the OIDCClientRegistrationTokenClaimsContext associated with the request.

registrationTokenContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.StoreClientInformation

Strategy used to locate the OIDCClientRegistrationTokenClaimsContext associated with the request.

registrationTokenCtx - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.GenerateClientID

The OIDCClientRegistrationTokenClaimsContext from which to optionally obtain client ID.

registrationTokenCtx - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.StoreClientInformation

The OIDCClientRegistrationTokenClaimsContext from which to optionally obtain client ID.

registrationValidityPeriodStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.StoreClientInformation

Strategy to obtain registration validity period policy.

relyingPartyContext - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRegistrationAccessToken

The relying party context to operate on.

relyingPartyContextCreationStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeRelyingPartyContext

Strategy that will return or create a RelyingPartyContext.

relyingPartyContextCreationStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeUnverifiedRelyingPartyContext

Strategy that will return or create a RelyingPartyContext.

relyingPartyContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.metadata.impl.AlgorithmInfoMetadataValueResolver

Strategy used to locate the RelyingPartyContext associated with a given ProfileRequestContext.

relyingPartyContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.metadata.impl.CredentialMetadataValueResolver

Strategy used to locate the RelyingPartyContext associated with a given ProfileRequestContext.

relyingPartyContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.metadata.impl.FilesystemProviderMetadataResolver

Strategy used to locate the RelyingPartyContext associated with a given ProfileRequestContext.

relyingPartyContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.FormOutboundKeySetResponseMessage

Strategy used to locate the RelyingPartyContext associated with a given ProfileRequestContext.

relyingPartyContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.GenerateClientID

Strategy used to locate the RelyingPartyContext associated with a given ProfileRequestContext.

relyingPartyContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateGrant

Strategy used to locate the RelyingPartyContext associated with a given ProfileRequestContext.

relyingPartyContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRegistrationAccessToken

Strategy that will return a RelyingPartyContext.

relyingPartyContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.AddUserInfoShell

Strategy used to locate the RelyingPartyContext associated with a given ProfileRequestContext.

relyingPartyCtx - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeOutboundAuthenticationResponseMessageContext

The relying party context used for storing the SAML metadata context.

relyingPartyCtxLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeOutboundAuthenticationResponseMessageContext

Strategy used to locate the RelyingPartyContext associated with a given ProfileRequestContext.

relyingPartyIdLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.ValidateAudience

Strategy used to obtain the relying party ID.

relyingPartyIdLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateScope

Strategy used to obtain the relying party ID.

remoteJwkSetCache - Variable in class net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationEncryptionParametersResolver

The cache for remote JWK key sets.

remoteJwkSetCache - Variable in class net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationSignatureValidationParametersResolver

The cache for remote JWK key sets.

replacement - Variable in class net.shibboleth.idp.plugin.oidc.op.cli.IssueRegistrationAccessTokenArguments

Flag to signal one-time use of the token.

replacementLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.admin.impl.IssueRegistrationAccessToken

Lookup function for the flag signaling replacement use of the token.

replayCache - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateGrant

Message replay cache instance to use.

request - Variable in class net.shibboleth.idp.plugin.oidc.op.authn.impl.ExtractClientAuthenticationFromRequest

Message to extract credentials from.

request - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCRequestAction

OIDC request.

request - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.CheckRedirectURIs

The OIDCClientRegistrationRequest to check redirect URIs from.

request - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRegistrationRequestMetadata

The OIDCClientRegistrationRequest to validate.

REQUEST_OBJECT_DECRYPTION - net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationEncryptionParametersResolver.ParameterType

Type for request object decryption.

REQUEST_OBJECT_VALIDATION - net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationSignatureValidationParametersResolver.ParameterType

Type for request object validation.

requestedAudienceLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.ValidateAudience

Strategy used to obtain the requested audience.

requestedClaimsLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRequestedClaimsToResponseContext

Strategy used to obtain the requested claims of request.

requestedPrincipalContext - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthenticationContextClassReferenceToResponseContext

requested principal context.

requestedScopeLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateScope

Strategy used to obtain the requested scope value.

requestLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.audit.impl.ForceAuthnAuditExtractor

Lookup strategy for message to read from.

requestLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.audit.impl.IsPassiveAuditExtractor

Lookup strategy for message to read from.

requestLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.audit.impl.RevokedTokenAuditExtractor

Lookup strategy for message to read from.

requestNonceLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddNonceToIDToken

Strategy used to obtain the request nonce.

requestObject - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.DecryptRequestObject

Request Object.

requestObject - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRequestObject

Request Object.

RequestUtil - Class in net.shibboleth.idp.plugin.oidc.op.decoding.impl

Request logging helper class.

RequestUtil() - Constructor for class net.shibboleth.idp.plugin.oidc.op.decoding.impl.RequestUtil

Private constructor.

requireRequestedValue - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRedirectURI

Whether to require redirect uri value in the request also when only single value is registered.

reservedClaimNames - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddAttributesToClaimsSet

List of claim names that will not be added.

resolve(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.metadata.impl.AlgorithmInfoMetadataValueResolver

resolve(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.metadata.impl.ArrayMetadataValueResolver

resolve(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.metadata.impl.CredentialMetadataValueResolver

resolve(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.metadata.impl.DynamicFilesystemProviderMetadataResolver

resolve(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.metadata.impl.FilesystemMetadataValueResolver

Returns all the resolved objects.

resolve(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.metadata.impl.FilesystemProviderMetadataResolver

resolveAlgorithm() - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractSignJWTAction

Resolves JWS algorithm from signature signing parameters.

resolveAndPopulateCredentialAndSignatureAlgorithm(SignatureSigningParameters, CriteriaSet, Predicate<String>) - Method in class net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationSignatureSigningParametersResolver

resolveAndPopulateCredentialAndSignatureAlgorithm(SignatureSigningParameters, CriteriaSet, Predicate<String>) - Method in class net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationSignatureValidationParametersResolver

resolveAndPopulateCredentialsAndAlgorithms(EncryptionParameters, CriteriaSet, Predicate<String>) - Method in class net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationEncryptionParametersResolver

resolveEncryptionAlgs - Variable in class net.shibboleth.idp.plugin.oidc.op.metadata.impl.AlgorithmInfoMetadataValueResolver

Whether to resolve data and key transport encryption algorithms.

resolveKeyTransportEncAlgs - Variable in class net.shibboleth.idp.plugin.oidc.op.metadata.impl.AlgorithmInfoMetadataValueResolver

Whether to resolve key transport encryption algorithms.

resolver - Variable in class net.shibboleth.idp.plugin.oidc.op.admin.impl.DoClientManagementOperation

ClientInformationResolver to operate on.

resolver - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCSignatureSigningParameters

Resolver for parameters to store into context.

resolver - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCSignatureSigningParametersHandler

Resolver for parameters to store into context.

resolveSingle(CriteriaSet) - Method in class net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationEncryptionParametersResolver

resolveSingle(CriteriaSet) - Method in class net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationSignatureSigningParametersResolver

resolveSingle(CriteriaSet) - Method in class net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationSignatureValidationParametersResolver

resolveSingle(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.metadata.impl.AlgorithmInfoMetadataValueResolver

resolveSingle(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.metadata.impl.ArrayMetadataValueResolver

resolveSingle(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.metadata.impl.CredentialMetadataValueResolver

resolveSingle(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.metadata.impl.FilesystemMetadataValueResolver

Returns a single resolved object.

resolveSingle(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.metadata.impl.FilesystemProviderMetadataResolver

response - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.StoreClientInformation

The response message.

responseClaimsSetLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddAttributesToClaimsSet

Strategy used to locate the response ClaimsSet associated with a given ProfileRequestContext.

responseClaimsSetLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddTokenDeliveryAttributesToClaimsSet

Strategy used to locate the response ClaimsSet associated with a given ProfileRequestContext.

ResponseUtil - Class in net.shibboleth.idp.plugin.oidc.op.encoding.impl

Response logging helper class.

ResponseUtil() - Constructor for class net.shibboleth.idp.plugin.oidc.op.encoding.impl.ResponseUtil

Private constructor.

revocationCache - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.RevokeToken

Message revocation cache instance to use.

revocationCache - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRefreshTokenToResponseContext

Message revocation cache instance to use.

revocationCache - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateGrant

Message revocation cache instance to use.

revocationCache - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRegistrationAccessToken

Message revocation cache instance to use.

revocationCache - Variable in class net.shibboleth.idp.plugin.oidc.op.security.jwt.claims.impl.RootTokenIdRevocationValidator

Message revocation cache instance to use.

revocationLifetime - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.RevokeToken

Revocation lifetime to use.

revocationMethod - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.RevokeToken

Revocation method used when revoking a token.

revocationMethodLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.RevokeToken

Which revocation method should be used when revoking a token.

revokeChain(String, Duration) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateGrant

Revokes the token chain with the given id, optionally with a given lifetime.

RevokeConsent - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Action that revokes consent if offline_access scope or prompt with consent is requested.

RevokeConsent() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.RevokeConsent

Constructor.

RevokedTokenAuditExtractor - Class in net.shibboleth.idp.plugin.oidc.op.audit.impl

Function that returns token to be revoked by TokenRevocationRequest.

RevokedTokenAuditExtractor(Function<ProfileRequestContext, TokenRevocationRequest>) - Constructor for class net.shibboleth.idp.plugin.oidc.op.audit.impl.RevokedTokenAuditExtractor

Constructor.

RevokeToken - Class in net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl

Action that revokes a single token or the full chain of tokens, depending on the result of the configured lookup strategy for the revocation method.

RevokeToken() - Constructor for class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.RevokeToken

Constructor.

rootTokenIdentifierLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.RevokeToken

Lookup function to supply root token identifier.

RootTokenIdRevocationValidator - Class in net.shibboleth.idp.plugin.oidc.op.security.jwt.claims.impl

Verifies the root identifier (TokenClaimsSet.KEY_ROOT_JTI from the JWT against revocation via configurable RevocationCache.

RootTokenIdRevocationValidator() - Constructor for class net.shibboleth.idp.plugin.oidc.op.security.jwt.claims.impl.RootTokenIdRevocationValidator

rpCtx - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddIDTokenShell

The RelyingPartyContext to operate on.

rpCtx - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.GenerateClientID

The RelyingPartyContext to operate on.

rpCtx - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateGrant

The RelyingPartyContext to operate on.

rpCtx - Variable in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.AddUserInfoShell

The RelyingPartyContext to operate on.

