Package swiss.trustbroker.oidc.session

Class OidcSessionSupport

java.lang.Object

swiss.trustbroker.oidc.session.OidcSessionSupport

public class OidcSessionSupport
extends Object

Field Summary

Fields

Modifier and Type	Field	Description
static final int	OIDC_SESSION_ID_LENGTH
static final int	OIDC_SESSION_ID_LENGTH_HEX

Method Summary

Modifier and Type	Method	Description
static void	checkSessionHijacking(jakarta.servlet.http.HttpSession session)
static void	checkSessionOnFederationRedirect(String path, jakarta.servlet.http.HttpServletRequest request)
static void	clearDerivedValuesFromAuthentication(String clientId, String sessionId, String principalName, TrustBrokerProperties trustBrokerProperties)
static void	clearDerivedValuesFromAuthentication(TomcatSession session, Object context, TrustBrokerProperties trustBrokerProperties)
static jakarta.servlet.http.Cookie	createOidcClientCookie(String clientId, String sessionId, int validSec, boolean secure, String sameSite)
static jakarta.servlet.http.Cookie	createOidcSsoSessionCookie(String clientId, String cookieValue, jakarta.servlet.http.HttpServletRequest request, RelyingPartyDefinitions relyingPartyDefinitions, TrustBrokerProperties trustBrokerProperties)
static void	discardOidcClientCookie(String clientId, jakarta.servlet.http.HttpServletResponse response, boolean secure)
static void	discardOidcGlobalCookie(jakarta.servlet.http.HttpServletResponse response, boolean secure)
static org.springframework.security.saml2.provider.service.authentication.Saml2AuthenticatedPrincipal	getAuthenticatedPrincipal(TomcatSession tomcatSession)
static String	getClientIdFromOidcCookie(jakarta.servlet.http.HttpServletRequest request, RelyingPartyDefinitions relyingPartyDefinitions, NetworkConfig networkConfig)
static String	getInitialClientState(jakarta.servlet.http.HttpServletRequest request)
static String	getInitialRedirectUri(jakarta.servlet.http.HttpSession session)
static String	getOidcClientId()
static String	getOidcClientId(jakarta.servlet.http.HttpServletRequest request, RelyingPartyDefinitions relyingPartyDefinitions)
static String	getOidcClientId(jakarta.servlet.http.HttpServletRequest request, RelyingPartyDefinitions relyingPartyDefinitions, NetworkConfig networkConfig)
static String	getOidcClientIdFromHttpParams(jakarta.servlet.http.HttpServletRequest request, RelyingPartyDefinitions relyingPartyDefinitions, NetworkConfig networkConfig)
static jakarta.servlet.http.Cookie	getOidcCookie(jakarta.servlet.http.HttpServletRequest request, String clientId, NetworkConfig networkConfig)
static String	getOidcRelayState()
static String	getOidcRelayState(jakarta.servlet.http.HttpServletRequest request, String relayStateParam)
static String	getOidcSessionId()
static String	getOidcSessionId(jakarta.servlet.http.HttpServletRequest request, RelyingPartyDefinitions relyingPartyDefinitions, NetworkConfig networkConfig)
static String	getRedirectUri(jakarta.servlet.http.HttpServletRequest request)
static String	getSamlExchangeAcsUrlClientId(String acsUrl)
static String	getSamlExchangeClientId()
static String	getSamlExchangeClientId(String acsUrlPath)
static org.springframework.security.saml2.provider.service.authentication.Saml2AuthenticatedPrincipal	getSamlPrincipalFromAuthentication(org.springframework.security.core.Authentication authentication, jakarta.servlet.http.HttpServletRequest request)
static String	getSessionIdFromOidcCookie(jakarta.servlet.http.HttpServletRequest request, String clientId, NetworkConfig networkConfig)
static List<String>	getSessionIdsFromAuthentication(org.springframework.security.core.Authentication authentication)
static String	getSessionInitiator()
static String	getSsoSessionId()
static StateData	getSsoStateDataForClient(SsoService ssoService, jakarta.servlet.http.HttpServletRequest request, RelyingParty relyingParty, String oidcClientId)
static StateData	getStateData()
static String	getStateParam(jakarta.servlet.http.HttpServletRequest request)
static void	invalidateSession(jakarta.servlet.http.HttpServletRequest request, jakarta.servlet.http.HttpServletResponse response, TrustBrokerProperties trustBrokerProperties, String clientId, String errMsg)
static void	invalidateSession(TrustBrokerProperties trustBrokerProperties, String errMsg)
static void	invalidateSsoState(jakarta.servlet.http.HttpServletRequest request, StateCacheService stateCacheService, StateData stateData, String actor)
static boolean	isAcrValuesChangeRequired(jakarta.servlet.http.HttpServletRequest request, TomcatSession session, String clientId)
static void	rememberAcrValues(jakarta.servlet.http.HttpServletRequest request)
static void	setCurrentValuesFromExchange(TomcatSession session, String clientId, org.springframework.security.core.AuthenticatedPrincipal principal, String ssoSessionId, RelyingPartyDefinitions relyingPartyDefinitions, TrustBrokerProperties trustBrokerProperties)
static void	setFinalValuesFromAuthentication(TomcatSession session, Object context, RelyingPartyDefinitions relyingPartyDefinitions, TrustBrokerProperties trustBrokerProperties, StateCacheService stateCacheService, SsoService ssoService)
static void	setRedirectUri(jakarta.servlet.http.HttpSession session, String redirectUri)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

