Class OIDCProviderMetadata
- java.lang.Object
-
- com.nimbusds.oauth2.sdk.as.AuthorizationServerEndpointMetadata
-
- com.nimbusds.oauth2.sdk.as.AuthorizationServerMetadata
-
- com.nimbusds.openid.connect.sdk.op.OIDCProviderMetadata
-
public class OIDCProviderMetadata extends AuthorizationServerMetadata
OpenID Provider (OP) metadata.Related specifications:
- OpenID Connect Discovery 1.0, section 3.
- OpenID Connect Session Management 1.0, section 2.1 (draft 28).
- OpenID Connect Front-Channel Logout 1.0, section 3 (draft 02).
- OpenID Connect Back-Channel Logout 1.0, section 2.1 (draft 04).
- OAuth 2.0 Authorization Server Metadata (RFC 8414)
- OAuth 2.0 Mutual TLS Client Authentication and Certificate Bound Access Tokens (draft-ietf-oauth-mtls-15)
- Financial-grade API: JWT Secured Authorization Response Mode for OAuth 2.0 (JARM)
-
-
Constructor Summary
Constructors Constructor Description OIDCProviderMetadata(Issuer issuer, List<SubjectType> subjectTypes, URI jwkSetURI)
Creates a new OpenID Connect provider metadata instance.
-
Method Summary
All Methods Static Methods Instance Methods Concrete Methods Modifier and Type Method Description void
applyDefaults()
Applies the OpenID Provider metadata defaults where no values have been specified.List<ACR>
getACRs()
Gets the supported Authentication Context Class References (ACRs).URI
getCheckSessionIframeURI()
Gets the cross-origin check session iframe URI.List<String>
getClaims()
Gets the supported claims names.List<com.nimbusds.langtag.LangTag>
getClaimsLocales()
Gets the supported claims locales.List<ClaimType>
getClaimTypes()
Gets the supported claim types.List<Display>
getDisplays()
Gets the supported displays.URI
getEndSessionEndpointURI()
Gets the logout endpoint URI.List<com.nimbusds.jose.JWEAlgorithm>
getIDTokenJWEAlgs()
Gets the supported JWE algorithms for ID tokens.List<com.nimbusds.jose.EncryptionMethod>
getIDTokenJWEEncs()
Gets the supported encryption methods for ID tokens.List<com.nimbusds.jose.JWSAlgorithm>
getIDTokenJWSAlgs()
Gets the supported JWS algorithms for ID tokens.OIDCProviderEndpointMetadata
getMtlsEndpointAliases()
Gets the aliases for communication with mutual TLS.static Set<String>
getRegisteredParameterNames()
Gets the registered OpenID Connect provider metadata parameter names.List<SubjectType>
getSubjectTypes()
Gets the supported subject types.URI
getUserInfoEndpointURI()
Gets the UserInfo endpoint URI.List<com.nimbusds.jose.JWEAlgorithm>
getUserInfoJWEAlgs()
Gets the supported JWE algorithms for UserInfo JWTs.List<com.nimbusds.jose.EncryptionMethod>
getUserInfoJWEEncs()
Gets the supported encryption methods for UserInfo JWTs.List<com.nimbusds.jose.JWSAlgorithm>
getUserInfoJWSAlgs()
Gets the supported JWS algorithms for UserInfo JWTs.static OIDCProviderMetadata
parse(String s)
Parses an OpenID Provider metadata from the specified JSON object string.static OIDCProviderMetadata
parse(net.minidev.json.JSONObject jsonObject)
Parses an OpenID Provider metadata from the specified JSON object.static OIDCProviderMetadata
resolve(Issuer issuer)
Resolves OpenID Provider metadata from the specified issuer identifier.static OIDCProviderMetadata
resolve(Issuer issuer, int connectTimeout, int readTimeout)
Resolves OpenID Provider metadata from the specified issuer identifier.static URL
resolveURL(Issuer issuer)
Resolves OpenID Provider metadata URL from the specified issuer identifier.void
setACRs(List<ACR> acrValues)
Sets the supported Authentication Context Class References (ACRs).void
setCheckSessionIframeURI(URI checkSessionIframe)
Sets the cross-origin check session iframe URI.void
setClaimLocales(List<com.nimbusds.langtag.LangTag> claimsLocales)
Sets the supported claims locales.void
