mitreid-connect
公開メンバ関数 | 静的公開変数類 | 限定公開メンバ関数 | 非公開メンバ関数 | 非公開変数類 | 静的非公開変数類 | 全メンバ一覧
org.mitre.openid.connect.service.impl.MITREidDataService_1_2 クラス
org.mitre.openid.connect.service.impl.MITREidDataService_1_2 の継承関係図
Inheritance graph
org.mitre.openid.connect.service.impl.MITREidDataService_1_2 連携図
Collaboration graph

公開メンバ関数

boolean supportsVersion (String version)
 
void exportData (JsonWriter writer) throws IOException
 
void importData (JsonReader reader) throws IOException
 

静的公開変数類

static final String MITREID_CONNECT_1_0 = "mitreid-connect-1.0"
 
static final String MITREID_CONNECT_1_1 = "mitreid-connect-1.1"
 
static final String MITREID_CONNECT_1_2 = "mitreid-connect-1.2"
 
static final String MITREID_CONNECT_1_3 = "mitreid-connect-1.3"
 
static final String REFRESHTOKENS = "refreshTokens"
 
static final String ACCESSTOKENS = "accessTokens"
 
static final String WHITELISTEDSITES = "whitelistedSites"
 
static final String BLACKLISTEDSITES = "blacklistedSites"
 
static final String AUTHENTICATIONHOLDERS = "authenticationHolders"
 
static final String GRANTS = "grants"
 
static final String CLIENTS = "clients"
 
static final String SYSTEMSCOPES = "systemScopes"
 

限定公開メンバ関数

Date utcToDate (String value)
 
String toUTCString (Date value)
 

非公開メンバ関数

void readRefreshTokens (JsonReader reader) throws IOException
 
void readAccessTokens (JsonReader reader) throws IOException
 
void readAuthenticationHolders (JsonReader reader) throws IOException
 
SavedUserAuthentication readSavedUserAuthentication (JsonReader reader) throws IOException
 
void readGrants (JsonReader reader) throws IOException
 
void readWhitelistedSites (JsonReader reader) throws IOException
 
void readBlacklistedSites (JsonReader reader) throws IOException
 
void readClients (JsonReader reader) throws IOException
 
void readSystemScopes (JsonReader reader) throws IOException
 
void fixObjectReferences ()
 

非公開変数類

OAuth2ClientRepository clientRepository
 
ApprovedSiteRepository approvedSiteRepository
 
WhitelistedSiteRepository wlSiteRepository
 
BlacklistedSiteRepository blSiteRepository
 
AuthenticationHolderRepository authHolderRepository
 
OAuth2TokenRepository tokenRepository
 
SystemScopeRepository sysScopeRepository
 
List< MITREidDataServiceExtensionextensions = Collections.emptyList()
 
MITREidDataServiceMaps maps = new MITREidDataServiceMaps()
 

静的非公開変数類

static final String DEFAULT_SCOPE = "defaultScope"
 
static final String STRUCTURED_PARAMETER = "structuredParameter"
 
static final String STRUCTURED = "structured"
 
static final String RESTRICTED = "restricted"
 
static final String ICON = "icon"
 
static final String DYNAMICALLY_REGISTERED = "dynamicallyRegistered"
 
static final String CLEAR_ACCESS_TOKENS_ON_REFRESH = "clearAccessTokensOnRefresh"
 
static final String REUSE_REFRESH_TOKEN = "reuseRefreshToken"
 
static final String ALLOW_INTROSPECTION = "allowIntrospection"
 
static final String DESCRIPTION = "description"
 
static final String REQUEST_URIS = "requestUris"
 
static final String POST_LOGOUT_REDIRECT_URI = "postLogoutRedirectUri"
 
static final String INTITATE_LOGIN_URI = "intitateLoginUri"
 
static final String DEFAULT_ACR_VALUES = "defaultACRValues"
 
static final String REQUIRE_AUTH_TIME = "requireAuthTime"
 
static final String DEFAULT_MAX_AGE = "defaultMaxAge"
 
static final String TOKEN_ENDPOINT_AUTH_SIGNING_ALG = "tokenEndpointAuthSigningAlg"
 
static final String USER_INFO_ENCRYPTED_RESPONSE_ENC = "userInfoEncryptedResponseEnc"
 
static final String USER_INFO_ENCRYPTED_RESPONSE_ALG = "userInfoEncryptedResponseAlg"
 
static final String USER_INFO_SIGNED_RESPONSE_ALG = "userInfoSignedResponseAlg"
 
static final String ID_TOKEN_ENCRYPTED_RESPONSE_ENC = "idTokenEncryptedResponseEnc"
 
static final String ID_TOKEN_ENCRYPTED_RESPONSE_ALG = "idTokenEncryptedResponseAlg"
 
static final String ID_TOKEN_SIGNED_RESPONSE_ALG = "idTokenSignedResponseAlg"
 
static final String REQUEST_OBJECT_SIGNING_ALG = "requestObjectSigningAlg"
 
static final String SUBJECT_TYPE = "subjectType"
 
static final String SECTOR_IDENTIFIER_URI = "sectorIdentifierUri"
 
static final String APPLICATION_TYPE = "applicationType"
 
static final String JWKS = "jwks"
 
static final String JWKS_URI = "jwksUri"
 
static final String POLICY_URI = "policyUri"
 
static final String GRANT_TYPES = "grantTypes"
 
static final String TOKEN_ENDPOINT_AUTH_METHOD = "tokenEndpointAuthMethod"
 
static final String TOS_URI = "tosUri"
 
static final String CONTACTS = "contacts"
 
static final String LOGO_URI = "logoUri"
 
static final String REDIRECT_URIS = "redirectUris"
 
static final String REFRESH_TOKEN_VALIDITY_SECONDS = "refreshTokenValiditySeconds"
 
static final String ACCESS_TOKEN_VALIDITY_SECONDS = "accessTokenValiditySeconds"
 
static final String SECRET = "secret"
 
static final String URI = "uri"
 
static final String CREATOR_USER_ID = "creatorUserId"
 
static final String APPROVED_ACCESS_TOKENS = "approvedAccessTokens"
 
static final String ALLOWED_SCOPES = "allowedScopes"
 
static final String USER_ID = "userId"
 
static final String TIMEOUT_DATE = "timeoutDate"
 
static final String CREATION_DATE = "creationDate"
 
static final String ACCESS_DATE = "accessDate"
 
static final String AUTHENTICATED = "authenticated"
 
static final String SOURCE_CLASS = "sourceClass"
 
static final String NAME = "name"
 
static final String SAVED_USER_AUTHENTICATION = "savedUserAuthentication"
 
static final String EXTENSIONS = "extensions"
 
static final String RESPONSE_TYPES = "responseTypes"
 
static final String REDIRECT_URI = "redirectUri"
 
static final String APPROVED = "approved"
 
static final String AUTHORITIES = "authorities"
 
static final String RESOURCE_IDS = "resourceIds"
 
static final String REQUEST_PARAMETERS = "requestParameters"
 
static final String TYPE = "type"
 
static final String SCOPE = "scope"
 
static final String REFRESH_TOKEN_ID = "refreshTokenId"
 
static final String VALUE = "value"
 
static final String AUTHENTICATION_HOLDER_ID = "authenticationHolderId"
 
static final String CLIENT_ID = "clientId"
 
static final String EXPIRATION = "expiration"
 
static final String CLAIMS_REDIRECT_URIS = "claimsRedirectUris"
 
static final String ID = "id"
 
static final Logger logger = LoggerFactory.getLogger(MITREidDataService_1_2.class)
 
static final String THIS_VERSION = MITREID_CONNECT_1_2
 

詳解

Data service to import and export MITREid 1.2 configuration.

