org.mitre.openid.connect.service.impl.MITREidDataService_1_1 クラス

org.mitre.openid.connect.service.impl.MITREidDataService_1_1 の継承関係図

org.mitre.openid.connect.service.impl.MITREidDataService_1_1 連携図

公開メンバ関数
boolean	supportsVersion (String version)
void	exportData (JsonWriter writer) throws IOException
void	importData (JsonReader reader) throws IOException

静的公開変数類
static final String	MITREID_CONNECT_1_0 = "mitreid-connect-1.0"
static final String	MITREID_CONNECT_1_1 = "mitreid-connect-1.1"
static final String	MITREID_CONNECT_1_2 = "mitreid-connect-1.2"
static final String	MITREID_CONNECT_1_3 = "mitreid-connect-1.3"
static final String	REFRESHTOKENS = "refreshTokens"
static final String	ACCESSTOKENS = "accessTokens"
static final String	WHITELISTEDSITES = "whitelistedSites"
static final String	BLACKLISTEDSITES = "blacklistedSites"
static final String	AUTHENTICATIONHOLDERS = "authenticationHolders"
static final String	GRANTS = "grants"
static final String	CLIENTS = "clients"
static final String	SYSTEMSCOPES = "systemScopes"

限定公開メンバ関数
Date	utcToDate (String value)
String	toUTCString (Date value)

非公開メンバ関数
void	readRefreshTokens (JsonReader reader) throws IOException
void	readAccessTokens (JsonReader reader) throws IOException
void	readAuthenticationHolders (JsonReader reader) throws IOException
OAuth2Request	readAuthorizationRequest (JsonReader reader) throws IOException
SavedUserAuthentication	readSavedUserAuthentication (JsonReader reader) throws IOException
void	readGrants (JsonReader reader) throws IOException
void	readWhitelistedSites (JsonReader reader) throws IOException
void	readBlacklistedSites (JsonReader reader) throws IOException
void	readClients (JsonReader reader) throws IOException
void	readSystemScopes (JsonReader reader) throws IOException
void	fixObjectReferences ()

非公開変数類
OAuth2ClientRepository	clientRepository
ApprovedSiteRepository	approvedSiteRepository
WhitelistedSiteRepository	wlSiteRepository
BlacklistedSiteRepository	blSiteRepository
AuthenticationHolderRepository	authHolderRepository
OAuth2TokenRepository	tokenRepository
SystemScopeRepository	sysScopeRepository
List< MITREidDataServiceExtension >	extensions = Collections.emptyList()
MITREidDataServiceMaps	maps = new MITREidDataServiceMaps()

静的非公開変数類
static final Logger	logger = LoggerFactory.getLogger(MITREidDataService_1_1.class)
static final String	THIS_VERSION = MITREID_CONNECT_1_1

詳解

Data service to import MITREid 1.1 configuration.

著者

jricher

arielak

関数詳解

exportData()

void org.mitre.openid.connect.service.impl.MITREidDataService_1_1.exportData ( JsonWriter  writer ) throws IOException

inline

org.mitre.openid.connect.service.MITREidDataServiceを実装しています。

                                                                     {
                throw new UnsupportedOperationException("Can not export 1.1 format from this version.");
        }

fixObjectReferences()

void org.mitre.openid.connect.service.impl.MITREidDataService_1_1.fixObjectReferences ( )