OIDC_SESSION_ID_LENGTH

public static final int OIDC_SESSION_ID_LENGTH

See Also:

• Constant Field Values

OIDC_SESSION_ID_LENGTH_HEX

public static final int OIDC_SESSION_ID_LENGTH_HEX

See Also:

• Constant Field Values

Method Details

getOidcClientId

public static String getOidcClientId()

getOidcClientId

public static String getOidcClientId(jakarta.servlet.http.HttpServletRequest request,
 RelyingPartyDefinitions relyingPartyDefinitions)

getOidcClientId

public static String getOidcClientId(jakarta.servlet.http.HttpServletRequest request,
 RelyingPartyDefinitions relyingPartyDefinitions,
 NetworkConfig networkConfig)

getOidcClientIdFromHttpParams

public static String getOidcClientIdFromHttpParams(jakarta.servlet.http.HttpServletRequest request,
 RelyingPartyDefinitions relyingPartyDefinitions,
 NetworkConfig networkConfig)

getOidcSessionId

public static String getOidcSessionId(jakarta.servlet.http.HttpServletRequest request,
 RelyingPartyDefinitions relyingPartyDefinitions,
 NetworkConfig networkConfig)

getSessionIdFromOidcCookie

public static String getSessionIdFromOidcCookie(jakarta.servlet.http.HttpServletRequest request,
 String clientId,
 NetworkConfig networkConfig)

getClientIdFromOidcCookie

public static String getClientIdFromOidcCookie(jakarta.servlet.http.HttpServletRequest request,
 RelyingPartyDefinitions relyingPartyDefinitions,
 NetworkConfig networkConfig)

createOidcSsoSessionCookie

public static jakarta.servlet.http.Cookie createOidcSsoSessionCookie(String clientId,
 String cookieValue,
 jakarta.servlet.http.HttpServletRequest request,
 RelyingPartyDefinitions relyingPartyDefinitions,
 TrustBrokerProperties trustBrokerProperties)

createOidcClientCookie

public static jakarta.servlet.http.Cookie createOidcClientCookie(String clientId,
 String sessionId,
 int validSec,
 boolean secure,
 String sameSite)

getOidcCookie

public static jakarta.servlet.http.Cookie getOidcCookie(jakarta.servlet.http.HttpServletRequest request,
 String clientId,
 NetworkConfig networkConfig)

getRedirectUri

public static String getRedirectUri(jakarta.servlet.http.HttpServletRequest request)

setRedirectUri

public static void setRedirectUri(jakarta.servlet.http.HttpSession session,
 String redirectUri)

getInitialRedirectUri

public static String getInitialRedirectUri(jakarta.servlet.http.HttpSession session)