S

samlMetadataContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.messaging.impl.PopulateOIDCMetadataContext

Set the strategy used to look up the SAMLMetadataContext to draw from.

samlMetadataCtxLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeOutboundAuthenticationResponseMessageContext

Strategy used to locate the SAMLMetadataContext associated with a given ProfileRequestContext.

saveTokenToCredentialSet - Variable in class net.shibboleth.idp.plugin.oidc.op.authn.impl.JWTCredentialValidator

Whether to save the JWT in the Java Subject's public credentials.

SCHEMA_TYPE_AFP - Static variable in class net.shibboleth.idp.plugin.oidc.op.attribute.filter.spring.matcher.impl.AttributeInOIDCRequestedClaimsRuleParser

Schema type - afp.

SCHEMA_TYPE_AFP - Static variable in class net.shibboleth.idp.plugin.oidc.op.attribute.filter.spring.policyrule.impl.AttributeOIDCScopeRuleParser

Schema type.

sealClaims(JWTClaimsSet) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.BuildAccessToken

Rewrites a plaintext claimsset to hide custom claims used solely by the OP.

secConfiguration - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.FormOutboundKeySetResponseMessage

Security configuration we look for keys to publish.

secretExpirationPeriodStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.GenerateClientSecret

Strategy to obtain client secret validity period policy.

sectorIdentifierLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetSectorIdentifierForAttributeResolution

Strategy used to obtain sector identifier.

securityParametersContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCSignatureSigningParameters

Strategy used to look up the SecurityParametersContext to set the parameters for.

securityParametersContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCSignatureSigningParametersHandler

Strategy used to look up the SecurityParametersContext to set the parameters for.

securityParametersLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.authn.impl.JWTCredentialValidator

Strategy used to locate the SecurityParametersContext to use for verification.

securityParametersLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCSigningResponseAction

Strategy used to locate the SecurityParametersContext to use for signing.

securityParametersLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRequestObject

Strategy used to locate the SecurityParametersContext to use for signing.

selfAudienceCondition - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.ValidateAudience

Whether the request includes the OP as an audience.

sendError(int, String, String) - Method in class net.shibboleth.idp.plugin.oidc.op.admin.impl.AbstractAdminApiProfileAction

Output an error object.

setAccessControlService(AccessControlService) - Method in class net.shibboleth.idp.plugin.oidc.op.admin.impl.IssueRegistrationAccessToken

Set the AccessControlService to use.

setAccessTokenContextCreationStrategy(Function<ProfileRequestContext, AccessTokenContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.BuildAccessToken

Set the strategy used to create the AccessTokenContext to use.

setAccessTokenContextCreationStrategy(Function<ProfileRequestContext, AccessTokenContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.EncryptAccessToken

Set the strategy used to create the AccessTokenContext to use.

setAccessTokenContextCreationStrategy(Function<ProfileRequestContext, AccessTokenContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.SignAccessToken

Set the strategy used to create the AccessTokenContext to use.

setAccessTokenContextLookupStrategy(Function<ProfileRequestContext, AccessTokenContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.SetAccessTokenToResponseContext

Set the strategy used to lookup the AccessTokenContext to use.

setAccessTokenLifetimeLookupStrategy(Function<ProfileRequestContext, Duration>) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.BuildAccessToken

Set the strategy used to obtain the access token lifetime.

SetAccessTokenToResponseContext - Class in net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl

Action that creates a Access Token, and sets it to work context OIDCAuthenticationResponseContext.getAccessToken() located under InOutOperationContext.getOutboundMessageContext().

SetAccessTokenToResponseContext() - Constructor for class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.SetAccessTokenToResponseContext

Constructor.

setAccessTokenTypeLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.BuildAccessToken

Set the strategy used to obtain the access token type.

setAcrAlwaysEssentialLookupStrategy(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ProcessRequestedAuthnContext

Set the strategy used to obtain whether all arc claims requests should be treated as Essential.

setAcrLookupStrategy(Function<ProfileRequestContext, List<ACR>>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ProcessRequestedAuthnContext

Set the strategy used to locate the requested acr values.

setAllowedAudienceLookupStrategy(Function<ProfileRequestContext, List<String>>) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.ValidateAudience

Set the strategy used to locate the allowed audience for the client.

setAllowedScopeLookupStrategy(Function<ProfileRequestContext, Scope>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateScope

Set the strategy used to locate the allowed scope for the client.

setAllowPKCEPlainCondition(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateCodeChallenge

Set the condition used to determine whether to allow plaintext PKCE.

setAllowPKCEPlainCondition(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidatePKCE

Set the condition used to determine whether to allow plaintext PKCE.

setAllowSignatureNone(boolean) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddRequestObjectSecurityConfigurationToClientMetadata

Set whether signature algorithm none is allowed regardless of what list of Signature Validation Algs has.

setAlwaysIncludedAttributesLookupStrategy(Function<ProfileRequestContext, Set<String>>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddAttributesToClaimsSet

Set the strategy used to obtain the set of attribute IDs always included in ID tokens.

setAlwaysIncludedAttributesLookupStrategy(Function<ProfileRequestContext, Set<String>>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetTokenDeliveryAttributesToResponseContext

Set the strategy used to obtain the set of attribute IDs always included in ID tokens.

setAttributeContextLookupStrategy(Function<ProfileRequestContext, AttributeContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddAttributesToClaimsSet

Set the strategy used to locate the AttributeContext associated with a given ProfileRequestContext.

setAttributeContextLookupStrategy(Function<ProfileRequestContext, AttributeContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetConsentToResponseContext

Set the strategy used to locate the AttributeContext associated with a given ProfileRequestContext.

setAttributeContextLookupStrategy(Function<ProfileRequestContext, AttributeContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetTokenDeliveryAttributesToResponseContext

Set the strategy used to locate the AttributeContext associated with a given ProfileRequestContext.

setAttributeContextLookupStrategy(Function<ProfileRequestContext, AttributeContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.logic.AttributeResolutionSubjectLookupFunction

Set the strategy used to locate the AttributeContext associated with a given ProfileRequestContext.

setAudienceRestrictionsLookupStrategy(Function<ProfileRequestContext, Collection<String>>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddIDTokenShell

Set the strategy used to obtain the audience restrictions to apply.

SetAuthenticationContextClassReferenceFromAuthzCodeToResponseContext - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Action that sets authentication context class reference to work context OIDCAuthenticationResponseContext located under InOutOperationContext.getOutboundMessageContext().

SetAuthenticationContextClassReferenceFromAuthzCodeToResponseContext() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthenticationContextClassReferenceFromAuthzCodeToResponseContext

SetAuthenticationContextClassReferenceToResponseContext - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Action that sets authentication context class reference to work context OIDCAuthenticationResponseContext located under InOutOperationContext.getOutboundMessageContext().

SetAuthenticationContextClassReferenceToResponseContext() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthenticationContextClassReferenceToResponseContext

SetAuthenticationTimeToResponseContext - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Action that sets authentication instant to work context OIDCAuthenticationResponseContext located under InOutOperationContext.getOutboundMessageContext().

SetAuthenticationTimeToResponseContext() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthenticationTimeToResponseContext

Constructor.

setAuthorizationCodeFlowEnabled(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddGrantTypeToClientMetadata

Set predicate used to indicate whether authorization code flow is enabled.

setAuthorizationCodeFlowEnabled(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddResponseTypesToClientMetadata

Set predicate used to indicate whether authorization code flow is enabled.

SetAuthorizationCodeToResponseContext - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Action that creates a Authorization Code, and sets it to work context OIDCAuthenticationResponseContext.getAuthorizationCode() located under InOutOperationContext.getOutboundMessageContext().

SetAuthorizationCodeToResponseContext() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthorizationCodeToResponseContext

Constructor.

setAuthTimeLookupStrategy(Function<ProfileRequestContext, Instant>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthenticationTimeToResponseContext

Set the strategy used to locate the authentication time.

setAuthzCodeLifetimeLookupStrategy(Function<ProfileRequestContext, Duration>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthorizationCodeToResponseContext

Set the strategy used to obtain the authz code lifetime.

setChainRevocationLifetimeLookupStrategy(Function<ProfileRequestContext, Duration>) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.RevokeToken

Set a lookup strategy for the chain revocation lifetime.

setChainRevocationLifetimeLookupStrategy(Function<ProfileRequestContext, Duration>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateGrant

Set a lookup strategy for the chain revocation lifetime.

setClaimsValidatorLookupStrategy(Function<ProfileRequestContext, ClaimsValidator>) - Method in class net.shibboleth.idp.plugin.oidc.op.authn.impl.JWTCredentialValidator

Set the strategy used to locate ClaimsValidator used.

setClaimsValidatorLookupStrategy(Function<ProfileRequestContext, ClaimsValidator>) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.AbstractProcessTokenAction

Set the claims validator lookup strategy.

setClaimsValidatorLookupStrategy(Function<ProfileRequestContext, ClaimsValidator>) - Method in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.ValidateAccessToken

Set the claims validator lookup strategy.

setClassRefLookupStrategy(Function<ProfileRequestContext, AuthenticationContextClassReferencePrincipal>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthenticationContextClassReferenceToResponseContext

Set the strategy function to use to obtain the authentication context class reference to use.

setClientAuthMethodsLookupStrategy(Function<ProfileRequestContext, Set<ClientAuthenticationMethod>>) - Method in class net.shibboleth.idp.plugin.oidc.op.authn.impl.ExtractClientAuthenticationFromRequest

Set the lookup strategy for enabled client authentication methods.

setClientIdLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.idp.plugin.oidc.op.admin.impl.IssueRegistrationAccessToken

Set a lookup strategy for the client identifier.

setClientIDLookupStrategy(Function<MessageContext, ClientID>) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.messaging.impl.SetEntityIdToSAMLPeerEntityContext

Set the strategy used to locate the client id of the request.

setClientIDLookupStrategy(Function<MessageContext, ClientID>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeRelyingPartyContext

Set the strategy used to locate the client id of the request.

setClientIDLookupStrategy(Function<MessageContext, ClientID>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.OIDCMetadataLookupHandler

Set the strategy used to locate the client id of the request.

setClientIDLookupStrategy(Function<ProfileRequestContext, ClientID>) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.BuildAccessToken

Set the strategy used to locate the original ClientID from the request.

setClientIdPolicyName(String) - Method in class net.shibboleth.idp.plugin.oidc.op.admin.impl.IssueRegistrationAccessToken

Set an explicit policy name to apply governing clientId usage.

setClientInformationManager(ClientInformationManager) - Method in class net.shibboleth.idp.plugin.oidc.op.admin.impl.DoClientManagementOperation

Set the ClientInformationManager to use for deletion.

setClientInformationManager(ClientInformationManager) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.StoreClientInformation