inlineprivate

                                           {
                for (Long oldRefreshTokenId : maps.getRefreshTokenToClientRefs().keySet()) {
                        String clientRef = maps.getRefreshTokenToClientRefs().get(oldRefreshTokenId);
                        ClientDetailsEntity client = clientRepository.getClientByClientId(clientRef);
                        Long newRefreshTokenId = maps.getRefreshTokenOldToNewIdMap().get(oldRefreshTokenId);
                        OAuth2RefreshTokenEntity refreshToken = tokenRepository.getRefreshTokenById(newRefreshTokenId);
                        refreshToken.setClient(client);
                        tokenRepository.saveRefreshToken(refreshToken);
                }
                for (Long oldRefreshTokenId : maps.getRefreshTokenToAuthHolderRefs().keySet()) {
                        Long oldAuthHolderId = maps.getRefreshTokenToAuthHolderRefs().get(oldRefreshTokenId);
                        Long newAuthHolderId = maps.getAuthHolderOldToNewIdMap().get(oldAuthHolderId);
                        AuthenticationHolderEntity authHolder = authHolderRepository.getById(newAuthHolderId);
                        Long newRefreshTokenId = maps.getRefreshTokenOldToNewIdMap().get(oldRefreshTokenId);
                        OAuth2RefreshTokenEntity refreshToken = tokenRepository.getRefreshTokenById(newRefreshTokenId);
                        refreshToken.setAuthenticationHolder(authHolder);
                        tokenRepository.saveRefreshToken(refreshToken);
                }
                for (Long oldAccessTokenId : maps.getAccessTokenToClientRefs().keySet()) {
                        String clientRef = maps.getAccessTokenToClientRefs().get(oldAccessTokenId);
                        ClientDetailsEntity client = clientRepository.getClientByClientId(clientRef);
                        Long newAccessTokenId = maps.getAccessTokenOldToNewIdMap().get(oldAccessTokenId);
                        OAuth2AccessTokenEntity accessToken = tokenRepository.getAccessTokenById(newAccessTokenId);
                        accessToken.setClient(client);
                        tokenRepository.saveAccessToken(accessToken);
                }
                maps.getAccessTokenToClientRefs().clear();
                for (Long oldAccessTokenId : maps.getAccessTokenToAuthHolderRefs().keySet()) {
                        Long oldAuthHolderId = maps.getAccessTokenToAuthHolderRefs().get(oldAccessTokenId);
                        Long newAuthHolderId = maps.getAuthHolderOldToNewIdMap().get(oldAuthHolderId);
                        AuthenticationHolderEntity authHolder = authHolderRepository.getById(newAuthHolderId);
                        Long newAccessTokenId = maps.getAccessTokenOldToNewIdMap().get(oldAccessTokenId);
                        OAuth2AccessTokenEntity accessToken = tokenRepository.getAccessTokenById(newAccessTokenId);
                        accessToken.setAuthenticationHolder(authHolder);
                        tokenRepository.saveAccessToken(accessToken);
                }
                for (Long oldAccessTokenId : maps.getAccessTokenToRefreshTokenRefs().keySet()) {
                        Long oldRefreshTokenId = maps.getAccessTokenToRefreshTokenRefs().get(oldAccessTokenId);
                        Long newRefreshTokenId = maps.getRefreshTokenOldToNewIdMap().get(oldRefreshTokenId);
                        OAuth2RefreshTokenEntity refreshToken = tokenRepository.getRefreshTokenById(newRefreshTokenId);
                        Long newAccessTokenId = maps.getAccessTokenOldToNewIdMap().get(oldAccessTokenId);
                        OAuth2AccessTokenEntity accessToken = tokenRepository.getAccessTokenById(newAccessTokenId);
                        accessToken.setRefreshToken(refreshToken);
                        tokenRepository.saveAccessToken(accessToken);
                }
                for (Long oldGrantId : maps.getGrantToAccessTokensRefs().keySet()) {
                        Set<Long> oldAccessTokenIds = maps.getGrantToAccessTokensRefs().get(oldGrantId);

                        Long newGrantId = maps.getGrantOldToNewIdMap().get(oldGrantId);
                        ApprovedSite site = approvedSiteRepository.getById(newGrantId);

                        for(Long oldTokenId : oldAccessTokenIds) {
                                Long newTokenId = maps.getAccessTokenOldToNewIdMap().get(oldTokenId);
                                OAuth2AccessTokenEntity token = tokenRepository.getAccessTokenById(newTokenId);
                                token.setApprovedSite(site);
                                tokenRepository.saveAccessToken(token);
                        }

                        approvedSiteRepository.save(site);
                }
        }

importData()

void org.mitre.openid.connect.service.impl.MITREidDataService_1_1.importData ( JsonReader  reader ) throws IOException

inline

org.mitre.openid.connect.service.MITREidDataServiceを実装しています。

                                                                     {

                logger.info("Reading configuration for 1.1");

                // this *HAS* to start as an object
                reader.beginObject();

                while (reader.hasNext()) {
                        JsonToken tok = reader.peek();
                        switch (tok) {
                                case NAME:
                                        String name = reader.nextName();
                                        // find out which member it is
                                        if (name.equals(CLIENTS)) {
                                                readClients(reader);
                                        } else if (name.equals(GRANTS)) {
                                                readGrants(reader);
                                        } else if (name.equals(WHITELISTEDSITES)) {
                                                readWhitelistedSites(reader);
                                        } else if (name.equals(BLACKLISTEDSITES)) {
                                                readBlacklistedSites(reader);
                                        } else if (name.equals(AUTHENTICATIONHOLDERS)) {
                                                readAuthenticationHolders(reader);
                                        } else if (name.equals(ACCESSTOKENS)) {
                                                readAccessTokens(reader);
                                        } else if (name.equals(REFRESHTOKENS)) {
                                                readRefreshTokens(reader);
                                        } else if (name.equals(SYSTEMSCOPES)) {
                                                readSystemScopes(reader);
                                        } else {
                                                for (MITREidDataServiceExtension extension : extensions) {
                                                        if (extension.supportsVersion(THIS_VERSION)) {
                                                                if (extension.supportsVersion(THIS_VERSION)) {
                                                                        extension.importExtensionData(name, reader);
                                                                        break;
                                                                }
                                                        }
                                                }
                                                // unknown token, skip it
                                                reader.skipValue();
                                        }
                                        break;
                                case END_OBJECT:
                                        // the object ended, we're done here
                                        reader.endObject();
                                        continue;
                                default:
                                        logger.debug("Found unexpected entry");
                                        reader.skipValue();
                                        continue;
                        }
                }
                fixObjectReferences();
                for (MITREidDataServiceExtension extension : extensions) {
                        if (extension.supportsVersion(THIS_VERSION)) {
                                extension.fixExtensionObjectReferences(maps);
                                break;
                        }
                }
                maps.clearAll();
        }

readAccessTokens()

void org.mitre.openid.connect.service.impl.MITREidDataService_1_1.readAccessTokens ( JsonReader  reader ) throws IOException

