org.mitre.openid.connect.client.OIDCAuthenticationProvider クラス

org.mitre.openid.connect.client.OIDCAuthenticationProvider の継承関係図

org.mitre.openid.connect.client.OIDCAuthenticationProvider 連携図

公開メンバ関数
Authentication	authenticate (final Authentication authentication) throws AuthenticationException
void	setUserInfoFetcher (UserInfoFetcher userInfoFetcher)
void	setAuthoritiesMapper (OIDCAuthoritiesMapper authoritiesMapper)
boolean	supports (Class<?> authentication)

限定公開メンバ関数
Authentication	createAuthenticationToken (PendingOIDCAuthenticationToken token, Collection<? extends GrantedAuthority > authorities, UserInfo userInfo)

非公開変数類
UserInfoFetcher	userInfoFetcher = new UserInfoFetcher()
OIDCAuthoritiesMapper	authoritiesMapper = new NamedAdminAuthoritiesMapper()

静的非公開変数類
static Logger	logger = LoggerFactory.getLogger(OIDCAuthenticationProvider.class)

詳解

著者

nemonik, Justin Richer

関数詳解

authenticate()

Authentication org.mitre.openid.connect.client.OIDCAuthenticationProvider.authenticate ( final Authentication  authentication ) throws AuthenticationException

inline

                                                                                                               {

                if (!supports(authentication.getClass())) {
                        return null;
                }

                if (authentication instanceof PendingOIDCAuthenticationToken) {

                        PendingOIDCAuthenticationToken token = (PendingOIDCAuthenticationToken) authentication;

                        // get the ID Token value out
                        JWT idToken = token.getIdToken();

                        // load the user info if we can
                        UserInfo userInfo = userInfoFetcher.loadUserInfo(token);

                        if (userInfo == null) {
                                // user info not found -- could be an error, could be fine
                        } else {
                                // if we found userinfo, double check it
                                if (!Strings.isNullOrEmpty(userInfo.getSub()) && !userInfo.getSub().equals(token.getSub())) {
                                        // the userinfo came back and the user_id fields don't match what was in the id_token
                                        throw new UsernameNotFoundException("user_id mismatch between id_token and user_info call: " + token.getSub() + " / " + userInfo.getSub());
                                }
                        }

                        return createAuthenticationToken(token, authoritiesMapper.mapAuthorities(idToken, userInfo), userInfo);
                }

                return null;
        }

createAuthenticationToken()

Authentication org.mitre.openid.connect.client.OIDCAuthenticationProvider.createAuthenticationToken ( PendingOIDCAuthenticationToken  token, Collection<? extends GrantedAuthority >  authorities, UserInfo  userInfo  )

inlineprotected

Override this function to return a different kind of Authentication, processes the authorities differently, or do post-processing based on the UserInfo object.

引数

token
authorities
userInfo

戻り値

                                                                                                                                                                        {
                return new OIDCAuthenticationToken(token.getSub(),
                                token.getIssuer(),
                                userInfo, authorities,
                                token.getIdToken(), token.getAccessTokenValue(), token.getRefreshTokenValue());
        }

setAuthoritiesMapper()

void org.mitre.openid.connect.client.OIDCAuthenticationProvider.setAuthoritiesMapper ( OIDCAuthoritiesMapper  authoritiesMapper )

inline

引数

authoritiesMapper

                                                                                  {
                this.authoritiesMapper = authoritiesMapper;
        }

setUserInfoFetcher()

void org.mitre.openid.connect.client.OIDCAuthenticationProvider.setUserInfoFetcher ( UserInfoFetcher  userInfoFetcher )

inline

引数

userInfoFetcher

                                                                        {
                this.userInfoFetcher = userInfoFetcher;
        }

supports()

boolean org.mitre.openid.connect.client.OIDCAuthenticationProvider.supports ( Class<?>  authentication )

inline

                                                         {
                return PendingOIDCAuthenticationToken.class.isAssignableFrom(authentication);
        }

メンバ詳解

authoritiesMapper

OIDCAuthoritiesMapper org.mitre.openid.connect.client.OIDCAuthenticationProvider.authoritiesMapper = new NamedAdminAuthoritiesMapper()

private

logger

Logger org.mitre.openid.connect.client.OIDCAuthenticationProvider.logger = LoggerFactory.getLogger(OIDCAuthenticationProvider.class)

staticprivate

userInfoFetcher

UserInfoFetcher org.mitre.openid.connect.client.OIDCAuthenticationProvider.userInfoFetcher = new UserInfoFetcher()

private

---

このクラス詳解は次のファイルから抽出されました:

• D:/AppData/OpenId/mitreid-connect/src/openid-connect-client/src/main/java/org/mitre/openid/connect/client/OIDCAuthenticationProvider.java