mitreid-connect
公開メンバ関数 | 限定公開メンバ関数 | 非公開変数類 | 全メンバ一覧
org.mitre.oauth2.service.impl.BlacklistAwareRedirectResolver クラス
org.mitre.oauth2.service.impl.BlacklistAwareRedirectResolver の継承関係図
Inheritance graph
org.mitre.oauth2.service.impl.BlacklistAwareRedirectResolver 連携図
Collaboration graph

公開メンバ関数

String resolveRedirect (String requestedRedirect, ClientDetails client) throws OAuth2Exception
 
boolean isStrictMatch ()
 
void setStrictMatch (boolean strictMatch)
 

限定公開メンバ関数

boolean redirectMatches (String requestedRedirect, String redirectUri)
 

非公開変数類

BlacklistedSiteService blacklistService
 
ConfigurationPropertiesBean config
 
boolean strictMatch = true
 

詳解

A redirect resolver that knows how to check against the blacklisted URIs for forbidden values. Can be configured to do strict string matching also.

著者
jricher

関数詳解

◆ isStrictMatch()

boolean org.mitre.oauth2.service.impl.BlacklistAwareRedirectResolver.isStrictMatch ( )
inline
戻り値
the strictMatch
85  {
86  if (config.isHeartMode()) {
87  // HEART mode enforces strict matching
88  return true;
89  } else {
90  return strictMatch;
91  }
92  }
ConfigurationPropertiesBean config
Definition: BlacklistAwareRedirectResolver.java:47
boolean strictMatch
Definition: BlacklistAwareRedirectResolver.java:49
boolean isHeartMode()
Definition: ConfigurationPropertiesBean.java:250

◆ redirectMatches()

boolean org.mitre.oauth2.service.impl.BlacklistAwareRedirectResolver.redirectMatches ( String  requestedRedirect,
String  redirectUri 
)
inlineprotected
70  {
71 
72  if (isStrictMatch()) {
73  // we're doing a strict string match for all clients
74  return Strings.nullToEmpty(requestedRedirect).equals(redirectUri);
75  } else {
76  // otherwise do the prefix-match from the library
77  return super.redirectMatches(requestedRedirect, redirectUri);
78  }
79 
80  }
boolean isStrictMatch()
Definition: BlacklistAwareRedirectResolver.java:85

◆ resolveRedirect()

String org.mitre.oauth2.service.impl.BlacklistAwareRedirectResolver.resolveRedirect ( String  requestedRedirect,
ClientDetails  client 
) throws OAuth2Exception
inline
55  {
56  String redirect = super.resolveRedirect(requestedRedirect, client);
57  if (blacklistService.isBlacklisted(redirect)) {
58  // don't let it go through
59  throw new InvalidRequestException("The supplied redirect_uri is not allowed on this server.");
60  } else {
61  // not blacklisted, passed the parent test, we're fine
62  return redirect;
63  }
64  }
BlacklistedSiteService blacklistService
Definition: BlacklistAwareRedirectResolver.java:44

◆ setStrictMatch()

void org.mitre.oauth2.service.impl.BlacklistAwareRedirectResolver.setStrictMatch ( boolean  strictMatch)
inline

Set this to true to require exact string matches for all redirect URIs. (Default is false)

引数
strictMatchthe strictMatch to set
99  {
100  this.strictMatch = strictMatch;
101  }
boolean strictMatch
Definition: BlacklistAwareRedirectResolver.java:49

メンバ詳解

◆ blacklistService

BlacklistedSiteService org.mitre.oauth2.service.impl.BlacklistAwareRedirectResolver.blacklistService
private

◆ config

ConfigurationPropertiesBean org.mitre.oauth2.service.impl.BlacklistAwareRedirectResolver.config
private

◆ strictMatch

boolean org.mitre.oauth2.service.impl.BlacklistAwareRedirectResolver.strictMatch = true
private

このクラス詳解は次のファイルから抽出されました: