org.xdi.oxauth.authorize.ws.rs.AuthorizeAction クラス

org.xdi.oxauth.authorize.ws.rs.AuthorizeAction 連携図

公開メンバ関数
void	checkUiLocales ()
void	checkPermissionGranted () throws IOException
List< org.xdi.oxauth.model.common.Scope >	getScopes ()
List< String >	getRequestedClaims ()
String	getScope ()
void	setScope (String scope)
String	getResponseType ()
void	setResponseType (String responseType)
String	getClientId ()
void	setClientId (String clientId)
String	getRedirectUri ()
void	setRedirectUri (String redirectUri)
String	getState ()
void	setState (String state)
String	getResponseMode ()
void	setResponseMode (String responseMode)
String	getNonce ()
void	setNonce (String nonce)
String	getDisplay ()
void	setDisplay (String display)
String	getPrompt ()
void	setPrompt (String prompt)
Integer	getMaxAge ()
void	setMaxAge (Integer maxAge)
String	getUiLocales ()
void	setUiLocales (String uiLocales)
String	getIdTokenHint ()
void	setIdTokenHint (String idTokenHint)
String	getLoginHint ()
void	setLoginHint (String loginHint)
String	getAcrValues ()
void	setAcrValues (String acrValues)
String	getAmrValues ()
void	setAmrValues (String amrValues)
String	getRequest ()
void	setRequest (String request)
String	getRequestUri ()
void	setRequestUri (String requestUri)
String	getSessionId ()
void	setSessionId (String p_sessionId)
void	permissionGranted ()
void	permissionGranted (SessionId session)
void	permissionDenied ()
void	invalidRequest ()
void	consentRequired ()
String	getCodeChallenge ()
void	setCodeChallenge (String codeChallenge)
String	getCodeChallengeMethod ()
void	setCodeChallengeMethod (String codeChallengeMethod)
String	getClaims ()
void	setClaims (String claims)
String	encodeParameters (String url, Map< String, Object > parameters)

非公開メンバ関数
SessionId	handleAcrChange (SessionId session, List< Prompt > prompts)
SessionId	getSession ()
void	authenticationFailedSessionInvalid ()
boolean	containsParameter (String url, String parameterName)
String	encode (Object value)
boolean	hasOnlyOpenidScope ()

非公開変数類
Logger	log
ClientService	clientService
ErrorResponseFactory	errorResponseFactory
SessionIdService	sessionIdService
UserService	userService
RedirectionUriService	redirectionUriService
ClientAuthorizationsService	clientAuthorizationsService
ExternalAuthenticationService	externalAuthenticationService
ExternalConsentGatheringService	externalConsentGatheringService
AuthenticationMode	defaultAuthenticationMode
LanguageBean	languageBean
NetworkService	networkService
AppConfiguration	appConfiguration
FacesService	facesService
FacesMessages	facesMessages
FacesContext	facesContext
ExternalContext	externalContext
ConsentGathererService	consentGatherer
AuthorizeService	authorizeService
RequestParameterService	requestParameterService
ScopeChecker	scopeChecker
String	scope
String	responseType
String	clientId
String	redirectUri
String	state
String	responseMode
String	nonce
String	display
String	prompt
Integer	maxAge
String	uiLocales
String	idTokenHint
String	loginHint
String	acrValues
String	amrValues
String	request
String	requestUri
String	codeChallenge
String	codeChallengeMethod
String	claims
String	sessionId
String	allowedScope

詳解

著者

Javier Rojas Blum

Yuriy Movchan

バージョン

August 29, 2018

関数詳解

authenticationFailedSessionInvalid()

void org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.authenticationFailedSessionInvalid ( )

inlineprivate

                                                      {
        facesMessages.add(FacesMessage.SEVERITY_ERROR, "login.errorSessionInvalidMessage");
        facesService.redirect("/error.xhtml");
    }

checkPermissionGranted()

void org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.checkPermissionGranted ( ) throws IOException

inline

                                                            {
        if ((clientId == null) || clientId.isEmpty()) {
            log.error("Permission denied. client_id should be not empty.");
            permissionDenied();
            return;
        }

        Client client = null;
        try {
            client = clientService.getClient(clientId);
        } catch (EntryPersistenceException ex) {
            log.error("Permission denied. Failed to find client by inum '{}' in LDAP.", clientId, ex);
            permissionDenied();
            return;
        }

        if (client == null) {
            log.error("Permission denied. Failed to find client_id '{}' in LDAP.", clientId);
            permissionDenied();
            return;
        }

        // Fix the list of scopes in the authorization page. oxAuth #739
        Set<String> grantedScopes = scopeChecker.checkScopesPolicy(client, scope);
        allowedScope = org.xdi.oxauth.model.util.StringUtils.implode(grantedScopes, " ");

        SessionId session = getSession();
        List<Prompt> prompts = Prompt.fromString(prompt, " ");

        try {
            session = sessionIdService.assertAuthenticatedSessionCorrespondsToNewRequest(session, acrValues);
        } catch (AcrChangedException e) {
            log.debug("There is already existing session which has another acr then {}, session: {}", acrValues, session.getId());
            if (e.isForceReAuthentication()) {
                session = handleAcrChange(session, prompts);
            } else {
                log.error("ACR is changed, please provide a supported and enabled acr value");
                permissionDenied();
                return;
            }
        }

        if (session == null || StringUtils.isBlank(session.getUserDn()) || SessionIdState.AUTHENTICATED != session.getState()) {
            Map<String, String> parameterMap = externalContext.getRequestParameterMap();
            Map<String, String> requestParameterMap = requestParameterService.getAllowedParameters(parameterMap);

            String redirectTo = "/login.xhtml";

            boolean useExternalAuthenticator = externalAuthenticationService.isEnabled(AuthenticationScriptUsageType.INTERACTIVE);
            if (useExternalAuthenticator) {
                List<String> acrValuesList = sessionIdService.acrValuesList(this.acrValues);
                if (acrValuesList.isEmpty()) {
                    if (StringHelper.isNotEmpty(defaultAuthenticationMode.getName())) {
                        acrValuesList = Arrays.asList(defaultAuthenticationMode.getName());
                    } else {
                        CustomScriptConfiguration defaultExternalAuthenticator = externalAuthenticationService.getDefaultExternalAuthenticator(AuthenticationScriptUsageType.INTERACTIVE);
                        if (defaultExternalAuthenticator != null) {
                            acrValuesList = Arrays.asList(defaultExternalAuthenticator.getName());
                        }
                    }

                }

                CustomScriptConfiguration customScriptConfiguration = externalAuthenticationService.determineCustomScriptConfiguration(AuthenticationScriptUsageType.INTERACTIVE, acrValuesList);

                if (customScriptConfiguration == null) {
                    log.error("Failed to get CustomScriptConfiguration. auth_step: {}, acr_values: {}", 1, this.acrValues);
                    permissionDenied();
                    return;
                }

                String acr = customScriptConfiguration.getName();

                requestParameterMap.put(JwtClaimName.AUTHENTICATION_CONTEXT_CLASS_REFERENCE, acr);
                requestParameterMap.put("auth_step", Integer.toString(1));

                String tmpRedirectTo = externalAuthenticationService.executeExternalGetPageForStep(customScriptConfiguration, 1);
                if (StringHelper.isNotEmpty(tmpRedirectTo)) {
                    log.trace("Redirect to person authentication login page: {}", tmpRedirectTo);
                    redirectTo = tmpRedirectTo;
                }
            }

            // Store Remote IP
            String remoteIp = networkService.getRemoteIp();
            requestParameterMap.put(Constants.REMOTE_IP, remoteIp);

            // Create unauthenticated session
            SessionId unauthenticatedSession = sessionIdService.generateUnauthenticatedSessionId(null, new Date(), SessionIdState.UNAUTHENTICATED, requestParameterMap, false);
            unauthenticatedSession.setSessionAttributes(requestParameterMap);
            unauthenticatedSession.addPermission(clientId, false);
            boolean persisted = sessionIdService.persistSessionId(unauthenticatedSession, !prompts.contains(Prompt.NONE)); // always persist is prompt is not none
            if (persisted && log.isTraceEnabled()) {
                log.trace("Session '{}' persisted to LDAP", unauthenticatedSession.getId());
            }

            this.sessionId = unauthenticatedSession.getId();
            sessionIdService.createSessionIdCookie(this.sessionId, unauthenticatedSession.getSessionState(), false);

