Package swiss.trustbroker.common.util

Class OidcUtil

java.lang.Object

swiss.trustbroker.common.util.OidcUtil

public class OidcUtil
extends Object

Field Summary

Fields

Modifier and Type	Field	Description
static final String	ACCESS_INTROSPECT
static final String	CLIENT_SECRET
static final String	CODE
static final String	CONTENT_TYPE_JWT
static final String	DEFAULT_SCOPE
static final String	GRANT_TYPE
static final String	ID_TOKEN_HINT
static final String	LOGOUT_REDIRECT_URI
static final org.springframework.util.MimeType	MIME_TYPE_JWT
static final String	OIDC_ACR
static final String	OIDC_ACR_VALUES
static final String	OIDC_AUDIENCE
static final String	OIDC_AUTHORIZED_PARTY
static final String	OIDC_BEARER
static final String	OIDC_BEARER_NULL
static final String	OIDC_CLIENT_ID
static final String	OIDC_CODE
static final String	OIDC_ERROR
static final String	OIDC_EXPIRATION_TIME
static final String	OIDC_HEADER_JWK
static final String	OIDC_HEADER_KEYID
static final String	OIDC_HEADER_TYPE_JWE
static final String	OIDC_HEADER_TYPE_JWT
static final String	OIDC_ISSUED_AT
static final String	OIDC_ISSUER
static final String	OIDC_JWT_ID
static final String	OIDC_NONCE
static final String	OIDC_NOT_BEFORE
static final String	OIDC_PROMPT
static final String	OIDC_PROMPT_ACCOUNT
static final String	OIDC_PROMPT_LOGIN
static final String	OIDC_PROMPT_NONE
static final String	OIDC_REFRESH_TOKEN
static final String	OIDC_SCOPE
static final String	OIDC_SESSION_ID
static final String	OIDC_SESSION_STATE
static final String	OIDC_SID
static final String	OIDC_STATE_ID
static final String	OIDC_SUBJECT
static final String	OIDC_TOKEN_CNF
static final String	OIDC_TOKEN_JKT
static final String	OIDC_TOKEN_TYPE
static final String	REDIRECT_URI
static final String	TOKEN_INTROSPECT
static final String	TOKEN_RESPONSE_ACCESS_TOKEN
static final String	TOKEN_RESPONSE_EXPIRES_IN
static final String	TOKEN_RESPONSE_ID_TOKEN
static final String	TOKEN_RESPONSE_REFRESH_TOKEN
static final String	TOKEN_RESPONSE_TOKEN_TYPE

Method Summary

Modifier and Type	Method	Description
static String	appendFrontchannelLogoutQueryString(String url, String issuer, String oidcSessionId)
static List<String>	convertAcrToContextClasses(String messageAcrValues)
static com.nimbusds.jwt.JWTClaimsSet	decryptAndVerifyToken(String token, Function<String,Optional<com.nimbusds.jose.jwk.JWK>> keySupplier, org.opensaml.security.credential.Credential credential, String clientId)
static String	generateNonce()
static List<String>	getAcrValues(jakarta.servlet.http.HttpServletRequest request)
static com.nimbusds.jose.Payload	getAndSignPayload(com.nimbusds.jwt.JWTClaimsSet jwtClaimsSet, boolean singToken, org.springframework.security.oauth2.jwt.JwsHeader jwsHeader, com.nimbusds.jose.jwk.source.JWKSource<com.nimbusds.jose.proc.SecurityContext> jwkSource, String id)
static String	getBasicAuthorizationHeader(String clientId, String clientSecret)
static String	getClaimFromClaims(Map<String,Object> claims, String claimName)
static String	getClaimFromJwtToken(String jwtToken, String claimName)
static Map<String,Object>	getClaimsFromJwtToken(String jwtToken)
static String	getClientIdFromAuthorizationHeader(String header)
static String	getClientIdFromJwtToken(String jwtToken)
static String	getClientIdFromTokenClaims(Map<String,Object> claims)
static String	getGrantOrToken(jakarta.servlet.http.HttpServletRequest request)
static com.nimbusds.jose.JWEHeader	getJWEHeader(boolean requireTokenSignedEncryption, String encryptionAlgorithm, String encryptionMethod, String kid)
static String	getRealmFromRequestUrl(String requestUri)
static String	getRedirectUriFromRequest(jakarta.servlet.http.HttpServletRequest request)
static String	getSessionIdFromAuthorizationHeader(String bearer)
static String	getSessionIdFromJwtToken(String jwtToken)
static boolean	isIdToken(org.springframework.security.oauth2.jwt.JwtEncoderParameters parameters)
static boolean	isOidcPromptLogin(jakarta.servlet.http.HttpServletRequest request)
static boolean	isOidcPromptNone(jakarta.servlet.http.HttpServletRequest request)
static String	maskedToken(String token)
static com.nimbusds.jwt.JWTClaimsSet	mergeJwtClaims(com.nimbusds.jwt.JWTClaimsSet primary, String primarySource, com.nimbusds.jwt.JWTClaimsSet secondary, String secondarySource, boolean allowClaimsOverride, boolean allowSubjectOverride)
static com.nimbusds.jwt.JWTClaimsSet	parseJwtClaims(String jsonString)
static com.nimbusds.jwt.JWTClaimsSet	parseJwtClaims(Map<String,Object> map)
static com.nimbusds.jwt.JWTClaimsSet	verifyJwtToken(String jwtToken, Function<String,Optional<com.nimbusds.jose.jwk.JWK>> keySupplier, String clientId)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

