com.nimbusds.openid.connect.sdk
Class OIDCAuthorizationRequestResolver

java.lang.Object
  com.nimbusds.openid.connect.sdk.OIDCAuthorizationRequestResolver

@ThreadSafe
public class OIDCAuthorizationRequestResolver
extends Object

OpenID Connect authorisation request resolver. Takes in a raw OIDCAuthorizationRequest and if an OpenID request object is present applies it to derive the final authorisation request parameters, ID Token and UserInfo claims.

To process OpenID request objects the resolver must be supplied with a retriever for remote JOSE objects and a decoder to handle their JOSE decoding and JWS validation and/or JWE decryption.

This class is thread-safe.

Version:

$version$ (2013-01-30)

Author:

Vladimir Dzhuvinov

Constructor Summary

OIDCAuthorizationRequestResolver(JOSEObjectDecoder decoder)
Creates a new OpenID Connect authorisation request resolver with a default JOSE object retriever.

OIDCAuthorizationRequestResolver(JOSEObjectRetriever retriever, JOSEObjectDecoder decoder)
Creates a new OpenID Connect authorisation request resolver.

Method Summary

JOSEObjectDecoder	getJOSEObjectDecoder() Gets the configured JOSE object decoder.
JOSEObjectRetriever	getJOSEObjectRetriever() Gets the configured JOSE object retriever.
ResolvedOIDCAuthorizationRequest	resolve(OIDCAuthorizationRequest request) Resolves an OpenID Connect authorisation request.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

OIDCAuthorizationRequestResolver

public OIDCAuthorizationRequestResolver(JOSEObjectDecoder decoder)

Creates a new OpenID Connect authorisation request resolver with a default JOSE object retriever.

Parameters:

decoder - A configured JOSE decoder and JWS validator/JWE decryptor for the optional OpenID request objects. Must not be null.

OIDCAuthorizationRequestResolver

public OIDCAuthorizationRequestResolver(JOSEObjectRetriever retriever,
                                        JOSEObjectDecoder decoder)

Creates a new OpenID Connect authorisation request resolver.

Parameters:

retriever - A configured retriever for optional OpenID request objects passed by URI reference. Must not be null.

decoder - A configured JOSE decoder and JWS validator/JWE decryptor for the optional OpenID request objects. Must not be null.

Method Detail

getJOSEObjectRetriever

public JOSEObjectRetriever getJOSEObjectRetriever()

Gets the configured JOSE object retriever.

Returns:

The JOSE object retriever.

getJOSEObjectDecoder

public JOSEObjectDecoder getJOSEObjectDecoder()

Gets the configured JOSE object decoder.

Returns:

The JOSE object decoder.

resolve

public ResolvedOIDCAuthorizationRequest resolve(OIDCAuthorizationRequest request)
                                         throws ResolveException

Resolves an OpenID Connect authorisation request.

Parameters:

request - The OpenID Connect authorisation request to resolve. Must not be null.

Returns:

The resolved requested authorisation parameters, ID Token and UserInfo claims.

Throws:

ResolveException - If the authorisation request couldn't be resolved due to an invalid OpenID request object.