著者
jricher
arielak

関数詳解

◆ exportData()

void org.mitre.openid.connect.service.impl.MITREidDataService_1_2.exportData ( JsonWriter  writer) throws IOException
inline

org.mitre.openid.connect.service.MITREidDataServiceを実装しています。

179  {
180 
181  throw new UnsupportedOperationException("Can not export 1.2 format from this version.");
182  }

◆ fixObjectReferences()

void org.mitre.openid.connect.service.impl.MITREidDataService_1_2.fixObjectReferences ( )
inlineprivate
838  {
839  logger.info("Fixing object references...");
840  for (Long oldRefreshTokenId : maps.getRefreshTokenToClientRefs().keySet()) {
841  String clientRef = maps.getRefreshTokenToClientRefs().get(oldRefreshTokenId);
842  ClientDetailsEntity client = clientRepository.getClientByClientId(clientRef);
843  Long newRefreshTokenId = maps.getRefreshTokenOldToNewIdMap().get(oldRefreshTokenId);
844  OAuth2RefreshTokenEntity refreshToken = tokenRepository.getRefreshTokenById(newRefreshTokenId);
845  refreshToken.setClient(client);
846  tokenRepository.saveRefreshToken(refreshToken);
847  }
848  for (Long oldRefreshTokenId : maps.getRefreshTokenToAuthHolderRefs().keySet()) {
849  Long oldAuthHolderId = maps.getRefreshTokenToAuthHolderRefs().get(oldRefreshTokenId);
850  Long newAuthHolderId = maps.getAuthHolderOldToNewIdMap().get(oldAuthHolderId);
851  AuthenticationHolderEntity authHolder = authHolderRepository.getById(newAuthHolderId);
852  Long newRefreshTokenId = maps.getRefreshTokenOldToNewIdMap().get(oldRefreshTokenId);
853  OAuth2RefreshTokenEntity refreshToken = tokenRepository.getRefreshTokenById(newRefreshTokenId);
854  refreshToken.setAuthenticationHolder(authHolder);
855  tokenRepository.saveRefreshToken(refreshToken);
856  }
857  for (Long oldAccessTokenId : maps.getAccessTokenToClientRefs().keySet()) {
858  String clientRef = maps.getAccessTokenToClientRefs().get(oldAccessTokenId);
859  ClientDetailsEntity client = clientRepository.getClientByClientId(clientRef);
860  Long newAccessTokenId = maps.getAccessTokenOldToNewIdMap().get(oldAccessTokenId);
861  OAuth2AccessTokenEntity accessToken = tokenRepository.getAccessTokenById(newAccessTokenId);
862  accessToken.setClient(client);
863  tokenRepository.saveAccessToken(accessToken);
864  }
865  for (Long oldAccessTokenId : maps.getAccessTokenToAuthHolderRefs().keySet()) {
866  Long oldAuthHolderId = maps.getAccessTokenToAuthHolderRefs().get(oldAccessTokenId);
867  Long newAuthHolderId = maps.getAuthHolderOldToNewIdMap().get(oldAuthHolderId);
868  AuthenticationHolderEntity authHolder = authHolderRepository.getById(newAuthHolderId);
869  Long newAccessTokenId = maps.getAccessTokenOldToNewIdMap().get(oldAccessTokenId);
870  OAuth2AccessTokenEntity accessToken = tokenRepository.getAccessTokenById(newAccessTokenId);
871  accessToken.setAuthenticationHolder(authHolder);
872  tokenRepository.saveAccessToken(accessToken);
873  }
874  for (Long oldAccessTokenId : maps.getAccessTokenToRefreshTokenRefs().keySet()) {
875  Long oldRefreshTokenId = maps.getAccessTokenToRefreshTokenRefs().get(oldAccessTokenId);
876  Long newRefreshTokenId = maps.getRefreshTokenOldToNewIdMap().get(oldRefreshTokenId);
877  OAuth2RefreshTokenEntity refreshToken = tokenRepository.getRefreshTokenById(newRefreshTokenId);
878  Long newAccessTokenId = maps.getAccessTokenOldToNewIdMap().get(oldAccessTokenId);
879  OAuth2AccessTokenEntity accessToken = tokenRepository.getAccessTokenById(newAccessTokenId);
880  accessToken.setRefreshToken(refreshToken);
881  tokenRepository.saveAccessToken(accessToken);
882  }
883  for (Long oldGrantId : maps.getGrantToAccessTokensRefs().keySet()) {
884  Set<Long> oldAccessTokenIds = maps.getGrantToAccessTokensRefs().get(oldGrantId);
885 
886  Long newGrantId = maps.getGrantOldToNewIdMap().get(oldGrantId);
887  ApprovedSite site = approvedSiteRepository.getById(newGrantId);
888 
889  for(Long oldTokenId : oldAccessTokenIds) {
890  Long newTokenId = maps.getAccessTokenOldToNewIdMap().get(oldTokenId);
891  OAuth2AccessTokenEntity token = tokenRepository.getAccessTokenById(newTokenId);
892  token.setApprovedSite(site);
894  }
895 
897  }
898  logger.info("Done fixing object references.");
899  }
ApprovedSiteRepository approvedSiteRepository
Definition: MITREidDataService_1_2.java:152
OAuth2AccessTokenEntity saveAccessToken(OAuth2AccessTokenEntity token)
Map< Long, Long > getAccessTokenToAuthHolderRefs()
Definition: MITREidDataServiceMaps.java:49
Map< Long, String > getRefreshTokenToClientRefs()
Definition: MITREidDataServiceMaps.java:97
Map< Long, Long > getGrantOldToNewIdMap()
Definition: MITREidDataServiceMaps.java:73
ClientDetailsEntity getClientByClientId(String clientId)
void setApprovedSite(ApprovedSite approvedSite)
Definition: OAuth2AccessTokenEntity.java:318
Map< Long, Long > getAccessTokenToRefreshTokenRefs()
Definition: MITREidDataServiceMaps.java:61
void setClient(ClientDetailsEntity client)
Definition: OAuth2AccessTokenEntity.java:184
OAuth2AccessTokenEntity getAccessTokenById(Long id)
ApprovedSite save(ApprovedSite approvedSite)
OAuth2ClientRepository clientRepository
Definition: MITREidDataService_1_2.java:150
Map< Long, String > getAccessTokenToClientRefs()
Definition: MITREidDataServiceMaps.java:55
static final Logger logger
Definition: MITREidDataService_1_2.java:148
OAuth2RefreshTokenEntity saveRefreshToken(OAuth2RefreshTokenEntity refreshToken)
void setAuthenticationHolder(AuthenticationHolderEntity authenticationHolder)
Definition: OAuth2AccessTokenEntity.java:168
Map< Long, Long > getRefreshTokenToAuthHolderRefs()
Definition: MITREidDataServiceMaps.java:91
Map< Long, Set< Long > > getGrantToAccessTokensRefs()
Definition: MITREidDataServiceMaps.java:79
OAuth2TokenRepository tokenRepository
Definition: MITREidDataService_1_2.java:160
Map< Long, Long > getAuthHolderOldToNewIdMap()
Definition: MITREidDataServiceMaps.java:67
AuthenticationHolderRepository authHolderRepository
Definition: MITREidDataService_1_2.java:158
void setRefreshToken(OAuth2RefreshTokenEntity refreshToken)
Definition: OAuth2AccessTokenEntity.java:227
Map< Long, Long > getAccessTokenOldToNewIdMap()
Definition: MITREidDataServiceMaps.java:43
void setAuthenticationHolder(AuthenticationHolderEntity authenticationHolder)
Definition: OAuth2RefreshTokenEntity.java:120
Map< Long, Long > getRefreshTokenOldToNewIdMap()
Definition: MITREidDataServiceMaps.java:85
OAuth2RefreshTokenEntity getRefreshTokenById(Long Id)
void setClient(ClientDetailsEntity client)
Definition: OAuth2RefreshTokenEntity.java:169
MITREidDataServiceMaps maps
Definition: MITREidDataService_1_2.java:166

◆ importData()

void org.mitre.openid.connect.service.impl.MITREidDataService_1_2.importData ( JsonReader  reader) throws IOException
inline