setClaims(List<String> claims)
Sets the supported claims names.void
setClaimTypes(List<ClaimType> claimTypes)
Sets the supported claim types.void
setDisplays(List<Display> displays)
Sets the supported displays.void
setEndSessionEndpointURI(URI endSessionEndpoint)
Sets the logout endpoint URI.void
setIDTokenJWEAlgs(List<com.nimbusds.jose.JWEAlgorithm> idTokenJWEAlgs)
Sets the supported JWE algorithms for ID tokens.void
setIDTokenJWEEncs(List<com.nimbusds.jose.EncryptionMethod> idTokenJWEEncs)
Sets the supported encryption methods for ID tokens.void
setIDTokenJWSAlgs(List<com.nimbusds.jose.JWSAlgorithm> idTokenJWSAlgs)
Sets the supported JWS algorithms for ID tokens.void
setMtlsEndpointAliases(AuthorizationServerEndpointMetadata mtlsEndpointAliases)
Sets the aliases for communication with mutual TLS.void
setSupportsBackChannelLogout(boolean backChannelLogoutSupported)
Sets the support for back-channel logout.void
setSupportsBackChannelLogoutSession(boolean backChannelLogoutSessionSupported)
Sets the support for back-channel logout with a session ID.void
setSupportsClaimsParams(boolean claimsParamSupported)
Sets the support for theclaims
authorisation request parameter.void
setSupportsFrontChannelLogout(boolean frontChannelLogoutSupported)
Sets the support for front-channel logout.void
setSupportsFrontChannelLogoutSession(boolean frontChannelLogoutSessionSupported)
Sets the support for front-channel logout with a session ID.void
setUserInfoEndpointURI(URI userInfoEndpoint)
Sets the UserInfo endpoint URI.void
setUserInfoJWEAlgs(List<com.nimbusds.jose.JWEAlgorithm> userInfoJWEAlgs)
Sets the supported JWE algorithms for UserInfo JWTs.void
setUserInfoJWEEncs(List<com.nimbusds.jose.EncryptionMethod> userInfoJWEEncs)
Sets the supported encryption methods for UserInfo JWTs.void
setUserInfoJWSAlgs(List<com.nimbusds.jose.JWSAlgorithm> userInfoJWSAlgs)
Sets the supported JWS algorithms for UserInfo JWTs.boolean
supportsBackChannelLogout()
Gets the support for back-channel logout.boolean
supportsBackChannelLogoutSession()
Gets the support for back-channel logout with a session ID.boolean
supportsClaimsParam()
Gets the support for theclaims
authorisation request parameter.boolean
supportsFrontChannelLogout()
Gets the support for front-channel logout.boolean
supportsFrontChannelLogoutSession()
Gets the support for front-channel logout with a session ID.net.minidev.json.JSONObject
toJSONObject()
Returns the JSON object representation of this OpenID Connect provider metadata.-
Methods inherited from class com.nimbusds.oauth2.sdk.as.AuthorizationServerMetadata
getAuthorizationJWEAlgs, getAuthorizationJWEEncs, getAuthorizationJWSAlgs, getCodeChallengeMethods, getCustomParameter, getCustomParameters, getCustomURIParameter, getGrantTypes, getIntrospectionEndpointAuthMethods, getIntrospectionEndpointJWSAlgs, getIssuer, getJWKSetURI, getPolicyURI, getRequestObjectJWEAlgs, getRequestObjectJWEEncs, getRequestObjectJWSAlgs, getResponseModes, getResponseTypes, getRevocationEndpointAuthMethods, getRevocationEndpointJWSAlgs, getScopes, getServiceDocsURI, getTermsOfServiceURI, getTokenEndpointAuthMethods, getTokenEndpointJWSAlgs, getUILocales, requiresRequestURIRegistration, setAuthorizationJWEAlgs, setAuthorizationJWEEncs, setAuthorizationJWSAlgs, setCodeChallengeMethods, setCustomParameter, setGrantTypes, setIntrospectionEndpointAuthMethods, setIntrospectionEndpointJWSAlgs, setJWKSetURI, setPolicyURI, setRequestObjectJWEAlgs, setRequestObjectJWEEncs, setRequestObjectJWSAlgs, setRequiresRequestURIRegistration, setResponseModes, setResponseTypes, setRevocationEndpointAuthMethods, setRevocationEndpointJWSAlgs, setScopes, setServiceDocsURI, setSupportsMutualTLSSenderConstrainedAccessTokens, setSupportsRequestParam, setSupportsRequestURIParam, setSupportsTLSClientCertificateBoundAccessTokens, setTermsOfServiceURI, setTokenEndpointAuthMethods, setTokenEndpointJWSAlgs, setUILocales, supportsMutualTLSSenderConstrainedAccessTokens, supportsRequestParam, supportsRequestURIParam, supportsTLSClientCertificateBoundAccessTokens
