Package net.shibboleth.idp.plugin.oidc.op.profile.flow

Class AbstractOidcClientAuthenticationFlowTest

java.lang.Object

org.springframework.test.context.testng.AbstractTestNGSpringContextTests

net.shibboleth.idp.test.flows.AbstractFlowTest

net.shibboleth.idp.plugin.oidc.op.profile.flow.AbstractOidcFlowTest

net.shibboleth.idp.plugin.oidc.op.profile.flow.AbstractOidcApiFlowTest

net.shibboleth.idp.plugin.oidc.op.profile.flow.AbstractOidcClientAuthenticationFlowTest

All Implemented Interfaces:

Aware, ApplicationContextAware, IHookable, ITestNGListener

Direct Known Subclasses:

ClientCredentialsTokenFlowTest, IntrospectionFlowTest, RevocationFlowTest, TokenFlowTest

public abstract class AbstractOidcClientAuthenticationFlowTest
extends AbstractOidcApiFlowTest

Base unit test class for flows involving JWT based authentication (client_secret_jwt or private_key_jwt).

Field Summary

Fields

Modifier and Type	Field	Description
(package private) String	clientId
(package private) String	clientIdSaml
(package private) String	clientSecret
(package private) String	clientSecretSaml
(package private) String	jwtAud
(package private) RSAPrivateKey	rsaPrivateKey
(package private) RSAPublicKey	rsaPublicKey

Fields inherited from class net.shibboleth.idp.plugin.oidc.op.profile.flow.AbstractOidcFlowTest

END_STATE_ID

Fields inherited from class net.shibboleth.idp.test.flows.AbstractFlowTest

builderFactory, certFactoryBean, directoryServer, END_STATE_OUTPUT_ATTR_EXPR, END_STATE_OUTPUT_ATTR_NAME, externalContext, flowExecutor, idGenerator, IDP_ENTITY_ID, idpCredential, IP_ADDRESS_AUTHN_FLOW_ID, IP_ADDRESS_AUTHN_MAP_BEAN_NAME, KEYSTORE_FILE, LDIF_FILE, marshallerFactory, parserPool, request, response, SAML1_TRANSFORM_C14N_BEAN_NAME, SAML2_TRANSFORM_C14N_BEAN_NAME, SP_ACS_URL, SP_ENTITY_ID, SP_RELAY_STATE, spCredential, unmarshallerFactory

Fields inherited from class org.springframework.test.context.testng.AbstractTestNGSpringContextTests

applicationContext, logger

Constructor Summary

Constructors

Constructor	Description
AbstractOidcClientAuthenticationFlowTest(String flowId)

Method Summary

Modifier and Type	Method	Description
protected abstract void	assertSuccessResponse(FlowExecutionResult result)	Verify that the given result is a success response.
protected com.nimbusds.oauth2.sdk.auth.PrivateKeyJWT	buildPrivateKeyJwtAuth()
protected com.nimbusds.oauth2.sdk.auth.ClientSecretJWT	buildSecretJwtAuth(String secret)
protected com.nimbusds.jwt.JWTClaimsSet	claimsSetExpiredExp()
protected com.nimbusds.jwt.JWTClaimsSet	claimsSetIssuedInTheFuture()
protected com.nimbusds.jwt.JWTClaimsSet	claimsSetMissingAud()
protected com.nimbusds.jwt.JWTClaimsSet	claimsSetMissingExp()
protected com.nimbusds.jwt.JWTClaimsSet	claimsSetMissingIss()
protected com.nimbusds.jwt.JWTClaimsSet	claimsSetMissingJti()
protected com.nimbusds.jwt.JWTClaimsSet	claimsSetMissingSub()
protected abstract Pair<String,String>	getErrorDetaisForJWTValidation()	Get the pair of error code and error description for the error produced via event EventIds.ACCESS_DENIED.
void	initKeys()
protected abstract FlowExecutionResult	launchWithJwtAuthentication(com.nimbusds.jwt.SignedJWT jwt, com.nimbusds.jose.JWSAlgorithm algorithm, com.nimbusds.oauth2.sdk.auth.ClientAuthenticationMethod method)	Launch the flow with the JWT client authentication method.
protected void	populateClientAssertionParams(Map<String,String> requestParameters, com.nimbusds.jwt.SignedJWT jwt)
protected void	populateClientAssertionParams(Map<String,String> requestParameters, com.nimbusds.oauth2.sdk.auth.JWTAuthentication clientAuth)
void	testInvalidPrivateKeyJWT_expiredExp()
void	testInvalidPrivateKeyJWT_issuedInTheFuture()
void	testInvalidPrivateKeyJWT_missingAud()
void	testInvalidPrivateKeyJWT_missingExp()
void	testInvalidPrivateKeyJWT_missingIss()
void	testInvalidPrivateKeyJWT_missingJti()
void	testInvalidPrivateKeyJWT_missingSub()
void	testInvalidPrivateKeyJWT_replayJti()
void	testInvalidSecretJWT_expiredExp()
void	testInvalidSecretJWT_issuedInTheFuture()
void	testInvalidSecretJWT_missingAud()
void	testInvalidSecretJWT_missingExp()
void	testInvalidSecretJWT_missingIss()
void	testInvalidSecretJWT_missingJti()
void	testInvalidSecretJWT_missingSub()
void	testInvalidSecretJWT_replayJti()
void	testValidPrivateKeyJWT()
void	testValidSecretJWT()
protected com.nimbusds.jwt.JWTClaimsSet	validClaimsSet()

Methods inherited from class net.shibboleth.idp.plugin.oidc.op.profile.flow.AbstractOidcApiFlowTest

buildJWTToken, buildJWTToken, buildLegacyToken, buildLegacyToken, buildRefreshToken, buildToken, buildToken, buildToken

Methods inherited from class net.shibboleth.idp.plugin.oidc.op.profile.flow.AbstractOidcFlowTest

assertErrorCode, assertErrorDescriptionContains, buildJsonForLegacyToken, createPrivateKeyJWT, createSecretJWT, getDataSealer, initializeMocks, initializeThreadLocals, parseErrorResponse, parseResponse, parseSuccessResponse, removeMetadata, setBasicAuth, setHttpFormRequest, setJsonRequest, setRequest, storeConsent, storeMetadata, storeMetadata, storeMetadata, storeMetadata, storeMetadata

Methods inherited from class net.shibboleth.idp.test.flows.AbstractFlowTest

assertFlowExecutionOutcome, assertFlowExecutionOutcome, assertFlowExecutionResult, assertProfileRequestContext, buildSOAP11Envelope, clearThreadLocals, getFlow, initializeFlowExecutor, initializeXMLObjectSupport, overrideEndStateOutput, overrideEndStateOutput, registerFlowsInParentRegistry, retrieveProfileRequestContext, setupDirectoryServer, teardownDirectoryServer

Methods inherited from class org.springframework.test.context.testng.AbstractTestNGSpringContextTests

run, setApplicationContext, springTestContextAfterTestClass, springTestContextAfterTestMethod, springTestContextBeforeTestClass, springTestContextBeforeTestMethod, springTestContextPrepareTestInstance

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

clientId

String clientId

clientSecret

String clientSecret

clientIdSaml

String clientIdSaml

clientSecretSaml

String clientSecretSaml

jwtAud

String jwtAud

rsaPrivateKey

RSAPrivateKey rsaPrivateKey

rsaPublicKey

RSAPublicKey rsaPublicKey

Constructor Detail

AbstractOidcClientAuthenticationFlowTest

public AbstractOidcClientAuthenticationFlowTest(String flowId)

Method Detail

initKeys

@BeforeClass
public void initKeys()
              throws NoSuchAlgorithmException

Throws:

NoSuchAlgorithmException

populateClientAssertionParams

protected void populateClientAssertionParams(Map<String,String> requestParameters,
                                             com.nimbusds.jwt.SignedJWT jwt)

testInvalidSecretJWT_missingSub

public void testInvalidSecretJWT_missingSub()
                                     throws Exception

Throws:

Exception

testInvalidSecretJWT_missingIss

public void testInvalidSecretJWT_missingIss()
                                     throws Exception

Throws:

Exception

testInvalidSecretJWT_missingAud

public void testInvalidSecretJWT_missingAud()
                                     throws Exception

Throws:

Exception

testInvalidSecretJWT_missingExp

public void testInvalidSecretJWT_missingExp()
                                     throws Exception

Throws:

Exception

testInvalidSecretJWT_expiredExp

public void testInvalidSecretJWT_expiredExp()
                                     throws Exception

Throws:

Exception

testInvalidSecretJWT_issuedInTheFuture

public void testInvalidSecretJWT_issuedInTheFuture()
                                            throws Exception

Throws:

Exception

testInvalidSecretJWT_missingJti

public void testInvalidSecretJWT_missingJti()
                                     throws Exception

Throws:

