Java Issuer类代码示例

import com.nimbusds.oauth2.sdk.id.Issuer; //导入依赖的package包/类
@Bean
public TokenEndpoint tokenEndpoint() {
	AuthorizationCodeGrantHandler authorizationCodeGrantHandler = new AuthorizationCodeGrantHandler(
			clientRepository(), tokenService(), authorizationCodeService());
	ResourceOwnerPasswordCredentialsGrantHandler passwordCredentialsGrantHandler = new ResourceOwnerPasswordCredentialsGrantHandler(
			clientRepository(), tokenService(), scopeResolver(), authenticationHandler());
	ClientCredentialsGrantHandler clientCredentialsGrantHandler = new ClientCredentialsGrantHandler(
			clientRepository(), scopeResolver(), tokenService());
	RefreshTokenGrantHandler refreshTokenGrantHandler = new RefreshTokenGrantHandler(clientRepository(),
			tokenService(), refreshTokenStore());

	Map<Class<?>, GrantHandler> grantHandlers = new HashMap<>();
	grantHandlers.put(AuthorizationCodeGrant.class, authorizationCodeGrantHandler);
	grantHandlers.put(ResourceOwnerPasswordCredentialsGrant.class, passwordCredentialsGrantHandler);
	grantHandlers.put(ClientCredentialsGrant.class, clientCredentialsGrantHandler);
	grantHandlers.put(RefreshTokenGrant.class, refreshTokenGrantHandler);

	return new TokenEndpoint(grantHandlers, new Issuer("http://example.com"), clientRepository());
}
 

import com.nimbusds.oauth2.sdk.id.Issuer; //导入依赖的package包/类
@Override
public IDTokenClaimsSet validate(final JWT idToken, final Nonce expectedNonce) throws BadJOSEException, JOSEException {
    try {
        if (originalIssuer.contains("%7Btenantid%7D")) {
            Object tid = idToken.getJWTClaimsSet().getClaim("tid");
            if (tid == null) {
                throw new BadJWTException("ID token does not contain the 'tid' claim");
            }
            base = new IDTokenValidator(new Issuer(originalIssuer.replace("%7Btenantid%7D", tid.toString())),
                    base.getClientID(), base.getJWSKeySelector(), base.getJWEKeySelector());
            base.setMaxClockSkew(getMaxClockSkew());
        }
    } catch (ParseException e) {
        throw new BadJWTException(e.getMessage(), e);
    }
    return base.validate(idToken, expectedNonce);
}
 

import com.nimbusds.oauth2.sdk.id.Issuer; //导入依赖的package包/类
@Override
public Response handle(HTTPRequest httpRequest, OIDCResourceReference reference) throws Exception
{
    Issuer issuer = this.manager.getIssuer();
    List<SubjectType> subjectTypes = Arrays.asList(SubjectType.PUBLIC);
    URI jwkSetURI = this.manager.createEndPointURI(JWKOIDCEndpoint.HINT);

    OIDCProviderMetadata metadata = new OIDCProviderMetadata(issuer, subjectTypes, jwkSetURI);

    metadata.setAuthorizationEndpointURI(this.manager.createEndPointURI(AuthorizationOIDCEndpoint.HINT));
    metadata.setTokenEndpointURI(this.manager.createEndPointURI(TokenOIDCEndpoint.HINT));
    metadata.setUserInfoEndpointURI(this.manager.createEndPointURI(UserInfoOIDCEndpoint.HINT));

    return new ContentResponse(CommonContentTypes.APPLICATION_JSON, metadata.toJSONObject().toString(),
        HTTPResponse.SC_OK);
}
 

import com.nimbusds.oauth2.sdk.id.Issuer; //导入依赖的package包/类
@Test
public void testSuccess() throws Exception {
    final IssuerCriterion criterion = new IssuerCriterion(new Issuer(issuer));
    final OIDCProviderMetadata metadata = resolver.resolveSingle(new CriteriaSet(criterion));
    Assert.assertNotNull(metadata);
    Assert.assertEquals(metadata.getIssuer().getValue(), issuer);
}
 

import com.nimbusds.oauth2.sdk.id.Issuer; //导入依赖的package包/类
@Test
public void testDynamic() throws Exception {
    final IssuerCriterion criterion = new IssuerCriterion(new Issuer(issuer));
    OIDCProviderMetadata metadata = resolver.resolveSingle(new CriteriaSet(criterion));
    Assert.assertNotNull(metadata);
    Assert.assertEquals(metadata.getIssuer().getValue(), issuer);
    ((DynamicFilesystemProviderMetadataResolver)resolver).refresh();
    metadata = resolver.resolveSingle(new CriteriaSet(criterion));
    Assert.assertNotNull(metadata.getCustomParameter(name));
    Assert.assertEquals(metadata.getCustomParameter(name), value);
}
 

