Package net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl

Class ValidateAudienceTest

java.lang.Object

org.opensaml.core.testing.OpenSAMLInitBaseTestCase

net.shibboleth.idp.plugin.oidc.op.profile.impl.BaseOIDCResponseActionTest

net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.ValidateAudienceTest

public class ValidateAudienceTest
extends BaseOIDCResponseActionTest

ValidateAudience unit test.

Nested Class Summary

Nested classes/interfaces inherited from class net.shibboleth.idp.plugin.oidc.op.profile.impl.BaseOIDCResponseActionTest

BaseOIDCResponseActionTest.MockRevocationCache

Field Summary

Fields

Modifier and Type	Field	Description
private net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.ValidateAudience	action	Action to test.
private com.nimbusds.openid.connect.sdk.rp.OIDCClientMetadata	metaData	Client metadata.

Fields inherited from class net.shibboleth.idp.plugin.oidc.op.profile.impl.BaseOIDCResponseActionTest

clientId, credentialEC256, credentialEC384, credentialEC521, credentialHMAC, credentialRSA, idGenerator, metadataCtx, profileRequestCtx, request, requestCtx, respCtx, rpCtx, subject

Constructor Summary

Constructors

Constructor	Description
ValidateAudienceTest()

Method Summary

Modifier and Type	Method	Description
private void	init()
void	testTokenFailNonePrevGranted()	Test that action filters out unregistered audiences on back-channel with prior grant of nothing.
void	testTokenFailPrevGranted()	Test that action filters out unregistered audiences on back-channel with a prior grant.
void	testTokenFirstAudience()	Test that action filters out unregistered audiences on back-channel with no prior grant and selects the first registered value.
void	testTokenNoneAllowed()	Test that action filters out unregistered audiences on back-channel with no prior grant.
void	testTokenSuccess()	Test that action filters out unregistered audiences on back-channel with no prior grant and includes the registered values.

Methods inherited from class net.shibboleth.idp.plugin.oidc.op.profile.impl.BaseOIDCResponseActionTest

addEntryToMap, getDataSealer, initializeDataSealer, setAuthenticationRequest, setIdTokenToResponseContext, setTokenRequest, setUp, setUserInfoRequest, setUserInfoResponseToResponseContext, signIdTokenInResponseContext, signUserInfoResponseInResponseContext

Methods inherited from class org.opensaml.core.testing.OpenSAMLInitBaseTestCase

initOpenSAML

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

action

private net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.ValidateAudience action

Action to test.

metaData

private com.nimbusds.openid.connect.sdk.rp.OIDCClientMetadata metaData

Client metadata.

Constructor Detail

ValidateAudienceTest

public ValidateAudienceTest()

Method Detail

init

@BeforeMethod
private void init()
           throws ComponentInitializationException,
                  URISyntaxException

Throws:

ComponentInitializationException

URISyntaxException

testTokenNoneAllowed

public void testTokenNoneAllowed()
                          throws ComponentInitializationException,
                                 URISyntaxException

Test that action filters out unregistered audiences on back-channel with no prior grant.

This is most common for the client_credentials grant, which has no prior step.

Throws:

ComponentInitializationException

URISyntaxException

testTokenSuccess

public void testTokenSuccess()
                      throws ComponentInitializationException,
                             URISyntaxException

Test that action filters out unregistered audiences on back-channel with no prior grant and includes the registered values.

Throws:

ComponentInitializationException

URISyntaxException

testTokenFirstAudience

public void testTokenFirstAudience()
                            throws ComponentInitializationException,
                                   URISyntaxException

Test that action filters out unregistered audiences on back-channel with no prior grant and selects the first registered value.

Throws:

ComponentInitializationException

URISyntaxException

testTokenFailNonePrevGranted

public void testTokenFailNonePrevGranted()
                                  throws ComponentInitializationException,
                                         URISyntaxException

Test that action filters out unregistered audiences on back-channel with prior grant of nothing.

This is likely impossible in practice, but theoretical.

Throws:

ComponentInitializationException

URISyntaxException

testTokenFailPrevGranted

public void testTokenFailPrevGranted()
                              throws ComponentInitializationException,
                                     URISyntaxException

Test that action filters out unregistered audiences on back-channel with a prior grant.

Throws:

ComponentInitializationException

URISyntaxException