org.mitre.openid.connect.token.ConnectTokenEnhancer クラス

org.mitre.openid.connect.token.ConnectTokenEnhancer の継承関係図

org.mitre.openid.connect.token.ConnectTokenEnhancer 連携図

公開メンバ関数
OAuth2AccessToken	enhance (OAuth2AccessToken accessToken, OAuth2Authentication authentication)
ConfigurationPropertiesBean	getConfigBean ()
void	setConfigBean (ConfigurationPropertiesBean configBean)
JWTSigningAndValidationService	getJwtService ()
void	setJwtService (JWTSigningAndValidationService jwtService)
ClientDetailsEntityService	getClientService ()
void	setClientService (ClientDetailsEntityService clientService)

非公開変数類
ConfigurationPropertiesBean	configBean
JWTSigningAndValidationService	jwtService
ClientDetailsEntityService	clientService
UserInfoService	userInfoService
OIDCTokenService	connectTokenService

静的非公開変数類
static final Logger	logger = LoggerFactory.getLogger(ConnectTokenEnhancer.class)

詳解

関数詳解

enhance()

OAuth2AccessToken org.mitre.openid.connect.token.ConnectTokenEnhancer.enhance ( OAuth2AccessToken  accessToken, OAuth2Authentication  authentication  )

inline

Authorization request scope MUST include "openid" in OIDC, but access token request may or may not include the scope parameter. As long as the AuthorizationRequest has the proper scope, we can consider this a valid OpenID Connect request. Otherwise, we consider it to be a vanilla OAuth2 request.

Also, there must be a user authentication involved in the request for it to be considered OIDC and not OAuth, so we check for that as well.

                                                                                                             {

                OAuth2AccessTokenEntity token = (OAuth2AccessTokenEntity) accessToken;
                OAuth2Request originalAuthRequest = authentication.getOAuth2Request();

                String clientId = originalAuthRequest.getClientId();
                ClientDetailsEntity client = clientService.loadClientByClientId(clientId);

                Builder builder = new JWTClaimsSet.Builder()
                                .claim("azp", clientId)
                                .issuer(configBean.getIssuer())
                                .issueTime(new Date())
                                .expirationTime(token.getExpiration())
                                .subject(authentication.getName())
                                .jwtID(UUID.randomUUID().toString()); // set a random NONCE in the middle of it

                String audience = (String) authentication.getOAuth2Request().getExtensions().get("aud");
                if (!Strings.isNullOrEmpty(audience)) {
                        builder.audience(Lists.newArrayList(audience));
                }

                JWTClaimsSet claims = builder.build();

                JWSAlgorithm signingAlg = jwtService.getDefaultSigningAlgorithm();
                JWSHeader header = new JWSHeader(signingAlg, null, null, null, null, null, null, null, null, null,
                                jwtService.getDefaultSignerKeyId(),
                                null, null);
                SignedJWT signed = new SignedJWT(header, claims);

                jwtService.signJwt(signed);

                token.setJwt(signed);

                if (originalAuthRequest.getScope().contains(SystemScopeService.OPENID_SCOPE)
                                && !authentication.isClientOnly()) {

                        String username = authentication.getName();
                        UserInfo userInfo = userInfoService.getByUsernameAndClientId(username, clientId);

                        if (userInfo != null) {

                                JWT idToken = connectTokenService.createIdToken(client,
                                                originalAuthRequest, claims.getIssueTime(),
                                                userInfo.getSub(), token);

                                // attach the id token to the parent access token
                                token.setIdToken(idToken);
                        } else {
                                // can't create an id token if we can't find the user
                                logger.warn("Request for ID token when no user is present.");
                        }
                }

                return token;
        }

getClientService()

ClientDetailsEntityService org.mitre.openid.connect.token.ConnectTokenEnhancer.getClientService ( )

inline

                                                             {
                return clientService;
        }

getConfigBean()

ConfigurationPropertiesBean org.mitre.openid.connect.token.ConnectTokenEnhancer.getConfigBean ( )

inline

                                                           {
                return configBean;
        }

getJwtService()

JWTSigningAndValidationService org.mitre.openid.connect.token.ConnectTokenEnhancer.getJwtService ( )

inline

                                                              {
                return jwtService;
        }

setClientService()

void org.mitre.openid.connect.token.ConnectTokenEnhancer.setClientService ( ClientDetailsEntityService  clientService )

inline

                                                                               {
                this.clientService = clientService;
        }

setConfigBean()

void org.mitre.openid.connect.token.ConnectTokenEnhancer.setConfigBean ( ConfigurationPropertiesBean  configBean )

inline

                                                                          {
                this.configBean = configBean;
        }

setJwtService()

void org.mitre.openid.connect.token.ConnectTokenEnhancer.setJwtService ( JWTSigningAndValidationService  jwtService )

inline

                                                                             {
                this.jwtService = jwtService;
        }

メンバ詳解

clientService

ClientDetailsEntityService org.mitre.openid.connect.token.ConnectTokenEnhancer.clientService

private

configBean

ConfigurationPropertiesBean org.mitre.openid.connect.token.ConnectTokenEnhancer.configBean

private

connectTokenService

OIDCTokenService org.mitre.openid.connect.token.ConnectTokenEnhancer.connectTokenService

private

jwtService

JWTSigningAndValidationService org.mitre.openid.connect.token.ConnectTokenEnhancer.jwtService

private

logger

final Logger org.mitre.openid.connect.token.ConnectTokenEnhancer.logger = LoggerFactory.getLogger(ConnectTokenEnhancer.class)

staticprivate

Logger for this class

userInfoService

UserInfoService org.mitre.openid.connect.token.ConnectTokenEnhancer.userInfoService

private

---

このクラス詳解は次のファイルから抽出されました:

• D:/AppData/OpenId/mitreid-connect/src/openid-connect-server/src/main/java/org/mitre/openid/connect/token/ConnectTokenEnhancer.java