import com.nimbusds.oauth2.sdk.id.Issuer; //导入依赖的package包/类
@Test
public void testSetters() throws URISyntaxException, ParseException {
    ctx.setAcr("acrValue");
    ctx.setAuthTime(1);
    ctx.setExp(2);
    Issuer issuer = new Issuer("iss");
    Subject sub = new Subject("sub");
    List<Audience> aud = new ArrayList<Audience>();
    aud.add(new Audience("aud"));
    IDTokenClaimsSet token = new IDTokenClaimsSet(issuer, sub, aud, new Date(), new Date());
    ctx.setIDToken(token);
    NameID id = new MockNameID();
    ctx.setNameId(id);
    URI uri = new URI("https://example.org");
    ctx.setRedirectURI(uri);
    ctx.setRequestedSubject("sub");
    Scope scope = new Scope();
    ctx.setScope(scope);
    JWSHeader header = new JWSHeader(JWSAlgorithm.ES256);
    SignedJWT sJWT = new SignedJWT(header, token.toJWTClaimsSet());
    ctx.setSignedIDToken(sJWT);
    Assert.assertEquals(ctx.getAcr().toString(), "acrValue");
    ctx.setAcr(null);
    Assert.assertNull(ctx.getAcr());
    Assert.assertEquals(ctx.getAuthTime(), new Date(1));
    Assert.assertEquals(ctx.getExp(), new Date(2));
    Assert.assertEquals(ctx.getIDToken(), token);
    Assert.assertEquals(ctx.getNameId(), id);
    Assert.assertEquals(ctx.getSignedIDToken(), sJWT);
    Assert.assertEquals(ctx.getRedirectURI(), uri);
    Assert.assertEquals(ctx.getRequestedSubject(), "sub");
    Assert.assertEquals(ctx.getScope(), scope);
}
 

import com.nimbusds.oauth2.sdk.id.Issuer; //导入依赖的package包/类
public DefaultTokenService(Issuer issuer, JwkSetLoader jwkSetLoader, ClaimSource claimSource,
		RefreshTokenStore refreshTokenStore) {
	Objects.requireNonNull(issuer, "issuer must not be null");
	Objects.requireNonNull(jwkSetLoader, "jwkSetLoader must not be null");
	Objects.requireNonNull(claimSource, "claimSource must not be null");
	Objects.requireNonNull(refreshTokenStore, "refreshTokenStore must not be null");
	this.issuer = issuer;
	this.jwkSetLoader = jwkSetLoader;
	this.claimSource = claimSource;
	this.refreshTokenStore = refreshTokenStore;
}
 

import com.nimbusds.oauth2.sdk.id.Issuer; //导入依赖的package包/类
public TokenRevocationEndpoint(Issuer issuer, ClientRepository clientRepository,
		RefreshTokenStore refreshTokenStore) {
	Objects.requireNonNull(issuer, "issuer must not be null");
	Objects.requireNonNull(clientRepository, "clientRepository must not be null");
	Objects.requireNonNull(refreshTokenStore, "refreshTokenStore must not be null");
	this.refreshTokenStore = refreshTokenStore;
	this.clientRequestValidator = new ClientRequestValidator(issuer, clientRepository);
}
 

import com.nimbusds.oauth2.sdk.id.Issuer; //导入依赖的package包/类
public TokenEndpoint(Map<Class<?>, GrantHandler> grantHandlers, Issuer issuer, ClientRepository clientRepository) {
	Objects.requireNonNull(grantHandlers, "grantHandlers must not be null");
	Objects.requireNonNull(issuer, "issuer must not be null");
	Objects.requireNonNull(clientRepository, "clientRepository must not be null");
	if (grantHandlers.isEmpty()) {
		throw new IllegalArgumentException("grantHandlers must not be empty");
	}
	this.grantHandlers = grantHandlers;
	this.clientRequestValidator = new ClientRequestValidator(issuer, clientRepository);
}
 

import com.nimbusds.oauth2.sdk.id.Issuer; //导入依赖的package包/类
protected Issuer getMetadataIssuer() {
	Issuer issuer;
	if (params.getBool(FORCE_HONEST_DISCOVERY_ISS)) {
		issuer = getHonestIssuer();
	} else {
		issuer = supplyHonestOrEvil(this::getHonestIssuer, this::getEvilIssuer);
	}
	return issuer;
}
 

import com.nimbusds.oauth2.sdk.id.Issuer; //导入依赖的package包/类
protected Issuer getTokenIssuer() {
	Issuer issuer;
	if (params.getBool(FORCE_HONEST_TOKEN_ISS)) {
		issuer = getHonestIssuer();
	} else {
		issuer = supplyHonestOrEvil(this::getHonestIssuer, this::getEvilIssuer);
	}
	return issuer;
}
 

import com.nimbusds.oauth2.sdk.id.Issuer; //导入依赖的package包/类
protected OIDCProviderMetadata getDefaultOPMetadata() throws ParseException {
	Issuer issuer = getMetadataIssuer();
	List<SubjectType> subjectTypes = Arrays.asList(SubjectType.PUBLIC);
	URI jwksUri = UriBuilder.fromUri(baseUri).path(JWKS_PATH).build();
	OIDCProviderMetadata md = new OIDCProviderMetadata(issuer, subjectTypes, jwksUri);
	md.applyDefaults();