Exception

testInvalidSecretJWT_replayJti

public void testInvalidSecretJWT_replayJti()
                                    throws Exception

Throws:

Exception

testValidSecretJWT

public void testValidSecretJWT()
                        throws Exception

Throws:

Exception

testInvalidPrivateKeyJWT_missingSub

public void testInvalidPrivateKeyJWT_missingSub()
                                         throws Exception

Throws:

Exception

testInvalidPrivateKeyJWT_missingIss

public void testInvalidPrivateKeyJWT_missingIss()
                                         throws Exception

Throws:

Exception

testInvalidPrivateKeyJWT_missingAud

public void testInvalidPrivateKeyJWT_missingAud()
                                         throws Exception

Throws:

Exception

testInvalidPrivateKeyJWT_missingExp

public void testInvalidPrivateKeyJWT_missingExp()
                                         throws Exception

Throws:

Exception

testInvalidPrivateKeyJWT_expiredExp

public void testInvalidPrivateKeyJWT_expiredExp()
                                         throws Exception

Throws:

Exception

testInvalidPrivateKeyJWT_issuedInTheFuture

public void testInvalidPrivateKeyJWT_issuedInTheFuture()
                                                throws Exception

Throws:

Exception

testInvalidPrivateKeyJWT_missingJti

public void testInvalidPrivateKeyJWT_missingJti()
                                         throws Exception

Throws:

Exception

testInvalidPrivateKeyJWT_replayJti

public void testInvalidPrivateKeyJWT_replayJti()
                                        throws Exception

Throws:

Exception

testValidPrivateKeyJWT

public void testValidPrivateKeyJWT()
                            throws Exception

Throws:

Exception

claimsSetMissingSub

protected com.nimbusds.jwt.JWTClaimsSet claimsSetMissingSub()

claimsSetMissingIss

protected com.nimbusds.jwt.JWTClaimsSet claimsSetMissingIss()

claimsSetMissingAud

protected com.nimbusds.jwt.JWTClaimsSet claimsSetMissingAud()

claimsSetMissingExp

protected com.nimbusds.jwt.JWTClaimsSet claimsSetMissingExp()

claimsSetExpiredExp

protected com.nimbusds.jwt.JWTClaimsSet claimsSetExpiredExp()

claimsSetIssuedInTheFuture

protected com.nimbusds.jwt.JWTClaimsSet claimsSetIssuedInTheFuture()

claimsSetMissingJti

protected com.nimbusds.jwt.JWTClaimsSet claimsSetMissingJti()

validClaimsSet

protected com.nimbusds.jwt.JWTClaimsSet validClaimsSet()

buildSecretJwtAuth

protected com.nimbusds.oauth2.sdk.auth.ClientSecretJWT buildSecretJwtAuth(String secret)
                                                                   throws com.nimbusds.jose.JOSEException,
                                                                          URISyntaxException

Throws:

com.nimbusds.jose.JOSEException

URISyntaxException

buildPrivateKeyJwtAuth

protected com.nimbusds.oauth2.sdk.auth.PrivateKeyJWT buildPrivateKeyJwtAuth()
                                                                     throws com.nimbusds.jose.JOSEException,
                                                                            URISyntaxException

Throws:

com.nimbusds.jose.JOSEException

URISyntaxException

populateClientAssertionParams

protected void populateClientAssertionParams(Map<String,String> requestParameters,
                                             com.nimbusds.oauth2.sdk.auth.JWTAuthentication clientAuth)

launchWithJwtAuthentication

protected abstract FlowExecutionResult launchWithJwtAuthentication(com.nimbusds.jwt.SignedJWT jwt,
                                                                   com.nimbusds.jose.JWSAlgorithm algorithm,
                                                                   com.nimbusds.oauth2.sdk.auth.ClientAuthenticationMethod method)
                                                            throws Exception

Launch the flow with the JWT client authentication method.

Parameters:

jwt - The JWT to be used for client authentication.

algorithm - The algorithm to be used in the client authentication.

method - The client authentication method.

Returns:

The flow execution result.

Throws:

Exception

getErrorDetaisForJWTValidation

protected abstract Pair<String,String> getErrorDetaisForJWTValidation()

Get the pair of error code and error description for the error produced via event EventIds.ACCESS_DENIED. This is abstract due to the fact that each endpoint may have its own mappings.

Returns:

The pair of error code and error description.

assertSuccessResponse

protected abstract void assertSuccessResponse(FlowExecutionResult result)

Verify that the given result is a success response.

Parameters:

result - The flow execution result to be verified.