            Map<String, Object> loginParameters = new HashMap<String, Object>();
            if (requestParameterMap.containsKey(AuthorizeRequestParam.LOGIN_HINT)) {
                loginParameters.put(AuthorizeRequestParam.LOGIN_HINT,
                        requestParameterMap.get(AuthorizeRequestParam.LOGIN_HINT));
            }

            facesService.redirectWithExternal(redirectTo, loginParameters);

            return;
        }

        if (StringUtils.isBlank(redirectionUriService.validateRedirectionUri(clientId, redirectUri))) {
            ExternalContext externalContext = facesContext.getExternalContext();
            externalContext.setResponseStatus(HttpServletResponse.SC_BAD_REQUEST);
            externalContext.setResponseContentType(MediaType.APPLICATION_JSON);
            externalContext.getResponseOutputWriter().write(errorResponseFactory.getErrorAsJson(AuthorizeErrorResponseType.INVALID_REQUEST_REDIRECT_URI, state));
            facesContext.responseComplete();
        }

        final User user = userService.getUserByDn(session.getUserDn());
        log.trace("checkPermissionGranted, user = " + user);

        if (AuthorizeParamsValidator.noNonePrompt(prompts)) {
            if (appConfiguration.getTrustedClientEnabled() && client.getTrustedClient() && !prompts.contains(Prompt.CONSENT)) {
                // if trusted client = true, then skip authorization page and grant access directly
                permissionGranted(session);
                return;
            } else if (ServerUtil.isTrue(appConfiguration.getSkipAuthorizationForOpenIdScopeAndPairwiseId())
                    && SubjectType.PAIRWISE.toString().equals(client.getSubjectType()) && hasOnlyOpenidScope()) {
                // If a client has only openid scope and pairwise id, person should not have to authorize. oxAuth-743
                permissionGranted(session);
                return;
            }

            ClientAuthorizations clientAuthorizations = clientAuthorizationsService.findClientAuthorizations(
                    user.getAttribute("inum"),
                    client.getClientId(),
                    client.getPersistClientAuthorizations());
            if (clientAuthorizations != null && clientAuthorizations.getScopes() != null &&
                    Arrays.asList(clientAuthorizations.getScopes()).containsAll(
                            org.xdi.oxauth.model.util.StringUtils.spaceSeparatedToList(scope))) {
                permissionGranted(session);
                return;
            }

        } else {
            invalidRequest();
        }

        if (externalConsentGatheringService.isEnabled()) {
            if (consentGatherer.isConsentGathered()) {
                log.trace("Consent-gathered flow passed successfully");
                permissionGranted(session);
                return;
            }

            log.trace("Starting external consent-gathering flow");

            boolean result = consentGatherer.configure(session.getUserDn(), clientId, state);
            if (!result) {
                log.error("Failed to initialize external consent-gathering flow.");
                permissionDenied();
                return;
            }
        }

        return;
    }

checkUiLocales()

void org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.checkUiLocales ( )

inline

                                 {
        List<String> uiLocalesList = null;
        if (StringUtils.isNotBlank(uiLocales)) {
            uiLocalesList = Util.splittedStringAsList(uiLocales, " ");

            List<Locale> supportedLocales = new ArrayList<Locale>();
            for (Iterator<Locale> it = facesContext.getApplication().getSupportedLocales(); it.hasNext(); ) {
                supportedLocales.add(it.next());
            }
            Locale matchingLocale = LocaleUtil.localeMatch(uiLocalesList, supportedLocales);

            if (matchingLocale != null)
                languageBean.setLocaleCode(matchingLocale.getLanguage());
        } else {
            Locale defaultLocale = facesContext.getApplication().getDefaultLocale();
            if (defaultLocale != null) {
                languageBean.setLocaleCode(defaultLocale.getLanguage());
            }
        }
    }

consentRequired()

void org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.consentRequired ( )

