Package net.shibboleth.idp.plugin.oidc.op.authn.impl

Class OIDCClientInfoCredentialValidator

java.lang.Object

net.shibboleth.utilities.java.support.component.AbstractInitializableComponent

net.shibboleth.utilities.java.support.component.AbstractIdentifiedInitializableComponent

net.shibboleth.idp.authn.AbstractCredentialValidator

net.shibboleth.idp.authn.AbstractUsernamePasswordCredentialValidator

net.shibboleth.idp.plugin.oidc.op.authn.impl.OIDCClientInfoCredentialValidator

All Implemented Interfaces:

net.shibboleth.idp.authn.CredentialValidator, net.shibboleth.idp.authn.principal.PrincipalSupportingComponent, Component, DestructableComponent, IdentifiableComponent, IdentifiedComponent, InitializableComponent

@ThreadSafeAfterInit
public class OIDCClientInfoCredentialValidator
extends net.shibboleth.idp.authn.AbstractUsernamePasswordCredentialValidator

A password validator that authenticates against OIDC client metadata (which may itself be emulated via SAML metadata).

Nested Class Summary

Nested classes/interfaces inherited from interface net.shibboleth.idp.authn.CredentialValidator

net.shibboleth.idp.authn.CredentialValidator.ErrorHandler, net.shibboleth.idp.authn.CredentialValidator.WarningHandler

Field Summary

Fields

Modifier and Type	Field	Description
private com.nimbusds.openid.connect.sdk.rp.OIDCClientInformation	clientInformation	Client information.
private StringDigester	digester	Digester for SHA-1.
private org.slf4j.Logger	log	Class logger.
private Function<ProfileRequestContext,net.shibboleth.oidc.metadata.context.OIDCMetadataContext>	oidcMetadataContextLookupStrategy	Strategy that will return OIDCMetadataContext.

Constructor Summary

Constructors

Constructor	Description
OIDCClientInfoCredentialValidator()	Constructor.

Method Summary

Modifier and Type	Method	Description
protected void	doInitialize()
protected Subject	doValidate(ProfileRequestContext profileRequestContext, net.shibboleth.idp.authn.context.AuthenticationContext authenticationContext, net.shibboleth.idp.authn.context.UsernamePasswordContext usernamePasswordContext, net.shibboleth.idp.authn.CredentialValidator.WarningHandler warningHandler, net.shibboleth.idp.authn.CredentialValidator.ErrorHandler errorHandler)
protected Subject	doValidate(ProfileRequestContext profileRequestContext, net.shibboleth.idp.authn.context.AuthenticationContext authenticationContext, net.shibboleth.idp.authn.CredentialValidator.WarningHandler warningHandler, net.shibboleth.idp.authn.CredentialValidator.ErrorHandler errorHandler)
void	setOidcMetadataContextLookupStrategy(Function<ProfileRequestContext,net.shibboleth.oidc.metadata.context.OIDCMetadataContext> strategy)	Set the strategy used to return the OIDCMetadataContext.

Methods inherited from class net.shibboleth.idp.authn.AbstractUsernamePasswordCredentialValidator

applyTransforms, populateSubject, removeContextAfterValidation, savePasswordToCredentialSet, setLowercase, setMatchExpression, setRemoveContextAfterValidation, setSavePasswordToCredentialSet, setTransforms, setTrim, setUppercase, setUsernamePasswordContextLookupStrategy

Methods inherited from class net.shibboleth.idp.authn.AbstractCredentialValidator

getLogPrefix, getSupportedPrincipals, isAcceptable, populateSubject, setActivationCondition, setId, setSupportedPrincipals, validate

Methods inherited from class net.shibboleth.utilities.java.support.component.AbstractIdentifiedInitializableComponent

getId

Methods inherited from class net.shibboleth.utilities.java.support.component.AbstractInitializableComponent

destroy, doDestroy, initialize, isDestroyed, isInitialized

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface net.shibboleth.utilities.java.support.component.IdentifiedComponent

getId

Field Detail

log

@Nonnull
private final org.slf4j.Logger log

Class logger.

oidcMetadataContextLookupStrategy

@Nonnull
private Function<ProfileRequestContext,net.shibboleth.oidc.metadata.context.OIDCMetadataContext> oidcMetadataContextLookupStrategy

Strategy that will return OIDCMetadataContext.

digester

@NonnullAfterInit
private StringDigester digester

Digester for SHA-1.

clientInformation

@Nullable
private com.nimbusds.openid.connect.sdk.rp.OIDCClientInformation clientInformation

Client information.

Constructor Detail

OIDCClientInfoCredentialValidator

public OIDCClientInfoCredentialValidator()

Constructor.

Method Detail

setOidcMetadataContextLookupStrategy

public void setOidcMetadataContextLookupStrategy(@Nonnull
                                                 Function<ProfileRequestContext,net.shibboleth.oidc.metadata.context.OIDCMetadataContext> strategy)

Set the strategy used to return the OIDCMetadataContext.

Parameters:

strategy - The lookup strategy.

doInitialize

protected void doInitialize()
                     throws ComponentInitializationException

Overrides:

doInitialize in class AbstractIdentifiedInitializableComponent

Throws:

ComponentInitializationException

doValidate

protected Subject doValidate(@Nonnull
                             ProfileRequestContext profileRequestContext,
                             @Nonnull
                             net.shibboleth.idp.authn.context.AuthenticationContext authenticationContext,
                             @Nullable
                             net.shibboleth.idp.authn.CredentialValidator.WarningHandler warningHandler,
                             @Nullable
                             net.shibboleth.idp.authn.CredentialValidator.ErrorHandler errorHandler)
                      throws Exception

Overrides:

doValidate in class net.shibboleth.idp.authn.AbstractUsernamePasswordCredentialValidator

Throws:

Exception

doValidate

@Nullable
protected Subject doValidate(@Nonnull
                             ProfileRequestContext profileRequestContext,
                             @Nonnull
                             net.shibboleth.idp.authn.context.AuthenticationContext authenticationContext,
                             @Nonnull
                             net.shibboleth.idp.authn.context.UsernamePasswordContext usernamePasswordContext,
                             @Nullable
                             net.shibboleth.idp.authn.CredentialValidator.WarningHandler warningHandler,
                             @Nullable
                             net.shibboleth.idp.authn.CredentialValidator.ErrorHandler errorHandler)
                      throws Exception

Specified by:

doValidate in class net.shibboleth.idp.authn.AbstractUsernamePasswordCredentialValidator

Throws:

Exception