org.mitre.openid.connect.service.MITREidDataServiceを実装しています。

188  {
189 
190  logger.info("Reading configuration for 1.2");
191 
192  // this *HAS* to start as an object
193  reader.beginObject();
194 
195  while (reader.hasNext()) {
196  JsonToken tok = reader.peek();
197  switch (tok) {
198  case NAME:
199  String name = reader.nextName();
200  // find out which member it is
201  if (name.equals(CLIENTS)) {
202  readClients(reader);
203  } else if (name.equals(GRANTS)) {
204  readGrants(reader);
205  } else if (name.equals(WHITELISTEDSITES)) {
206  readWhitelistedSites(reader);
207  } else if (name.equals(BLACKLISTEDSITES)) {
208  readBlacklistedSites(reader);
209  } else if (name.equals(AUTHENTICATIONHOLDERS)) {
211  } else if (name.equals(ACCESSTOKENS)) {
212  readAccessTokens(reader);
213  } else if (name.equals(REFRESHTOKENS)) {
214  readRefreshTokens(reader);
215  } else if (name.equals(SYSTEMSCOPES)) {
216  readSystemScopes(reader);
217  } else {
218  for (MITREidDataServiceExtension extension : extensions) {
219  if (extension.supportsVersion(THIS_VERSION)) {
220  extension.importExtensionData(name, reader);
221  break;
222  }
223  }
224  // unknown token, skip it
225  reader.skipValue();
226  }
227  break;
228  case END_OBJECT:
229  // the object ended, we're done here
230  reader.endObject();
231  continue;
232  default:
233  logger.debug("Found unexpected entry");
234  reader.skipValue();
235  continue;
236  }
237  }
239  for (MITREidDataServiceExtension extension : extensions) {
240  if (extension.supportsVersion(THIS_VERSION)) {
241  extension.fixExtensionObjectReferences(maps);
242  break;
243  }
244  }
245  maps.clearAll();
246  }
void readClients(JsonReader reader)
Definition: MITREidDataService_1_2.java:640
static final String THIS_VERSION
Definition: MITREidDataService_1_2.java:168
void readBlacklistedSites(JsonReader reader)
Definition: MITREidDataService_1_2.java:603
void readGrants(JsonReader reader)
Definition: MITREidDataService_1_2.java:498
static final Logger logger
Definition: MITREidDataService_1_2.java:148
static final String AUTHENTICATIONHOLDERS
Definition: MITREidDataService.java:44
List< MITREidDataServiceExtension > extensions
Definition: MITREidDataService_1_2.java:164
static final String GRANTS
Definition: MITREidDataService.java:45
static final String WHITELISTEDSITES
Definition: MITREidDataService.java:42
static final String SYSTEMSCOPES
Definition: MITREidDataService.java:47
void readAccessTokens(JsonReader reader)
Definition: MITREidDataService_1_2.java:316
void readWhitelistedSites(JsonReader reader)
Definition: MITREidDataService_1_2.java:559
void readRefreshTokens(JsonReader reader)
Definition: MITREidDataService_1_2.java:255
void fixObjectReferences()
Definition: MITREidDataService_1_2.java:838
void readAuthenticationHolders(JsonReader reader)
Definition: MITREidDataService_1_2.java:385
static final String NAME
Definition: MITREidDataService_1_2.java:127
static final String CLIENTS
Definition: MITREidDataService.java:46
static final String REFRESHTOKENS
Definition: MITREidDataService.java:40
static final String BLACKLISTEDSITES
Definition: MITREidDataService.java:43
void clearAll()
Definition: MITREidDataServiceMaps.java:107
void readSystemScopes(JsonReader reader)
Definition: MITREidDataService_1_2.java:793
static final String ACCESSTOKENS
Definition: MITREidDataService.java:41
MITREidDataServiceMaps maps
Definition: MITREidDataService_1_2.java:166

◆ readAccessTokens()

void org.mitre.openid.connect.service.impl.MITREidDataService_1_2.readAccessTokens ( JsonReader  reader) throws IOException
inlineprivate
引数
reader
例外
IOException
引数
reader
例外
IOException
316  {
317  reader.beginArray();
318  while (reader.hasNext()) {
319  OAuth2AccessTokenEntity token = new OAuth2AccessTokenEntity();
320  reader.beginObject();
321  Long currentId = null;
322  String clientId = null;
323  Long authHolderId = null;
324  Long refreshTokenId = null;
325  while (reader.hasNext()) {
326  switch (reader.peek()) {
327  case END_OBJECT:
328  continue;
329  case NAME:
330  String name = reader.nextName();
331  if (reader.peek() == JsonToken.NULL) {
332  reader.skipValue();
333  } else if (name.equals(ID)) {
334  currentId = reader.nextLong();
335  } else if (name.equals(EXPIRATION)) {
336  Date date = utcToDate(reader.nextString());
337  token.setExpiration(date);
338  } else if (name.equals(VALUE)) {
339  String value = reader.nextString();
340  try {
341  // all tokens are JWTs
342  token.setJwt(JWTParser.parse(value));
343  } catch (ParseException ex) {
344  logger.error("Unable to set refresh token value to {}", value, ex);
345  }
346  } else if (name.equals(CLIENT_ID)) {
347  clientId = reader.nextString();
348  } else if (name.equals(AUTHENTICATION_HOLDER_ID)) {
349  authHolderId = reader.nextLong();
350  } else if (name.equals(REFRESH_TOKEN_ID)) {
351  refreshTokenId = reader.nextLong();
352  } else if (name.equals(SCOPE)) {
353  Set<String> scope = readSet(reader);
354  token.setScope(scope);
355  } else if (name.equals(TYPE)) {
356  token.setTokenType(reader.nextString());
357  } else {
358  logger.debug("Found unexpected entry");
359  reader.skipValue();
360  }
361  break;
362  default:
363  logger.debug("Found unexpected entry");
364  reader.skipValue();
365  continue;
366  }
367  }
368  reader.endObject();
369  Long newId = tokenRepository.saveAccessToken(token).getId();
370  maps.getAccessTokenToClientRefs().put(currentId, clientId);
371  maps.getAccessTokenToAuthHolderRefs().put(currentId, authHolderId);
372  if (refreshTokenId != null) {
373  maps.getAccessTokenToRefreshTokenRefs().put(currentId, refreshTokenId);
374  }
375  maps.getAccessTokenOldToNewIdMap().put(currentId, newId);
376  logger.debug("Read access token {}", currentId);
377  }
378  reader.endArray();
379  logger.info("Done reading access tokens");
380  }
static final String AUTHENTICATION_HOLDER_ID
Definition: MITREidDataService_1_2.java:140
static final String EXPIRATION
Definition: MITREidDataService_1_2.java:142
OAuth2AccessTokenEntity saveAccessToken(OAuth2AccessTokenEntity token)
Map< Long, Long > getAccessTokenToAuthHolderRefs()
Definition: MITREidDataServiceMaps.java:49
static final String CLIENT_ID
Definition: MITREidDataService_1_2.java:141
Map< Long, Long > getAccessTokenToRefreshTokenRefs()
Definition: MITREidDataServiceMaps.java:61
static final String ID
Definition: MITREidDataService_1_2.java:144
Map< Long, String > getAccessTokenToClientRefs()
Definition: MITREidDataServiceMaps.java:55
static final Logger logger
Definition: MITREidDataService_1_2.java:148
static final String SCOPE
Definition: MITREidDataService_1_2.java:137
static final String TYPE
Definition: MITREidDataService_1_2.java:136
static final String VALUE
Definition: MITREidDataService_1_2.java:139
OAuth2TokenRepository tokenRepository
Definition: MITREidDataService_1_2.java:160
static final String NAME
Definition: MITREidDataService_1_2.java:127
Date utcToDate(String value)
Definition: MITREidDataServiceSupport.java:39
Map< Long, Long > getAccessTokenOldToNewIdMap()
Definition: MITREidDataServiceMaps.java:43
Long getId()
Definition: OAuth2AccessTokenEntity.java:134
static final String REFRESH_TOKEN_ID
Definition: MITREidDataService_1_2.java:138
MITREidDataServiceMaps maps
Definition: MITREidDataService_1_2.java:166

◆ readAuthenticationHolders()