inline

                                  {
        StringBuilder sb = new StringBuilder();

        sb.append(redirectUri);
        if (redirectUri != null && redirectUri.contains("?")) {
            sb.append("&");
        } else {
            sb.append("?");
        }
        sb.append(errorResponseFactory.getErrorAsQueryString(AuthorizeErrorResponseType.CONSENT_REQUIRED, getState()));

        facesService.redirectToExternalURL(sb.toString());
    }

containsParameter()

boolean org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.containsParameter ( String  url, String  parameterName  )

inlineprivate

                                                                        {
        return url.indexOf('?' + parameterName + '=') > 0 ||
                url.indexOf('&' + parameterName + '=') > 0;
    }

encode()

String org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.encode ( Object  value )

inlineprivate

                                        {
        try {
            return URLEncoder.encode(String.valueOf(value), "UTF-8");
        } catch (UnsupportedEncodingException iee) {
            throw new RuntimeException(iee);
        }
    }

encodeParameters()

String org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.encodeParameters ( String  url, Map< String, Object >  parameters  )

inline

                                                                               {
        if (parameters.isEmpty()) return url;

        StringBuilder builder = new StringBuilder(url);
        for (Map.Entry<String, Object> param : parameters.entrySet()) {
            String parameterName = param.getKey();
            if (!containsParameter(url, parameterName)) {
                Object parameterValue = param.getValue();
                if (parameterValue instanceof Iterable) {
                    for (Object value : (Iterable) parameterValue) {
                        builder.append('&')
                                .append(parameterName)
                                .append('=');
                        if (value != null) {
                            builder.append(encode(value));
                        }
                    }
                } else {
                    builder.append('&')
                            .append(parameterName)
                            .append('=');
                    if (parameterValue != null) {
                        builder.append(encode(parameterValue));
                    }
                }
            }
        }
        if (url.indexOf('?') < 0) {
            builder.setCharAt(url.length(), '?');
        }
        return builder.toString();
    }

getAcrValues()

String org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.getAcrValues ( )

inline

                                 {
        return acrValues;
    }

getAmrValues()

String org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.getAmrValues ( )

inline

                                 {
        return amrValues;
    }

getClaims()

String org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.getClaims ( )

inline

                              {
        return claims;
    }

getClientId()

String org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.getClientId ( )

inline

Returns the client identifier.

戻り値

The client identifier.

                                {
        return clientId;
    }

getCodeChallenge()

String org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.getCodeChallenge ( )

inline

                                     {
        return codeChallenge;
    }

getCodeChallengeMethod()

String org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.getCodeChallengeMethod ( )

inline

                                           {
        return codeChallengeMethod;
    }

getDisplay()

String org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.getDisplay ( )

inline

Returns an ASCII string value that specifies how the Authorization Server displays the authentication page to the End-User.

戻り値

The display value.

                               {
        return display;
    }

getIdTokenHint()

String org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.getIdTokenHint ( )

inline

                                   {
        return idTokenHint;
    }

getLoginHint()

String org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.getLoginHint ( )

inline

                                 {
        return loginHint;
    }

getMaxAge()

Integer org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.getMaxAge ( )

inline

                               {
        return maxAge;
    }

getNonce()

String org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.getNonce ( )

inline

Return a string value used to associate a user agent session with an ID Token, and to mitigate replay attacks.

戻り値

The nonce value.

                             {
        return nonce;
    }

getPrompt()

String org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.getPrompt ( )

inline

Returns a space delimited list of ASCII strings that can contain the values login, consent, select_account, and none.

戻り値

A list of prompt options.

                              {
        return prompt;
    }

getRedirectUri()

String org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.getRedirectUri ( )

inline

Returns the redirection URI.

戻り値

The redirection URI.

                                   {
        return redirectUri;
    }

getRequest()

String org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.getRequest ( )

inline

Returns a JWT encoded OpenID Request Object.

戻り値

A JWT encoded OpenID Request Object.

                               {
        return request;
    }

getRequestedClaims()

List<String> org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.getRequestedClaims ( )

inline

                                             {
        Set<String> result = new HashSet<String>();
        String requestJwt = request;

        if (StringUtils.isBlank(requestJwt) && StringUtils.isNotBlank(requestUri)) {
            try {
                URI reqUri = new URI(requestUri);
                String reqUriHash = reqUri.getFragment();
                String reqUriWithoutFragment = reqUri.getScheme() + ":" + reqUri.getSchemeSpecificPart();

                ClientRequest clientRequest = new ClientRequest(reqUriWithoutFragment);
                clientRequest.setHttpMethod(HttpMethod.GET);

                ClientResponse<String> clientResponse = clientRequest.get(String.class);
                int status = clientResponse.getStatus();

                if (status == 200) {
                    String entity = clientResponse.getEntity(String.class);

                    if (StringUtils.isBlank(reqUriHash)) {
                        requestJwt = entity;
                    } else {
                        String hash = Base64Util.base64urlencode(JwtUtil.getMessageDigestSHA256(entity));
                        if (StringUtils.equals(reqUriHash, hash)) {
                            requestJwt = entity;
                        }
                    }
                }
            } catch (NoSuchAlgorithmException e) {
                log.error(e.getMessage(), e);
            } catch (URISyntaxException e) {
                log.error(e.getMessage(), e);
            } catch (UnsupportedEncodingException e) {
                log.error(e.getMessage(), e);
            } catch (NoSuchProviderException e) {
                log.error(e.getMessage(), e);
            } catch (Exception e) {
                log.error(e.getMessage(), e);
            }
        }

        if (StringUtils.isNotBlank(requestJwt)) {
            try {
                Client client = clientService.getClient(clientId);

                if (client != null) {
                    JwtAuthorizationRequest jwtAuthorizationRequest = new JwtAuthorizationRequest(appConfiguration, request, client);

                    if (jwtAuthorizationRequest.getUserInfoMember() != null) {
                        for (Claim claim : jwtAuthorizationRequest.getUserInfoMember().getClaims()) {
                            result.add(claim.getName());
                        }
                    }

                    if (jwtAuthorizationRequest.getIdTokenMember() != null) {
                        for (Claim claim : jwtAuthorizationRequest.getIdTokenMember().getClaims()) {
                            result.add(claim.getName());
                        }
                    }
                }
            } catch (EntryPersistenceException e) {
                log.error(e.getMessage(), e);
            } catch (InvalidJwtException e) {
                log.error(e.getMessage(), e);
            } catch (InvalidJweException e) {
                log.error(e.getMessage(), e);
            }
        }

        return new ArrayList<String>(result);
    }

getRequestUri()

String org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.getRequestUri ( )

inline

Returns an URL that points to an OpenID Request Object.

戻り値

An URL that points to an OpenID Request Object.

                                  {
        return requestUri;
    }

getResponseMode()

String org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.getResponseMode ( )

inline

Returns the mechanism to be used for returning parameters from the Authorization Endpoint.

戻り値

The response mode.

                                    {
        return responseMode;
    }

getResponseType()

String org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.getResponseType ( )

inline

Returns the response type: code for requesting an authorization code (authorization code grant) or token for requesting an access token (implicit grant).

戻り値

The response type.

                                    {
        return responseType;
    }

getScope()

String org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.getScope ( )

inline

Returns the scope of the access request.

戻り値

The scope of the access request.

                             {
        return scope;
    }

getScopes()

List<org.xdi.oxauth.model.common.Scope> org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.getScopes ( )

inline

                                                               {
        return authorizeService.getScopes(allowedScope);
    }

getSession()

SessionId org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.getSession ( )

inlineprivate

                                   {
        return authorizeService.getSession(sessionId);
    }

getSessionId()

String org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.getSessionId ( )

inline

                                 {
        return sessionId;
    }

getState()

String org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.getState ( )

inline

Returns an opaque value used by the client to maintain state between the request and callback. The authorization server includes this value when redirecting the user-agent back to the client. The parameter should be used for preventing cross-site request forgery.

戻り値

The state between the request and callback.

                             {
        return state;
    }

getUiLocales()

String org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.getUiLocales ( )

inline

                                 {
        return uiLocales;
    }

handleAcrChange()

SessionId org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.handleAcrChange ( SessionId  session, List< Prompt >  prompts  )

inlineprivate

                                                                               {
        if (session != null) {
            if (session.getState() == SessionIdState.AUTHENTICATED) {

                if (!prompts.contains(Prompt.LOGIN)) {
                    prompts.add(Prompt.LOGIN);
                }
                session.getSessionAttributes().put("prompt", org.xdi.oxauth.model.util.StringUtils.implode(prompts, " "));
                session.setState(SessionIdState.UNAUTHENTICATED);

                // Update Remote IP
                String remoteIp = networkService.getRemoteIp();
                session.getSessionAttributes().put(Constants.REMOTE_IP, remoteIp);

                sessionIdService.updateSessionId(session);
                sessionIdService.reinitLogin(session, false);
            }
        }
        return session;
    }

hasOnlyOpenidScope()

boolean org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.hasOnlyOpenidScope ( )

inlineprivate

                                         {
        return getScopes() != null && getScopes().size() == 1 && getScopes().get(0).getDisplayName().equals("openid");
    }

invalidRequest()

void org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.invalidRequest ( )

inline

                                 {
        log.trace("invalidRequest");
        StringBuilder sb = new StringBuilder();

        sb.append(redirectUri);
        if (redirectUri != null && redirectUri.contains("?")) {
            sb.append("&");
        } else {
            sb.append("?");
        }
        sb.append(errorResponseFactory.getErrorAsQueryString(AuthorizeErrorResponseType.INVALID_REQUEST,
                getState()));

        facesService.redirectToExternalURL(sb.toString());
    }

permissionDenied()

void org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.permissionDenied ( )

inline

                                   {
        final SessionId session = getSession();
        authorizeService.permissionDenied(session);
    }

permissionGranted() [1/2]

void org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.permissionGranted ( )

inline

                                    {
        final SessionId session = getSession();
        permissionGranted(session);
    }

permissionGranted() [2/2]

void org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.permissionGranted ( SessionId  session )

inline

                                                     {
        final HttpServletRequest httpRequest = (HttpServletRequest) externalContext.getRequest();
        authorizeService.permissionGranted(httpRequest, session);
    }

setAcrValues()

void org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.setAcrValues ( String  acrValues )

inline

                                               {
        this.acrValues = acrValues;
    }

setAmrValues()

void org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.setAmrValues ( String  amrValues )

inline

                                               {
        this.amrValues = amrValues;
    }

setClaims()

void org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.setClaims ( String  claims )

inline

                                         {
        this.claims = claims;
    }

setClientId()

void org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.setClientId ( String  clientId )

inline

Sets the client identifier.

引数

clientId

The client identifier.

                                             {
        this.clientId = clientId;
    }

setCodeChallenge()

void org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.setCodeChallenge ( String  codeChallenge )

inline

                                                       {
        this.codeChallenge = codeChallenge;
    }

setCodeChallengeMethod()

void org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.setCodeChallengeMethod ( String  codeChallengeMethod )

inline

                                                                   {
        this.codeChallengeMethod = codeChallengeMethod;
    }

setDisplay()

void org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.setDisplay ( String  display )

inline

Sets an ASCII string value that specifies how the Authorization Server displays the authentication page to the End-User.

引数

display

The display value

                                           {
        this.display = display;
    }

setIdTokenHint()

void org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.setIdTokenHint ( String  idTokenHint )

inline

                                                   {
        this.idTokenHint = idTokenHint;
    }

setLoginHint()

void org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.setLoginHint ( String  loginHint )

inline

                                               {
        this.loginHint = loginHint;
    }

setMaxAge()

void org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.setMaxAge ( Integer  maxAge )

inline

                                          {
        this.maxAge = maxAge;
    }

setNonce()

void org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.setNonce ( String  nonce )

inline

Sets a string value used to associate a user agent session with an ID Token, and to mitigate replay attacks.

引数

nonce

The nonce value.

                                       {
        this.nonce = nonce;
    }

setPrompt()

void org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.setPrompt ( String  prompt )

inline

Sets a space delimited list of ASCII strings that can contain the values login, consent, select_account, and none.

引数

prompt

A list of prompt options.

                                         {
        this.prompt = prompt;
    }

setRedirectUri()

void org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.setRedirectUri ( String  redirectUri )

inline

Sets the redirection URI.

引数

redirectUri

The redirection URI.

                                                   {
        this.redirectUri = redirectUri;
    }

setRequest()

void org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.setRequest ( String  request )

inline

Sets a JWT encoded OpenID Request Object.

引数

request

A JWT encoded OpenID Request Object.

                                           {
        this.request = request;
    }

setRequestUri()

void org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.setRequestUri ( String  requestUri )

inline

Sets an URL that points to an OpenID Request Object.

引数

requestUri

An URL that points to an OpenID Request Object.

                                                 {
        this.requestUri = requestUri;
    }

setResponseMode()

void org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.setResponseMode ( String  responseMode )

inline

Sets the mechanism to be used for returning parameters from the Authorization Endpoint.

引数

responseMode

The response mode.

                                                     {
        this.responseMode = responseMode;
    }

setResponseType()

void org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.setResponseType ( String  responseType )

inline

Sets the response type.

引数

responseType

The response type.

                                                     {
        this.responseType = responseType;
    }

setScope()

void org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.setScope ( String  scope )

inline

Sets the scope of the access request.

引数

scope

The scope of the access request.

                                       {
        this.scope = scope;
    }

setSessionId()

void org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.setSessionId ( String  p_sessionId )

inline

                                                 {
        sessionId = p_sessionId;
    }

setState()

void org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.setState ( String  state )

inline

Sets the state between the request and callback.

引数

state

The state between the request and callback.

                                       {
        this.state = state;
    }

setUiLocales()

void org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.setUiLocales ( String  uiLocales )

inline

                                               {
        this.uiLocales = uiLocales;
    }

メンバ詳解

acrValues

String org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.acrValues

private

allowedScope

String org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.allowedScope

private

amrValues

String org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.amrValues

private

appConfiguration

AppConfiguration org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.appConfiguration

private

authorizeService

AuthorizeService org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.authorizeService

private

claims

String org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.claims

private

clientAuthorizationsService

ClientAuthorizationsService org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.clientAuthorizationsService

private

clientId

String org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.clientId

private

clientService

ClientService org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.clientService

private

codeChallenge

String org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.codeChallenge

private

codeChallengeMethod

String org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.codeChallengeMethod

private

consentGatherer

ConsentGathererService org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.consentGatherer

private

defaultAuthenticationMode

AuthenticationMode org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.defaultAuthenticationMode

private

display

String org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.display

private

errorResponseFactory

ErrorResponseFactory org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.errorResponseFactory

private

externalAuthenticationService

ExternalAuthenticationService org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.externalAuthenticationService

private

externalConsentGatheringService

ExternalConsentGatheringService org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.externalConsentGatheringService

private

externalContext

ExternalContext org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.externalContext

private

facesContext

FacesContext org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.facesContext

private

facesMessages

FacesMessages org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.facesMessages

private

facesService

FacesService org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.facesService

private

idTokenHint

String org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.idTokenHint

private

languageBean

LanguageBean org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.languageBean

private

log

Logger org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.log

private

loginHint

String org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.loginHint

private

maxAge

Integer org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.maxAge

private

networkService

NetworkService org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.networkService

private

nonce

String org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.nonce

private

prompt

String org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.prompt

private

redirectionUriService

RedirectionUriService org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.redirectionUriService

private

redirectUri

String org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.redirectUri

private

request

String org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.request

private

requestParameterService

RequestParameterService org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.requestParameterService

private

requestUri

String org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.requestUri

private

responseMode

String org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.responseMode

private

responseType

String org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.responseType

private

scope

String org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.scope

private

scopeChecker

ScopeChecker org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.scopeChecker

private

sessionId

String org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.sessionId

private

sessionIdService

SessionIdService org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.sessionIdService

private

state

String org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.state

private

uiLocales

String org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.uiLocales

private

userService

UserService org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.userService

private

---

このクラス詳解は次のファイルから抽出されました:

• D:/AppData/OpenId/gluu/src/oxAuth/Server/src/main/java/org/xdi/oxauth/authorize/ws/rs/AuthorizeAction.java