inlineprivate

引数

reader

例外

IOException

引数

reader

例外

IOException

                                                                            {
                reader.beginArray();
                while (reader.hasNext()) {
                        OAuth2AccessTokenEntity token = new OAuth2AccessTokenEntity();
                        reader.beginObject();
                        Long currentId = null;
                        String clientId = null;
                        Long authHolderId = null;
                        Long refreshTokenId = null;
                        while (reader.hasNext()) {
                                switch (reader.peek()) {
                                        case END_OBJECT:
                                                continue;
                                        case NAME:
                                                String name = reader.nextName();
                                                if (reader.peek() == JsonToken.NULL) {
                                                        reader.skipValue();
                                                } else if (name.equals("id")) {
                                                        currentId = reader.nextLong();
                                                } else if (name.equals("expiration")) {
                                                        Date date = utcToDate(reader.nextString());
                                                        token.setExpiration(date);
                                                } else if (name.equals("value")) {
                                                        String value = reader.nextString();
                                                        try {
                                                                // all tokens are JWTs
                                                                token.setJwt(JWTParser.parse(value));
                                                        } catch (ParseException ex) {
                                                                logger.error("Unable to set refresh token value to {}", value, ex);
                                                        }
                                                } else if (name.equals("clientId")) {
                                                        clientId = reader.nextString();
                                                } else if (name.equals("authenticationHolderId")) {
                                                        authHolderId = reader.nextLong();
                                                } else if (name.equals("refreshTokenId")) {
                                                        refreshTokenId = reader.nextLong();
                                                } else if (name.equals("scope")) {
                                                        Set<String> scope = readSet(reader);
                                                        token.setScope(scope);
                                                } else if (name.equals("type")) {
                                                        token.setTokenType(reader.nextString());
                                                } else {
                                                        logger.debug("Found unexpected entry");
                                                        reader.skipValue();
                                                }
                                                break;
                                        default:
                                                logger.debug("Found unexpected entry");
                                                reader.skipValue();
                                                continue;
                                }
                        }
                        reader.endObject();
                        Long newId = tokenRepository.saveAccessToken(token).getId();
                        maps.getAccessTokenToClientRefs().put(currentId, clientId);
                        maps.getAccessTokenToAuthHolderRefs().put(currentId, authHolderId);
                        if (refreshTokenId != null) {
                                maps.getAccessTokenToRefreshTokenRefs().put(currentId, refreshTokenId);
                        }
                        maps.getAccessTokenOldToNewIdMap().put(currentId, newId);
                        logger.debug("Read access token {}", currentId);
                }
                reader.endArray();
                logger.info("Done reading access tokens");
        }

readAuthenticationHolders()

void org.mitre.openid.connect.service.impl.MITREidDataService_1_1.readAuthenticationHolders ( JsonReader  reader ) throws IOException

inlineprivate

引数

reader

例外

IOException

                                                                                     {
                reader.beginArray();
                while (reader.hasNext()) {
                        AuthenticationHolderEntity ahe = new AuthenticationHolderEntity();
                        reader.beginObject();
                        Long currentId = null;
                        while (reader.hasNext()) {
                                switch (reader.peek()) {
                                        case END_OBJECT:
                                                continue;
                                        case NAME:
                                                String name = reader.nextName();
                                                if (reader.peek() == JsonToken.NULL) {
                                                        reader.skipValue();
                                                } else if (name.equals("id")) {
                                                        currentId = reader.nextLong();
                                                } else if (name.equals("ownerId")) {
                                                        //not needed
                                                        reader.skipValue();
                                                } else if (name.equals("authentication")) {
                                                        OAuth2Request clientAuthorization = null;
                                                        Authentication userAuthentication = null;
                                                        reader.beginObject();
                                                        while (reader.hasNext()) {
                                                                switch (reader.peek()) {
                                                                        case END_OBJECT:
                                                                                continue;
                                                                        case NAME:
                                                                                String subName = reader.nextName();
                                                                                if (reader.peek() == JsonToken.NULL) {
                                                                                        reader.skipValue(); // skip null values
                                                                                } else if (subName.equals("clientAuthorization")) {
                                                                                        clientAuthorization = readAuthorizationRequest(reader);
                                                                                } else if (subName.equals("userAuthentication")) {
                                                                                        // skip binary encoded version
                                                                                        reader.skipValue();

                                                                                } else if (subName.equals("savedUserAuthentication")) {
                                                                                        userAuthentication = readSavedUserAuthentication(reader);

                                                                                } else {
                                                                                        logger.debug("Found unexpected entry");
                                                                                        reader.skipValue();
                                                                                }
                                                                                break;
                                                                        default:
                                                                                logger.debug("Found unexpected entry");
                                                                                reader.skipValue();
                                                                                continue;
                                                                }
                                                        }
                                                        reader.endObject();
                                                        OAuth2Authentication auth = new OAuth2Authentication(clientAuthorization, userAuthentication);
                                                        ahe.setAuthentication(auth);
                                                } else {
                                                        logger.debug("Found unexpected entry");
                                                        reader.skipValue();
                                                }
                                                break;
                                        default:
                                                logger.debug("Found unexpected entry");
                                                reader.skipValue();
                                                continue;
                                }
                        }
                        reader.endObject();
                        Long newId = authHolderRepository.save(ahe).getId();
                        maps.getAuthHolderOldToNewIdMap().put(currentId, newId);
                        logger.debug("Read authentication holder {}", currentId);
                }
                reader.endArray();
                logger.info("Done reading authentication holders");
        }

readAuthorizationRequest()