Set the client information manager used for storing the information.

setClientInformationResolver(ClientInformationResolver) - Method in class net.shibboleth.idp.plugin.oidc.op.admin.impl.DoClientManagementOperation

Set the ClientInformationResolver to use for retrieval.

setClientInformationResolver(ClientInformationResolver) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.OIDCMetadataLookupHandler

Set the ClientInformationResolver to use.

setClockSkew(Duration) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.logic.DefaultChainRevocationLifetimeLookupStrategy

Set the clock skew.

setClockSkew(Duration) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.logic.DefaultTokenRevocationLifetimeLookupStrategy

Set the clock skew.

setCodeChallengeLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthorizationCodeToResponseContext

Set the strategy used to locate the Code Challenge of the request.

setCodeChallengeLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateCodeChallenge

Set the strategy used to locate the Code Challenge of the request.

setCodeChallengeMethodLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthorizationCodeToResponseContext

Set the strategy used to locate the Code Challenge Method of the request.

setCodeChallengeMethodLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateCodeChallenge

Set the strategy used to locate the Code Challenge Method of the request.

setCodeHashCalculationStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddAuthorizationCodeHashToIDToken

Set the strategy used for calculating the authorization code hash value.

setCodeVerifierLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidatePKCE

Set the strategy used to locate the Code Verifier value.

setConfigurationLookupStrategy(Function<MessageContext, List<SignatureSigningConfiguration>>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCSignatureSigningParametersHandler

Set the strategy used to look up a per-request SignatureSigningConfiguration list.

setConfigurationLookupStrategy(Function<ProfileRequestContext, List<EncryptionConfiguration>>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCEncryptionParameters

Set the strategy used to look up a per-request EncryptionConfiguration list.

setConfigurationLookupStrategy(Function<ProfileRequestContext, List<SignatureSigningConfiguration>>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCSignatureSigningParameters

Set the strategy used to look up a per-request SignatureSigningConfiguration list.

setConsentedAttributesLookupStrategy(Function<ProfileRequestContext, List<Object>>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetConsentFromTokenToResponseContext

Set the strategy used to locate the consented attributes.

setConsentEnabledPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.BuildAccessToken

Set the predicate used to check if consent is enabled with a given ProfileRequestContext.

setConsentEnabledPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthorizationCodeToResponseContext

Set the predicate used to check if consent is enabled with a given ProfileRequestContext.

setConsentEnabledPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetConsentToResponseContext

Set the predicate used to check if consent is enable.

SetConsentFromTokenToResponseContext - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Action that locates consent from authorization code / access token.

SetConsentFromTokenToResponseContext() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetConsentFromTokenToResponseContext

Constructor.

SetConsentToResponseContext - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Action that checks for adds the currently existing attributes from AttributeContext for token delivery.

SetConsentToResponseContext() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetConsentToResponseContext

Constructor.

setContext(String) - Method in class net.shibboleth.idp.plugin.oidc.op.security.jwt.claims.impl.RootTokenIdRevocationValidator

Set the revocation cache context that partitions entries.

setContextType(Class<? extends BaseContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractInitializeOutboundResponseMessageContext

Set the type of subcontext to create.

setCredentialResolver(CredentialResolver) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.AbstractProcessTokenAction

Set the source of signing keys to use for JWT signature verification.

setCredentialResolver(CredentialResolver) - Method in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.ParseAccessToken

Set the source of signing keys to use for JWT signature verification.

setDataEncryptionAlgorithmsLookupStrategy(Function<ProfileRequestContext, List<String>>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddRequestObjectSecurityConfigurationToClientMetadata

Set the strategy used to obtain list of supported signature algorithms.

setDataEncryptionAlgorithmsLookupStrategy(Function<ProfileRequestContext, List<String>>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddSecurityConfigurationToClientMetadata

Set the strategy used to obtain list of supported signature algorithms.

setDataSealer(DataSealer) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.AbstractProcessTokenAction

Set the data sealer instance to use.

setDataSealer(DataSealer) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.BuildAccessToken

Set DataSealer to use for opaque tokens.

setDataSealer(DataSealer) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthorizationCodeToResponseContext

Set the data sealer instance to use.

setDataSealer(DataSealer) - Method in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.ParseAccessToken

Set the data sealer instance to use.

setDefaultCode(int) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetResponseStatusCodeFromEvent

Set the status code for unmapped events.

setDefaultCode(String) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractBuildErrorResponseFromEvent

Set the code for unmapped events.

setDefaultLanguage(String) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeOutboundAuthenticationResponseMessageContext

Set the default language when it has not been defined in the metadata.

setDefaultScope(Scope) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddScopeToClientMetadata

Set the default Scope to be used if it was not defined in the request.

setDefaultStatusCode(int) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractBuildErrorResponseFromEvent

Set the status code for unmapped events.

setDefaultSubjectType(SubjectType) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddSubjectTypeToClientMetadata

Set the default SubjectType to be used if it was not defined in the request.

setDefaultTokenLifetime(Duration) - Method in class net.shibboleth.idp.plugin.oidc.op.admin.impl.IssueRegistrationAccessToken

Set the default token lifetime.

setDeliveryClaimsLookupStrategy(Function<ProfileRequestContext, ClaimsSet>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetTokenDeliveryAttributesFromTokenToResponseContext

Set the strategy used to locate the delivery claims.

setDeniedUserInfoAttributesLookupStrategy(Function<ProfileRequestContext, Set<String>>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddAttributesToClaimsSet

Set the strategy used to obtain the set of attribute IDs to omit from UserInfo tokens.

setDeniedUserInfoAttributesLookupStrategy(Function<ProfileRequestContext, Set<String>>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetTokenDeliveryAttributesToResponseContext

Set the strategy used to obtain the set of attribute IDs to omit from UserInfo tokens.

setDynamicValueResolvers(Map<String, ? extends MetadataValueResolver>) - Method in class net.shibboleth.idp.plugin.oidc.op.metadata.impl.DynamicFilesystemProviderMetadataResolver

Set dynamic metadata value resolvers.

setEmbeddedResolvers(List<MetadataValueResolver>) - Method in class net.shibboleth.idp.plugin.oidc.op.metadata.impl.ArrayMetadataValueResolver

Set the list of resolvers whose value is added to the result of this resolver.

setEncodeConsentPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetConsentToResponseContext

Set the predicate used to check if consent should be encoded.

setEncodedAttributesLookupStrategy(Function<ProfileRequestContext, Set<String>>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetTokenDeliveryAttributesToResponseContext

Set the strategy used to obtain the set of attribute IDs to encode for back-channel recovery.

setEncryptionContextLookupStrategy(Function<ProfileRequestContext, EncryptionContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.AbstractEncryptTokenAction

Set the strategy used to look up the EncryptionContext to set the flags for.

setEncryptionContextLookupStrategy(Function<ProfileRequestContext, EncryptionContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.DecryptRequestObject

Set the strategy used to look up the EncryptionContext to set the flags for.

setEncryptionContextLookupStrategy(Function<ProfileRequestContext, EncryptionContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCEncryptionParameters

Set the strategy used to look up the EncryptionContext to set the flags for.

setEncryptionOptionalPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCEncryptionParameters

Sets the condition to apply to determine how to proceed if encryption parameter resolution fails.

setEncryptionParametersResolver(EncryptionParametersResolver) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCEncryptionParameters

Set the encParamsresolver to use for the parameters to store into the context.

setEnforceRefreshTokenRotationCondition(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRefreshTokenToResponseContext

Set the condition used to determine whether to revoke refresh tokens once they're used.

setEntityContextClass(Class<? extends AbstractSAMLEntityContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.messaging.impl.SetEntityIdToSAMLPeerEntityContext

Set the class type holding the SAML entity data.

SetEntityIdToSAMLPeerEntityContext - Class in net.shibboleth.idp.plugin.oidc.op.oauth2.messaging.impl

MessageHandler that sets the entityID to the given SAMLPeerEntityContext class.

SetEntityIdToSAMLPeerEntityContext() - Constructor for class net.shibboleth.idp.plugin.oidc.op.oauth2.messaging.impl.SetEntityIdToSAMLPeerEntityContext

Constructor.

setEventContextLookupStrategy(Function<ProfileRequestContext, EventContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractBuildErrorResponseFromEvent

Set lookup strategy for EventContext to check.

setEventContextLookupStrategy(Function<ProfileRequestContext, EventContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetResponseStatusCodeFromEvent

Set lookup strategy for EventContext to check.

setExistingParametersContextLookupStrategy(Function<MessageContext, SecurityParametersContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCSignatureSigningParametersHandler

Set the strategy used to look up an existing SecurityParametersContext to copy instead of actually resolving the parameters to set.

setExistingParametersContextLookupStrategy(Function<ProfileRequestContext, SecurityParametersContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCSignatureSigningParameters

Set the strategy used to look up an existing SecurityParametersContext to copy instead of actually resolving the parameters to set.

setForceAuthnPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeAuthenticationContext

Set the predicate to apply to derive the message-independent forced authn default.

setForcePKCECondition(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateCodeChallenge

Set the condition used to determine whether to require PKCE.

setForcePKCECondition(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidatePKCE

Set the condition used to determine whether to require PKCE.

setForDecryption(boolean) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCEncryptionParameters

Whether we resolve encryption or decryption parameters.

setHttpClient(HttpClient) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddJwksToClientMetadata

Set the HttpClient to use.

setHttpClient(HttpClient) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.CheckRedirectURIs

Set the HttpClient to use.

setHttpClient(HttpClient) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRequestObjectToResponseContext

Set the HttpClient to use.

setHttpClientSecurityParameters(HttpClientSecurityParameters) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddJwksToClientMetadata

Set the optional client security parameters.

setHttpClientSecurityParameters(HttpClientSecurityParameters) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.CheckRedirectURIs

Set the optional client security parameters.

setHttpClientSecurityParameters(HttpClientSecurityParameters) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRequestObjectToResponseContext

Set the optional client security parameters.

setIdentifierGeneratorLookupStrategy(Function<ProfileRequestContext, IdentifierGenerationStrategy>) - Method in class net.shibboleth.idp.plugin.oidc.op.admin.impl.IssueRegistrationAccessToken

Set the strategy used to locate the IdentifierGenerationStrategy to use.

setIdentifierGeneratorLookupStrategy(Function<ProfileRequestContext, IdentifierGenerationStrategy>) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.BuildAccessToken

Set the strategy used to locate the IdentifierGenerationStrategy to use.

setIdentifierGeneratorLookupStrategy(Function<ProfileRequestContext, IdentifierGenerationStrategy>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.GenerateClientSecret

