Package net.shibboleth.idp.plugin.oidc.op.profile.impl

Class ValidateScopeTest

java.lang.Object

org.opensaml.core.testing.OpenSAMLInitBaseTestCase

net.shibboleth.idp.plugin.oidc.op.profile.impl.BaseOIDCResponseActionTest

net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateScopeTest

public class ValidateScopeTest
extends BaseOIDCResponseActionTest

ValidateScope unit test.

Nested Class Summary

Nested classes/interfaces inherited from class net.shibboleth.idp.plugin.oidc.op.profile.impl.BaseOIDCResponseActionTest

BaseOIDCResponseActionTest.MockRevocationCache

Field Summary

Fields

Modifier and Type	Field	Description
private net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateScope	action	Action to test.
private com.nimbusds.openid.connect.sdk.rp.OIDCClientMetadata	metaData	Client metadata.

Fields inherited from class net.shibboleth.idp.plugin.oidc.op.profile.impl.BaseOIDCResponseActionTest

clientId, credentialEC256, credentialEC384, credentialEC521, credentialHMAC, credentialRSA, idGenerator, metadataCtx, profileRequestCtx, request, requestCtx, respCtx, rpCtx, subject

Constructor Summary

Constructors

Constructor	Description
ValidateScopeTest()

Method Summary

Modifier and Type	Method	Description
private void	init()
void	testAuthnNoScopes()	Test that action copes if there are no registered scopes in the metadata during an Authentication request.
void	testAuthnSuccess()	Test that action filters out non valid scopes during an Authentication request.
void	testTokenClientCredentials()	Test that action filters out unregistered scopes on back-channel with no prior grant.
void	testTokenGrantedScopes()	Test that action filters out unregistered scopes on back-channel with prior grants.
void	testTokenNoGrantedScopes()	Test that action filters out unregistered scopes on back-channel with prior grant of nothing.
void	testUserInfoGrantedScopes()	Test that action filters out unregistered scopes on UserInfo with prior grants.

Methods inherited from class net.shibboleth.idp.plugin.oidc.op.profile.impl.BaseOIDCResponseActionTest

addEntryToMap, getDataSealer, initializeDataSealer, setAuthenticationRequest, setIdTokenToResponseContext, setTokenRequest, setUp, setUserInfoRequest, setUserInfoResponseToResponseContext, signIdTokenInResponseContext, signUserInfoResponseInResponseContext

Methods inherited from class org.opensaml.core.testing.OpenSAMLInitBaseTestCase

initOpenSAML

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

action

private net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateScope action

Action to test.

metaData

private com.nimbusds.openid.connect.sdk.rp.OIDCClientMetadata metaData

Client metadata.

Constructor Detail

ValidateScopeTest

public ValidateScopeTest()

Method Detail

init

@BeforeMethod
private void init()
           throws ComponentInitializationException,
                  URISyntaxException

Throws:

ComponentInitializationException

URISyntaxException

testAuthnSuccess

public void testAuthnSuccess()
                      throws ComponentInitializationException

Test that action filters out non valid scopes during an Authentication request.

The message here is created by the base class's setup method.

Throws:

ComponentInitializationException

testAuthnNoScopes

public void testAuthnNoScopes()
                       throws ComponentInitializationException

Test that action copes if there are no registered scopes in the metadata during an Authentication request.

Throws:

ComponentInitializationException

testTokenClientCredentials

public void testTokenClientCredentials()
                                throws ComponentInitializationException,
                                       URISyntaxException

Test that action filters out unregistered scopes on back-channel with no prior grant.

This is most common for the client_credentials grant, which has no prior step.

Throws:

ComponentInitializationException

URISyntaxException

testTokenNoGrantedScopes

public void testTokenNoGrantedScopes()
                              throws ComponentInitializationException,
                                     URISyntaxException

Test that action filters out unregistered scopes on back-channel with prior grant of nothing.

This is likely impossible in practice, but theoretical.

Throws:

ComponentInitializationException

URISyntaxException

testTokenGrantedScopes

public void testTokenGrantedScopes()
                            throws ComponentInitializationException,
                                   URISyntaxException

Test that action filters out unregistered scopes on back-channel with prior grants.

Throws:

ComponentInitializationException

URISyntaxException

testUserInfoGrantedScopes

public void testUserInfoGrantedScopes()
                               throws ComponentInitializationException,
                                      URISyntaxException

Test that action filters out unregistered scopes on UserInfo with prior grants.

Exercises case with prior grants but nothing requested.

Throws:

ComponentInitializationException

URISyntaxException