OAuth2Request org.mitre.openid.connect.service.impl.MITREidDataService_1_1.readAuthorizationRequest ( JsonReader  reader ) throws IOException

inlineprivate

                                                                                             {
                Set<String> scope = new LinkedHashSet<>();
                Set<String> resourceIds = new HashSet<>();
                boolean approved = false;
                Collection<GrantedAuthority> authorities = new HashSet<>();
                Map<String, String> requestParameters = new HashMap<>();
                Set<String> responseTypes = new HashSet<>();
                Map<String, Serializable> extensions = new HashMap<>();
                String redirectUri = null;
                String clientId = null;
                reader.beginObject();
                while (reader.hasNext()) {
                        switch (reader.peek()) {
                                case END_OBJECT:
                                        continue;
                                case NAME:
                                        String name = reader.nextName();
                                        if (reader.peek() == JsonToken.NULL) {
                                                reader.skipValue();
                                        } else if (name.equals("requestParameters")) {
                                                requestParameters = readMap(reader);
                                        } else if (name.equals("clientId")) {
                                                clientId = reader.nextString();
                                        } else if (name.equals("scope")) {
                                                scope = readSet(reader);
                                        } else if (name.equals("resourceIds")) {
                                                resourceIds = readSet(reader);
                                        } else if (name.equals("authorities")) {
                                                Set<String> authorityStrs = readSet(reader);
                                                authorities = new HashSet<>();
                                                for (String s : authorityStrs) {
                                                        GrantedAuthority ga = new SimpleGrantedAuthority(s);
                                                        authorities.add(ga);
                                                }
                                        } else if (name.equals("approved")) {
                                                approved = reader.nextBoolean();
                                        } else if (name.equals("denied")) {
                                                if (approved == false) {
                                                        approved = !reader.nextBoolean();
                                                }
                                        } else if (name.equals("redirectUri")) {
                                                redirectUri = reader.nextString();
                                        } else if (name.equals("responseTypes")) {
                                                responseTypes = readSet(reader);
                                        } else if (name.equals("extensions")) {
                                                // skip the binary encoded version
                                                reader.skipValue();
                                        } else if (name.equals("extensionStrings")) {
                                                Map<String, String> extEnc = readMap(reader);
                                                for (Entry<String, String> entry : extEnc.entrySet()) {
                                                        extensions.put(entry.getKey(), entry.getValue());
                                                }
                                        } else {
                                                reader.skipValue();
                                        }
                                        break;
                                default:
                                        logger.debug("Found unexpected entry");
                                        reader.skipValue();
                                        continue;
                        }
                }
                reader.endObject();
                return new OAuth2Request(requestParameters, clientId, authorities, approved, scope, resourceIds, redirectUri, responseTypes, extensions);
        }

readBlacklistedSites()

void org.mitre.openid.connect.service.impl.MITREidDataService_1_1.readBlacklistedSites ( JsonReader  reader ) throws IOException

inlineprivate

引数

reader

例外

IOException

                                                                                {
                reader.beginArray();
                while (reader.hasNext()) {
                        BlacklistedSite blSite = new BlacklistedSite();
                        reader.beginObject();
                        while (reader.hasNext()) {
                                switch (reader.peek()) {
                                        case END_OBJECT:
                                                continue;
                                        case NAME:
                                                String name = reader.nextName();
                                                if (name.equals("id")) {
                                                        reader.skipValue();
                                                } else if (name.equals("uri")) {
                                                        blSite.setUri(reader.nextString());
                                                } else {
                                                        logger.debug("Found unexpected entry");
                                                        reader.skipValue();
                                                }
                                                break;
                                        default:
                                                logger.debug("Found unexpected entry");
                                                reader.skipValue();
                                                continue;
                                }
                        }
                        reader.endObject();
                        blSiteRepository.save(blSite);
                }
                reader.endArray();
                logger.info("Done reading blacklisted sites");
        }

readClients()

void org.mitre.openid.connect.service.impl.MITREidDataService_1_1.readClients ( JsonReader  reader ) throws IOException