void org.mitre.openid.connect.service.impl.MITREidDataService_1_2.readAuthenticationHolders ( JsonReader  reader) throws IOException
inlineprivate
引数
reader
例外
IOException
385  {
386  reader.beginArray();
387  while (reader.hasNext()) {
388  AuthenticationHolderEntity ahe = new AuthenticationHolderEntity();
389  reader.beginObject();
390  Long currentId = null;
391  while (reader.hasNext()) {
392  switch (reader.peek()) {
393  case END_OBJECT:
394  continue;
395  case NAME:
396  String name = reader.nextName();
397  if (reader.peek() == JsonToken.NULL) {
398  reader.skipValue();
399  } else if (name.equals(ID)) {
400  currentId = reader.nextLong();
401  } else if (name.equals(REQUEST_PARAMETERS)) {
402  ahe.setRequestParameters(readMap(reader));
403  } else if (name.equals(CLIENT_ID)) {
404  ahe.setClientId(reader.nextString());
405  } else if (name.equals(SCOPE)) {
406  ahe.setScope(readSet(reader));
407  } else if (name.equals(RESOURCE_IDS)) {
408  ahe.setResourceIds(readSet(reader));
409  } else if (name.equals(AUTHORITIES)) {
410  Set<String> authorityStrs = readSet(reader);
411  Set<GrantedAuthority> authorities = new HashSet<GrantedAuthority>();
412  for (String s : authorityStrs) {
413  GrantedAuthority ga = new SimpleGrantedAuthority(s);
414  authorities.add(ga);
415  }
416  ahe.setAuthorities(authorities);
417  } else if (name.equals(APPROVED)) {
418  ahe.setApproved(reader.nextBoolean());
419  } else if (name.equals(REDIRECT_URI)) {
420  ahe.setRedirectUri(reader.nextString());
421  } else if (name.equals(RESPONSE_TYPES)) {
422  ahe.setResponseTypes(readSet(reader));
423  } else if (name.equals(EXTENSIONS)) {
424  ahe.setExtensions(readMap(reader));
425  } else if (name.equals(SAVED_USER_AUTHENTICATION)) {
426  ahe.setUserAuth(readSavedUserAuthentication(reader));
427  } else {
428  logger.debug("Found unexpected entry");
429  reader.skipValue();
430  }
431  break;
432  default:
433  logger.debug("Found unexpected entry");
434  reader.skipValue();
435  continue;
436  }
437  }
438  reader.endObject();
439  Long newId = authHolderRepository.save(ahe).getId();
440  maps.getAuthHolderOldToNewIdMap().put(currentId, newId);
441  logger.debug("Read authentication holder {}", currentId);
442  }
443  reader.endArray();
444  logger.info("Done reading authentication holders");
445  }
static final String REDIRECT_URI
Definition: MITREidDataService_1_2.java:131
static final String CLIENT_ID
Definition: MITREidDataService_1_2.java:141
static final String REQUEST_PARAMETERS
Definition: MITREidDataService_1_2.java:135
static final String ID
Definition: MITREidDataService_1_2.java:144
static final String APPROVED
Definition: MITREidDataService_1_2.java:132
static final Logger logger
Definition: MITREidDataService_1_2.java:148
static final String SCOPE
Definition: MITREidDataService_1_2.java:137
AuthenticationHolderEntity save(AuthenticationHolderEntity a)
static final String NAME
Definition: MITREidDataService_1_2.java:127
static final String RESOURCE_IDS
Definition: MITREidDataService_1_2.java:134
Map< Long, Long > getAuthHolderOldToNewIdMap()
Definition: MITREidDataServiceMaps.java:67
static final String RESPONSE_TYPES
Definition: MITREidDataService_1_2.java:130
AuthenticationHolderRepository authHolderRepository
Definition: MITREidDataService_1_2.java:158
static final String SAVED_USER_AUTHENTICATION
Definition: MITREidDataService_1_2.java:128
static final String AUTHORITIES
Definition: MITREidDataService_1_2.java:133
static final String EXTENSIONS
Definition: MITREidDataService_1_2.java:129
SavedUserAuthentication readSavedUserAuthentication(JsonReader reader)
Definition: MITREidDataService_1_2.java:452
MITREidDataServiceMaps maps
Definition: MITREidDataService_1_2.java:166
Long getId()
Definition: AuthenticationHolderEntity.java:95

◆ readBlacklistedSites()

void org.mitre.openid.connect.service.impl.MITREidDataService_1_2.readBlacklistedSites ( JsonReader  reader) throws IOException
inlineprivate
引数
reader
例外
IOException
603  {
604  reader.beginArray();
605  while (reader.hasNext()) {
606  BlacklistedSite blSite = new BlacklistedSite();
607  reader.beginObject();
608  while (reader.hasNext()) {
609  switch (reader.peek()) {
610  case END_OBJECT:
611  continue;
612  case NAME:
613  String name = reader.nextName();
614  if (name.equals(ID)) {
615  reader.skipValue();
616  } else if (name.equals(URI)) {
617  blSite.setUri(reader.nextString());
618  } else {
619  logger.debug("Found unexpected entry");
620  reader.skipValue();
621  }
622  break;
623  default:
624  logger.debug("Found unexpected entry");
625  reader.skipValue();
626  continue;
627  }
628  }
629  reader.endObject();
630  blSiteRepository.save(blSite);
631  }
632  reader.endArray();
633  logger.info("Done reading blacklisted sites");
634  }
static final String ID
Definition: MITREidDataService_1_2.java:144
static final Logger logger
Definition: MITREidDataService_1_2.java:148
BlacklistedSite save(BlacklistedSite blacklistedSite)
BlacklistedSiteRepository blSiteRepository
Definition: MITREidDataService_1_2.java:156
static final String NAME
Definition: MITREidDataService_1_2.java:127
static final String URI
Definition: MITREidDataService_1_2.java:117

◆ readClients()

