Package net.shibboleth.idp.plugin.oidc.op.profile.impl

Profile action implementations related to OIDC.

Class Summary

Class	Description
AbstractBuildErrorResponseFromEvent<T extends com.nimbusds.oauth2.sdk.ErrorResponse>	This action is extended by error response actions.
AbstractInitializeOutboundResponseMessageContext	Action that adds an outbound MessageContext and related OIDC contexts to the ProfileRequestContext.
AbstractOIDCAuthenticationRequestAction	Abstract class for actions performing actions on AuthenticationRequest found via InOutOperationContext.getInboundMessageContext() and MessageContext.getMessage().
AbstractOIDCAuthenticationResponseAction	Abstract class for actions performing actions on OIDCAuthenticationResponseContext located under InOutOperationContext.getOutboundMessageContext().
AbstractOIDCClientMetadataPopulationAction	Abstract action for populating metadata from the ClientRegistrationRequest message to the response message.
AbstractOIDCRequestAction<T>	Abstract class for actions performing actions on a oidc request found via InOutOperationContext.getInboundMessageContext() and MessageContext.getMessage().
AbstractOIDCResponseAction	Abstract class for actions performing actions on OIDCAuthenticationResponseContext located under InOutOperationContext.getOutboundMessageContext().
AbstractOIDCSigningResponseAction	Abstract action to be extended by oidc response actions requiring signing parameters.
AbstractOIDCTokenRequestAction	Abstract class for actions performing actions on TokenRequest found via InOutOperationContext.getInboundMessageContext() and MessageContext.getMessage().
AbstractOIDCTokenResponseAction	Abstract class for actions performing actions on OIDCAuthenticationResponseContext located under InOutOperationContext.getOutboundMessageContext().
AbstractSignJWTAction	Abstract action for signing JWT.
AddAccessTokenHashToIDToken	Action that adds access token hash claim to a IDTokenClaimsSet.
AddAcrToIDToken	Action that adds acr claim to a IDTokenClaimsSet.
AddApplicationTypeToClientMetadata	Adds the application_type to the OIDCClientRegistrationResponseContext.
AddAttributesToClaimsSet	Action that adds claims to a ClaimsSet.
AddAuthorizationCodeHashToIDToken	Action that adds authorization code hash claim to a IDTokenClaimsSet.
AddAuthTimeToIDToken	Action that adds auth_time claim to a IDTokenClaimsSet.
AddClientNameToClientMetadata	Adds client name from the input metadata to the output OIDCClientMetadata.
AddContactsToClientMetadata	Adds the contents of the contacts attribute from the input metadata to the output OIDCClientMetadata.
AddGrantTypeToClientMetadata	An action that adds the grant_type to the client metadata.
AddIDTokenShell	Action that creates a IDTokenClaimsSet object shell, and sets it to work context OIDCAuthenticationResponseContext located under InOutOperationContext.getOutboundMessageContext().
AddJwksToClientMetadata	An action that adds the jwks or jwks_uri to the client metadata, if one of those were defined in the request.
AddLogoUrisToClientMetadata	This action adds the logo_uri(s) to the client metadata.
AddMetadataStatementToClientMetadata	An action that adds the trusted metadata_statement chain (containing OP's signed key) to the metadata_statement claim in the response metadata.
AddNonceToIDToken	Action that adds nonce claim to a IDTokenClaimsSet.
AddPolicyUrisToClientMetadata	This action adds the policy_uri(s) to the client metadata.
AddRedirectUrisToClientMetadata	Adds the (mandatory) redirect_uris to the output OIDCClientMetadata.
AddRemainingClaimsToClientMetadata	Adds the remaining claims from the input metadata to the output OIDCClientMetadata, which haven't been added there already, but which are recognized in the metadata policy.
AddRequestObjectSecurityConfigurationToClientMetadata	Verifies and adds the request object configuration details (request_object_signing_alg, request_object_encryption_alg and request_object_encryption_enc) to the client metadata.
AddResponseTypesToClientMetadata	An action that adds response_types to the OIDC client metadata.