Set the strategy used to locate the IdentifierGenerationStrategy to use.

setIdentifierGeneratorLookupStrategy(Function<ProfileRequestContext, IdentifierGenerationStrategy>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthorizationCodeToResponseContext

Set the strategy used to locate the IdentifierGenerationStrategy to use.

setIdentifierGeneratorLookupStrategy(Function<ProfileRequestContext, IdentifierGenerationStrategy>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRefreshTokenToResponseContext

Set the strategy used to locate the IdentifierGenerationStrategy to use.

setIdTokenClaimsLookupStrategy(Function<ProfileRequestContext, ClaimsSet>) - Method in class net.shibboleth.idp.plugin.oidc.op.audit.impl.IdTokenClaimsAuditExtractor

Set the lookup strategy for id token claims to read from.

setIDTokenDeliveryClaimsLookupStrategy(Function<ProfileRequestContext, ClaimsSet>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetTokenDeliveryAttributesFromTokenToResponseContext

Set the strategy used to locate the id token delivery claims.

setIDTokenLifetimeLookupStrategy(Function<ProfileRequestContext, Duration>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddIDTokenShell

Set the strategy used to obtain the ID token lifetime.

setIDTokenManipulationStrategyLookupStrategy(Function<ProfileRequestContext, BiFunction<ProfileRequestContext, Map<String, Object>, Map<String, Object>>>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ManipulateClaimsForIDToken

Set the lookup function to supply strategy bi-function for manipulating id_token claims.

setIgnoringUnencodableAttributes(boolean) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddAttributesToClaimsSet

Set whether the attributes that result in an AttributeEncodingException when being encoded should be ignored or result in an IdPEventIds.UNABLE_ENCODE_ATTRIBUTE transition.

setIgnoringUnencodableAttributes(boolean) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetTokenDeliveryAttributesToResponseContext

Set whether the attributes that result in an AttributeEncodingException when being encoded should be ignored or result in an IdPEventIds.UNABLE_ENCODE_ATTRIBUTE transition.

setImplicitFlowEnabled(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddGrantTypeToClientMetadata

Set predicate used to indicate whether hybrid flow is enabled.

setImplicitFlowEnabled(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddResponseTypesToClientMetadata

Set predicate used to indicate whether hybrid flow is enabled.

setInbound(boolean) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeRelyingPartyContext

Sets which message tree to use in deriving the ClientID and OIDC metadata.

setIncludeIssuerInResponsePredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.BuildAuthenticationErrorResponseFromEvent

Set the predicate to signal whether or not to include iss-parameter to the response.

setIncludeIssuerInResponsePredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.FormOutboundAuthenticationResponseMessage

Set the predicate to signal whether or not to include iss-parameter to the response.

setIssuerLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.idp.plugin.oidc.op.admin.impl.IssueRegistrationAccessToken

Set a lookup strategy for the token issuer.

setIssuerLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.BuildAccessToken

Set the strategy used to locate the issuer value to use.

setIssuerLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddIDTokenShell

Set the strategy used to locate the issuer value to use.

setIssuerLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.BuildAuthenticationErrorResponseFromEvent

Set the strategy used to locate the issuer value to use.

setIssuerLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.FormOutboundAuthenticationResponseMessage

Set the strategy used to locate the issuer value to use.

setIssuerLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthorizationCodeToResponseContext

Set the strategy used to locate the issuer value to use.

setIssuerLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.AddUserInfoShell

Set the strategy used to locate the issuer value to use.

setKeyFetchInterval(Duration) - Method in class net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationEncryptionParametersResolver

Set the remote key refresh interval.

setKeyFetchInterval(Duration) - Method in class net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationSignatureValidationParametersResolver

Set the remote key refresh interval.

setKeyTransportAlgorithmsLookupStrategy(Function<ProfileRequestContext, List<String>>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddRequestObjectSecurityConfigurationToClientMetadata

Set the strategy used to obtain list of supported signature algorithms.

setKeyTransportAlgorithmsLookupStrategy(Function<ProfileRequestContext, List<String>>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddSecurityConfigurationToClientMetadata

Set the strategy used to obtain list of supported signature algorithms.

setLoginHintLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeAuthenticationContext

Set the strategy used to locate the request login hint.

setMappedErrors(Map<String, ErrorObject>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractBuildErrorResponseFromEvent

Set map of eventIds to pre-configured error objects.

setMappedErrors(Map<String, Integer>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetResponseStatusCodeFromEvent

Set map of eventIds to status codes.

setMatchIfRequestedClaimsSilent(boolean) - Method in class net.shibboleth.idp.plugin.oidc.op.attribute.filter.matcher.impl.AttributeInOIDCRequestedClaimsMatcher

Sets whether to match if the request contains no requested claims.

setMatchOnlyIDToken(boolean) - Method in class net.shibboleth.idp.plugin.oidc.op.attribute.filter.matcher.impl.AttributeInOIDCRequestedClaimsMatcher

Sets whether to match only id token part of the requested claims.

setMatchOnlyUserInfo(boolean) - Method in class net.shibboleth.idp.plugin.oidc.op.attribute.filter.matcher.impl.AttributeInOIDCRequestedClaimsMatcher

Sets whether to match only user info part of the requested claims.

setMaxAgeLookupStrategy(Function<ProfileRequestContext, Duration>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeAuthenticationContext

Set the strategy used to locate the request max age.

setMessageEncoder(MessageEncoder) - Method in class net.shibboleth.idp.plugin.oidc.op.encoding.impl.OIDCResponseEncoderFactory

Set the message encoder to be returned by this factory.

setMetadataContextLookupStrategy(Function<MessageContext, SAMLMetadataContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCSignatureSigningParametersHandler

Set lookup strategy for SAMLMetadataContext for input to resolution.

setMetadataContextLookupStrategy(Function<ProfileRequestContext, SAMLMetadataContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCSignatureSigningParameters

Set lookup strategy for SAMLMetadataContext for input to resolution.

setMetadataPolicyEnforcer(BiFunction<Object, MetadataPolicy, Pair<Object, Boolean>>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRegistrationRequestMetadata

Set the function used for enforcing the metadata policy.

setMetadataPolicyLookupStrategy(Function<ProfileRequestContext, Map<String, MetadataPolicy>>) - Method in class net.shibboleth.idp.plugin.oidc.op.admin.impl.IssueRegistrationAccessToken

Set a lookup strategy for the metadata policy.

setMetadataPolicyMergingStrategy(BiFunction<Map<String, MetadataPolicy>, Map<String, MetadataPolicy>, Pair<Map<String, MetadataPolicy>, Boolean>>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeRegistrationMetadataPolicyContext

Set the strategy used for merging profile and token based metadata policies.

setMetadataPolicyValidationStrategy(Predicate<Map<String, MetadataPolicy>>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeRegistrationMetadataPolicyContext

Set the strategy used for validating token and merged metadata policies.

setMetadataResolver(ProviderMetadataResolver) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.FormOutboundDiscoveryResponse

Set the resolver for the metadata that is being distributed.

setMetadataStatements(Map<String, String>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddMetadataStatementToClientMetadata

Set the map of static metadata_statements, key for FO, value for the statement.

setNoResultIsError(boolean) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCSignatureSigningParameters

Set whether a failure to resolve any parameters should be raised as an exception.

setNoResultIsError(boolean) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCSignatureSigningParametersHandler

Set whether a failure to resolve any parameters should be raised as an exception.

setOAuth2ClientAuthenticationLookupStrategy(Function<ProfileRequestContext, OAuth2ClientAuthenticationContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.authn.impl.JWTCredentialValidator

Set the strategy used to return the OAuth2ClientAuthenticationContext.

setObjectMapper(ObjectMapper) - Method in class net.shibboleth.idp.plugin.oidc.op.admin.impl.AbstractAdminApiProfileAction

Set the JSON ObjectMapper to use for serialization.

setObjectMapper(ObjectMapper) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRegistrationAccessToken

Set the JSON ObjectMapper.

setObjectName(String) - Method in class net.shibboleth.idp.plugin.oidc.op.metadata.impl.ArrayMetadataValueResolver

Set the name of the JSON object, can be null to return only values of embedded resolvers.

setOIDCAuthenticationResponseConsentContextLookupStrategy(Function<ProfileRequestContext, OIDCAuthenticationResponseConsentContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.BuildAccessToken

Set the strategy used to locate the OIDCAuthenticationResponseConsentContext associated with a given ProfileRequestContext.

setOIDCAuthenticationResponseConsentContextLookupStrategy(Function<ProfileRequestContext, OIDCAuthenticationResponseConsentContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddAttributesToClaimsSet

Set the strategy used to locate the OIDCAuthenticationResponseTokenClaimsContext associated with a given ProfileRequestContext.

setOIDCAuthenticationResponseConsentContextLookupStrategy(Function<ProfileRequestContext, OIDCAuthenticationResponseConsentContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthorizationCodeToResponseContext

Set the strategy used to locate the OIDCAuthenticationResponseTokenClaimsContext associated with a given ProfileRequestContext.

setOIDCAuthenticationResponseTokenClaimsContextLookupStrategy(Function<ProfileRequestContext, OIDCAuthenticationResponseTokenClaimsContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.BuildAccessToken

Set the strategy used to locate the OIDCAuthenticationResponseTokenClaimsContext associated with a given ProfileRequestContext.

setOIDCAuthenticationResponseTokenClaimsContextLookupStrategy(Function<ProfileRequestContext, OIDCAuthenticationResponseTokenClaimsContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddTokenDeliveryAttributesToClaimsSet

Set the strategy used to locate the OIDCAuthenticationResponseTokenClaimsContext associated with a given ProfileRequestContext.

setOIDCAuthenticationResponseTokenClaimsContextLookupStrategy(Function<ProfileRequestContext, OIDCAuthenticationResponseTokenClaimsContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthorizationCodeToResponseContext

Set the strategy used to locate the OIDCAuthenticationResponseTokenClaimsContext associated with a given ProfileRequestContext.

setOIDCAuthenticationResponseTokenClaimsContextLookupStrategy(Function<ProfileRequestContext, OIDCAuthenticationResponseTokenClaimsContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateScope

Set the strategy used to locate the OIDCAuthenticationResponseTokenClaimsContext associated with a given ProfileRequestContext.

setOIDCClientRegistrationResponseContextCreationStrategy(Function<MessageContext, OIDCClientRegistrationResponseContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeOutboundRegistrationResponseMessageContext

Set the strategy used to return or create the OIDCClientRegistrationResponseContext .

setOidcInputMetadataLookupStrategy(Function<ProfileRequestContext, OIDCClientMetadata>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCClientMetadataPopulationAction

Set the strategy used to locate the OIDCClientMetadata associated with the request (input).

setOidcMetadataContextLookupStrategy(Function<MessageContext, OIDCMetadataContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCSignatureSigningParameters

Set lookup strategy for OIDCMetadataContext for input to resolution.

setOidcMetadataContextLookupStrategy(Function<MessageContext, OIDCMetadataContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCSignatureSigningParametersHandler

Set lookup strategy for OIDCMetadataContext for input to resolution.

setOidcMetadataContextLookupStrategy(Function<ProfileRequestContext, OIDCMetadataContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.authn.impl.OIDCClientInfoCredentialValidator

Set the strategy used to return the OIDCMetadataContext.

setOidcMetadataContextLookupStrategy(Function<ProfileRequestContext, OIDCMetadataContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeRelyingPartyContext

Set the strategy used to return the OIDCMetadataContext.

setOidcMetadataContextLookupStrategy(Function<ProfileRequestContext, OIDCMetadataContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCEncryptionParameters

Set the strategy used to look up the OIDCMetadataContext to locate client registered encryption parameters.

setOIDCMetadataContextLookupStrategy(Function<ProfileRequestContext, OIDCMetadataContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.authn.impl.ValidateClientAuthenticationType

Set the strategy used to return the OIDCMetadataContext.

setOIDCMetadataContextLookupStrategy(Function<ProfileRequestContext, OIDCMetadataContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeOutboundAuthenticationResponseMessageContext

Set the mechanism to lookup the OIDCMetadataContext from the ProfileRequestContext.

setOIDCMetadataContextLookupStrategy(Function<ProfileRequestContext, OIDCMetadataContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.logic.ClientIDFromOIDCMetadataContextLookupFunction

Deprecated.

Set the strategy used to return the OIDCMetadataContext.

setOIDCMetadataContextLookupStrategy(Function<ProfileRequestContext, OIDCMetadataContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.logic.DefaultSubjectTypeStrategy

Set the lookup strategy to use to locate the OIDCMetadataContext.

setOidcOutputMetadataLookupStrategy(Function<ProfileRequestContext, OIDCClientMetadata>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCClientMetadataPopulationAction

Set the strategy used to locate the OIDCClientMetadata associated with the request (output).

setOidcResponseContextLookupStrategy(Function<MessageContext, OIDCClientRegistrationResponseContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.BuildClientInformation

Set the strategy used to locate the OIDCClientRegistrationResponseContext associated with a given MessageContext.

setOidcResponseContextLookupStrategy(Function<MessageContext, OIDCClientRegistrationResponseContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.GenerateClientSecret

Set the strategy used to locate the OIDCClientRegistrationResponseContext associated with a given MessageContext.

setOidcResponseContextLookupStrategy(Function<MessageContext, OIDCClientRegistrationResponseContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.StoreClientInformation

Set the strategy used to locate the OIDCClientRegistrationResponseContext associated with a given MessageContext.

setOidcResponseContextLookupStrategy(Function<ProfileRequestContext, OIDCClientRegistrationResponseContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.GenerateClientID

Set the strategy used to locate the OIDCClientRegistrationResponseContext associated with a given MessageContext.

setOnlyIfEssential(boolean) - Method in class net.shibboleth.idp.plugin.oidc.op.attribute.filter.matcher.impl.AttributeInOIDCRequestedClaimsMatcher

Sets whether to drop non essential claims.

setParameterType(OIDCClientInformationEncryptionParametersResolver.ParameterType) - Method in class net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationEncryptionParametersResolver

Whether to create parameters for request object decryption, id token encryption or userinfo response encryption.

setParameterType(OIDCClientInformationSignatureSigningParametersResolver.ParameterType) - Method in class net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationSignatureSigningParametersResolver

Whether to create parameters for id token signing or userinfo response signing.

setParameterType(OIDCClientInformationSignatureValidationParametersResolver.ParameterType) - Method in class net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationSignatureValidationParametersResolver

Whether to create parameters for request object signature validation or token endpoint jwt validation.

setPlainClaimsValidator(ClaimsValidator) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRequestObject

Set the claims validator used for validating the plain/unsigned request object.

setPolicyIdLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.idp.plugin.oidc.op.admin.impl.IssueRegistrationAccessToken

Set a lookup strategy for the relying party identifier.

setPolicyIdPolicyName(String) - Method in class net.shibboleth.idp.plugin.oidc.op.admin.impl.IssueRegistrationAccessToken

Set an explicit policy name to apply governing policyId usage.

setPolicyLocationLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.idp.plugin.oidc.op.admin.impl.IssueRegistrationAccessToken

Set a lookup strategy for the metadata policy location.

setPolicyLocationPolicyName(String) - Method in class net.shibboleth.idp.plugin.oidc.op.admin.impl.IssueRegistrationAccessToken

Set an explicit policy name to apply governing policyLocation usage.

setProcessedToken(ProfileRequestContext, EncryptedJWT) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.AbstractEncryptTokenAction

Store the resulting token.

setProcessedToken(ProfileRequestContext, EncryptedJWT) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.EncryptAccessToken

Store the resulting token.

setProcessedToken(ProfileRequestContext, EncryptedJWT) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.EncryptProcessedToken

Store the resulting token.

setProfileMetadataPolicyLookupStrategy(Function<ProfileRequestContext, Map<String, MetadataPolicy>>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeRegistrationMetadataPolicyContext

Set the strategy used to locate the request metadata policy configured for the profile.

setPromptLookupStrategy(Function<ProfileRequestContext, Prompt>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeAuthenticationContext

Set the strategy used to locate the requested prompt.

setPromptLookupStrategy(Function<ProfileRequestContext, Prompt>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.RevokeConsent

Set the strategy used to locate the requested prompt.

setProxiedRequesterContextCreationStrategy(Function<ProfileRequestContext, ProxiedRequesterContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.ValidateAudience

Set the strategy used to locate or create the ProxiedRequesterContext.

setRedirectURILookupStrategy(Function<ProfileRequestContext, URI>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRedirectURI

Set the strategy used to locate the redirect uri of the request.

setRefreshTokenLifetimeLookupStrategy(Function<ProfileRequestContext, Duration>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRefreshTokenToResponseContext

Set the strategy used to obtain the access token lifetime.

setRefreshTokensEnabled(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddGrantTypeToClientMetadata

Set predicate used to indicate whether refresh tokens are enabled.

setRefreshTokensEnabledPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateGrant

Set the predicate used to indicate whether refresh tokens are enabled.

SetRefreshTokenToResponseContext - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Action that creates a Refresh Token, and sets it to work context OIDCAuthenticationResponseContext.getRefreshToken() located under InOutOperationContext.getOutboundMessageContext().

SetRefreshTokenToResponseContext(DataSealer) - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRefreshTokenToResponseContext

Constructor.

setRegisteredRedirectURIsLookupStrategy(Function<ProfileRequestContext, Set<URI>>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRedirectURI

Set the strategy used to obtain registered redirect uris to compare if request had no redirect uri value.

setRegistrationClaimsContextCreationStrategy(Function<ProfileRequestContext, OIDCClientRegistrationTokenClaimsContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRegistrationAccessToken

Set the strategy used to create or return the OIDCClientRegistrationTokenClaimsContext.

setRegistrationMetadataPolicyContextLookupStrategy(Function<MessageContext, OIDCClientRegistrationMetadataPolicyContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRegistrationRequestMetadata

Set the strategy that will return OIDCClientRegistrationMetadataPolicyContext.

setRegistrationMetadataPolicyContextLookupStrategy(Function<ProfileRequestContext, OIDCClientRegistrationMetadataPolicyContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddRemainingClaimsToClientMetadata

Set the strategy that will return OIDCClientRegistrationMetadataPolicyContext.

setRegistrationPolicyContextCreationStrategy(Function<ProfileRequestContext, OIDCClientRegistrationMetadataPolicyContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeRegistrationMetadataPolicyContext

Set the strategy used to create or return the OIDCClientRegistrationMetadataPolicyContext.

setRegistrationTokenContextLookupStrategy(Function<ProfileRequestContext, OIDCClientRegistrationTokenClaimsContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.GenerateClientID

Set the strategy used to locate the OIDCClientRegistrationTokenClaimsContext associated with a given request.

setRegistrationTokenContextLookupStrategy(Function<ProfileRequestContext, OIDCClientRegistrationTokenClaimsContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.StoreClientInformation

Set the strategy used to locate the OIDCClientRegistrationTokenClaimsContext associated with a given request.

setRegistrationValidityPeriodStrategy(Function<ProfileRequestContext, Duration>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.StoreClientInformation

Set strategy function to obtain registration validity period.

setRelyingPartyContextCreationStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeRelyingPartyContext

Set the strategy used to return or create the RelyingPartyContext .

setRelyingPartyContextCreationStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeUnverifiedRelyingPartyContext

Set the strategy used to return or create the RelyingPartyContext .

setRelyingPartyContextLookupStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.metadata.impl.AlgorithmInfoMetadataValueResolver

Set the strategy used to locate the RelyingPartyContext associated with a given ProfileRequestContext.

setRelyingPartyContextLookupStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.metadata.impl.CredentialMetadataValueResolver

Set the strategy used to locate the RelyingPartyContext associated with a given ProfileRequestContext.

setRelyingPartyContextLookupStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.metadata.impl.FilesystemProviderMetadataResolver

Set the strategy used to locate the RelyingPartyContext associated with a given ProfileRequestContext.

setRelyingPartyContextLookupStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.FormOutboundKeySetResponseMessage

Set the strategy used to locate the RelyingPartyContext associated with a given ProfileRequestContext.

setRelyingPartyContextLookupStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.GenerateClientID

Set the strategy used to locate the RelyingPartyContext associated with a given ProfileRequestContext.

setRelyingPartyContextLookupStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeOutboundAuthenticationResponseMessageContext

Set the strategy used to locate the RelyingPartyContext associated with a given ProfileRequestContext.

setRelyingPartyContextLookupStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateGrant

Set the strategy used to locate the RelyingPartyContext associated with a given ProfileRequestContext.

setRelyingPartyContextLookupStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRegistrationAccessToken

Set the strategy used to return the RelyingPartyContext.

setRelyingPartyContextLookupStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.logic.DefaultSubjectTypeStrategy

Set the lookup strategy to use to locate the RelyingPartyContext.

setRelyingPartyContextLookupStrategy(Function<ProfileRequestContext, RelyingPartyContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.AddUserInfoShell

Set the strategy used to locate the RelyingPartyContext associated with a given ProfileRequestContext.

setRelyingPartyIdLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.ValidateAudience

Set the strategy used to obtain the relying party ID.

setRelyingPartyIdLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateScope

Set the strategy used to obtain the relying party ID.

setRemoteJwkSetCache(RemoteJwkSetCache) - Method in class net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationEncryptionParametersResolver

Set the cache for remote JWK key sets.

setRemoteJwkSetCache(RemoteJwkSetCache) - Method in class net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationSignatureValidationParametersResolver

Set the cache for remote JWK key sets.

setReplacementLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.idp.plugin.oidc.op.admin.impl.IssueRegistrationAccessToken

Set a lookup strategy for the flag signaling registration replacement is allowed.

setReplayCache(ReplayCache) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateGrant

Set the replay cache instance to use.

setRequestedAudienceLookupStrategy(Function<ProfileRequestContext, List<String>>) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.ValidateAudience

Set the strategy used to locate the requested audience to validate.

setRequestedClaimsLookupStrategy(Function<ProfileRequestContext, OIDCClaimsRequest>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRequestedClaimsToResponseContext

Set the strategy used to locate the requested claims of request.