void org.mitre.openid.connect.service.impl.MITREidDataService_1_2.readClients ( JsonReader  reader) throws IOException
inlineprivate
引数
reader
例外
IOException
640  {
641  reader.beginArray();
642  while (reader.hasNext()) {
643  ClientDetailsEntity client = new ClientDetailsEntity();
644  reader.beginObject();
645  while (reader.hasNext()) {
646  switch (reader.peek()) {
647  case END_OBJECT:
648  continue;
649  case NAME:
650  String name = reader.nextName();
651  if (reader.peek() == JsonToken.NULL) {
652  reader.skipValue();
653  } else if (name.equals(CLIENT_ID)) {
654  client.setClientId(reader.nextString());
655  } else if (name.equals(RESOURCE_IDS)) {
656  Set<String> resourceIds = readSet(reader);
657  client.setResourceIds(resourceIds);
658  } else if (name.equals(SECRET)) {
659  client.setClientSecret(reader.nextString());
660  } else if (name.equals(SCOPE)) {
661  Set<String> scope = readSet(reader);
662  client.setScope(scope);
663  } else if (name.equals(AUTHORITIES)) {
664  Set<String> authorityStrs = readSet(reader);
665  Set<GrantedAuthority> authorities = new HashSet<GrantedAuthority>();
666  for (String s : authorityStrs) {
667  GrantedAuthority ga = new SimpleGrantedAuthority(s);
668  authorities.add(ga);
669  }
670  client.setAuthorities(authorities);
671  } else if (name.equals(ACCESS_TOKEN_VALIDITY_SECONDS)) {
672  client.setAccessTokenValiditySeconds(reader.nextInt());
673  } else if (name.equals(REFRESH_TOKEN_VALIDITY_SECONDS)) {
674  client.setRefreshTokenValiditySeconds(reader.nextInt());
675  } else if (name.equals(REDIRECT_URIS)) {
676  Set<String> redirectUris = readSet(reader);
677  client.setRedirectUris(redirectUris);
678  } else if (name.equals(CLAIMS_REDIRECT_URIS)) {
679  Set<String> claimsRedirectUris = readSet(reader);
680  client.setClaimsRedirectUris(claimsRedirectUris);
681  } else if (name.equals(NAME)) {
682  client.setClientName(reader.nextString());
683  } else if (name.equals(URI)) {
684  client.setClientUri(reader.nextString());
685  } else if (name.equals(LOGO_URI)) {
686  client.setLogoUri(reader.nextString());
687  } else if (name.equals(CONTACTS)) {
688  Set<String> contacts = readSet(reader);
689  client.setContacts(contacts);
690  } else if (name.equals(TOS_URI)) {
691  client.setTosUri(reader.nextString());
692  } else if (name.equals(TOKEN_ENDPOINT_AUTH_METHOD)) {
693  AuthMethod am = AuthMethod.getByValue(reader.nextString());
694  client.setTokenEndpointAuthMethod(am);
695  } else if (name.equals(GRANT_TYPES)) {
696  Set<String> grantTypes = readSet(reader);
697  client.setGrantTypes(grantTypes);
698  } else if (name.equals(RESPONSE_TYPES)) {
699  Set<String> responseTypes = readSet(reader);
700  client.setResponseTypes(responseTypes);
701  } else if (name.equals(POLICY_URI)) {
702  client.setPolicyUri(reader.nextString());
703  } else if (name.equals(APPLICATION_TYPE)) {
704  AppType appType = AppType.getByValue(reader.nextString());
705  client.setApplicationType(appType);
706  } else if (name.equals(SECTOR_IDENTIFIER_URI)) {
707  client.setSectorIdentifierUri(reader.nextString());
708  } else if (name.equals(SUBJECT_TYPE)) {
709  SubjectType st = SubjectType.getByValue(reader.nextString());
710  client.setSubjectType(st);
711  } else if (name.equals(JWKS_URI)) {
712  client.setJwksUri(reader.nextString());
713  } else if (name.equals(JWKS)) {
714  try {
715  client.setJwks(JWKSet.parse(reader.nextString()));
716  } catch (ParseException e) {
717  logger.error("Couldn't parse JWK Set", e);
718  }
719  } else if (name.equals(REQUEST_OBJECT_SIGNING_ALG)) {
720  JWSAlgorithm alg = JWSAlgorithm.parse(reader.nextString());
721  client.setRequestObjectSigningAlg(alg);
722  } else if (name.equals(USER_INFO_ENCRYPTED_RESPONSE_ALG)) {
723  JWEAlgorithm alg = JWEAlgorithm.parse(reader.nextString());
724  client.setUserInfoEncryptedResponseAlg(alg);
725  } else if (name.equals(USER_INFO_ENCRYPTED_RESPONSE_ENC)) {
726  EncryptionMethod alg = EncryptionMethod.parse(reader.nextString());
727  client.setUserInfoEncryptedResponseEnc(alg);
728  } else if (name.equals(USER_INFO_SIGNED_RESPONSE_ALG)) {
729  JWSAlgorithm alg = JWSAlgorithm.parse(reader.nextString());
730  client.setUserInfoSignedResponseAlg(alg);
731  } else if (name.equals(ID_TOKEN_SIGNED_RESPONSE_ALG)) {
732  JWSAlgorithm alg = JWSAlgorithm.parse(reader.nextString());
733  client.setIdTokenSignedResponseAlg(alg);
734  } else if (name.equals(ID_TOKEN_ENCRYPTED_RESPONSE_ALG)) {
735  JWEAlgorithm alg = JWEAlgorithm.parse(reader.nextString());
736  client.setIdTokenEncryptedResponseAlg(alg);
737  } else if (name.equals(ID_TOKEN_ENCRYPTED_RESPONSE_ENC)) {
738  EncryptionMethod alg = EncryptionMethod.parse(reader.nextString());
739  client.setIdTokenEncryptedResponseEnc(alg);
740  } else if (name.equals(TOKEN_ENDPOINT_AUTH_SIGNING_ALG)) {
741  JWSAlgorithm alg = JWSAlgorithm.parse(reader.nextString());
742  client.setTokenEndpointAuthSigningAlg(alg);
743  } else if (name.equals(DEFAULT_MAX_AGE)) {
744  client.setDefaultMaxAge(reader.nextInt());
745  } else if (name.equals(REQUIRE_AUTH_TIME)) {
746  client.setRequireAuthTime(reader.nextBoolean());
747  } else if (name.equals(DEFAULT_ACR_VALUES)) {
748  Set<String> defaultACRvalues = readSet(reader);
749  client.setDefaultACRvalues(defaultACRvalues);
750  } else if (name.equals("initiateLoginUri")) {
751  client.setInitiateLoginUri(reader.nextString());
752  } else if (name.equals(POST_LOGOUT_REDIRECT_URI)) {
753  Set<String> postLogoutUris = readSet(reader);
754  client.setPostLogoutRedirectUris(postLogoutUris);
755  } else if (name.equals(REQUEST_URIS)) {
756  Set<String> requestUris = readSet(reader);
757  client.setRequestUris(requestUris);
758  } else if (name.equals(DESCRIPTION)) {
759  client.setClientDescription(reader.nextString());
760  } else if (name.equals(ALLOW_INTROSPECTION)) {
761  client.setAllowIntrospection(reader.nextBoolean());
762  } else if (name.equals(REUSE_REFRESH_TOKEN)) {
763  client.setReuseRefreshToken(reader.nextBoolean());
764  } else if (name.equals(CLEAR_ACCESS_TOKENS_ON_REFRESH)) {
765  client.setClearAccessTokensOnRefresh(reader.nextBoolean());
766  } else if (name.equals(DYNAMICALLY_REGISTERED)) {
767  client.setDynamicallyRegistered(reader.nextBoolean());
768  } else {
769  logger.debug("Found unexpected entry");
770  reader.skipValue();
771  }
772  break;
773  default:
774  logger.debug("Found unexpected entry");
775  reader.skipValue();
776  continue;
777  }
778  }
779  reader.endObject();
781  }
782  reader.endArray();
783  logger.info("Done reading clients");
784  }
static final String ID_TOKEN_SIGNED_RESPONSE_ALG
Definition: MITREidDataService_1_2.java:100
static final String POST_LOGOUT_REDIRECT_URI
Definition: MITREidDataService_1_2.java:89
static final String CLEAR_ACCESS_TOKENS_ON_REFRESH
Definition: MITREidDataService_1_2.java:84
static final String GRANT_TYPES
Definition: MITREidDataService_1_2.java:108
static final String TOKEN_ENDPOINT_AUTH_METHOD
Definition: MITREidDataService_1_2.java:109
static final String CLIENT_ID
Definition: MITREidDataService_1_2.java:141
static final String REDIRECT_URIS
Definition: MITREidDataService_1_2.java:113
static final String DESCRIPTION
Definition: MITREidDataService_1_2.java:87
OAuth2ClientRepository clientRepository
Definition: MITREidDataService_1_2.java:150
static final String SECTOR_IDENTIFIER_URI
Definition: MITREidDataService_1_2.java:103
ClientDetailsEntity saveClient(ClientDetailsEntity client)
static final String TOS_URI
Definition: MITREidDataService_1_2.java:110
static final String ID_TOKEN_ENCRYPTED_RESPONSE_ALG
Definition: MITREidDataService_1_2.java:99
static final Logger logger
Definition: MITREidDataService_1_2.java:148
static final String SCOPE
Definition: MITREidDataService_1_2.java:137
static final String SUBJECT_TYPE
Definition: MITREidDataService_1_2.java:102
static final String CONTACTS
Definition: MITREidDataService_1_2.java:111
static final String TOKEN_ENDPOINT_AUTH_SIGNING_ALG
Definition: MITREidDataService_1_2.java:94
static final String APPLICATION_TYPE
Definition: MITREidDataService_1_2.java:104
static final String USER_INFO_SIGNED_RESPONSE_ALG
Definition: MITREidDataService_1_2.java:97
static final String JWKS_URI
Definition: MITREidDataService_1_2.java:106
static final String ACCESS_TOKEN_VALIDITY_SECONDS
Definition: MITREidDataService_1_2.java:115
static final String NAME
Definition: MITREidDataService_1_2.java:127
static final String RESOURCE_IDS
Definition: MITREidDataService_1_2.java:134
static final String ID_TOKEN_ENCRYPTED_RESPONSE_ENC
Definition: MITREidDataService_1_2.java:98
static final String USER_INFO_ENCRYPTED_RESPONSE_ENC
Definition: MITREidDataService_1_2.java:95
static final String RESPONSE_TYPES
Definition: MITREidDataService_1_2.java:130
static final String URI
Definition: MITREidDataService_1_2.java:117
static final String ALLOW_INTROSPECTION
Definition: MITREidDataService_1_2.java:86
static final String CLAIMS_REDIRECT_URIS
Definition: MITREidDataService_1_2.java:143
static final String USER_INFO_ENCRYPTED_RESPONSE_ALG
Definition: MITREidDataService_1_2.java:96
static final String POLICY_URI
Definition: MITREidDataService_1_2.java:107
static final String LOGO_URI
Definition: MITREidDataService_1_2.java:112
static final String REQUEST_OBJECT_SIGNING_ALG
Definition: MITREidDataService_1_2.java:101
static final String REUSE_REFRESH_TOKEN
Definition: MITREidDataService_1_2.java:85
static final String AUTHORITIES
Definition: MITREidDataService_1_2.java:133
static final String REQUIRE_AUTH_TIME
Definition: MITREidDataService_1_2.java:92
static final String REFRESH_TOKEN_VALIDITY_SECONDS
Definition: MITREidDataService_1_2.java:114
static final String SECRET
Definition: MITREidDataService_1_2.java:116
static final String DYNAMICALLY_REGISTERED
Definition: MITREidDataService_1_2.java:83
static final String DEFAULT_MAX_AGE
Definition: MITREidDataService_1_2.java:93
static final String REQUEST_URIS
Definition: MITREidDataService_1_2.java:88
static final String DEFAULT_ACR_VALUES
Definition: MITREidDataService_1_2.java:91
static final String JWKS
Definition: MITREidDataService_1_2.java:105

◆ readGrants()