AddScopeToClientMetadata	Adds the Scope from the input metadata to the output OIDCClientMetadata.
AddSecurityConfigurationToClientMetadata	Verifies and adds the security configuration details (*_response_alg and *_response_enc) to the client metadata.
AddSubjectTypeToClientMetadata	An action that adds the subject_type to the client metadata.
AddTokenDeliveryAttributesToClaimsSet	Action that adds claims to a ClaimsSet.
AddTokenEndpointAuthMethodsToClientMetadata	An action that adds the token_endpoint_auth_method to the client metadata.
AddTosUrisToClientMetadata	This action adds the tos_uri(s) to the client metadata.
BuildAuthenticationErrorResponseFromEvent	This action reads an event from the configured EventContext lookup strategy, constructs an OIDC authentication error response message and attaches it as the outbound message.
BuildClientInformation	An action that uses the information from OIDCClientRegistrationResponseContext attached to the message context for creating a new ClientInformationResponse.
BuildJSONErrorResponseFromEvent	This action reads an event from the configured EventContext lookup strategy, constructs a json error response message and attaches it as the outbound message.
BuildRegistrationErrorResponseFromEvent	This action reads an event from the configured EventContext lookup strategy, constructs an OIDC client registration error response message and attaches it as the outbound message.
BuildTokenErrorResponseFromEvent	This action reads an event from the configured EventContext lookup strategy, constructs an OIDC token error response message and attaches it as the outbound message.
CheckRedirectURIs	The action that verifies the redirect_uris from the request.
DecryptRequestObject	Action decrypts request object if it is encrypted.
EncryptProcessedToken	Action that serves both id token and user info response encryption.
FormOutboundAuthenticationResponseMessage	Action that forms outbound message based on request and response context.
FormOutboundDiscoveryResponse	This action builds a response for the OP configuration discovery request.
FormOutboundKeySetResponseMessage	Action that forms outbound message containing keyset.
FormOutboundTokenResponseMessage	Action that forms outbound message based on token request and response context.
GenerateClientID	Creates the client ID for the registration.
GenerateClientSecret	Creates a new client secret with the IdentifierGenerationStrategy attached to this action.
InitializeAuthenticationContext	An action that creates an AuthenticationContext and attaches it to the current ProfileRequestContext.
InitializeOutboundAuthenticationResponseMessageContext	Action that adds an outbound MessageContext and related OIDC contexts to the ProfileRequestContext based on the identity of a relying party accessed via a lookup strategy, by default an immediate child of the profile request context.
InitializeOutboundRegistrationResponseMessageContext	Action that adds an outbound MessageContext and related OIDC context to the ProfileRequestContext.
InitializeOutboundResponseMessageContext	Action that adds an outbound MessageContext typed to generic Response to ProfileRequestContext.
InitializeOutboundTokenResponseMessageContext	Action that adds an outbound MessageContext and related OIDC contexts to the ProfileRequestContext not knowing the relying party yet.
InitializeRegistrationMetadataPolicyContext	Initializes the OIDCClientRegistrationMetadataPolicyContext and attaches it as a subcontext for the incoming MessageContext.
InitializeRelyingPartyContext	Action that adds a RelyingPartyContext to the current ProfileRequestContext tree via a creation function.
InitializeSubjectContext	An action that creates an SubjectContext and attaches it to the current ProfileRequestContext.
InitializeUnverifiedRelyingPartyContext	Action that adds a RelyingPartyContext to the current ProfileRequestContext tree via a creation function.
ManipulateClaimsForIDToken	An action that can be used for manipulating id_token claims via configurable strategy (bi-function).
OIDCMetadataLookupHandler	Handler for inbound OIDC protocol messages that attempts to locate OIDC metadata for a rp, and attaches it with a OIDCMetadataContext as a child of a pre-existing instance of MessageContext.
PopulateOIDCEncryptionParameters	Action that resolves and populates EncryptionParameters on an EncryptionContext created/accessed via a lookup function, by default on a RelyingPartyContext child of the profile request context.
