Package net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl

Class SignAccessToken

java.lang.Object

net.shibboleth.utilities.java.support.component.AbstractInitializableComponent

org.opensaml.profile.action.AbstractProfileAction

org.opensaml.profile.action.AbstractConditionalProfileAction

net.shibboleth.idp.profile.AbstractProfileAction

net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCResponseAction

net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCSigningResponseAction

net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractSignJWTAction

net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.SignAccessToken

All Implemented Interfaces:

Component, DestructableComponent, InitializableComponent, ProfileAction, Aware, MessageSource, MessageSourceAware, Action

public class SignAccessToken
extends AbstractSignJWTAction

Action that signs AccessTokenContext.getJWT() and overwrites it with the signed version.

The action exits gracefully if no signing parameters exist or the JWT does not exist.

Event:

EventIds.PROCEED_EVENT_ID, EventIds.MESSAGE_PROC_ERROR, EventIds.INVALID_MSG_CTX

Field Summary

Fields

Modifier and Type	Field	Description
private Function<ProfileRequestContext,AccessTokenContext>	accessTokenContextLookupStrategy	Strategy used to locate the subcontext with the token.
private com.nimbusds.jwt.JWTClaimsSet	claimsSet	Source of claims set to sign.
private org.slf4j.Logger	log	Class logger.
private AccessTokenContext	tokenCtx	Token context.

Constructor Summary

Constructors

Constructor	Description
SignAccessToken()	Constructor.

Method Summary

Modifier and Type	Method	Description
protected boolean	doPreExecute(ProfileRequestContext profileRequestContext)
protected com.nimbusds.jwt.JWTClaimsSet	getClaimsSetToSign()	Called to get claim set to sign.
void	setAccessTokenContextCreationStrategy(Function<ProfileRequestContext,AccessTokenContext> strategy)	Set the strategy used to create the AccessTokenContext to use.
protected void	setSignedJWT(com.nimbusds.jwt.SignedJWT jwt)	Called with signed JWT as parameter.

Methods inherited from class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractSignJWTAction

doExecute, resolveAlgorithm, setTypeHeader

Methods inherited from class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCSigningResponseAction

getSignatureSigningParameters, setSecurityParametersLookupStrategy

Methods inherited from class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCResponseAction

getMetadataContext, getOidcResponseContext

Methods inherited from class net.shibboleth.idp.profile.AbstractProfileAction

doExecute, execute, getMessage, getMessage, getMessage, getProfileContextLookupStrategy, getRequestContext, getResult, setMessageSource, setProfileContextLookupStrategy

Methods inherited from class org.opensaml.profile.action.AbstractConditionalProfileAction

getActivationCondition, setActivationCondition

Methods inherited from class org.opensaml.profile.action.AbstractProfileAction

doPostExecute, doPostExecute, execute, getHttpServletRequest, getHttpServletResponse, getLogPrefix, setHttpServletRequest, setHttpServletResponse

Methods inherited from class net.shibboleth.utilities.java.support.component.AbstractInitializableComponent

destroy, doDestroy, doInitialize, initialize, isDestroyed, isInitialized

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface net.shibboleth.utilities.java.support.component.InitializableComponent

initialize, isInitialized

Field Detail

log

@Nonnull
private org.slf4j.Logger log

Class logger.

accessTokenContextLookupStrategy

@Nonnull
private Function<ProfileRequestContext,AccessTokenContext> accessTokenContextLookupStrategy

Strategy used to locate the subcontext with the token.

tokenCtx

@Nullable
private AccessTokenContext tokenCtx

Token context.

claimsSet

@Nullable
private com.nimbusds.jwt.JWTClaimsSet claimsSet

Source of claims set to sign.

Constructor Detail

SignAccessToken

public SignAccessToken()

Constructor.

Method Detail

setAccessTokenContextCreationStrategy

public void setAccessTokenContextCreationStrategy(@Nonnull
                                                  Function<ProfileRequestContext,AccessTokenContext> strategy)

Set the strategy used to create the AccessTokenContext to use.

Parameters:

strategy - creation strategy

doPreExecute

protected boolean doPreExecute(@Nonnull
                               ProfileRequestContext profileRequestContext)

Overrides:

doPreExecute in class AbstractSignJWTAction

getClaimsSetToSign

@Nonnull
protected com.nimbusds.jwt.JWTClaimsSet getClaimsSetToSign()

Called to get claim set to sign.

Specified by:

getClaimsSetToSign in class AbstractSignJWTAction

Returns:

claim set to sign

setSignedJWT

protected void setSignedJWT(@Nonnull
                            com.nimbusds.jwt.SignedJWT jwt)

Called with signed JWT as parameter.

Specified by:

setSignedJWT in class AbstractSignJWTAction

Parameters:

jwt - signed JWT.