Package swiss.trustbroker.oidc.cache.service

Class OidcMetadataCacheService

java.lang.Object

swiss.trustbroker.oidc.cache.service.OidcMetadataCacheService

@Service
public class OidcMetadataCacheService
extends Object

Service for OIDC metadata configuration fetching.

See Also:

• OIDC Metadata

Constructor Summary

Constructors

Constructor	Description
OidcMetadataCacheService(RelyingPartyDefinitions relyingPartyDefinitions, GlobalExceptionHandler globalExceptionHandler, OidcHttpClientProvider httpClientProvider, swiss.trustbroker.oidc.cache.service.OidcClientSecretResolver clientSecretProvider, TrustBrokerProperties trustBrokerProperties, ExecutorService executorService)

Method Summary

Modifier and Type	Method	Description
OpenIdProviderConfiguration	fetchProviderMetadata(OidcClient client, Certificates certificates)
Optional<com.nimbusds.jose.jwk.JWK>	getKey(ClaimsParty claimsParty, String expectedKid, OidcClient oidcClient)	Provide key by token key ID.
OpenIdProviderConfiguration	getOidcConfiguration(ClaimsParty claimsParty)
OpenIdProviderConfiguration	getOidcConfiguration(RelyingParty relyingParty, OidcClient oidcClient)
Function<String,Optional<com.nimbusds.jose.jwk.JWK>>	jwtKeySupplier(ClaimsParty claimsParty)
void	refreshConfigurations()
void	triggerRefreshConfigurations()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

OidcMetadataCacheService

public OidcMetadataCacheService(RelyingPartyDefinitions relyingPartyDefinitions,
 GlobalExceptionHandler globalExceptionHandler,
 OidcHttpClientProvider httpClientProvider,
 swiss.trustbroker.oidc.cache.service.OidcClientSecretResolver clientSecretProvider,
 TrustBrokerProperties trustBrokerProperties,
 ExecutorService executorService)

Method Details

getKey

public Optional<com.nimbusds.jose.jwk.JWK> getKey(ClaimsParty claimsParty,
 String expectedKid,
 OidcClient oidcClient)

Provide key by token key ID.
Fetches OIDC metadata again if the key is not present.

jwtKeySupplier

public Function<String,Optional<com.nimbusds.jose.jwk.JWK>> jwtKeySupplier(ClaimsParty claimsParty)

getOidcConfiguration

public OpenIdProviderConfiguration getOidcConfiguration(ClaimsParty claimsParty)

getOidcConfiguration

public OpenIdProviderConfiguration getOidcConfiguration(RelyingParty relyingParty,
 OidcClient oidcClient)

triggerRefreshConfigurations

public void triggerRefreshConfigurations()

refreshConfigurations

@Scheduled(cron="${trustbroker.config.oidc.syncSchedule}")
public void refreshConfigurations()

fetchProviderMetadata

public OpenIdProviderConfiguration fetchProviderMetadata(OidcClient client,
 Certificates certificates)