-
Methods inherited from class com.nimbusds.oauth2.sdk.as.AuthorizationServerEndpointMetadata
getAuthorizationEndpointURI, getDeviceAuthorizationEndpointURI, getIntrospectionEndpointURI, getPushedAuthorizationRequestEndpoint, getRegistrationEndpointURI, getRequestObjectEndpoint, getRevocationEndpointURI, getTokenEndpointURI, setAuthorizationEndpointURI, setDeviceAuthorizationEndpointURI, setIntrospectionEndpointURI, setPushedAuthorizationRequestEndpoint, setRegistrationEndpointURI, setRequestObjectEndpoint, setRevocationEndpointURI, setTokenEndpointURI, toString
-
-
-
-
Constructor Detail
-
OIDCProviderMetadata
public OIDCProviderMetadata(Issuer issuer, List<SubjectType> subjectTypes, URI jwkSetURI)
Creates a new OpenID Connect provider metadata instance.- Parameters:
issuer
- The issuer identifier. Must be an URI using the https scheme with no query or fragment component. Must not benull
.subjectTypes
- The supported subject types. At least one must be specified. Must not benull
.jwkSetURI
- The JWK set URI. Must not benull
.
-
-
Method Detail
-
setMtlsEndpointAliases
public void setMtlsEndpointAliases(AuthorizationServerEndpointMetadata mtlsEndpointAliases)
Description copied from class:AuthorizationServerMetadata
Sets the aliases for communication with mutual TLS. Corresponds to themtls_endpoint_aliases
metadata field.- Overrides:
setMtlsEndpointAliases
in classAuthorizationServerMetadata
- Parameters:
mtlsEndpointAliases
- The aliases for communication with mutual TLS, ornull
when no aliases are defined.
-
getMtlsEndpointAliases
public OIDCProviderEndpointMetadata getMtlsEndpointAliases()
Description copied from class:AuthorizationServerMetadata
Gets the aliases for communication with mutual TLS. Corresponds to themtls_endpoint_aliases
metadata field.- Overrides:
getMtlsEndpointAliases
in classAuthorizationServerMetadata
- Returns:
- The aliases for communication with mutual TLS, or
null
when no aliases are defined.
-
getRegisteredParameterNames
public static Set<String> getRegisteredParameterNames()
Gets the registered OpenID Connect provider metadata parameter names.- Returns:
- The registered OpenID Connect provider metadata parameter names, as an unmodifiable set.
-
getUserInfoEndpointURI
public URI getUserInfoEndpointURI()
Gets the UserInfo endpoint URI. Corresponds theuserinfo_endpoint
metadata field.- Returns:
- The UserInfo endpoint URI,
null
if not specified.
-
setUserInfoEndpointURI
public void setUserInfoEndpointURI(URI userInfoEndpoint)
Sets the UserInfo endpoint URI. Corresponds theuserinfo_endpoint
metadata field.- Parameters:
userInfoEndpoint
- The UserInfo endpoint URI,null
if not specified.
-
getCheckSessionIframeURI
public URI getCheckSessionIframeURI()
Gets the cross-origin check session iframe URI. Corresponds to thecheck_session_iframe
metadata field.- Returns:
- The check session iframe URI,
null
if not specified.
-
setCheckSessionIframeURI
public void setCheckSessionIframeURI(URI checkSessionIframe)
Sets the cross-origin check session iframe URI. Corresponds to thecheck_session_iframe
metadata field.- Parameters:
checkSessionIframe
- The check session iframe URI,null
if not specified.
-
getEndSessionEndpointURI
public URI getEndSessionEndpointURI()
Gets the logout endpoint URI. Corresponds to theend_session_endpoint
metadata field.- Returns:
- The logoout endpoint URI,
null
if not specified.