SetRequestedClaimsToResponseContext - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Action that sets requested claims to response context.

SetRequestedClaimsToResponseContext() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRequestedClaimsToResponseContext

Constructor.

setRequestedScopeLookupStrategy(Function<ProfileRequestContext, Scope>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateScope

Set the strategy used to locate the requested scope to validate.

SetRequestedSubjectToResponseContext - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Action that sets requested sub value to response context.

SetRequestedSubjectToResponseContext() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRequestedSubjectToResponseContext

setRequestNonceLookupStrategy(Function<ProfileRequestContext, Nonce>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddNonceToIDToken

Set the strategy used to locate the nonce of authentication request.

SetRequestObjectToResponseContext - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Action that stored request object to OIDCAuthenticationResponseContext.

SetRequestObjectToResponseContext() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRequestObjectToResponseContext

setRequireRequestedValue(boolean) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRedirectURI

Set whether to require redirect uri value in the request also when only single value is registered.

setReservedClaimNames(List<String>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddAttributesToClaimsSet

Set list of claim names that will not be added.

setResolveEncryptionAlgs(boolean) - Method in class net.shibboleth.idp.plugin.oidc.op.metadata.impl.AlgorithmInfoMetadataValueResolver

Set whether to resolve data encryption algorithms.

setResolveKeyTransportEncAlgs(boolean) - Method in class net.shibboleth.idp.plugin.oidc.op.metadata.impl.AlgorithmInfoMetadataValueResolver

Set whether to resolve key transport algorithms.

setResource(Resource) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.spring.factory.BasicJWKCredentialFactoryBean

Set the resource containing the private key.

setResponseClaimsSetLookupStrategy(Function<ProfileRequestContext, ClaimsSet>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddAttributesToClaimsSet

Set the strategy used to locate the response ClaimsSet associated with a given ProfileRequestContext.

setResponseClaimsSetLookupStrategy(Function<ProfileRequestContext, ClaimsSet>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddTokenDeliveryAttributesToClaimsSet

Set the strategy used to locate the response ClaimsSet associated with a given ProfileRequestContext.

SetResponseStatusCodeFromEvent - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

This action reads an event from the configured EventContext lookup strategy and sets the status code for HttpServletResponse according to the attached configuration.

SetResponseStatusCodeFromEvent() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetResponseStatusCodeFromEvent

Constructor.

setRevocationCache(RevocationCache) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.RevokeToken

Set the revocation cache instance to use.

setRevocationCache(RevocationCache) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRefreshTokenToResponseContext

Set the revocation cache instance to use.

setRevocationCache(RevocationCache) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateGrant

Set the revocation cache instance to use.

setRevocationCache(RevocationCache) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRegistrationAccessToken

Set the revocation cache instance to use.

setRevocationCache(RevocationCache) - Method in class net.shibboleth.idp.plugin.oidc.op.security.jwt.claims.impl.RootTokenIdRevocationValidator

Set the revocation cache instance to use.

setRevocationMethodLookupStrategy(Function<ProfileRequestContext, OAuth2TokenRevocationConfiguration.OAuth2TokenRevocationMethod>) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.RevokeToken

Set strategy for looking up which revocation method should be used when revoking a token.

setRootTokenIdentifierLookupStrategy(Function<JWTClaimsSet, String>) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.RevokeToken

Set a lookup strategy for the root token identifier.

setSAMLMetadataContextLookupStrategy(Function<MessageContext, SAMLMetadataContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.messaging.impl.PopulateOIDCMetadataContext

Set the strategy used to look up the SAMLMetadataContext to draw from.

setSAMLMetadataContextLookupStrategy(Function<ProfileRequestContext, SAMLMetadataContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeOutboundAuthenticationResponseMessageContext

Set the strategy used to locate the SAMLMetadataContext associated with a given ProfileRequestContext.

setSaveTokenToCredentialSet(boolean) - Method in class net.shibboleth.idp.plugin.oidc.op.authn.impl.JWTCredentialValidator

Set whether to save the JWT in the Java Subject's public credentials.

setSealer(DataSealer) - Method in class net.shibboleth.idp.plugin.oidc.op.admin.impl.IssueRegistrationAccessToken

Set the data sealer for handling access token.

setSealer(DataSealer) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRegistrationAccessToken

Set the data sealer for handling access token.

setSecretExpirationPeriodStrategy(Function<ProfileRequestContext, Duration>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.GenerateClientSecret

Set strategy to obtain client secret expiration period policy.

SetSectorIdentifierForAttributeResolution - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

An action that sets AttributeResolutionContext.setAttributeRecipientGroupID(java.lang.String) to sector identifier if pairwise subject is requested.

SetSectorIdentifierForAttributeResolution() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetSectorIdentifierForAttributeResolution

Constructor.

setSectorIdentifierLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetSectorIdentifierForAttributeResolution

Set the strategy used to locate sector identifier.

setSecurityParametersContextLookupStrategy(Function<MessageContext, SecurityParametersContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCSignatureSigningParametersHandler

Set the strategy used to look up the SecurityParametersContext to set the parameters for.

setSecurityParametersContextLookupStrategy(Function<ProfileRequestContext, SecurityParametersContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCSignatureSigningParameters

Set the strategy used to look up the SecurityParametersContext to set the parameters for.

setSecurityParametersLookupStrategy(Function<ProfileRequestContext, SecurityParametersContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.authn.impl.JWTCredentialValidator

Set the strategy used to locate the SecurityParametersContext to use.

setSecurityParametersLookupStrategy(Function<ProfileRequestContext, SecurityParametersContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCSigningResponseAction

Set the strategy used to locate the SecurityParametersContext to use.

setSecurityParametersLookupStrategy(Function<ProfileRequestContext, SecurityParametersContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRequestObject

Set the strategy used to locate the SecurityParametersContext to use.

setSelfAudienceCondition(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.ValidateAudience

Set whether the OP is an implied audience for the token request.

setSignatureAlgorithmsLookupStrategy(Function<ProfileRequestContext, List<String>>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddRequestObjectSecurityConfigurationToClientMetadata

Set the strategy used to obtain list of supported signature algorithms.

setSignatureAlgorithmsLookupStrategy(Function<ProfileRequestContext, List<String>>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddSecurityConfigurationToClientMetadata

Set the strategy used to obtain list of supported signature algorithms.

setSignatureSigningParametersResolver(SignatureSigningParametersResolver) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCSignatureSigningParameters

Set the resolver to use for the parameters to store into the context.

setSignatureSigningParametersResolver(SignatureSigningParametersResolver) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCSignatureSigningParametersHandler

Set the resolver to use for the parameters to store into the context.

setSignedClaimsValidator(ClaimsValidator) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRequestObject

Set the claims validator used for validating the signed request object.

setSignedJWT(SignedJWT) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.SignAccessToken

Called with signed JWT as parameter.

setSignedJWT(SignedJWT) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractSignJWTAction

Called with signed JWT as parameter.

setSignedJWT(SignedJWT) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SignIDToken

Set signed id token to response context.

setSignedJWT(SignedJWT) - Method in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.SignUserInfoResponse

Set signed user info to response context.

setStatementsLookupFunction(Function<ProfileRequestContext, Map<String, String>>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddMetadataStatementToClientMetadata

Set the lookup function for obtaining incoming metadata statements.

setSubjectLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetSubjectToResponseContext

Set the strategy used to locate subject.

SetSubjectToResponseContext - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Action that locates subject using strategy.

SetSubjectToResponseContext() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetSubjectToResponseContext

Constructor.

setSubjectTypeLookupStrategy(Function<ProfileRequestContext, SubjectType>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetSectorIdentifierForAttributeResolution

Set the strategy used to locate subject type.

setSubjectTypeLookupStrategy(Function<ProfileRequestContext, SubjectType>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetSubjectToResponseContext

Set the strategy function to use to obtain the subject type.

setSubjectTypeLookupStrategy(Function<ProfileRequestContext, SubjectType>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.logic.PublicSubjectActivationCondition

Set the strategy used to locate subject type.

setSupportedResponseTypes(Map<ResponseType, Predicate<ProfileRequestContext>>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddResponseTypesToClientMetadata

Set map of supported response types and their corresponding predicates.

setTargetIDToken(boolean) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddTokenDeliveryAttributesToClaimsSet

Set whether target is id token claims set.

setTokenClaimsSetManipulationStrategyLookupStrategy(Function<ProfileRequestContext, BiFunction<ProfileRequestContext, Map<String, Object>, Map<String, Object>>>) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.BuildAccessToken

Set the lookup function to supply strategy bi-function for manipulating token claims set.

setTokenClaimsSetManipulationStrategyLookupStrategy(Function<ProfileRequestContext, BiFunction<ProfileRequestContext, Map<String, Object>, Map<String, Object>>>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthorizationCodeToResponseContext

Set the lookup function to supply strategy bi-function for manipulating token claims set.

setTokenClaimsSetManipulationStrategyLookupStrategy(Function<ProfileRequestContext, BiFunction<ProfileRequestContext, Map<String, Object>, Map<String, Object>>>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRefreshTokenToResponseContext

Set the lookup function to supply strategy bi-function for manipulating token claims set.

SetTokenDeliveryAttributesFromTokenToResponseContext - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Action that locates any token delivery claims from authorization code / access token.

SetTokenDeliveryAttributesFromTokenToResponseContext() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetTokenDeliveryAttributesFromTokenToResponseContext

Constructor.

SetTokenDeliveryAttributesToResponseContext - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Action that checks for any released attributes marked for token delivery.

