Package net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl

Class EncryptAccessToken

java.lang.Object

net.shibboleth.utilities.java.support.component.AbstractInitializableComponent

org.opensaml.profile.action.AbstractProfileAction

org.opensaml.profile.action.AbstractConditionalProfileAction

net.shibboleth.idp.profile.AbstractProfileAction

net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCResponseAction

net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.AbstractEncryptTokenAction

net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.EncryptAccessToken

All Implemented Interfaces:

Component, DestructableComponent, InitializableComponent, ProfileAction, Aware, MessageSource, MessageSourceAware, Action

public class EncryptAccessToken
extends AbstractEncryptTokenAction

Action that handles JWT access token encryption.

Field Summary

Fields

Modifier and Type	Field	Description
private Function<ProfileRequestContext,AccessTokenContext>	accessTokenContextLookupStrategy	Strategy used to locate the subcontext with the token.
private org.slf4j.Logger	log	Class logger.
private AccessTokenContext	tokenCtx	Token context.

Constructor Summary

Constructors

Constructor	Description
EncryptAccessToken()	Constructor.

Method Summary

Modifier and Type	Method	Description
protected boolean	doPreExecute(ProfileRequestContext profileRequestContext)
protected com.nimbusds.jose.Payload	getPayload(ProfileRequestContext profileRequestContext)	Get the payload to encrypt.
void	setAccessTokenContextCreationStrategy(Function<ProfileRequestContext,AccessTokenContext> strategy)	Set the strategy used to create the AccessTokenContext to use.
protected void	setProcessedToken(ProfileRequestContext profileRequestContext, com.nimbusds.jwt.EncryptedJWT token)	Store the resulting token.

Methods inherited from class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.AbstractEncryptTokenAction

doExecute, setEncryptionContextLookupStrategy

Methods inherited from class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCResponseAction

getMetadataContext, getOidcResponseContext

Methods inherited from class net.shibboleth.idp.profile.AbstractProfileAction

doExecute, execute, getMessage, getMessage, getMessage, getProfileContextLookupStrategy, getRequestContext, getResult, setMessageSource, setProfileContextLookupStrategy

Methods inherited from class org.opensaml.profile.action.AbstractConditionalProfileAction

getActivationCondition, setActivationCondition

Methods inherited from class org.opensaml.profile.action.AbstractProfileAction

doPostExecute, doPostExecute, execute, getHttpServletRequest, getHttpServletResponse, getLogPrefix, setHttpServletRequest, setHttpServletResponse

Methods inherited from class net.shibboleth.utilities.java.support.component.AbstractInitializableComponent

destroy, doDestroy, doInitialize, initialize, isDestroyed, isInitialized

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface net.shibboleth.utilities.java.support.component.InitializableComponent

initialize, isInitialized

Field Detail

log

@Nonnull
private org.slf4j.Logger log

Class logger.

accessTokenContextLookupStrategy

@Nonnull
private Function<ProfileRequestContext,AccessTokenContext> accessTokenContextLookupStrategy

Strategy used to locate the subcontext with the token.

tokenCtx

@Nullable
private AccessTokenContext tokenCtx

Token context.

Constructor Detail

EncryptAccessToken

public EncryptAccessToken()

Constructor.

Method Detail

setAccessTokenContextCreationStrategy

public void setAccessTokenContextCreationStrategy(@Nonnull
                                                  Function<ProfileRequestContext,AccessTokenContext> strategy)

Set the strategy used to create the AccessTokenContext to use.

Parameters:

strategy - creation strategy

doPreExecute

protected boolean doPreExecute(@Nonnull
                               ProfileRequestContext profileRequestContext)

Overrides:

doPreExecute in class AbstractEncryptTokenAction

getPayload

protected com.nimbusds.jose.Payload getPayload(@Nonnull
                                               ProfileRequestContext profileRequestContext)

Get the payload to encrypt.

Specified by:

getPayload in class AbstractEncryptTokenAction

Parameters:

profileRequestContext - profile request context

Returns:

payload to encrypt

setProcessedToken

protected void setProcessedToken(@Nonnull
                                 ProfileRequestContext profileRequestContext,
                                 @Nonnull
                                 com.nimbusds.jwt.EncryptedJWT token)

Store the resulting token.

Specified by:

setProcessedToken in class AbstractEncryptTokenAction

Parameters:

profileRequestContext - profile request context

token - encrypted token