Package net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl
Profile action implementations related to OAuth2.
-
Class Summary Class Description AbstractEncryptTokenAction Action that encrypts a source object into anEncryptedJWT.AbstractProcessTokenAction<T> Action that processes a token by validating it and populating the resultingJWTClaimsSetinto anOAuth2TokenMgmtResponseContextplaced beneath the outboundMessageContext.BuildAccessToken Action that creates an Access Token, and stores it to anAccessTokenContext.BuildIntrospectionErrorResponseFromEvent This action reads an event from the configuredEventContextlookup strategy, constructs an OAuth2 Token Introspection error response message and attaches it as the outbound message.BuildRevokeTokenErrorResponseFromEvent This action reads an event from the configuredEventContextlookup strategy, constructs an OAuth2 Token Revocation error response message and attaches it as the outbound message.EncryptAccessToken Action that handles JWT access token encryption.FormOutboundIntrospectionResponseMessage Action that forms outbound token introspection success message.FormOutboundRevokeTokenResponseMessage Action that forms outbound token revocation success message.InitializeOutboundTokenMgmtResponseMessageContext Action that adds an outboundMessageContextand related contexts to theProfileRequestContext.ProcessTokenForIntrospection Action that processes a token for introspection.ProcessTokenForRevocation Action that processes a token for revocation.RevokeToken Action that revokes a single token or the full chain of tokens, depending on the result of the configured lookup strategy for the revocation method.SetAccessTokenToResponseContext Action that creates a Access Token, and sets it to work contextOIDCAuthenticationResponseContext.getAccessToken()located underInOutOperationContext.getOutboundMessageContext().SignAccessToken Action that signsAccessTokenContext.getJWT()and overwrites it with the signed version.ValidateAudience Action that validates requested resource/audience values against a computed set of "allowed" values and populates the resulting set into theOIDCAuthenticationResponseContextand aProxiedRequesterContext.