SetTokenDeliveryAttributesToResponseContext() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetTokenDeliveryAttributesToResponseContext

Constructor.

setTokenEndpointAuthMethodsLookupStrategy(Function<ProfileRequestContext, Set<ClientAuthenticationMethod>>) - Method in class net.shibboleth.idp.plugin.oidc.op.authn.impl.ValidateClientAuthenticationType

Set strategy to obtain enabled token endpoint authentication methods.

setTokenEndpointAuthMethodsLookupStrategy(Function<ProfileRequestContext, Set<ClientAuthenticationMethod>>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddTokenEndpointAuthMethodsToClientMetadata

Set strategy to obtain enabled token endpoint authentication methods.

setTokenLifetimeLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.idp.plugin.oidc.op.admin.impl.IssueRegistrationAccessToken

Set a lookup strategy for the token lifetime.

setTokenMetadataPolicyLookupStrategy(Function<ProfileRequestContext, Map<String, MetadataPolicy>>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeRegistrationMetadataPolicyContext

Set the strategy used to locate the request metadata policy encoded in the access token.

setTokenRevocationLifetimeLookupStrategy(Function<JWTClaimsSet, Duration>) - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.RevokeToken

Set a lookup strategy for the token revocation lifetime.

setTokenRevocationLifetimeLookupStrategy(Function<JWTClaimsSet, Duration>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRefreshTokenToResponseContext

Set a lookup strategy for the token revocation lifetime.

setTranscoderRegistry(ReloadableService<AttributeTranscoderRegistry>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddAttributesToClaimsSet

Sets the registry of transcoding rules to apply to encode attributes.

setTranscoderRegistry(ReloadableService<AttributeTranscoderRegistry>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRequestedClaimsToResponseContext

Sets the registry of transcoding rules to apply to encode attributes.

setTranscoderRegistry(ReloadableService<AttributeTranscoderRegistry>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetTokenDeliveryAttributesToResponseContext

Sets the registry of transcoding rules to apply to encode attributes.

setTranscoderRegistry(ReloadableService<AttributeTranscoderRegistry>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.logic.AttributeResolutionSubjectLookupFunction

Sets the registry of transcoding rules to apply to encode attributes.

setTypeHeader(String) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractSignJWTAction

Sets the value to be inserted as a "typ" header for the JWS.

setUserinfoDeliveryClaimsLookupStrategy(Function<ProfileRequestContext, ClaimsSet>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetTokenDeliveryAttributesFromTokenToResponseContext

Set the strategy used to locate the user info delivery claims.

setUserInfoSigningAlgLookupStrategy(Function<ProfileRequestContext, JWSAlgorithm>) - Method in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.AddUserInfoShell

Set the strategy used to user info signing algorithm lookup strategy.

setUserInfoSigningAlgLookupStrategy(Function<ProfileRequestContext, JWSAlgorithm>) - Method in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.SignUserInfoResponse

Set the strategy used to user info signing algorithm lookup strategy.

setValidatedScopeLookupStrategy(Function<ProfileRequestContext, Scope>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.logic.IssueIDTokenCondition

Set the lookup strategy for the validated scope.

setValidateRemoteJwkSetPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddJwksToClientMetadata

Set the predicate used to indicate whether contents of remote JWK set should be validated.

setValidRedirectURIsLookupStrategy(Function<ProfileRequestContext, Set<URI>>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRedirectURI

Set the strategy used to locate the redirect uris to compare against.

setVelocityEngine(VelocityEngine) - Method in class net.shibboleth.idp.plugin.oidc.op.encoding.impl.NimbusResponseEncoder

Set the VelocityEngine instance.

setVelocityTemplateId(String) - Method in class net.shibboleth.idp.plugin.oidc.op.encoding.impl.NimbusResponseEncoder

Set the Velocity template id.

SignAccessToken - Class in net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl

Action that signs AccessTokenContext.getJWT() and overwrites it with the signed version.

SignAccessToken() - Constructor for class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.SignAccessToken

Constructor.

signatureAlgorithmsLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddRequestObjectSecurityConfigurationToClientMetadata

Strategy to obtain list of supported signature algorithms.

signatureAlgorithmsLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddSecurityConfigurationToClientMetadata

Strategy to obtain list of supported signature algorithms.

signatureSigningParameters - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCSigningResponseAction

The signature signing parameters.

signatureValidationParameters - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRequestObject

The signature validation parameters.

signedClaimsValidator - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRequestObject

The claims validator to be applied for validating the signed request object.

signedJWT - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.AbstractProcessTokenAction

Copy of signed JWT for non-opaque access tokens.

signedJWT - Variable in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.ParseAccessToken

Copy of signed JWT for non-opaque access tokens.

SignIDToken - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Action that signs IDTokenClaimsSet and sets it to OIDCAuthenticationResponseContext.getProcessedToken().

SignIDToken() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.SignIDToken

SignUserInfoResponse - Class in net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl

Action that signs UserInfo and sets it to OIDCAuthenticationResponseContext.getProcessedToken().

SignUserInfoResponse() - Constructor for class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.SignUserInfoResponse

Constructor.

statements - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddMetadataStatementToClientMetadata

The map of static metadata_statements, key for FO, value for the statement.

statementsLookupFunction - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddMetadataStatementToClientMetadata

The lookup function for obtaining incoming metadata statements.

StoreClientInformation - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

An action that stores the ClientInformation from the OIDCClientRegistrationResponseContext to the associated ClientInformationManager.

StoreClientInformation() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.StoreClientInformation

Constructor.

SUB_CLAIM_NAME - Static variable in class net.shibboleth.idp.plugin.oidc.op.profile.logic.AttributeResolutionSubjectLookupFunction

Name of the sub claim.

SubjectActivationCondition - Class in net.shibboleth.idp.plugin.oidc.op.profile.logic

Activation condition returning true if subject cannot be located from oidc response context.

SubjectActivationCondition() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.logic.SubjectActivationCondition

subjectCtx - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.BuildAccessToken

Subject context.

subjectCtx - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthorizationCodeToResponseContext

Subject context.

subjectLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetSubjectToResponseContext

Strategy used to obtain the subject.

subjectType - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetSubjectToResponseContext

Subject type.

SubjectTypeAuditExtractor - Class in net.shibboleth.idp.plugin.oidc.op.audit.impl

Function that returns the type of the subject from OIDCAuthenticationResponseContext.

SubjectTypeAuditExtractor() - Constructor for class net.shibboleth.idp.plugin.oidc.op.audit.impl.SubjectTypeAuditExtractor

Constructor.

SubjectTypeAuditExtractor(Function<ProfileRequestContext, OIDCAuthenticationResponseContext>) - Constructor for class net.shibboleth.idp.plugin.oidc.op.audit.impl.SubjectTypeAuditExtractor

Constructor.

subjectTypeLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetSectorIdentifierForAttributeResolution

Strategy used to obtain subject type.

subjectTypeLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.logic.PublicSubjectActivationCondition

Strategy used to obtain subject type.

subjectTypeStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetSubjectToResponseContext

Strategy used to determine the subject type to try.

SubjectValueAuditExtractor - Class in net.shibboleth.idp.plugin.oidc.op.audit.impl

Function that returns the value of the subject from OIDCAuthenticationResponseContext.

SubjectValueAuditExtractor() - Constructor for class net.shibboleth.idp.plugin.oidc.op.audit.impl.SubjectValueAuditExtractor

Constructor.

SubjectValueAuditExtractor(Function<ProfileRequestContext, OIDCAuthenticationResponseContext>) - Constructor for class net.shibboleth.idp.plugin.oidc.op.audit.impl.SubjectValueAuditExtractor

Constructor.

supportedDecryptionAlgs - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddRequestObjectSecurityConfigurationToClientMetadata

List of supported key transport algorithms obtained from the security configuration.

supportedDecryptionEncs - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddRequestObjectSecurityConfigurationToClientMetadata

List of supported data decryption algorithms obtained from the security configuration.

supportedEncryptionAlgs - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddSecurityConfigurationToClientMetadata

List of supported key transport algorithms obtained from the security configuration.

supportedEncryptionEncs - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddSecurityConfigurationToClientMetadata

List of supported data encryption algorithms obtained from the security configuration.

supportedGrantTypes - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddGrantTypeToClientMetadata

Map of supported grant types and their corresponding predicates.

supportedResponseTypes - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddResponseTypesToClientMetadata

Map of supported response types and their corresponding predicates.

supportedSignatureValidationAlgs - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddRequestObjectSecurityConfigurationToClientMetadata

List of supported signature validation algorithms obtained from the security configuration.

supportedSigningAlgs - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddSecurityConfigurationToClientMetadata

List of supported signing algorithms obtained from the security configuration.

SYSTEM_PROPERTY_ACTIVATION - Static variable in class net.shibboleth.idp.plugin.oidc.op.servlet.RegisterFilterServletContextInitializer

System property name for the activation flag of this class.

SYSTEM_PROPERTY_MAPPINGS - Static variable in class net.shibboleth.idp.plugin.oidc.op.servlet.RegisterFilterServletContextInitializer

System property name for configuring the filter mappings.

T

target - Variable in class net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationEncryptionParametersResolver

Whether to create parameters for request object decryption, id token encryption or userinfo response encryption.

target - Variable in class net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationSignatureSigningParametersResolver

The type of signing: id_token or userinfo response.

target - Variable in class net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationSignatureValidationParametersResolver

The type of validation.

