Package net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl

Class BuildAccessTokenTest

java.lang.Object

org.opensaml.core.testing.OpenSAMLInitBaseTestCase

net.shibboleth.idp.plugin.oidc.op.profile.impl.BaseOIDCResponseActionTest

net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.BuildAccessTokenTest

public class BuildAccessTokenTest
extends BaseOIDCResponseActionTest

BuildAccessToken unit test.

Nested Class Summary

Nested classes/interfaces inherited from class net.shibboleth.idp.plugin.oidc.op.profile.impl.BaseOIDCResponseActionTest

BaseOIDCResponseActionTest.MockRevocationCache

Field Summary

Fields

Modifier and Type	Field	Description
private net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.BuildAccessToken	action	Action to test.

Fields inherited from class net.shibboleth.idp.plugin.oidc.op.profile.impl.BaseOIDCResponseActionTest

clientId, credentialEC256, credentialEC384, credentialEC521, credentialHMAC, credentialRSA, idGenerator, metadataCtx, profileRequestCtx, request, requestCtx, respCtx, rpCtx, subject

Constructor Summary

Constructors

Constructor	Description
BuildAccessTokenTest()

Method Summary

Modifier and Type	Method	Description
private void	initAction(String type, Function<ProfileRequestContext,BiFunction<ProfileRequestContext,Map<String,Object>,Map<String,Object>>> manipulationStrategy)	Init action bean based on test.
protected void	setUp()	Default setup.
void	testJWTSuccess()	Basic success case, direct reuse of requested scope/audience.
void	testJWTSuccessWithCustomClaim()	Basic success case, direct reuse of requested scope/audience.
void	testNoClientID()	Test no client ID.
void	testOpaqueSuccess()	Basic success case.
void	testOpaqueSuccessWithCustomClaims()	Basic success case with custom claims.
private void	verifyClaims(AccessTokenContext ctx, com.nimbusds.oauth2.sdk.Scope scope, Collection<String> audiences, Map<String,Object> customClaims)	Verify access token's claims.
protected void	verifyCustomClaims(com.nimbusds.jwt.JWTClaimsSet claimsSet, Map<String,Object> customClaims)

Methods inherited from class net.shibboleth.idp.plugin.oidc.op.profile.impl.BaseOIDCResponseActionTest

addEntryToMap, getDataSealer, initializeDataSealer, setAuthenticationRequest, setIdTokenToResponseContext, setTokenRequest, setUserInfoRequest, setUserInfoResponseToResponseContext, signIdTokenInResponseContext, signUserInfoResponseInResponseContext

Methods inherited from class org.opensaml.core.testing.OpenSAMLInitBaseTestCase

initOpenSAML

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

action

@Nullable
private net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.BuildAccessToken action

Action to test.

Constructor Detail

BuildAccessTokenTest

public BuildAccessTokenTest()

Method Detail

setUp

@BeforeMethod
protected void setUp()
              throws Exception

Description copied from class: BaseOIDCResponseActionTest

Default setup.

Overrides:

setUp in class BaseOIDCResponseActionTest

Throws:

Exception

testNoClientID

public void testNoClientID()
                    throws NoSuchAlgorithmException,
                           ComponentInitializationException

Test no client ID.

Throws:

ComponentInitializationException

NoSuchAlgorithmException

testOpaqueSuccess

public void testOpaqueSuccess()
                       throws ParseException,
                              DataSealerException,
                              ComponentInitializationException,
                              NoSuchAlgorithmException

Basic success case.

Throws:

ParseException

DataSealerException

ComponentInitializationException

NoSuchAlgorithmException

testOpaqueSuccessWithCustomClaims

public void testOpaqueSuccessWithCustomClaims()
                                       throws ParseException,
                                              DataSealerException,
                                              ComponentInitializationException,
                                              NoSuchAlgorithmException

Basic success case with custom claims.

Throws:

ParseException

DataSealerException

ComponentInitializationException

NoSuchAlgorithmException

testJWTSuccess

public void testJWTSuccess()
                    throws ParseException,
                           ComponentInitializationException,
                           NoSuchAlgorithmException,
                           DataSealerException

Basic success case, direct reuse of requested scope/audience.

Throws:

ParseException

ComponentInitializationException

NoSuchAlgorithmException

DataSealerException

testJWTSuccessWithCustomClaim

public void testJWTSuccessWithCustomClaim()
                                   throws ParseException,
                                          ComponentInitializationException,
                                          NoSuchAlgorithmException,
                                          DataSealerException

Basic success case, direct reuse of requested scope/audience.

Throws:

ParseException

ComponentInitializationException

NoSuchAlgorithmException

DataSealerException

initAction

private void initAction(@Nullable @NotEmpty
                        String type,
                        @Nullable
                        Function<ProfileRequestContext,BiFunction<ProfileRequestContext,Map<String,Object>,Map<String,Object>>> manipulationStrategy)
                 throws ComponentInitializationException,
                        NoSuchAlgorithmException

Init action bean based on test.

Parameters:

type - token type to use

manipulationStrategy - the manipulation strategy to use

Throws:

ComponentInitializationException

NoSuchAlgorithmException

verifyClaims

private void verifyClaims(@Nonnull
                          AccessTokenContext ctx,
                          @Nonnull
                          com.nimbusds.oauth2.sdk.Scope scope,
                          @Nonnull @NonnullElements
                          Collection<String> audiences,
                          Map<String,Object> customClaims)
                   throws NoSuchAlgorithmException,
                          ParseException,
                          DataSealerException,
                          ComponentInitializationException

Verify access token's claims.

Parameters:

ctx - access token context

scope - scope to check for

audiences - audiences to check for

customClaims - custom claims to check for, may be null

Throws:

ComponentInitializationException

DataSealerException

ParseException

NoSuchAlgorithmException

verifyCustomClaims

protected void verifyCustomClaims(com.nimbusds.jwt.JWTClaimsSet claimsSet,
                                  Map<String,Object> customClaims)