-
setEndSessionEndpointURI
public void setEndSessionEndpointURI(URI endSessionEndpoint)
Sets the logout endpoint URI. Corresponds to theend_session_endpoint
metadata field.- Parameters:
endSessionEndpoint
- The logoout endpoint URI,null
if not specified.
-
getACRs
public List<ACR> getACRs()
Gets the supported Authentication Context Class References (ACRs). Corresponds to theacr_values_supported
metadata field.- Returns:
- The supported ACRs,
null
if not specified.
-
setACRs
public void setACRs(List<ACR> acrValues)
Sets the supported Authentication Context Class References (ACRs). Corresponds to theacr_values_supported
metadata field.- Parameters:
acrValues
- The supported ACRs,null
if not specified.
-
getSubjectTypes
public List<SubjectType> getSubjectTypes()
Gets the supported subject types. Corresponds to thesubject_types_supported
metadata field.- Returns:
- The supported subject types.
-
getIDTokenJWSAlgs
public List<com.nimbusds.jose.JWSAlgorithm> getIDTokenJWSAlgs()
Gets the supported JWS algorithms for ID tokens. Corresponds to theid_token_signing_alg_values_supported
metadata field.- Returns:
- The supported JWS algorithms,
null
if not specified.
-
setIDTokenJWSAlgs
public void setIDTokenJWSAlgs(List<com.nimbusds.jose.JWSAlgorithm> idTokenJWSAlgs)
Sets the supported JWS algorithms for ID tokens. Corresponds to theid_token_signing_alg_values_supported
metadata field.- Parameters:
idTokenJWSAlgs
- The supported JWS algorithms,null
if not specified.
-
getIDTokenJWEAlgs
public List<com.nimbusds.jose.JWEAlgorithm> getIDTokenJWEAlgs()
Gets the supported JWE algorithms for ID tokens. Corresponds to theid_token_encryption_alg_values_supported
metadata field.- Returns:
- The supported JWE algorithms,
null
if not specified.
-
setIDTokenJWEAlgs
public void setIDTokenJWEAlgs(List<com.nimbusds.jose.JWEAlgorithm> idTokenJWEAlgs)
Sets the supported JWE algorithms for ID tokens. Corresponds to theid_token_encryption_alg_values_supported
metadata field.- Parameters:
idTokenJWEAlgs
- The supported JWE algorithms,null
if not specified.
-
getIDTokenJWEEncs
public List<com.nimbusds.jose.EncryptionMethod> getIDTokenJWEEncs()
Gets the supported encryption methods for ID tokens. Corresponds to theid_token_encryption_enc_values_supported
metadata field.- Returns:
- The supported encryption methods,
null
if not specified.
-
setIDTokenJWEEncs
public void setIDTokenJWEEncs(List<com.nimbusds.jose.EncryptionMethod> idTokenJWEEncs)
Sets the supported encryption methods for ID tokens. Corresponds to theid_token_encryption_enc_values_supported
metadata field.- Parameters:
idTokenJWEEncs
- The supported encryption methods,null
if not specified.
-
getUserInfoJWSAlgs
public List<com.nimbusds.jose.JWSAlgorithm> getUserInfoJWSAlgs()
Gets the supported JWS algorithms for UserInfo JWTs. Corresponds to theuserinfo_signing_alg_values_supported
metadata field.- Returns:
- The supported JWS algorithms,
null
if not specified.
-
setUserInfoJWSAlgs
public void setUserInfoJWSAlgs(List<com.nimbusds.jose.JWSAlgorithm> userInfoJWSAlgs)
Sets the supported JWS algorithms for UserInfo JWTs. Corresponds to theuserinfo_signing_alg_values_supported
metadata field.- Parameters:
userInfoJWSAlgs
- The supported JWS algorithms,null
if not specified.
-
getUserInfoJWEAlgs
public List<com.nimbusds.jose.JWEAlgorithm> getUserInfoJWEAlgs()
Gets the supported JWE algorithms for UserInfo JWTs. Corresponds to theuserinfo_encryption_alg_values_supported
metadata field.- Returns:
- The supported JWE algorithms,
null
if not specified.