inlineprivate

引数

reader

例外

IOException

                                                                       {
                reader.beginArray();
                while (reader.hasNext()) {
                        ClientDetailsEntity client = new ClientDetailsEntity();
                        reader.beginObject();
                        while (reader.hasNext()) {
                                switch (reader.peek()) {
                                        case END_OBJECT:
                                                continue;
                                        case NAME:
                                                String name = reader.nextName();
                                                if (reader.peek() == JsonToken.NULL) {
                                                        reader.skipValue();
                                                } else if (name.equals("clientId")) {
                                                        client.setClientId(reader.nextString());
                                                } else if (name.equals("resourceIds")) {
                                                        Set<String> resourceIds = readSet(reader);
                                                        client.setResourceIds(resourceIds);
                                                } else if (name.equals("secret")) {
                                                        client.setClientSecret(reader.nextString());
                                                } else if (name.equals("scope")) {
                                                        Set<String> scope = readSet(reader);
                                                        client.setScope(scope);
                                                } else if (name.equals("authorities")) {
                                                        Set<String> authorityStrs = readSet(reader);
                                                        Set<GrantedAuthority> authorities = new HashSet<>();
                                                        for (String s : authorityStrs) {
                                                                GrantedAuthority ga = new SimpleGrantedAuthority(s);
                                                                authorities.add(ga);
                                                        }
                                                        client.setAuthorities(authorities);
                                                } else if (name.equals("accessTokenValiditySeconds")) {
                                                        client.setAccessTokenValiditySeconds(reader.nextInt());
                                                } else if (name.equals("refreshTokenValiditySeconds")) {
                                                        client.setRefreshTokenValiditySeconds(reader.nextInt());
                                                } else if (name.equals("redirectUris")) {
                                                        Set<String> redirectUris = readSet(reader);
                                                        client.setRedirectUris(redirectUris);
                                                } else if (name.equals("name")) {
                                                        client.setClientName(reader.nextString());
                                                } else if (name.equals("uri")) {
                                                        client.setClientUri(reader.nextString());
                                                } else if (name.equals("logoUri")) {
                                                        client.setLogoUri(reader.nextString());
                                                } else if (name.equals("contacts")) {
                                                        Set<String> contacts = readSet(reader);
                                                        client.setContacts(contacts);
                                                } else if (name.equals("tosUri")) {
                                                        client.setTosUri(reader.nextString());
                                                } else if (name.equals("tokenEndpointAuthMethod")) {
                                                        AuthMethod am = AuthMethod.getByValue(reader.nextString());
                                                        client.setTokenEndpointAuthMethod(am);
                                                } else if (name.equals("grantTypes")) {
                                                        Set<String> grantTypes = readSet(reader);
                                                        client.setGrantTypes(grantTypes);
                                                } else if (name.equals("responseTypes")) {
                                                        Set<String> responseTypes = readSet(reader);
                                                        client.setResponseTypes(responseTypes);
                                                } else if (name.equals("policyUri")) {
                                                        client.setPolicyUri(reader.nextString());
                                                } else if (name.equals("applicationType")) {
                                                        AppType appType = AppType.getByValue(reader.nextString());
                                                        client.setApplicationType(appType);
                                                } else if (name.equals("sectorIdentifierUri")) {
                                                        client.setSectorIdentifierUri(reader.nextString());
                                                } else if (name.equals("subjectType")) {
                                                        SubjectType st = SubjectType.getByValue(reader.nextString());
                                                        client.setSubjectType(st);
                                                } else if (name.equals("jwks_uri")) {
                                                        client.setJwksUri(reader.nextString());
                                                } else if (name.equals("requestObjectSigningAlg")) {
                                                        JWSAlgorithm alg = JWSAlgorithm.parse(reader.nextString());
                                                        client.setRequestObjectSigningAlg(alg);
                                                } else if (name.equals("userInfoEncryptedResponseAlg")) {
                                                        JWEAlgorithm alg = JWEAlgorithm.parse(reader.nextString());
                                                        client.setUserInfoEncryptedResponseAlg(alg);
                                                } else if (name.equals("userInfoEncryptedResponseEnc")) {
                                                        EncryptionMethod alg = EncryptionMethod.parse(reader.nextString());
                                                        client.setUserInfoEncryptedResponseEnc(alg);
                                                } else if (name.equals("userInfoSignedResponseAlg")) {
                                                        JWSAlgorithm alg = JWSAlgorithm.parse(reader.nextString());
                                                        client.setUserInfoSignedResponseAlg(alg);
                                                } else if (name.equals("idTokenSignedResonseAlg")) {
                                                        JWSAlgorithm alg = JWSAlgorithm.parse(reader.nextString());
                                                        client.setIdTokenSignedResponseAlg(alg);
                                                } else if (name.equals("idTokenEncryptedResponseAlg")) {
                                                        JWEAlgorithm alg = JWEAlgorithm.parse(reader.nextString());
                                                        client.setIdTokenEncryptedResponseAlg(alg);
                                                } else if (name.equals("idTokenEncryptedResponseEnc")) {
                                                        EncryptionMethod alg = EncryptionMethod.parse(reader.nextString());
                                                        client.setIdTokenEncryptedResponseEnc(alg);
                                                } else if (name.equals("tokenEndpointAuthSigningAlg")) {
                                                        JWSAlgorithm alg = JWSAlgorithm.parse(reader.nextString());
                                                        client.setTokenEndpointAuthSigningAlg(alg);
                                                } else if (name.equals("defaultMaxAge")) {
                                                        client.setDefaultMaxAge(reader.nextInt());
                                                } else if (name.equals("requireAuthTime")) {
                                                        client.setRequireAuthTime(reader.nextBoolean());
                                                } else if (name.equals("defaultACRValues")) {
                                                        Set<String> defaultACRvalues = readSet(reader);
                                                        client.setDefaultACRvalues(defaultACRvalues);
                                                } else if (name.equals("initiateLoginUri")) {
                                                        client.setInitiateLoginUri(reader.nextString());
                                                } else if (name.equals("postLogoutRedirectUri")) {
                                                        HashSet<String> postLogoutUris = Sets.newHashSet(reader.nextString());
                                                        client.setPostLogoutRedirectUris(postLogoutUris);
                                                } else if (name.equals("requestUris")) {
                                                        Set<String> requestUris = readSet(reader);
                                                        client.setRequestUris(requestUris);
                                                } else if (name.equals("description")) {
                                                        client.setClientDescription(reader.nextString());
                                                } else if (name.equals("allowIntrospection")) {
                                                        client.setAllowIntrospection(reader.nextBoolean());
                                                } else if (name.equals("reuseRefreshToken")) {
                                                        client.setReuseRefreshToken(reader.nextBoolean());
                                                } else if (name.equals("dynamicallyRegistered")) {
                                                        client.setDynamicallyRegistered(reader.nextBoolean());
                                                } else {
                                                        logger.debug("Found unexpected entry");
                                                        reader.skipValue();
                                                }
                                                break;
                                        default:
                                                logger.debug("Found unexpected entry");
                                                reader.skipValue();
                                                continue;
                                }
                        }
                        reader.endObject();
                        clientRepository.saveClient(client);
                }
                reader.endArray();
                logger.info("Done reading clients");
        }

