Class OpenIDConnectIdP

java.lang.Object

com.tremolosecurity.idp.providers.OpenIDConnectIdP

All Implemented Interfaces:

IdentityProvider, ServletMethods

public class OpenIDConnectIdP
extends Object
implements IdentityProvider

Field Summary

Fields

Modifier and Type	Field	Description
static final String	STS_TRANSACTION
static final String	UNISON_OPENIDCONNECT_IDPS
static final String	UNISON_SESSION_OIDC_ACCESS_TOKEN
static final String	UNISON_SESSION_OIDC_ID_TOKEN

Constructor Summary

Constructors

Constructor	Description
OpenIDConnectIdP()

Method Summary

Modifier and Type	Method	Description
void	clearExpiredSessions()
OidcSessionState	createUserSession(jakarta.servlet.http.HttpServletRequest request, String clientID, UrlHolder holder, OpenIDConnectTrust trust, String dn, ConfigManager cfgMgr, OpenIDConnectAccessToken access, String nonce, String authChain)
OidcSessionState	createUserSession(jakarta.servlet.http.HttpServletRequest request, String clientID, UrlHolder holder, OpenIDConnectTrust trust, String dn, ConfigManager cfgMgr, OpenIDConnectAccessToken access, String nonce, String authChain, org.json.simple.JSONObject existingClaims, org.json.simple.JSONObject actor)
String	decryptClientSecret(String keyName, String encryptedClientSecret)
void	doDelete(jakarta.servlet.http.HttpServletRequest request, jakarta.servlet.http.HttpServletResponse response)
void	doGet(jakarta.servlet.http.HttpServletRequest request, jakarta.servlet.http.HttpServletResponse response)
void	doHead(jakarta.servlet.http.HttpServletRequest request, jakarta.servlet.http.HttpServletResponse response)
void	doOptions(jakarta.servlet.http.HttpServletRequest request, jakarta.servlet.http.HttpServletResponse response)
void	doPost(jakarta.servlet.http.HttpServletRequest request, jakarta.servlet.http.HttpServletResponse response)
void	doPut(jakarta.servlet.http.HttpServletRequest request, jakarta.servlet.http.HttpServletResponse response)
org.jose4j.jwt.JwtClaims	generateClaims(AuthInfo user, ConfigManager cfg, String trustName, String urlOfRequest, jakarta.servlet.http.HttpServletRequest request)
org.jose4j.jws.JsonWebSignature	generateJWS(org.jose4j.jwt.JwtClaims claims)
Map<String,String>	getAmrToAuthChain()
Map<String,String>	getAuthChainToAmr()
String	getJwtSigningKeyName()
MapIdentity	getMapper()
OidcSessionState	getSessionByAccessToken(String accessToken)
OidcSessionState	getSessionByRefreshToken(String refreshToken)
OidcSessionStore	getSessionStore()
HashMap<String,OpenIDConnectTrust>	getTrusts()
String	getUidAttributeFromMap()
void	init(String idpName, jakarta.servlet.ServletContext ctx, HashMap<String,Attribute> init, HashMap<String,HashMap<String,Attribute>> trustCfg, MapIdentity mapper)
void	removeAllSessions(OidcSessionState session)
void	removeSession(OidcSessionState oidcSession)
void	sendErrorCode(jakarta.servlet.http.HttpServletRequest request, jakarta.servlet.http.HttpServletResponse response, int code)
OidcSessionState	storeSession(OpenIDConnectAccessToken access, ApplicationType app, String codeTokenKeyName, String clientID, String userDN, String sessionID)
void	updateToken(OidcSessionState session)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

UNISON_OPENIDCONNECT_IDPS

public static final String UNISON_OPENIDCONNECT_IDPS

See Also:

• Constant Field Values

UNISON_SESSION_OIDC_ACCESS_TOKEN

public static final String UNISON_SESSION_OIDC_ACCESS_TOKEN

See Also:

• Constant Field Values

UNISON_SESSION_OIDC_ID_TOKEN

public static final String UNISON_SESSION_OIDC_ID_TOKEN

See Also:

• Constant Field Values

STS_TRANSACTION

public static final String STS_TRANSACTION

See Also:

• Constant Field Values

Constructor Details

OpenIDConnectIdP

public OpenIDConnectIdP()

Method Details

sendErrorCode

public void sendErrorCode(jakarta.servlet.http.HttpServletRequest request,
 jakarta.servlet.http.HttpServletResponse response,
 int code)
                   throws IOException,
jakarta.servlet.ServletException

Throws:

IOException

jakarta.servlet.ServletException

doDelete

public void doDelete(jakarta.servlet.http.HttpServletRequest request,
 jakarta.servlet.http.HttpServletResponse response)
              throws IOException,
jakarta.servlet.ServletException

Specified by:

doDelete in interface ServletMethods

Throws:

IOException

jakarta.servlet.ServletException

doGet

public void doGet(jakarta.servlet.http.HttpServletRequest request,
 jakarta.servlet.http.HttpServletResponse response)
           throws IOException,
jakarta.servlet.ServletException