void org.mitre.openid.connect.service.impl.MITREidDataService_1_2.readGrants ( JsonReader  reader) throws IOException
inlineprivate
引数
reader
例外
IOException
498  {
499  reader.beginArray();
500  while (reader.hasNext()) {
501  ApprovedSite site = new ApprovedSite();
502  Long currentId = null;
503  Set<Long> tokenIds = null;
504  reader.beginObject();
505  while (reader.hasNext()) {
506  switch (reader.peek()) {
507  case END_OBJECT:
508  continue;
509  case NAME:
510  String name = reader.nextName();
511  if (reader.peek() == JsonToken.NULL) {
512  reader.skipValue();
513  } else if (name.equals(ID)) {
514  currentId = reader.nextLong();
515  } else if (name.equals(ACCESS_DATE)) {
516  Date date = utcToDate(reader.nextString());
517  site.setAccessDate(date);
518  } else if (name.equals(CLIENT_ID)) {
519  site.setClientId(reader.nextString());
520  } else if (name.equals(CREATION_DATE)) {
521  Date date = utcToDate(reader.nextString());
522  site.setCreationDate(date);
523  } else if (name.equals(TIMEOUT_DATE)) {
524  Date date = utcToDate(reader.nextString());
525  site.setTimeoutDate(date);
526  } else if (name.equals(USER_ID)) {
527  site.setUserId(reader.nextString());
528  } else if (name.equals(ALLOWED_SCOPES)) {
529  Set<String> allowedScopes = readSet(reader);
530  site.setAllowedScopes(allowedScopes);
531  } else if (name.equals(APPROVED_ACCESS_TOKENS)) {
532  tokenIds = readSet(reader);
533  } else {
534  logger.debug("Found unexpected entry");
535  reader.skipValue();
536  }
537  break;
538  default:
539  logger.debug("Found unexpected entry");
540  reader.skipValue();
541  continue;
542  }
543  }
544  reader.endObject();
545  Long newId = approvedSiteRepository.save(site).getId();
546  maps.getGrantOldToNewIdMap().put(currentId, newId);
547  if (tokenIds != null) {
548  maps.getGrantToAccessTokensRefs().put(currentId, tokenIds);
549  }
550  logger.debug("Read grant {}", currentId);
551  }
552  reader.endArray();
553  logger.info("Done reading grants");
554  }
ApprovedSiteRepository approvedSiteRepository
Definition: MITREidDataService_1_2.java:152
static final String ACCESS_DATE
Definition: MITREidDataService_1_2.java:124
Long getId()
Definition: ApprovedSite.java:92
Map< Long, Long > getGrantOldToNewIdMap()
Definition: MITREidDataServiceMaps.java:73
static final String CLIENT_ID
Definition: MITREidDataService_1_2.java:141
static final String ID
Definition: MITREidDataService_1_2.java:144
ApprovedSite save(ApprovedSite approvedSite)
static final String USER_ID
Definition: MITREidDataService_1_2.java:121
static final Logger logger
Definition: MITREidDataService_1_2.java:148
static final String CREATION_DATE
Definition: MITREidDataService_1_2.java:123
Map< Long, Set< Long > > getGrantToAccessTokensRefs()
Definition: MITREidDataServiceMaps.java:79
static final String TIMEOUT_DATE
Definition: MITREidDataService_1_2.java:122
static final String NAME
Definition: MITREidDataService_1_2.java:127
Date utcToDate(String value)
Definition: MITREidDataServiceSupport.java:39
static final String APPROVED_ACCESS_TOKENS
Definition: MITREidDataService_1_2.java:119
static final String ALLOWED_SCOPES
Definition: MITREidDataService_1_2.java:120
MITREidDataServiceMaps maps
Definition: MITREidDataService_1_2.java:166

◆ readRefreshTokens()

void org.mitre.openid.connect.service.impl.MITREidDataService_1_2.readRefreshTokens ( JsonReader  reader) throws IOException
inlineprivate
引数
reader
例外
IOException
引数
reader
例外
IOException
255  {
256  reader.beginArray();
257  while (reader.hasNext()) {
258  OAuth2RefreshTokenEntity token = new OAuth2RefreshTokenEntity();
259  reader.beginObject();
260  Long currentId = null;
261  String clientId = null;
262  Long authHolderId = null;
263  while (reader.hasNext()) {
264  switch (reader.peek()) {
265  case END_OBJECT:
266  continue;
267  case NAME:
268  String name = reader.nextName();
269  if (reader.peek() == JsonToken.NULL) {
270  reader.skipValue();
271  } else if (name.equals(ID)) {
272  currentId = reader.nextLong();
273  } else if (name.equals(EXPIRATION)) {
274  Date date = utcToDate(reader.nextString());
275  token.setExpiration(date);
276  } else if (name.equals(VALUE)) {
277  String value = reader.nextString();
278  try {
279  token.setJwt(JWTParser.parse(value));
280  } catch (ParseException ex) {
281  logger.error("Unable to set refresh token value to {}", value, ex);
282  }
283  } else if (name.equals(CLIENT_ID)) {
284  clientId = reader.nextString();
285  } else if (name.equals(AUTHENTICATION_HOLDER_ID)) {
286  authHolderId = reader.nextLong();
287  } else {
288  logger.debug("Found unexpected entry");
289  reader.skipValue();
290  }
291  break;
292  default:
293  logger.debug("Found unexpected entry");
294  reader.skipValue();
295  continue;
296  }
297  }
298  reader.endObject();
299  Long newId = tokenRepository.saveRefreshToken(token).getId();
300  maps.getRefreshTokenToClientRefs().put(currentId, clientId);
301  maps.getRefreshTokenToAuthHolderRefs().put(currentId, authHolderId);
302  maps.getRefreshTokenOldToNewIdMap().put(currentId, newId);
303  logger.debug("Read refresh token {}", currentId);
304  }
305  reader.endArray();
306  logger.info("Done reading refresh tokens");
307  }
static final String AUTHENTICATION_HOLDER_ID
Definition: MITREidDataService_1_2.java:140
static final String EXPIRATION
Definition: MITREidDataService_1_2.java:142
Long getId()
Definition: OAuth2RefreshTokenEntity.java:94
Map< Long, String > getRefreshTokenToClientRefs()
Definition: MITREidDataServiceMaps.java:97
static final String CLIENT_ID
Definition: MITREidDataService_1_2.java:141
static final String ID
Definition: MITREidDataService_1_2.java:144
static final Logger logger
Definition: MITREidDataService_1_2.java:148
OAuth2RefreshTokenEntity saveRefreshToken(OAuth2RefreshTokenEntity refreshToken)
Map< Long, Long > getRefreshTokenToAuthHolderRefs()
Definition: MITREidDataServiceMaps.java:91
static final String VALUE
Definition: MITREidDataService_1_2.java:139
OAuth2TokenRepository tokenRepository
Definition: MITREidDataService_1_2.java:160
static final String NAME
Definition: MITREidDataService_1_2.java:127
Date utcToDate(String value)
Definition: MITREidDataServiceSupport.java:39
Map< Long, Long > getRefreshTokenOldToNewIdMap()
Definition: MITREidDataServiceMaps.java:85
MITREidDataServiceMaps maps
Definition: MITREidDataService_1_2.java:166

◆ readSavedUserAuthentication()

SavedUserAuthentication org.mitre.openid.connect.service.impl.MITREidDataService_1_2.readSavedUserAuthentication ( JsonReader  reader) throws IOException
inlineprivate
引数
reader
戻り値
例外
IOException
452  {
453  SavedUserAuthentication savedUserAuth = new SavedUserAuthentication();
454  reader.beginObject();
455 
456  while (reader.hasNext()) {
457  switch(reader.peek()) {
458  case END_OBJECT:
459  continue;
460  case NAME:
461  String name = reader.nextName();
462  if (reader.peek() == JsonToken.NULL) {
463  reader.skipValue();
464  } else if (name.equals(NAME)) {
465  savedUserAuth.setName(reader.nextString());
466  } else if (name.equals(SOURCE_CLASS)) {
467  savedUserAuth.setSourceClass(reader.nextString());
468  } else if (name.equals(AUTHENTICATED)) {
469  savedUserAuth.setAuthenticated(reader.nextBoolean());
470  } else if (name.equals(AUTHORITIES)) {
471  Set<String> authorityStrs = readSet(reader);
472  Set<GrantedAuthority> authorities = new HashSet<GrantedAuthority>();
473  for (String s : authorityStrs) {
474  GrantedAuthority ga = new SimpleGrantedAuthority(s);
475  authorities.add(ga);
476  }
477  savedUserAuth.setAuthorities(authorities);
478  } else {
479  logger.debug("Found unexpected entry");
480  reader.skipValue();
481  }
482  break;
483  default:
484  logger.debug("Found unexpected entry");
485  reader.skipValue();
486  continue;
487  }
488  }
489 
490  reader.endObject();
491  return savedUserAuth;
492  }
static final String SOURCE_CLASS
Definition: MITREidDataService_1_2.java:126
static final Logger logger
Definition: MITREidDataService_1_2.java:148
static final String AUTHENTICATED
Definition: MITREidDataService_1_2.java:125
static final String NAME
Definition: MITREidDataService_1_2.java:127
static final String AUTHORITIES
Definition: MITREidDataService_1_2.java:133

◆ readSystemScopes()

void org.mitre.openid.connect.service.impl.MITREidDataService_1_2.readSystemScopes ( JsonReader  reader) throws IOException
inlineprivate

Read the list of system scopes from the reader and insert them into the scope repository.