DEFAULT_SCOPE

public static final String DEFAULT_SCOPE

See Also:

• Constant Field Values

OIDC_CLIENT_ID

public static final String OIDC_CLIENT_ID

See Also:

• Constant Field Values

REDIRECT_URI

public static final String REDIRECT_URI

See Also:

• Constant Field Values

ID_TOKEN_HINT

public static final String ID_TOKEN_HINT

See Also:

• Constant Field Values

GRANT_TYPE

public static final String GRANT_TYPE

See Also:

• Constant Field Values

CODE

public static final String CODE

See Also:

• Constant Field Values

CLIENT_SECRET

public static final String CLIENT_SECRET

See Also:

• Constant Field Values

TOKEN_INTROSPECT

public static final String TOKEN_INTROSPECT

See Also:

• Constant Field Values

ACCESS_INTROSPECT

public static final String ACCESS_INTROSPECT

See Also:

• Constant Field Values

LOGOUT_REDIRECT_URI

public static final String LOGOUT_REDIRECT_URI

See Also:

• Constant Field Values

OIDC_BEARER

public static final String OIDC_BEARER

See Also:

• Constant Field Values

OIDC_BEARER_NULL

public static final String OIDC_BEARER_NULL

See Also:

• Constant Field Values

OIDC_AUDIENCE

public static final String OIDC_AUDIENCE

See Also:

• Constant Field Values

OIDC_AUTHORIZED_PARTY

public static final String OIDC_AUTHORIZED_PARTY

See Also:

• Constant Field Values

OIDC_SUBJECT

public static final String OIDC_SUBJECT

See Also:

• Constant Field Values

OIDC_ACR_VALUES

public static final String OIDC_ACR_VALUES

See Also:

• Constant Field Values

OIDC_ACR

public static final String OIDC_ACR

See Also:

• Constant Field Values

OIDC_ISSUER

public static final String OIDC_ISSUER

See Also:

• Constant Field Values

OIDC_ISSUED_AT

public static final String OIDC_ISSUED_AT

See Also:

• Constant Field Values

OIDC_NOT_BEFORE

public static final String OIDC_NOT_BEFORE

See Also:

• Constant Field Values

OIDC_SID

public static final String OIDC_SID

See Also:

• Constant Field Values

OIDC_EXPIRATION_TIME

public static final String OIDC_EXPIRATION_TIME

See Also:

• Constant Field Values

OIDC_NONCE

public static final String OIDC_NONCE

See Also:

• Constant Field Values

OIDC_JWT_ID

public static final String OIDC_JWT_ID

See Also:

• Constant Field Values

OIDC_STATE_ID

public static final String OIDC_STATE_ID

See Also:

• Constant Field Values

OIDC_ERROR

public static final String OIDC_ERROR

See Also:

• Constant Field Values

OIDC_PROMPT

public static final String OIDC_PROMPT

See Also:

• Constant Field Values

OIDC_PROMPT_NONE

public static final String OIDC_PROMPT_NONE

See Also:

• Constant Field Values

OIDC_PROMPT_LOGIN

public static final String OIDC_PROMPT_LOGIN

See Also:

• Constant Field Values

OIDC_PROMPT_ACCOUNT

public static final String OIDC_PROMPT_ACCOUNT

See Also:

• Constant Field Values

OIDC_SESSION_ID

public static final String OIDC_SESSION_ID

See Also:

• Constant Field Values

OIDC_SESSION_STATE

public static final String OIDC_SESSION_STATE

See Also:

• Constant Field Values

OIDC_TOKEN_TYPE

public static final String OIDC_TOKEN_TYPE

See Also:

• Constant Field Values

OIDC_TOKEN_CNF

public static final String OIDC_TOKEN_CNF

See Also:

• Constant Field Values

OIDC_TOKEN_JKT

public static final String OIDC_TOKEN_JKT

See Also:

• Constant Field Values

OIDC_SCOPE

public static final String OIDC_SCOPE

See Also:

• Constant Field Values

OIDC_CODE

public static final String OIDC_CODE

See Also:

• Constant Field Values

OIDC_REFRESH_TOKEN

public static final String OIDC_REFRESH_TOKEN

See Also:

• Constant Field Values

OIDC_HEADER_KEYID

public static final String OIDC_HEADER_KEYID

See Also:

• Constant Field Values

OIDC_HEADER_JWK

public static final String OIDC_HEADER_JWK

See Also:

• Constant Field Values

OIDC_HEADER_TYPE_JWT

public static final String OIDC_HEADER_TYPE_JWT

See Also:

