org.apache.cxf.fediz.service.oidc

Class FedizSubjectCreator

java.lang.Object

org.apache.cxf.fediz.service.oidc.FedizSubjectCreator

All Implemented Interfaces:

org.apache.cxf.rs.security.oauth2.provider.SubjectCreator

public class FedizSubjectCreator
extends Object
implements org.apache.cxf.rs.security.oauth2.provider.SubjectCreator

Constructor Summary

Constructors

Constructor and Description
FedizSubjectCreator()

Method Summary

Modifier and Type	Method and Description
org.apache.cxf.rs.security.oidc.idp.OidcUserSubject	createUserSubject(org.apache.cxf.jaxrs.ext.MessageContext mc, javax.ws.rs.core.MultivaluedMap<String,String> params)
void	setIdTokenIssuer(String idTokenIssuer)
void	setStripPathFromIssuerUri(boolean stripPathFromIssuerUri)
void	setSupportedClaims(Map<String,String> supportedClaims) Set a map of supported claims.
void	setTimeToLive(long timeToLive) Time to live in seconds (used for id_token exp claim).

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

FedizSubjectCreator

public FedizSubjectCreator()

Method Detail

createUserSubject

public org.apache.cxf.rs.security.oidc.idp.OidcUserSubject createUserSubject(org.apache.cxf.jaxrs.ext.MessageContext mc,
                                                                             javax.ws.rs.core.MultivaluedMap<String,String> params)

Specified by:

createUserSubject in interface org.apache.cxf.rs.security.oauth2.provider.SubjectCreator

setIdTokenIssuer

public void setIdTokenIssuer(String idTokenIssuer)

setSupportedClaims

public void setSupportedClaims(Map<String,String> supportedClaims)

Set a map of supported claims. The map is from a SAML ClaimType URI String to a claim value that is sent in the claims parameter. So for example: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/role -> role If the token contains a the former, and the OpenId claims contains the latter, then the claim value will be encoded in the IdToken using the latter key.

setStripPathFromIssuerUri

public void setStripPathFromIssuerUri(boolean stripPathFromIssuerUri)

setTimeToLive

public void setTimeToLive(long timeToLive)

Time to live in seconds (used for id_token exp claim). If this value is set and strictly positive, then the generated id_token will use this value for the exp claim. Otherwise, it will use maxInactiveInterval of httpSession, and if this later is not strictly positive, it will be 1 hour by default.

Parameters:

timeToLive - time to live in seconds of the id_token