readGrants()

void org.mitre.openid.connect.service.impl.MITREidDataService_1_1.readGrants ( JsonReader  reader ) throws IOException

inlineprivate

引数

reader

例外

IOException

                                                                      {
                reader.beginArray();
                while (reader.hasNext()) {
                        ApprovedSite site = new ApprovedSite();
                        Long currentId = null;
                        Long whitelistedSiteId = null;
                        Set<Long> tokenIds = null;
                        reader.beginObject();
                        while (reader.hasNext()) {
                                switch (reader.peek()) {
                                        case END_OBJECT:
                                                continue;
                                        case NAME:
                                                String name = reader.nextName();
                                                if (reader.peek() == JsonToken.NULL) {
                                                        reader.skipValue();
                                                } else if (name.equals("id")) {
                                                        currentId = reader.nextLong();
                                                } else if (name.equals("accessDate")) {
                                                        Date date = utcToDate(reader.nextString());
                                                        site.setAccessDate(date);
                                                } else if (name.equals("clientId")) {
                                                        site.setClientId(reader.nextString());
                                                } else if (name.equals("creationDate")) {
                                                        Date date = utcToDate(reader.nextString());
                                                        site.setCreationDate(date);
                                                } else if (name.equals("timeoutDate")) {
                                                        Date date = utcToDate(reader.nextString());
                                                        site.setTimeoutDate(date);
                                                } else if (name.equals("userId")) {
                                                        site.setUserId(reader.nextString());
                                                } else if (name.equals("allowedScopes")) {
                                                        Set<String> allowedScopes = readSet(reader);
                                                        site.setAllowedScopes(allowedScopes);
                                                } else if (name.equals("whitelistedSiteId")) {
                                                        whitelistedSiteId = reader.nextLong();
                                                } else if (name.equals("approvedAccessTokens")) {
                                                        tokenIds = readSet(reader);
                                                } else {
                                                        logger.debug("Found unexpected entry");
                                                        reader.skipValue();
                                                }
                                                break;
                                        default:
                                                logger.debug("Found unexpected entry");
                                                reader.skipValue();
                                                continue;
                                }
                        }
                        reader.endObject();
                        Long newId = approvedSiteRepository.save(site).getId();
                        maps.getGrantOldToNewIdMap().put(currentId, newId);
                        if (whitelistedSiteId != null) {
                                logger.debug("Ignoring whitelisted site marker on approved site.");
                        }
                        if (tokenIds != null) {
                                maps.getGrantToAccessTokensRefs().put(currentId, tokenIds);
                        }
                        logger.debug("Read grant {}", currentId);
                }
                reader.endArray();
                logger.info("Done reading grants");
        }

readRefreshTokens()

void org.mitre.openid.connect.service.impl.MITREidDataService_1_1.readRefreshTokens ( JsonReader  reader ) throws IOException

inlineprivate

引数

reader

例外

IOException

引数

reader

例外

IOException

                                                                             {
                reader.beginArray();
                while (reader.hasNext()) {
                        OAuth2RefreshTokenEntity token = new OAuth2RefreshTokenEntity();
                        reader.beginObject();
                        Long currentId = null;
                        String clientId = null;
                        Long authHolderId = null;
                        while (reader.hasNext()) {
                                switch (reader.peek()) {
                                        case END_OBJECT:
                                                continue;
                                        case NAME:
                                                String name = reader.nextName();
                                                if (reader.peek() == JsonToken.NULL) {
                                                        reader.skipValue();
                                                } else if (name.equals("id")) {
                                                        currentId = reader.nextLong();
                                                } else if (name.equals("expiration")) {
                                                        Date date = utcToDate(reader.nextString());
                                                        token.setExpiration(date);
                                                } else if (name.equals("value")) {
                                                        String value = reader.nextString();
                                                        try {
                                                                token.setJwt(JWTParser.parse(value));
                                                        } catch (ParseException ex) {
                                                                logger.error("Unable to set refresh token value to {}", value, ex);
                                                        }
                                                } else if (name.equals("clientId")) {
                                                        clientId = reader.nextString();
                                                } else if (name.equals("authenticationHolderId")) {
                                                        authHolderId = reader.nextLong();
                                                } else {
                                                        logger.debug("Found unexpected entry");
                                                        reader.skipValue();
                                                }
                                                break;
                                        default:
                                                logger.debug("Found unexpected entry");
                                                reader.skipValue();
                                                continue;
                                }
                        }
                        reader.endObject();
                        Long newId = tokenRepository.saveRefreshToken(token).getId();
                        maps.getRefreshTokenToClientRefs().put(currentId, clientId);
                        maps.getRefreshTokenToAuthHolderRefs().put(currentId, authHolderId);
                        maps.getRefreshTokenOldToNewIdMap().put(currentId, newId);
                        logger.debug("Read refresh token {}", currentId);
                }
                reader.endArray();
                logger.info("Done reading refresh tokens");
        }

readSavedUserAuthentication()