• Constant Field Values

OIDC_HEADER_TYPE_JWE

public static final String OIDC_HEADER_TYPE_JWE

See Also:

• Constant Field Values

TOKEN_RESPONSE_ID_TOKEN

public static final String TOKEN_RESPONSE_ID_TOKEN

See Also:

• Constant Field Values

TOKEN_RESPONSE_ACCESS_TOKEN

public static final String TOKEN_RESPONSE_ACCESS_TOKEN

See Also:

• Constant Field Values

TOKEN_RESPONSE_REFRESH_TOKEN

public static final String TOKEN_RESPONSE_REFRESH_TOKEN

See Also:

• Constant Field Values

TOKEN_RESPONSE_TOKEN_TYPE

public static final String TOKEN_RESPONSE_TOKEN_TYPE

See Also:

• Constant Field Values

TOKEN_RESPONSE_EXPIRES_IN

public static final String TOKEN_RESPONSE_EXPIRES_IN

See Also:

• Constant Field Values

CONTENT_TYPE_JWT

public static final String CONTENT_TYPE_JWT

See Also:

• Constant Field Values

MIME_TYPE_JWT

public static final org.springframework.util.MimeType MIME_TYPE_JWT

Method Details

appendFrontchannelLogoutQueryString

public static String appendFrontchannelLogoutQueryString(String url,
 String issuer,
 String oidcSessionId)

getClientIdFromTokenClaims

public static String getClientIdFromTokenClaims(Map<String,Object> claims)

getClaimFromClaims

public static String getClaimFromClaims(Map<String,Object> claims,
 String claimName)

getClientIdFromAuthorizationHeader

public static String getClientIdFromAuthorizationHeader(String header)

getSessionIdFromAuthorizationHeader

public static String getSessionIdFromAuthorizationHeader(String bearer)

getClientIdFromJwtToken

public static String getClientIdFromJwtToken(String jwtToken)

getSessionIdFromJwtToken

public static String getSessionIdFromJwtToken(String jwtToken)

getClaimFromJwtToken

public static String getClaimFromJwtToken(String jwtToken,
 String claimName)

getClaimsFromJwtToken

public static Map<String,Object> getClaimsFromJwtToken(String jwtToken)

isOidcPromptLogin

public static boolean isOidcPromptLogin(jakarta.servlet.http.HttpServletRequest request)

getAcrValues

public static List<String> getAcrValues(jakarta.servlet.http.HttpServletRequest request)

convertAcrToContextClasses

public static List<String> convertAcrToContextClasses(String messageAcrValues)

isOidcPromptNone

public static boolean isOidcPromptNone(jakarta.servlet.http.HttpServletRequest request)

getRedirectUriFromRequest

public static String getRedirectUriFromRequest(jakarta.servlet.http.HttpServletRequest request)

getRealmFromRequestUrl

public static String getRealmFromRequestUrl(String requestUri)

maskedToken

public static String maskedToken(String token)

getGrantOrToken

public static String getGrantOrToken(jakarta.servlet.http.HttpServletRequest request)

verifyJwtToken

public static com.nimbusds.jwt.JWTClaimsSet verifyJwtToken(String jwtToken,
 Function<String,Optional<com.nimbusds.jose.jwk.JWK>> keySupplier,
 String clientId)

parseJwtClaims

public static com.nimbusds.jwt.JWTClaimsSet parseJwtClaims(String jsonString)

parseJwtClaims

public static com.nimbusds.jwt.JWTClaimsSet parseJwtClaims(Map<String,Object> map)

mergeJwtClaims

public static com.nimbusds.jwt.JWTClaimsSet mergeJwtClaims(com.nimbusds.jwt.JWTClaimsSet primary,
 String primarySource,
 com.nimbusds.jwt.JWTClaimsSet secondary,
 String secondarySource,
 boolean allowClaimsOverride,
 boolean allowSubjectOverride)

generateNonce

public static String generateNonce()

decryptAndVerifyToken

public static com.nimbusds.jwt.JWTClaimsSet decryptAndVerifyToken(String token,
 Function<String,Optional<com.nimbusds.jose.jwk.JWK>> keySupplier,
 org.opensaml.security.credential.Credential credential,
 String clientId)

getAndSignPayload

public static com.nimbusds.jose.Payload getAndSignPayload(com.nimbusds.jwt.JWTClaimsSet jwtClaimsSet,
 boolean singToken,
 org.springframework.security.oauth2.jwt.JwsHeader jwsHeader,
 com.nimbusds.jose.jwk.source.JWKSource<com.nimbusds.jose.proc.SecurityContext> jwkSource,
 String id)

getJWEHeader

public static com.nimbusds.jose.JWEHeader getJWEHeader(boolean requireTokenSignedEncryption,
 String encryptionAlgorithm,
 String encryptionMethod,
 String kid)

isIdToken

public static boolean isIdToken(org.springframework.security.oauth2.jwt.JwtEncoderParameters parameters)

getBasicAuthorizationHeader

public static String getBasicAuthorizationHeader(String clientId,
 String clientSecret)