PopulateOIDCSignatureSigningParameters	Action that resolves and populates SignatureSigningParameters on a SecurityParametersContext created/accessed via a lookup function, by default on the outbound message context.
PopulateOIDCSignatureSigningParametersHandler	Handler that resolves and populates SignatureSigningParameters on a SecurityParametersContext created/accessed via a lookup function, by default as an immediate child context of the target MessageContext.
ProcessRequestedAuthnContext	An action that creates an RequestedPrincipalContext or PreferredPrincipalContext and attaches it to the current AuthenticationContext.
RevokeConsent	Action that revokes consent if offline_access scope or prompt with consent is requested.
SetAuthenticationContextClassReferenceFromAuthzCodeToResponseContext	Action that sets authentication context class reference to work context OIDCAuthenticationResponseContext located under InOutOperationContext.getOutboundMessageContext().
SetAuthenticationContextClassReferenceToResponseContext	Action that sets authentication context class reference to work context OIDCAuthenticationResponseContext located under InOutOperationContext.getOutboundMessageContext().
SetAuthenticationTimeToResponseContext	Action that sets authentication instant to work context OIDCAuthenticationResponseContext located under InOutOperationContext.getOutboundMessageContext().
SetAuthorizationCodeToResponseContext	Action that creates a Authorization Code, and sets it to work context OIDCAuthenticationResponseContext.getAuthorizationCode() located under InOutOperationContext.getOutboundMessageContext().
SetConsentFromTokenToResponseContext	Action that locates consent from authorization code / access token.
SetConsentToResponseContext	Action that checks for adds the currently existing attributes from AttributeContext for token delivery.
SetRefreshTokenToResponseContext	Action that creates a Refresh Token, and sets it to work context OIDCAuthenticationResponseContext.getRefreshToken() located under InOutOperationContext.getOutboundMessageContext().
SetRequestedClaimsToResponseContext	Action that sets requested claims to response context.
SetRequestedSubjectToResponseContext	Action that sets requested sub value to response context.
SetRequestObjectToResponseContext	Action that stored request object to OIDCAuthenticationResponseContext.
SetResponseStatusCodeFromEvent	This action reads an event from the configured EventContext lookup strategy and sets the status code for HttpServletResponse according to the attached configuration.
SetSectorIdentifierForAttributeResolution	An action that sets AttributeResolutionContext.setAttributeRecipientGroupID(java.lang.String) to sector identifier if pairwise subject is requested.
SetSubjectToResponseContext	Action that locates subject using strategy.
SetTokenDeliveryAttributesFromTokenToResponseContext	Action that locates any token delivery claims from authorization code / access token.
SetTokenDeliveryAttributesToResponseContext	Action that checks for any released attributes marked for token delivery.
SignIDToken	Action that signs IDTokenClaimsSet and sets it to OIDCAuthenticationResponseContext.getProcessedToken().
StoreClientInformation	An action that stores the ClientInformation from the OIDCClientRegistrationResponseContext to the associated ClientInformationManager.
ValidateCodeChallenge	Validates the presence of PKCE code challenge parameter from the incoming authentication request.
ValidateGrant	Action that validates an authorization grant.
ValidateGrantType	An action that validates the grant type is registered to the requesting RP.
ValidatePKCE	Action performs PKCE (https://oauth.net/2/pkce/) validation.
ValidateRedirectURI	Action that validates redirect uri is expected.
ValidateRegistrationAccessToken	Action that validates registration access token is a valid one.
ValidateRegistrationRequestMetadata	Validates the incoming dynamic client registration request against the metadata policy stored in the OIDCClientRegistrationMetadataPolicyContext.
ValidateRequestObject	Action validates request object in response context.
ValidateResponseType	An action that validates the requested response_type is registered to the requesting RP.
ValidateScope	Action that validates requested and previously granted scopes are also registered in client metadata and stores the resulting set in the response context.
VerifyRequestedSubjectIdentifier	Action verifies that produced subject equals to requested subject if such exists.