getInitialClientState

public static String getInitialClientState(jakarta.servlet.http.HttpServletRequest request)

getOidcSessionId

public static String getOidcSessionId()

getOidcRelayState

public static String getOidcRelayState()

getOidcRelayState

public static String getOidcRelayState(jakarta.servlet.http.HttpServletRequest request,
 String relayStateParam)

getStateData

public static StateData getStateData()

getSsoSessionId

public static String getSsoSessionId()

getSessionIdsFromAuthentication

public static List<String> getSessionIdsFromAuthentication(org.springframework.security.core.Authentication authentication)

getSamlPrincipalFromAuthentication

public static org.springframework.security.saml2.provider.service.authentication.Saml2AuthenticatedPrincipal getSamlPrincipalFromAuthentication(org.springframework.security.core.Authentication authentication,
 jakarta.servlet.http.HttpServletRequest request)

checkSessionHijacking

public static void checkSessionHijacking(jakarta.servlet.http.HttpSession session)

checkSessionOnFederationRedirect

public static void checkSessionOnFederationRedirect(String path,
 jakarta.servlet.http.HttpServletRequest request)

setCurrentValuesFromExchange

public static void setCurrentValuesFromExchange(TomcatSession session,
 String clientId,
 org.springframework.security.core.AuthenticatedPrincipal principal,
 String ssoSessionId,
 RelyingPartyDefinitions relyingPartyDefinitions,
 TrustBrokerProperties trustBrokerProperties)

setFinalValuesFromAuthentication

public static void setFinalValuesFromAuthentication(TomcatSession session,
 Object context,
 RelyingPartyDefinitions relyingPartyDefinitions,
 TrustBrokerProperties trustBrokerProperties,
 StateCacheService stateCacheService,
 SsoService ssoService)

clearDerivedValuesFromAuthentication

public static void clearDerivedValuesFromAuthentication(String clientId,
 String sessionId,
 String principalName,
 TrustBrokerProperties trustBrokerProperties)

clearDerivedValuesFromAuthentication

public static void clearDerivedValuesFromAuthentication(TomcatSession session,
 Object context,
 TrustBrokerProperties trustBrokerProperties)

getAuthenticatedPrincipal

public static org.springframework.security.saml2.provider.service.authentication.Saml2AuthenticatedPrincipal getAuthenticatedPrincipal(TomcatSession tomcatSession)

getSsoStateDataForClient

public static StateData getSsoStateDataForClient(SsoService ssoService,
 jakarta.servlet.http.HttpServletRequest request,
 RelyingParty relyingParty,
 String oidcClientId)

getSamlExchangeClientId

public static String getSamlExchangeClientId()

getSamlExchangeClientId

public static String getSamlExchangeClientId(String acsUrlPath)

getSamlExchangeAcsUrlClientId

public static String getSamlExchangeAcsUrlClientId(String acsUrl)

invalidateSession

public static void invalidateSession(TrustBrokerProperties trustBrokerProperties,
 String errMsg)

invalidateSession

public static void invalidateSession(jakarta.servlet.http.HttpServletRequest request,
 jakarta.servlet.http.HttpServletResponse response,
 TrustBrokerProperties trustBrokerProperties,
 String clientId,
 String errMsg)

discardOidcGlobalCookie

public static void discardOidcGlobalCookie(jakarta.servlet.http.HttpServletResponse response,
 boolean secure)

discardOidcClientCookie

public static void discardOidcClientCookie(String clientId,
 jakarta.servlet.http.HttpServletResponse response,
 boolean secure)

invalidateSsoState

public static void invalidateSsoState(jakarta.servlet.http.HttpServletRequest request,
 StateCacheService stateCacheService,
 StateData stateData,
 String actor)

getStateParam

public static String getStateParam(jakarta.servlet.http.HttpServletRequest request)

getSessionInitiator

public static String getSessionInitiator()

rememberAcrValues

public static void rememberAcrValues(jakarta.servlet.http.HttpServletRequest request)

isAcrValuesChangeRequired

public static boolean isAcrValuesChangeRequired(jakarta.servlet.http.HttpServletRequest request,
 TomcatSession session,
 String clientId)