net.trajano.ms.oidc

Class OpenIdConnectResource

java.lang.Object

net.trajano.ms.oidc.OpenIdConnectResource

@Component
 @Path(value="/oidc")
 @PermitAll
public class OpenIdConnectResource
extends Object

Field Summary

Fields

Modifier and Type	Field and Description
private AuthenticationUriBuilder	authenticationUriBuilder
private URI	authorizationEndpoint
private javax.ws.rs.client.Client	client
private org.springframework.cache.CacheManager	cm
private net.trajano.ms.core.CryptoOps	cryptoOps
private static String	ID_TOKEN "id_token" key in the ID Token response.
private static org.slf4j.Logger	LOG
private org.springframework.cache.Cache	serverStateCache
private ServiceConfiguration	serviceConfiguration

Constructor Summary

Constructors

Constructor and Description
OpenIdConnectResource()

Method Summary

Modifier and Type	Method and Description
javax.ws.rs.core.Response	auth(String state, String issuerId, String authorization) The state that is passed here is transformed to a JWT before passing to the OIDC IP.
URI	authUri(String state, String issuerId, String authorization)
com.google.gson.JsonObject	authUriJson(String state, String issuerId, String authorization)
javax.ws.rs.core.Response	callback(String code, String jwtState, String issuerId)
private URI	getRedirectUri(String authorization) Gets the redirect URI from authorization endpoint.
void	init()
void	setClient(javax.ws.rs.client.Client client)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

ID_TOKEN

private static final String ID_TOKEN

"id_token" key in the ID Token response.

See Also:

Constant Field Values

LOG

private static final org.slf4j.Logger LOG

authenticationUriBuilder

@Autowired
private AuthenticationUriBuilder authenticationUriBuilder

authorizationEndpoint

@Value(value="${authorization.endpoint}")
private URI authorizationEndpoint

client

@Context
private javax.ws.rs.client.Client client

cm

@Autowired
private org.springframework.cache.CacheManager cm

cryptoOps

@Autowired
private net.trajano.ms.core.CryptoOps cryptoOps

serverStateCache

private org.springframework.cache.Cache serverStateCache

serviceConfiguration

@Autowired
private ServiceConfiguration serviceConfiguration

Constructor Detail

OpenIdConnectResource

public OpenIdConnectResource()

Method Detail

auth

@Path(value="/auth/{issuer_id}")
 @POST
 @Consumes(value="application/x-www-form-urlencoded")
public javax.ws.rs.core.Response auth(@FormParam(value="state")
                                                                                                                                    String state,
                                                                                                                                    @PathParam(value="issuer_id")
                                                                                                                                    String issuerId,
                                                                                                                                    @HeaderParam(value="Authorization")
                                                                                                                                    String authorization)

The state that is passed here is transformed to a JWT before passing to the OIDC IP.

Parameters:

state - this is a client level state

issuerId - issuer

Returns:

a redirect

authUri

@Path(value="/auth-uri/{issuer_id}")
 @GET
 @Produces(value="text/plain")
public URI authUri(@QueryParam(value="state")
                                                                                             String state,
                                                                                             @PathParam(value="issuer_id")
                                                                                             String issuerId,
                                                                                             @HeaderParam(value="Authorization")
                                                                                             String authorization)

authUriJson

@Path(value="/auth-info/{issuer_id}")
 @GET
 @Produces(value="application/json")
public com.google.gson.JsonObject authUriJson(@QueryParam(value="state")
                                                                                                                               String state,
                                                                                                                               @PathParam(value="issuer_id")
                                                                                                                               String issuerId,
                                                                                                                               @HeaderParam(value="Authorization")
                                                                                                                               String authorization)

callback

@Path(value="/cb/{issuer_id}")
 @GET
public javax.ws.rs.core.Response callback(@QueryParam(value="code")
                                                                               String code,
                                                                               @QueryParam(value="state")
                                                                               String jwtState,
                                                                               @PathParam(value="issuer_id")
                                                                               String issuerId)
                                                                        throws org.jose4j.jwt.MalformedClaimException

Throws:

org.jose4j.jwt.MalformedClaimException

getRedirectUri

private URI getRedirectUri(String authorization)

Gets the redirect URI from authorization endpoint.

Parameters:

authorization - authorization header

Returns:

init

@PostConstruct
public void init()

setClient

public void setClient(javax.ws.rs.client.Client client)