Package net.shibboleth.idp.plugin.oidc.op.profile.impl

Class EncryptProcessedToken

java.lang.Object

net.shibboleth.utilities.java.support.component.AbstractInitializableComponent

org.opensaml.profile.action.AbstractProfileAction

org.opensaml.profile.action.AbstractConditionalProfileAction

net.shibboleth.idp.profile.AbstractProfileAction

net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCResponseAction

net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.AbstractEncryptTokenAction

net.shibboleth.idp.plugin.oidc.op.profile.impl.EncryptProcessedToken

All Implemented Interfaces:

Component, DestructableComponent, InitializableComponent, ProfileAction, Aware, MessageSource, MessageSourceAware, Action

public class EncryptProcessedToken
extends AbstractEncryptTokenAction

Action that serves both id token and user info response encryption.

Action assumes the content to be encrypted is located primarily by OIDCAuthenticationResponseContext.getProcessedToken() returning either signed id token or signed user info response. If such information is not available action assumes the data to be encrypted is OIDCAuthenticationResponseContext.getUserInfo() containing bare user info response. If neither of the sources for encryption exists the actions fails.

Constructor Summary

Constructors

Constructor	Description
EncryptProcessedToken()

Method Summary

Modifier and Type	Method	Description
protected com.nimbusds.jose.Payload	getPayload(ProfileRequestContext profileRequestContext)	Get the payload to encrypt.
protected void	setProcessedToken(ProfileRequestContext profileRequestContext, com.nimbusds.jwt.EncryptedJWT token)	Store the resulting token.

Methods inherited from class net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.AbstractEncryptTokenAction

doExecute, doPreExecute, setEncryptionContextLookupStrategy

Methods inherited from class net.shibboleth.idp.plugin.oidc.op.profile.impl.AbstractOIDCResponseAction

getMetadataContext, getOidcResponseContext

Methods inherited from class net.shibboleth.idp.profile.AbstractProfileAction

doExecute, execute, getMessage, getMessage, getMessage, getProfileContextLookupStrategy, getRequestContext, getResult, setMessageSource, setProfileContextLookupStrategy

Methods inherited from class org.opensaml.profile.action.AbstractConditionalProfileAction

getActivationCondition, setActivationCondition

Methods inherited from class org.opensaml.profile.action.AbstractProfileAction

doPostExecute, doPostExecute, execute, getHttpServletRequest, getHttpServletResponse, getLogPrefix, setHttpServletRequest, setHttpServletResponse

Methods inherited from class net.shibboleth.utilities.java.support.component.AbstractInitializableComponent

destroy, doDestroy, doInitialize, initialize, isDestroyed, isInitialized

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface net.shibboleth.utilities.java.support.component.InitializableComponent

initialize, isInitialized

Constructor Detail

EncryptProcessedToken

public EncryptProcessedToken()

Method Detail

getPayload

protected com.nimbusds.jose.Payload getPayload(@Nonnull
                                               ProfileRequestContext profileRequestContext)

Get the payload to encrypt.

Specified by:

getPayload in class AbstractEncryptTokenAction

Parameters:

profileRequestContext - profile request context

Returns:

payload to encrypt

setProcessedToken

protected void setProcessedToken(@Nonnull
                                 ProfileRequestContext profileRequestContext,
                                 @Nonnull
                                 com.nimbusds.jwt.EncryptedJWT token)

Store the resulting token.

Specified by:

setProcessedToken in class AbstractEncryptTokenAction

Parameters:

profileRequestContext - profile request context

token - encrypted token