引数
reader
例外
IOException
793  {
794  reader.beginArray();
795  while (reader.hasNext()) {
796  SystemScope scope = new SystemScope();
797  reader.beginObject();
798  while (reader.hasNext()) {
799  switch (reader.peek()) {
800  case END_OBJECT:
801  continue;
802  case NAME:
803  String name = reader.nextName();
804  if (reader.peek() == JsonToken.NULL) {
805  reader.skipValue();
806  } else if (name.equals(VALUE)) {
807  scope.setValue(reader.nextString());
808  } else if (name.equals(DESCRIPTION)) {
809  scope.setDescription(reader.nextString());
810  } else if (name.equals(RESTRICTED)) {
811  scope.setRestricted(reader.nextBoolean());
812  } else if (name.equals(DEFAULT_SCOPE)) {
813  scope.setDefaultScope(reader.nextBoolean());
814  } else if (name.equals(ICON)) {
815  scope.setIcon(reader.nextString());
816  } else if (name.equals(STRUCTURED)) {
817  logger.warn("Found a structured scope, ignoring structure");
818  } else if (name.equals(STRUCTURED_PARAMETER)) {
819  logger.warn("Found a structured scope, ignoring structure");
820  } else {
821  logger.debug("found unexpected entry");
822  reader.skipValue();
823  }
824  break;
825  default:
826  logger.debug("Found unexpected entry");
827  reader.skipValue();
828  continue;
829  }
830  }
831  reader.endObject();
832  sysScopeRepository.save(scope);
833  }
834  reader.endArray();
835  logger.info("Done reading system scopes");
836  }
static final String RESTRICTED
Definition: MITREidDataService_1_2.java:81
static final String DESCRIPTION
Definition: MITREidDataService_1_2.java:87
static final String DEFAULT_SCOPE
Definition: MITREidDataService_1_2.java:78
static final String ICON
Definition: MITREidDataService_1_2.java:82
static final Logger logger
Definition: MITREidDataService_1_2.java:148
static final String STRUCTURED_PARAMETER
Definition: MITREidDataService_1_2.java:79
SystemScopeRepository sysScopeRepository
Definition: MITREidDataService_1_2.java:162
static final String VALUE
Definition: MITREidDataService_1_2.java:139
static final String NAME
Definition: MITREidDataService_1_2.java:127
static final String STRUCTURED
Definition: MITREidDataService_1_2.java:80

◆ readWhitelistedSites()

void org.mitre.openid.connect.service.impl.MITREidDataService_1_2.readWhitelistedSites ( JsonReader  reader) throws IOException
inlineprivate
引数
reader
例外
IOException
559  {
560  reader.beginArray();
561  while (reader.hasNext()) {
562  WhitelistedSite wlSite = new WhitelistedSite();
563  Long currentId = null;
564  reader.beginObject();
565  while (reader.hasNext()) {
566  switch (reader.peek()) {
567  case END_OBJECT:
568  continue;
569  case NAME:
570  String name = reader.nextName();
571  if (name.equals(ID)) {
572  currentId = reader.nextLong();
573  } else if (name.equals(CLIENT_ID)) {
574  wlSite.setClientId(reader.nextString());
575  } else if (name.equals(CREATOR_USER_ID)) {
576  wlSite.setCreatorUserId(reader.nextString());
577  } else if (name.equals(ALLOWED_SCOPES)) {
578  Set<String> allowedScopes = readSet(reader);
579  wlSite.setAllowedScopes(allowedScopes);
580  } else {
581  logger.debug("Found unexpected entry");
582  reader.skipValue();
583  }
584  break;
585  default:
586  logger.debug("Found unexpected entry");
587  reader.skipValue();
588  continue;
589  }
590  }
591  reader.endObject();
592  Long newId = wlSiteRepository.save(wlSite).getId();
593  maps.getWhitelistedSiteOldToNewIdMap().put(currentId, newId);
594  }
595  reader.endArray();
596  logger.info("Done reading whitelisted sites");
597  }
static final String CLIENT_ID
Definition: MITREidDataService_1_2.java:141
WhitelistedSiteRepository wlSiteRepository
Definition: MITREidDataService_1_2.java:154
static final String ID
Definition: MITREidDataService_1_2.java:144
Map< Long, Long > getWhitelistedSiteOldToNewIdMap()
Definition: MITREidDataServiceMaps.java:103
static final Logger logger
Definition: MITREidDataService_1_2.java:148
Long getId()
Definition: WhitelistedSite.java:84
WhitelistedSite save(WhitelistedSite whiteListedSite)
static final String NAME
Definition: MITREidDataService_1_2.java:127
static final String CREATOR_USER_ID
Definition: MITREidDataService_1_2.java:118
static final String ALLOWED_SCOPES
Definition: MITREidDataService_1_2.java:120
MITREidDataServiceMaps maps
Definition: MITREidDataService_1_2.java:166

◆ supportsVersion()

boolean org.mitre.openid.connect.service.impl.MITREidDataService_1_2.supportsVersion ( String  version)
inline

org.mitre.openid.connect.service.MITREidDataServiceを実装しています。

171  {
172  return THIS_VERSION.equals(version);
173  }
static final String THIS_VERSION
Definition: MITREidDataService_1_2.java:168

◆ toUTCString()

String org.mitre.openid.connect.service.impl.MITREidDataServiceSupport.toUTCString ( Date  value)
inlineprotectedinherited
51  {
52  if (value == null) {
53  return null;
54  }
55  return dateFormatter.print(value, Locale.ENGLISH);
56  }
final DateFormatter dateFormatter
Definition: MITREidDataServiceSupport.java:28

◆ utcToDate()

Date org.mitre.openid.connect.service.impl.MITREidDataServiceSupport.utcToDate ( String  value)
inlineprotectedinherited
39  {
40  if (value == null) {
41  return null;
42  }
43  try {
44  return dateFormatter.parse(value, Locale.ENGLISH);
45  } catch (ParseException ex) {
46  logger.error("Unable to parse datetime {}", value, ex);
47  }
48  return null;
49  }
static final Logger logger
Definition: MITREidDataServiceSupport.java:32
final DateFormatter dateFormatter
Definition: MITREidDataServiceSupport.java:28

メンバ詳解

◆ ACCESS_DATE

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.ACCESS_DATE = "accessDate"
staticprivate

◆ ACCESS_TOKEN_VALIDITY_SECONDS

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.ACCESS_TOKEN_VALIDITY_SECONDS = "accessTokenValiditySeconds"
staticprivate

◆ ACCESSTOKENS

final String org.mitre.openid.connect.service.MITREidDataService.ACCESSTOKENS = "accessTokens"
staticinherited

◆ ALLOW_INTROSPECTION

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.ALLOW_INTROSPECTION = "allowIntrospection"
staticprivate

◆ ALLOWED_SCOPES

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.ALLOWED_SCOPES = "allowedScopes"
staticprivate

◆ APPLICATION_TYPE

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.APPLICATION_TYPE = "applicationType"
staticprivate

◆ APPROVED

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.APPROVED = "approved"
staticprivate

◆ APPROVED_ACCESS_TOKENS

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.APPROVED_ACCESS_TOKENS = "approvedAccessTokens"
staticprivate

◆ approvedSiteRepository

ApprovedSiteRepository org.mitre.openid.connect.service.impl.MITREidDataService_1_2.approvedSiteRepository
private

◆ AUTHENTICATED

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.AUTHENTICATED = "authenticated"
staticprivate

◆ AUTHENTICATION_HOLDER_ID

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.AUTHENTICATION_HOLDER_ID = "authenticationHolderId"
staticprivate

◆ AUTHENTICATIONHOLDERS

final String org.mitre.openid.connect.service.MITREidDataService.AUTHENTICATIONHOLDERS = "authenticationHolders"
staticinherited

◆ authHolderRepository

AuthenticationHolderRepository org.mitre.openid.connect.service.impl.MITREidDataService_1_2.authHolderRepository
private

◆ AUTHORITIES

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.AUTHORITIES = "authorities"
staticprivate

◆ BLACKLISTEDSITES

final String org.mitre.openid.connect.service.MITREidDataService.BLACKLISTEDSITES = "blacklistedSites"
staticinherited

◆ blSiteRepository

BlacklistedSiteRepository org.mitre.openid.connect.service.impl.MITREidDataService_1_2.blSiteRepository
private

◆ CLAIMS_REDIRECT_URIS

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.CLAIMS_REDIRECT_URIS = "claimsRedirectUris"
staticprivate

◆ CLEAR_ACCESS_TOKENS_ON_REFRESH

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.CLEAR_ACCESS_TOKENS_ON_REFRESH = "clearAccessTokensOnRefresh"
staticprivate

◆ CLIENT_ID

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.CLIENT_ID = "clientId"
staticprivate

◆ clientRepository

OAuth2ClientRepository org.mitre.openid.connect.service.impl.MITREidDataService_1_2.clientRepository
private

◆ CLIENTS

final String org.mitre.openid.connect.service.MITREidDataService.CLIENTS = "clients"
staticinherited

◆ CONTACTS

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.CONTACTS = "contacts"
staticprivate

◆ CREATION_DATE

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.CREATION_DATE = "creationDate"
staticprivate