	// endpoints
	URI authzEndpt = getMetadataAuthorizationEndpoint();
	URI tokenEndpt = getMetadataTokenEndpoint();
	URI userInfoEndpt = getMetadataUserinfoEndpoint();
	URI registrationEndpt = getMetadataRegistrationEndpoint();
	md.setAuthorizationEndpointURI(authzEndpt);
	md.setTokenEndpointURI(tokenEndpt);
	md.setUserInfoEndpointURI(userInfoEndpt);
	md.setRegistrationEndpointURI(registrationEndpt);

	// , ResponseType.parse("id_token"), ResponseType.parse("token id_token"));
	Scope scopes = new Scope("openid");
	List<ResponseType> responseTypes = Arrays.asList(ResponseType.parse("code"), ResponseType.parse("id_token"),
			ResponseType.parse("token id_token"));
	List<ResponseMode> responseModes = Arrays.asList(ResponseMode.QUERY, ResponseMode.FRAGMENT, ResponseMode.FORM_POST);
	List<GrantType> grantTypes = Arrays.asList(GrantType.AUTHORIZATION_CODE, GrantType.IMPLICIT);
	md.setScopes(scopes);
	md.setResponseTypes(responseTypes);
	md.setResponseModes(responseModes);
	md.setGrantTypes(grantTypes);

	// algorithms
	List<JWSAlgorithm> jwsAlgs = Arrays.asList(JWSAlgorithm.RS256, JWSAlgorithm.parse("none"));
	md.setIDTokenJWSAlgs(jwsAlgs);

	List<ClientAuthenticationMethod> authMethods = Arrays.asList(ClientAuthenticationMethod.CLIENT_SECRET_BASIC);
	md.setTokenEndpointAuthMethods(authMethods);

	List<Display> displays = Arrays.asList(Display.PAGE);
	md.setDisplays(displays);

	return md;
}
 

import com.nimbusds.oauth2.sdk.id.Issuer; //导入依赖的package包/类
public OIDCIdentityProvider(IdentityProvider provider, Issuer issuer, URI authURI, URI tokenURI, URI userInfoURI, IDTokenValidator rsaValidator, IDTokenValidator hmacValidator) {
	this.clientId = new ClientID(provider.getClientId());
	this.clientSecret = provider.getClientSecret();
	this.responseType = provider.getResponseType();
	this.scope = provider.getScope();
	this.clockSkew = provider.getClockSkew();
	this.checkNonce = provider.isCheckNonce();
	this.claims = parseClaimsRequest(provider.getClaims());
	this.issuer = issuer;
	this.authURI = authURI;
	this.tokenURI = tokenURI;
	this.userInfoURI = userInfoURI;
	this.rsaValidator = rsaValidator;
	this.hmacValidator = hmacValidator;
}
 

import com.nimbusds.oauth2.sdk.id.Issuer; //导入依赖的package包/类
private IDTokenClaimsSet validateToken(OAuthProvider provider, OAuthLoginRequestDTO oAuthLoginRequestDTO) throws MalformedURLException, ParseException, BadJOSEException, JOSEException {
    Issuer iss = new Issuer(provider.getIssuer());
    ClientID clientID = new ClientID(provider.getClientID());
    Nonce nonce = new Nonce(oAuthLoginRequestDTO.getNonce());
    URL jwkSetURL = new URL(provider.getJwkSetURL());
    JWSAlgorithm jwsAlg = JWSAlgorithm.parse(provider.getJwsAlgorithm());
    IDTokenValidator validator = new IDTokenValidator(iss, clientID, jwsAlg, jwkSetURL);
    JWT idToken = JWTParser.parse(oAuthLoginRequestDTO.getIdToken());
    return validator.validate(idToken, nonce);
}
 

import com.nimbusds.oauth2.sdk.id.Issuer; //导入依赖的package包/类
/**
 * @return the issuer
 * @throws MalformedURLException when failing to create the issuer
 */
public Issuer getIssuer() throws MalformedURLException
{
    XWikiContext xcontext = this.xcontextProvider.get();

    XWikiURLFactory urlFactory = xcontext.getURLFactory();

    return new Issuer(urlFactory.getServerURL(xcontext).toString());
}