Specified by:

doGet in interface ServletMethods

Throws:

IOException

jakarta.servlet.ServletException

doHead

public void doHead(jakarta.servlet.http.HttpServletRequest request,
 jakarta.servlet.http.HttpServletResponse response)
            throws IOException,
jakarta.servlet.ServletException

Specified by:

doHead in interface ServletMethods

Throws:

IOException

jakarta.servlet.ServletException

doOptions

public void doOptions(jakarta.servlet.http.HttpServletRequest request,
 jakarta.servlet.http.HttpServletResponse response)
               throws IOException,
jakarta.servlet.ServletException

Specified by:

doOptions in interface ServletMethods

Throws:

IOException

jakarta.servlet.ServletException

doPost

public void doPost(jakarta.servlet.http.HttpServletRequest request,
 jakarta.servlet.http.HttpServletResponse response)
            throws IOException,
jakarta.servlet.ServletException

Specified by:

doPost in interface ServletMethods

Throws:

IOException

jakarta.servlet.ServletException

createUserSession

public OidcSessionState createUserSession(jakarta.servlet.http.HttpServletRequest request,
 String clientID,
 UrlHolder holder,
 OpenIDConnectTrust trust,
 String dn,
 ConfigManager cfgMgr,
 OpenIDConnectAccessToken access,
 String nonce,
 String authChain)
                                   throws UnsupportedEncodingException,
IOException,
jakarta.servlet.ServletException,
MalformedURLException

Throws:

UnsupportedEncodingException

IOException

jakarta.servlet.ServletException

MalformedURLException

createUserSession

public OidcSessionState createUserSession(jakarta.servlet.http.HttpServletRequest request,
 String clientID,
 UrlHolder holder,
 OpenIDConnectTrust trust,
 String dn,
 ConfigManager cfgMgr,
 OpenIDConnectAccessToken access,
 String nonce,
 String authChain,
 org.json.simple.JSONObject existingClaims,
 org.json.simple.JSONObject actor)
                                   throws UnsupportedEncodingException,
IOException,
jakarta.servlet.ServletException,
MalformedURLException

Throws:

UnsupportedEncodingException

IOException

jakarta.servlet.ServletException

MalformedURLException

storeSession

public OidcSessionState storeSession(OpenIDConnectAccessToken access,
 ApplicationType app,
 String codeTokenKeyName,
 String clientID,
 String userDN,
 String sessionID)
                              throws Exception

Throws:

Exception

doPut

public void doPut(jakarta.servlet.http.HttpServletRequest request,
 jakarta.servlet.http.HttpServletResponse response)
           throws IOException,
jakarta.servlet.ServletException

Specified by:

doPut in interface ServletMethods

Throws:

IOException

jakarta.servlet.ServletException

init

public void init(String idpName,
 jakarta.servlet.ServletContext ctx,
 HashMap<String,Attribute> init,
 HashMap<String,HashMap<String,Attribute>> trustCfg,
 MapIdentity mapper)

Specified by:

init in interface IdentityProvider

getSessionStore

public OidcSessionStore getSessionStore()

generateJWS

public org.jose4j.jws.JsonWebSignature generateJWS(org.jose4j.jwt.JwtClaims claims)
                                            throws org.jose4j.lang.JoseException,
com.novell.ldap.LDAPException,
ProvisioningException,
MalformedURLException

Throws:

org.jose4j.lang.JoseException

com.novell.ldap.LDAPException

ProvisioningException

MalformedURLException

generateClaims

public org.jose4j.jwt.JwtClaims generateClaims(AuthInfo user,
 ConfigManager cfg,
 String trustName,
 String urlOfRequest,
 jakarta.servlet.http.HttpServletRequest request)
                                        throws org.jose4j.lang.JoseException,
com.novell.ldap.LDAPException,
ProvisioningException,
MalformedURLException

Throws:

org.jose4j.lang.JoseException

com.novell.ldap.LDAPException

ProvisioningException

MalformedURLException

removeSession

public void removeSession(OidcSessionState oidcSession)

getTrusts

public HashMap<String,OpenIDConnectTrust> getTrusts()

getSessionByRefreshToken

public OidcSessionState getSessionByRefreshToken(String refreshToken)
                                          throws Exception

Throws:

Exception

getSessionByAccessToken

public OidcSessionState getSessionByAccessToken(String accessToken)
                                         throws Exception

Throws:

Exception

updateToken

public void updateToken(OidcSessionState session)
                 throws Exception

Throws:

Exception

decryptClientSecret

public String decryptClientSecret(String keyName,
 String encryptedClientSecret)
                           throws Exception

Throws:

Exception

getJwtSigningKeyName

public String getJwtSigningKeyName()

clearExpiredSessions

public void clearExpiredSessions()

getUidAttributeFromMap

public String getUidAttributeFromMap()

getMapper

public MapIdentity getMapper()

getAuthChainToAmr

public Map<String,String> getAuthChainToAmr()

getAmrToAuthChain

public Map<String,String> getAmrToAuthChain()

removeAllSessions

public void removeAllSessions(OidcSessionState session)
                       throws Exception

Throws:

Exception