SavedUserAuthentication org.mitre.openid.connect.service.impl.MITREidDataService_1_1.readSavedUserAuthentication ( JsonReader  reader ) throws IOException

inlineprivate

引数

reader

戻り値

例外

IOException

                                                                                                          {
                SavedUserAuthentication savedUserAuth = new SavedUserAuthentication();
                reader.beginObject();

                while (reader.hasNext()) {
                        switch(reader.peek()) {
                                case END_OBJECT:
                                        continue;
                                case NAME:
                                        String name = reader.nextName();
                                        if (reader.peek() == JsonToken.NULL) {
                                                reader.skipValue();
                                        } else if (name.equals("name")) {
                                                savedUserAuth.setName(reader.nextString());
                                        } else if (name.equals("sourceClass")) {
                                                savedUserAuth.setSourceClass(reader.nextString());
                                        } else if (name.equals("authenticated")) {
                                                savedUserAuth.setAuthenticated(reader.nextBoolean());
                                        } else if (name.equals("authorities")) {
                                                Set<String> authorityStrs = readSet(reader);
                                                Set<GrantedAuthority> authorities = new HashSet<GrantedAuthority>();
                                                for (String s : authorityStrs) {
                                                        GrantedAuthority ga = new SimpleGrantedAuthority(s);
                                                        authorities.add(ga);
                                                }
                                                savedUserAuth.setAuthorities(authorities);
                                        } else {
                                                logger.debug("Found unexpected entry");
                                                reader.skipValue();
                                        }
                                        break;
                                default:
                                        logger.debug("Found unexpected entry");
                                        reader.skipValue();
                                        continue;
                        }
                }

                reader.endObject();
                return savedUserAuth;
        }

readSystemScopes()

void org.mitre.openid.connect.service.impl.MITREidDataService_1_1.readSystemScopes ( JsonReader  reader ) throws IOException

inlineprivate

Read the list of system scopes from the reader and insert them into the scope repository.

引数

reader

例外

IOException

                                                                            {
                reader.beginArray();
                while (reader.hasNext()) {
                        SystemScope scope = new SystemScope();
                        reader.beginObject();
                        while (reader.hasNext()) {
                                switch (reader.peek()) {
                                        case END_OBJECT:
                                                continue;
                                        case NAME:
                                                String name = reader.nextName();
                                                if (reader.peek() == JsonToken.NULL) {
                                                        reader.skipValue();
                                                } else if (name.equals("value")) {
                                                        scope.setValue(reader.nextString());
                                                } else if (name.equals("description")) {
                                                        scope.setDescription(reader.nextString());
                                                } else if (name.equals("allowDynReg")) {
                                                        // previously "allowDynReg" scopes are now tagged as "not restricted" and vice versa
                                                        scope.setRestricted(!reader.nextBoolean());
                                                } else if (name.equals("defaultScope")) {
                                                        scope.setDefaultScope(reader.nextBoolean());
                                                } else if (name.equals("structured")) {
                                                        logger.warn("Found a structured scope, ignoring structure");
                                                } else if (name.equals("structuredParameter")) {
                                                        logger.warn("Found a structured scope, ignoring structure");
                                                } else if (name.equals("icon")) {
                                                        scope.setIcon(reader.nextString());
                                                } else {
                                                        logger.debug("found unexpected entry");
                                                        reader.skipValue();
                                                }
                                                break;
                                        default:
                                                logger.debug("Found unexpected entry");
                                                reader.skipValue();
                                                continue;
                                }
                        }
                        reader.endObject();
                        sysScopeRepository.save(scope);
                }
                reader.endArray();
                logger.info("Done reading system scopes");
        }

readWhitelistedSites()

void org.mitre.openid.connect.service.impl.MITREidDataService_1_1.readWhitelistedSites ( JsonReader  reader ) throws IOException

inlineprivate

引数

reader

例外

IOException

                                                                                {
                reader.beginArray();
                while (reader.hasNext()) {
                        WhitelistedSite wlSite = new WhitelistedSite();
                        Long currentId = null;
                        reader.beginObject();
                        while (reader.hasNext()) {
                                switch (reader.peek()) {
                                        case END_OBJECT:
                                                continue;
                                        case NAME:
                                                String name = reader.nextName();
                                                if (name.equals("id")) {
                                                        currentId = reader.nextLong();
                                                } else if (name.equals("clientId")) {
                                                        wlSite.setClientId(reader.nextString());
                                                } else if (name.equals("creatorUserId")) {
                                                        wlSite.setCreatorUserId(reader.nextString());
                                                } else if (name.equals("allowedScopes")) {
                                                        Set<String> allowedScopes = readSet(reader);
                                                        wlSite.setAllowedScopes(allowedScopes);
                                                } else {
                                                        logger.debug("Found unexpected entry");
                                                        reader.skipValue();
                                                }
                                                break;
                                        default:
                                                logger.debug("Found unexpected entry");
                                                reader.skipValue();
                                                continue;
                                }
                        }
                        reader.endObject();
                        Long newId = wlSiteRepository.save(wlSite).getId();
                        maps.getWhitelistedSiteOldToNewIdMap().put(currentId, newId);
                }
                reader.endArray();
                logger.info("Done reading whitelisted sites");
        }

supportsVersion()

boolean org.mitre.openid.connect.service.impl.MITREidDataService_1_1.supportsVersion ( String  version )

inline

org.mitre.openid.connect.service.MITREidDataServiceを実装しています。

                                                       {
                return THIS_VERSION.equals(version);
        }

toUTCString()