◆ CREATOR_USER_ID

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.CREATOR_USER_ID = "creatorUserId"
staticprivate

◆ DEFAULT_ACR_VALUES

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.DEFAULT_ACR_VALUES = "defaultACRValues"
staticprivate

◆ DEFAULT_MAX_AGE

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.DEFAULT_MAX_AGE = "defaultMaxAge"
staticprivate

◆ DEFAULT_SCOPE

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.DEFAULT_SCOPE = "defaultScope"
staticprivate

◆ DESCRIPTION

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.DESCRIPTION = "description"
staticprivate

◆ DYNAMICALLY_REGISTERED

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.DYNAMICALLY_REGISTERED = "dynamicallyRegistered"
staticprivate

◆ EXPIRATION

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.EXPIRATION = "expiration"
staticprivate

◆ EXTENSIONS

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.EXTENSIONS = "extensions"
staticprivate

◆ extensions

List<MITREidDataServiceExtension> org.mitre.openid.connect.service.impl.MITREidDataService_1_2.extensions = Collections.emptyList()
private

◆ GRANT_TYPES

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.GRANT_TYPES = "grantTypes"
staticprivate

◆ GRANTS

final String org.mitre.openid.connect.service.MITREidDataService.GRANTS = "grants"
staticinherited

◆ ICON

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.ICON = "icon"
staticprivate

◆ ID

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.ID = "id"
staticprivate

◆ ID_TOKEN_ENCRYPTED_RESPONSE_ALG

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.ID_TOKEN_ENCRYPTED_RESPONSE_ALG = "idTokenEncryptedResponseAlg"
staticprivate

◆ ID_TOKEN_ENCRYPTED_RESPONSE_ENC

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.ID_TOKEN_ENCRYPTED_RESPONSE_ENC = "idTokenEncryptedResponseEnc"
staticprivate

◆ ID_TOKEN_SIGNED_RESPONSE_ALG

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.ID_TOKEN_SIGNED_RESPONSE_ALG = "idTokenSignedResponseAlg"
staticprivate

◆ INTITATE_LOGIN_URI

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.INTITATE_LOGIN_URI = "intitateLoginUri"
staticprivate

◆ JWKS

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.JWKS = "jwks"
staticprivate

◆ JWKS_URI

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.JWKS_URI = "jwksUri"
staticprivate

◆ logger

final Logger org.mitre.openid.connect.service.impl.MITREidDataService_1_2.logger = LoggerFactory.getLogger(MITREidDataService_1_2.class)
staticprivate

Logger for this class

◆ LOGO_URI

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.LOGO_URI = "logoUri"
staticprivate

◆ maps

MITREidDataServiceMaps org.mitre.openid.connect.service.impl.MITREidDataService_1_2.maps = new MITREidDataServiceMaps()
private

◆ MITREID_CONNECT_1_0

final String org.mitre.openid.connect.service.MITREidDataService.MITREID_CONNECT_1_0 = "mitreid-connect-1.0"
staticinherited

Data member for 1.X configurations

◆ MITREID_CONNECT_1_1

final String org.mitre.openid.connect.service.MITREidDataService.MITREID_CONNECT_1_1 = "mitreid-connect-1.1"
staticinherited

◆ MITREID_CONNECT_1_2

final String org.mitre.openid.connect.service.MITREidDataService.MITREID_CONNECT_1_2 = "mitreid-connect-1.2"
staticinherited

◆ MITREID_CONNECT_1_3

final String org.mitre.openid.connect.service.MITREidDataService.MITREID_CONNECT_1_3 = "mitreid-connect-1.3"
staticinherited

◆ NAME

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.NAME = "name"
staticprivate

◆ POLICY_URI

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.POLICY_URI = "policyUri"
staticprivate

◆ POST_LOGOUT_REDIRECT_URI

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.POST_LOGOUT_REDIRECT_URI = "postLogoutRedirectUri"
staticprivate

◆ REDIRECT_URI

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.REDIRECT_URI = "redirectUri"
staticprivate

◆ REDIRECT_URIS

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.REDIRECT_URIS = "redirectUris"
staticprivate

◆ REFRESH_TOKEN_ID

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.REFRESH_TOKEN_ID = "refreshTokenId"
staticprivate

◆ REFRESH_TOKEN_VALIDITY_SECONDS

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.REFRESH_TOKEN_VALIDITY_SECONDS = "refreshTokenValiditySeconds"
staticprivate

◆ REFRESHTOKENS

final String org.mitre.openid.connect.service.MITREidDataService.REFRESHTOKENS = "refreshTokens"
staticinherited

◆ REQUEST_OBJECT_SIGNING_ALG

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.REQUEST_OBJECT_SIGNING_ALG = "requestObjectSigningAlg"
staticprivate

◆ REQUEST_PARAMETERS

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.REQUEST_PARAMETERS = "requestParameters"
staticprivate

◆ REQUEST_URIS

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.REQUEST_URIS = "requestUris"
staticprivate

◆ REQUIRE_AUTH_TIME

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.REQUIRE_AUTH_TIME = "requireAuthTime"
staticprivate

◆ RESOURCE_IDS

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.RESOURCE_IDS = "resourceIds"
staticprivate

◆ RESPONSE_TYPES

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.RESPONSE_TYPES = "responseTypes"
staticprivate

◆ RESTRICTED

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.RESTRICTED = "restricted"
staticprivate

◆ REUSE_REFRESH_TOKEN

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.REUSE_REFRESH_TOKEN = "reuseRefreshToken"
staticprivate

◆ SAVED_USER_AUTHENTICATION

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.SAVED_USER_AUTHENTICATION = "savedUserAuthentication"
staticprivate

◆ SCOPE

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.SCOPE = "scope"
staticprivate

◆ SECRET

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.SECRET = "secret"
staticprivate

◆ SECTOR_IDENTIFIER_URI

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.SECTOR_IDENTIFIER_URI = "sectorIdentifierUri"
staticprivate

◆ SOURCE_CLASS

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.SOURCE_CLASS = "sourceClass"
staticprivate

◆ STRUCTURED

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.STRUCTURED = "structured"
staticprivate

◆ STRUCTURED_PARAMETER

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.STRUCTURED_PARAMETER = "structuredParameter"
staticprivate

◆ SUBJECT_TYPE

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.SUBJECT_TYPE = "subjectType"
staticprivate

◆ sysScopeRepository

SystemScopeRepository org.mitre.openid.connect.service.impl.MITREidDataService_1_2.sysScopeRepository
private

◆ SYSTEMSCOPES

final String org.mitre.openid.connect.service.MITREidDataService.SYSTEMSCOPES = "systemScopes"
staticinherited

◆ THIS_VERSION

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.THIS_VERSION = MITREID_CONNECT_1_2
staticprivate

◆ TIMEOUT_DATE

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.TIMEOUT_DATE = "timeoutDate"
staticprivate

◆ TOKEN_ENDPOINT_AUTH_METHOD

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.TOKEN_ENDPOINT_AUTH_METHOD = "tokenEndpointAuthMethod"
staticprivate

◆ TOKEN_ENDPOINT_AUTH_SIGNING_ALG

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.TOKEN_ENDPOINT_AUTH_SIGNING_ALG = "tokenEndpointAuthSigningAlg"
staticprivate

◆ tokenRepository

OAuth2TokenRepository org.mitre.openid.connect.service.impl.MITREidDataService_1_2.tokenRepository
private

◆ TOS_URI

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.TOS_URI = "tosUri"
staticprivate

◆ TYPE

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.TYPE = "type"
staticprivate

◆ URI

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.URI = "uri"
staticprivate

◆ USER_ID

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.USER_ID = "userId"
staticprivate

◆ USER_INFO_ENCRYPTED_RESPONSE_ALG

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.USER_INFO_ENCRYPTED_RESPONSE_ALG = "userInfoEncryptedResponseAlg"
staticprivate

◆ USER_INFO_ENCRYPTED_RESPONSE_ENC

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.USER_INFO_ENCRYPTED_RESPONSE_ENC = "userInfoEncryptedResponseEnc"
staticprivate

◆ USER_INFO_SIGNED_RESPONSE_ALG

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.USER_INFO_SIGNED_RESPONSE_ALG = "userInfoSignedResponseAlg"
staticprivate

◆ VALUE

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_2.VALUE = "value"
staticprivate

◆ WHITELISTEDSITES

final String org.mitre.openid.connect.service.MITREidDataService.WHITELISTEDSITES = "whitelistedSites"
staticinherited

◆ wlSiteRepository

WhitelistedSiteRepository org.mitre.openid.connect.service.impl.MITREidDataService_1_2.wlSiteRepository
private

このクラス詳解は次のファイルから抽出されました: