49 showTitle(
"OC5:FeatureTest-Support claims Request Specifying sub Value (succeed)");
55 StringUtils.spaceSeparatedToList(redirectUris));
59 JwtClaimName.GIVEN_NAME,
60 JwtClaimName.FAMILY_NAME));
67 assertEquals(registerResponse.getStatus(), 200,
"Unexpected response code: " + registerResponse.getEntity());
77 List<String> scopes = Arrays.asList(
"openid",
"email");
78 String nonce = UUID.randomUUID().toString();
79 String state = UUID.randomUUID().toString();
83 authorizationRequest1.
setState(state);
86 authorizeClient1.
setRequest(authorizationRequest1);
91 assertNotNull(authorizationResponse1.
getLocation(),
"The location is null");
92 assertNotNull(authorizationResponse1.
getIdToken(),
"The ID Token is null");
93 assertNotNull(authorizationResponse1.
getAccessToken(),
"The Access Token is null");
94 assertNotNull(authorizationResponse1.
getState(),
"The state is null");
95 assertNotNull(authorizationResponse1.
getScope(),
"The scope is null");
97 String sessionId = authorizationResponse1.
getSessionId();
104 authorizationRequest2.
setState(state);
107 JwtAuthorizationRequest jwtAuthorizationRequest =
new JwtAuthorizationRequest(
109 jwtAuthorizationRequest.addUserInfoClaim(
new Claim(JwtClaimName.GIVEN_NAME, ClaimValue.createNull()));
110 jwtAuthorizationRequest.addUserInfoClaim(
new Claim(JwtClaimName.FAMILY_NAME, ClaimValue.createNull()));
111 jwtAuthorizationRequest.addIdTokenClaim(
new Claim(JwtClaimName.SUBJECT_IDENTIFIER, ClaimValue.createSingleValue(userId)));
113 String authJwt = jwtAuthorizationRequest.getEncodedJwt();
117 authorizeClient2.
setRequest(authorizationRequest2);
120 assertNotNull(authorizationResponse2.
getLocation(),
"The location is null");
121 assertNotNull(authorizationResponse2.
getAccessToken(),
"The accessToken is null");
122 assertNotNull(authorizationResponse2.
getTokenType(),
"The tokenType is null");
123 assertNotNull(authorizationResponse2.
getIdToken(),
"The idToken is null");
124 assertNotNull(authorizationResponse2.
getState(),
"The state is null");
126 String idToken = authorizationResponse2.
getIdToken();
146 assertTrue(rsaSigner.validate(jwt));
150 UserInfoResponse userInfoResponse = userInfoClient.execUserInfo(accessToken);
153 assertEquals(userInfoResponse.
getStatus(), 200,
"Unexpected response code: " + userInfoResponse.
getStatus());
154 assertNotNull(userInfoResponse.
getClaim(JwtClaimName.SUBJECT_IDENTIFIER));
155 assertNotNull(userInfoResponse.
getClaim(JwtClaimName.EMAIL));
156 assertNotNull(userInfoResponse.
getClaim(JwtClaimName.GIVEN_NAME));
157 assertNotNull(userInfoResponse.
getClaim(JwtClaimName.FAMILY_NAME));
ID_TOKEN
Definition: ResponseType.java:47
String registrationEndpoint
Definition: BaseTest.java:81
Definition: RegisterClient.java:34
String getIdToken()
Definition: AuthorizationResponse.java:295
String getClaimAsString(String key)
Definition: JwtClaimSet.java:55
void setClaims(List< String > claims)
Definition: RegisterRequest.java:903
void setSessionId(String p_sessionId)
Definition: AuthorizationRequest.java:415
String jwksUri
Definition: BaseTest.java:80
Definition: RegisterResponse.java:34
List< Prompt > getPrompts()
Definition: AuthorizationRequest.java:275
String getState()
Definition: AuthorizationResponse.java:314
AuthorizationResponse exec()
Definition: AuthorizeClient.java:167
void setSectorIdentifierUri(String sectorIdentifierUri)
Definition: RegisterRequest.java:504
Definition: SignatureAlgorithm.java:20
static void showClient(BaseClient client)
Definition: BaseTest.java:775
JwtClaims getClaims()
Definition: JsonWebResponse.java:41
Date getClientSecretExpiresAt()
Definition: RegisterResponse.java:205
String getSessionId()
Definition: AuthorizationResponse.java:203
RegisterResponse exec()
Definition: RegisterClient.java:76
Definition: AuthorizeClient.java:29
HS256
Definition: SignatureAlgorithm.java:23
String getClientSecret()
Definition: RegisterResponse.java:160
WEB
Definition: ApplicationType.java:28
Definition: RSAPublicKey.java:25
NONE
Definition: Prompt.java:27
RS256
Definition: SignatureAlgorithm.java:26
TokenType getTokenType()
Definition: AuthorizationResponse.java:237
List< String > getClaim(String claimName)
Definition: UserInfoResponse.java:109
Definition: JwkClient.java:29
String getClientId()
Definition: RegisterResponse.java:142
void showTitle(String title)
Definition: BaseTest.java:761
void setRequest(T request)
Definition: BaseClient.java:68
Definition: AuthorizationResponse.java:32
void setResponseTypes(List< ResponseType > responseTypes)
Definition: RegisterRequest.java:272
Definition: RegisterRequest.java:37
Definition: Prompt.java:18
String getScope()
Definition: AuthorizationResponse.java:277
static RSAPublicKey getRSAPublicKey(String jwkSetUri, String keyId)
Definition: JwkClient.java:94
JwtHeader getHeader()
Definition: JsonWebResponse.java:33
Definition: UserInfoClient.java:34
String userInfoEndpoint
Definition: BaseTest.java:76
void setRequest(String request)
Definition: AuthorizationRequest.java:361
TOKEN
Definition: ResponseType.java:43
String getLocation()
Definition: BaseResponse.java:58
int getStatus()
Definition: BaseResponse.java:49
Definition: AuthorizationRequest.java:33
Definition: ApplicationType.java:12
Definition: ResponseType.java:34
void setState(String state)
Definition: AuthorizationRequest.java:217
Date getClientIdIssuedAt()
Definition: RegisterResponse.java:189
String authorizationEndpoint
Definition: BaseTest.java:72
static Jwt parse(String encodedJwt)
Definition: Jwt.java:54
Definition: UserInfoResponse.java:20
AuthorizationResponse authenticateResourceOwnerAndGrantAccess(String authorizeUrl, AuthorizationRequest authorizationRequest, String userId, String userSecret)
Definition: BaseTest.java:252
String getAccessToken()
Definition: AuthorizationResponse.java:185
Definition: OxAuthCryptoProvider.java:62
String getRegistrationAccessToken()
Definition: RegisterResponse.java:173