String org.mitre.openid.connect.service.impl.MITREidDataServiceSupport.toUTCString ( Date  value )

inlineprotectedinherited

                                                 {
                if (value == null) {
                        return null;
                }
                return dateFormatter.print(value, Locale.ENGLISH);
        }

utcToDate()

Date org.mitre.openid.connect.service.impl.MITREidDataServiceSupport.utcToDate ( String  value )

inlineprotectedinherited

                                               {
                if (value == null) {
                        return null;
                }
                try {
                        return dateFormatter.parse(value, Locale.ENGLISH);
                } catch (ParseException ex) {
                        logger.error("Unable to parse datetime {}", value, ex);
                }
                return null;
        }

メンバ詳解

ACCESSTOKENS

final String org.mitre.openid.connect.service.MITREidDataService.ACCESSTOKENS = "accessTokens"

staticinherited

approvedSiteRepository

ApprovedSiteRepository org.mitre.openid.connect.service.impl.MITREidDataService_1_1.approvedSiteRepository

private

AUTHENTICATIONHOLDERS

final String org.mitre.openid.connect.service.MITREidDataService.AUTHENTICATIONHOLDERS = "authenticationHolders"

staticinherited

authHolderRepository

AuthenticationHolderRepository org.mitre.openid.connect.service.impl.MITREidDataService_1_1.authHolderRepository

private

BLACKLISTEDSITES

final String org.mitre.openid.connect.service.MITREidDataService.BLACKLISTEDSITES = "blacklistedSites"

staticinherited

blSiteRepository

BlacklistedSiteRepository org.mitre.openid.connect.service.impl.MITREidDataService_1_1.blSiteRepository

private

clientRepository

OAuth2ClientRepository org.mitre.openid.connect.service.impl.MITREidDataService_1_1.clientRepository

private

CLIENTS

final String org.mitre.openid.connect.service.MITREidDataService.CLIENTS = "clients"

staticinherited

extensions

List<MITREidDataServiceExtension> org.mitre.openid.connect.service.impl.MITREidDataService_1_1.extensions = Collections.emptyList()

private

GRANTS

final String org.mitre.openid.connect.service.MITREidDataService.GRANTS = "grants"

staticinherited

logger

final Logger org.mitre.openid.connect.service.impl.MITREidDataService_1_1.logger = LoggerFactory.getLogger(MITREidDataService_1_1.class)

staticprivate

Logger for this class

maps

MITREidDataServiceMaps org.mitre.openid.connect.service.impl.MITREidDataService_1_1.maps = new MITREidDataServiceMaps()

private

MITREID_CONNECT_1_0

final String org.mitre.openid.connect.service.MITREidDataService.MITREID_CONNECT_1_0 = "mitreid-connect-1.0"

staticinherited

Data member for 1.X configurations

MITREID_CONNECT_1_1

final String org.mitre.openid.connect.service.MITREidDataService.MITREID_CONNECT_1_1 = "mitreid-connect-1.1"

staticinherited

MITREID_CONNECT_1_2

final String org.mitre.openid.connect.service.MITREidDataService.MITREID_CONNECT_1_2 = "mitreid-connect-1.2"

staticinherited

MITREID_CONNECT_1_3

final String org.mitre.openid.connect.service.MITREidDataService.MITREID_CONNECT_1_3 = "mitreid-connect-1.3"

staticinherited

REFRESHTOKENS

final String org.mitre.openid.connect.service.MITREidDataService.REFRESHTOKENS = "refreshTokens"

staticinherited

sysScopeRepository

SystemScopeRepository org.mitre.openid.connect.service.impl.MITREidDataService_1_1.sysScopeRepository

private

SYSTEMSCOPES

final String org.mitre.openid.connect.service.MITREidDataService.SYSTEMSCOPES = "systemScopes"

staticinherited

THIS_VERSION

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_1.THIS_VERSION = MITREID_CONNECT_1_1

staticprivate

tokenRepository

OAuth2TokenRepository org.mitre.openid.connect.service.impl.MITREidDataService_1_1.tokenRepository

private

WHITELISTEDSITES

final String org.mitre.openid.connect.service.MITREidDataService.WHITELISTEDSITES = "whitelistedSites"

staticinherited

wlSiteRepository

WhitelistedSiteRepository org.mitre.openid.connect.service.impl.MITREidDataService_1_1.wlSiteRepository

private

---

このクラス詳解は次のファイルから抽出されました:

• D:/AppData/OpenId/mitreid-connect/src/openid-connect-server/src/main/java/org/mitre/openid/connect/service/impl/MITREidDataService_1_1.java