TARGET_BEAN_NAME - Static variable in class net.shibboleth.idp.plugin.oidc.op.servlet.RegisterFilterServletContextInitializer

The target bean name for the dynamic response header filter.

targetIDToken - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddTokenDeliveryAttributesToClaimsSet

Whether we are adding claims to ID Token.

test(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.logic.AttributeConsentEnabledInTokenClaimsSetPredicate

test(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.logic.IssueIDTokenCondition

test(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.logic.PairwiseSubjectActivationCondition

test(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.logic.PublicSubjectActivationCondition

test(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.logic.SubjectActivationCondition

toHTTPResponse() - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.messaging.impl.OAuth2RevocationErrorResponse

toHTTPResponse() - Method in class net.shibboleth.idp.plugin.oidc.op.oauth2.messaging.impl.OAuth2RevocationSuccessResponse

TOKEN_ENDPOINT_JWT_VALIDATION - net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationSignatureValidationParametersResolver.ParameterType

Type for token endpoint JWT validation.

tokenClaimsContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.BuildAccessToken

Strategy used to locate the OIDCAuthenticationResponseTokenClaimsContext.

tokenClaimsContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.ValidateAudience

Strategy used to locate the OIDCAuthenticationResponseTokenClaimsContext.

tokenClaimsContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddTokenDeliveryAttributesToClaimsSet

Strategy used to locate the OIDCAuthenticationResponseTokenClaimsContext.

tokenClaimsContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthorizationCodeToResponseContext

Strategy used to locate the OIDCAuthenticationResponseTokenClaimsContext.

tokenClaimsContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateScope

Strategy used to locate the OIDCAuthenticationResponseTokenClaimsContext.

tokenClaimsCtx - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddTokenDeliveryAttributesToClaimsSet

delivery claims to copy to claims set.

tokenClaimsSet - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.BuildAccessToken

Authorize Code / Refresh Token the access token is based on, if any.

tokenClaimsSet - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRefreshTokenToResponseContext

Authorize Code / Refresh Token the refresh token will be based on.

tokenClaimsSetManipulationStrategyLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.BuildAccessToken

Lookup function to supply strategy bi-function for manipulating token claims set.

tokenClaimsSetManipulationStrategyLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetAuthorizationCodeToResponseContext

Lookup function to supply strategy bi-function for manipulating token claims set.

tokenClaimsSetManipulationStrategyLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRefreshTokenToResponseContext

Lookup function to supply strategy bi-function for manipulating token claims set.

tokenCtx - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.EncryptAccessToken

Token context.

tokenCtx - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.SetAccessTokenToResponseContext

Token context.

tokenCtx - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.SignAccessToken

Token context.

tokenEndpointAuthMethodsLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.authn.impl.ValidateClientAuthenticationType

Strategy to obtain enabled token endpoint authentication methods.

tokenEndpointAuthMethodsLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddTokenEndpointAuthMethodsToClientMetadata

Strategy to obtain enabled token endpoint authentication methods.

tokenLifetime - Variable in class net.shibboleth.idp.plugin.oidc.op.admin.impl.IssueRegistrationAccessToken

The token lifetime.

tokenLifetimeLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.admin.impl.IssueRegistrationAccessToken

Lookup function for the token lifetime.

tokenMetadataPolicyLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeRegistrationMetadataPolicyContext

The strategy used to locate the request metadata policy encoded in the access token.

tokenRevocationLifetimeLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.RevokeToken

Lookup function to supply token revocation lifetime.

tokenRevocationLifetimeLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRefreshTokenToResponseContext

Lookup function to supply token revocation lifetime.

toString() - Method in class net.shibboleth.idp.plugin.oidc.op.criterion.IssuerCriterion

toString(HTTPRequest) - Static method in class net.shibboleth.idp.plugin.oidc.op.decoding.impl.RequestUtil

Helper method to print request to string for logging.

toString(HTTPResponse) - Static method in class net.shibboleth.idp.plugin.oidc.op.encoding.impl.ResponseUtil

Helper method to print response to string for logging.

toString(HttpServletResponse, String) - Static method in class net.shibboleth.idp.plugin.oidc.op.encoding.impl.ResponseUtil

Helper method to print response to string for logging.

transcoderRegistry - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddAttributesToClaimsSet

Transcoder registry service object.

transcoderRegistry - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetRequestedClaimsToResponseContext

Transcoder registry service object.

transcoderRegistry - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetTokenDeliveryAttributesToResponseContext

Transcoder registry service object.

transcoderRegistry - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.logic.AttributeResolutionSubjectLookupFunction

Transcoder registry service object.

typeHeader - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractSignJWTAction

"typ" header to insert while signing.

U

URL_PARAM_CLIENT_ID - Static variable in class net.shibboleth.idp.plugin.oidc.op.cli.IssueRegistrationAccessTokenArguments

The URL parameter name for the client identifier.

URL_PARAM_LIFETIME - Static variable in class net.shibboleth.idp.plugin.oidc.op.cli.IssueRegistrationAccessTokenArguments

The URL parameter name for the access token lifetime.

URL_PARAM_POLICY_ID - Static variable in class net.shibboleth.idp.plugin.oidc.op.cli.IssueRegistrationAccessTokenArguments

The URL parameter name for the relying party identifier.

URL_PARAM_POLICY_LOCATION - Static variable in class net.shibboleth.idp.plugin.oidc.op.cli.IssueRegistrationAccessTokenArguments

The URL parameter name for the metadata policy location.

URL_PARAM_REPLACEMENT - Static variable in class net.shibboleth.idp.plugin.oidc.op.cli.IssueRegistrationAccessTokenArguments

The URL parameter name for the replacement flag.

USERINFO_ENCRYPTION - net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationEncryptionParametersResolver.ParameterType

Type for user info encryption.

USERINFO_SIGNING - net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationSignatureSigningParametersResolver.ParameterType

Type for user info signing.

userInfoClaims - Variable in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.SignUserInfoResponse

token claims set to sign.

userInfoClaimsLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.audit.impl.ClaimsAuditExtractor

Lookup strategy for user info claims to read from.

userinfoDeliveryClaimsLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.SetTokenDeliveryAttributesFromTokenToResponseContext

Strategy used to obtain the user info delivery claims.

userInfoSigAlgStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.AddUserInfoShell

Strategy used to determine user info response signing algorithm.

userInfoSigAlgStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.SignUserInfoResponse

Strategy used to determine user info response signing algorithm.

V

validate() - Method in class net.shibboleth.idp.plugin.oidc.op.cli.IssueRegistrationAccessTokenArguments

validate(SignatureSigningParameters) - Method in class net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationSignatureSigningParametersResolver

validate(SignatureSigningParameters) - Method in class net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationSignatureValidationParametersResolver

ValidateAccessToken - Class in net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl

Action that validates the claims pulled from an access token as usable for access to the OP's UserInfo endpoint.

ValidateAccessToken() - Constructor for class net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.ValidateAccessToken

Constructor.

ValidateAudience - Class in net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl

Action that validates requested resource/audience values against a computed set of "allowed" values and populates the resulting set into the OIDCAuthenticationResponseContext and a ProxiedRequesterContext.

ValidateAudience() - Constructor for class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.ValidateAudience

Constructor.

ValidateClientAuthenticationType - Class in net.shibboleth.idp.plugin.oidc.op.authn.impl

Validates the client authentication type with the token_endpoint_auth_method stored in the client's metadata and the profile configuration.

ValidateClientAuthenticationType() - Constructor for class net.shibboleth.idp.plugin.oidc.op.authn.impl.ValidateClientAuthenticationType

Constructor.

ValidateCodeChallenge - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Validates the presence of PKCE code challenge parameter from the incoming authentication request.

ValidateCodeChallenge() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateCodeChallenge

Constructor.

validatedScopeLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.logic.IssueIDTokenCondition

Lookup strategy for the validated scope.

ValidateGrant - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Action that validates an authorization grant.

ValidateGrant(DataSealer) - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateGrant

Constructor.

ValidateGrantType - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

An action that validates the grant type is registered to the requesting RP.

ValidateGrantType() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateGrantType

Constructor.

validateJWTClaims(ProfileRequestContext, SignedJWT, ClientID) - Method in class net.shibboleth.idp.plugin.oidc.op.authn.impl.JWTCredentialValidator

Validates the contents of the given JWT against the requirements set in the OIDC core specification section 9.

ValidatePKCE - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Action performs PKCE (https://oauth.net/2/pkce/) validation.

ValidatePKCE() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidatePKCE

Constructor.

ValidateRedirectURI - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Action that validates redirect uri is expected.

ValidateRedirectURI() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRedirectURI

Constructor.

ValidateRegistrationAccessToken - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Action that validates registration access token is a valid one.

ValidateRegistrationAccessToken() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRegistrationAccessToken

Constructor.

ValidateRegistrationRequestMetadata - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Validates the incoming dynamic client registration request against the metadata policy stored in the OIDCClientRegistrationMetadataPolicyContext.

ValidateRegistrationRequestMetadata() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRegistrationRequestMetadata

Constructor.

validateRemoteJwkSetPredicate - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.AddJwksToClientMetadata

Predicate used to indicate whether contents of remote JWK set should be validated.

ValidateRequestObject - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Action validates request object in response context.

ValidateRequestObject() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRequestObject

Constructor.

ValidateResponseType - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

An action that validates the requested response_type is registered to the requesting RP.

ValidateResponseType() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateResponseType

ValidateScope - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Action that validates requested and previously granted scopes are also registered in client metadata and stores the resulting set in the response context.

ValidateScope() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateScope

Constructor.

validRedirectURIsLookupStrategy - Variable in class net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRedirectURI

Strategy used to obtain the redirect uris to compare request value to.

valueOf(String) - Static method in enum net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationEncryptionParametersResolver.ParameterType

Returns the enum constant of this type with the specified name.

valueOf(String) - Static method in enum net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationSignatureSigningParametersResolver.ParameterType

Returns the enum constant of this type with the specified name.

valueOf(String) - Static method in enum net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationSignatureValidationParametersResolver.ParameterType

Returns the enum constant of this type with the specified name.

values() - Static method in enum net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationEncryptionParametersResolver.ParameterType

Returns an array containing the constants of this enum type, in the order they are declared.

values() - Static method in enum net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationSignatureSigningParametersResolver.ParameterType

Returns an array containing the constants of this enum type, in the order they are declared.

values() - Static method in enum net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationSignatureValidationParametersResolver.ParameterType

Returns an array containing the constants of this enum type, in the order they are declared.

velocityEngine - Variable in class net.shibboleth.idp.plugin.oidc.op.encoding.impl.NimbusResponseEncoder

Velocity engine used to evaluate the template when using FORM POST response mode.

velocityTemplateId - Variable in class net.shibboleth.idp.plugin.oidc.op.encoding.impl.NimbusResponseEncoder

ID of the Velocity template used when using FORM POST response mode.

verifyEssentiality(Collection<IdPAttribute>) - Method in class net.shibboleth.idp.plugin.oidc.op.attribute.filter.matcher.impl.AttributeInOIDCRequestedClaimsMatcher

Checks whether any of the matching requested claims have the required flag set if necessary.

VerifyRequestedSubjectIdentifier - Class in net.shibboleth.idp.plugin.oidc.op.profile.impl

Action verifies that produced subject equals to requested subject if such exists.

VerifyRequestedSubjectIdentifier() - Constructor for class net.shibboleth.idp.plugin.oidc.op.profile.impl.VerifyRequestedSubjectIdentifier

verifySectorIdUri(URI, Set<URI>) - Method in class net.shibboleth.idp.plugin.oidc.op.profile.impl.CheckRedirectURIs

Verifies that all the given redirect URIs are found from the contents of the given sector identifier URI.

A B C D E F G H I J K L M N O P R S T U V
All Classes All Packages