-
setUserInfoJWEAlgs
public void setUserInfoJWEAlgs(List<com.nimbusds.jose.JWEAlgorithm> userInfoJWEAlgs)
Sets the supported JWE algorithms for UserInfo JWTs. Corresponds to theuserinfo_encryption_alg_values_supported
metadata field.- Parameters:
userInfoJWEAlgs
- The supported JWE algorithms,null
if not specified.
-
getUserInfoJWEEncs
public List<com.nimbusds.jose.EncryptionMethod> getUserInfoJWEEncs()
Gets the supported encryption methods for UserInfo JWTs. Corresponds to theuserinfo_encryption_enc_values_supported
metadata field.- Returns:
- The supported encryption methods,
null
if not specified.
-
setUserInfoJWEEncs
public void setUserInfoJWEEncs(List<com.nimbusds.jose.EncryptionMethod> userInfoJWEEncs)
Sets the supported encryption methods for UserInfo JWTs. Corresponds to theuserinfo_encryption_enc_values_supported
metadata field.- Parameters:
userInfoJWEEncs
- The supported encryption methods,null
if not specified.
-
getDisplays
public List<Display> getDisplays()
Gets the supported displays. Corresponds to thedisplay_values_supported
metadata field.- Returns:
- The supported displays,
null
if not specified.
-
setDisplays
public void setDisplays(List<Display> displays)
Sets the supported displays. Corresponds to thedisplay_values_supported
metadata field.- Parameters:
displays
- The supported displays,null
if not specified.
-
getClaimTypes
public List<ClaimType> getClaimTypes()
Gets the supported claim types. Corresponds to theclaim_types_supported
metadata field.- Returns:
- The supported claim types,
null
if not specified.
-
setClaimTypes
public void setClaimTypes(List<ClaimType> claimTypes)
Sets the supported claim types. Corresponds to theclaim_types_supported
metadata field.- Parameters:
claimTypes
- The supported claim types,null
if not specified.
-
getClaims
public List<String> getClaims()
Gets the supported claims names. Corresponds to theclaims_supported
metadata field.- Returns:
- The supported claims names,
null
if not specified.
-
setClaims
public void setClaims(List<String> claims)
Sets the supported claims names. Corresponds to theclaims_supported
metadata field.- Parameters:
claims
- The supported claims names,null
if not specified.
-
getClaimsLocales
public List<com.nimbusds.langtag.LangTag> getClaimsLocales()
Gets the supported claims locales. Corresponds to theclaims_locales_supported
metadata field.- Returns:
- The supported claims locales,
null
if not specified.
-
setClaimLocales
public void setClaimLocales(List<com.nimbusds.langtag.LangTag> claimsLocales)
Sets the supported claims locales. Corresponds to theclaims_locales_supported
metadata field.- Parameters:
claimsLocales
- The supported claims locales,null
if not specified.
-
supportsClaimsParam
public boolean supportsClaimsParam()
Gets the support for theclaims
authorisation request parameter. Corresponds to theclaims_parameter_supported
metadata field.- Returns:
true
if theclaim
parameter is supported, elsefalse
.
-
setSupportsClaimsParams
public void setSupportsClaimsParams(boolean claimsParamSupported)
Sets the support for theclaims
authorisation request parameter. Corresponds to theclaims_parameter_supported
metadata field.- Parameters:
claimsParamSupported
-true
if theclaim
parameter is supported, elsefalse
.
-
supportsFrontChannelLogout
public boolean supportsFrontChannelLogout()
Gets the support for front-channel logout. Corresponds to thefrontchannel_logout_supported
metadata field.- Returns:
true
if front-channel logout is supported, elsefalse
.
-
setSupportsFrontChannelLogout
public void setSupportsFrontChannelLogout(boolean frontChannelLogoutSupported)
Sets the support for front-channel logout. Corresponds to thefrontchannel_logout_supported
metadata field.- Parameters:
frontChannelLogoutSupported
-true
if front-channel logout is supported, elsefalse
.
-
supportsFrontChannelLogoutSession
public boolean supportsFrontChannelLogoutSession()
Gets the support for front-channel logout with a session ID. Corresponds to thefrontchannel_logout_session_supported
metadata field.- Returns:
true
if front-channel logout with a session ID is supported, elsefalse
.
-
setSupportsFrontChannelLogoutSession
public void setSupportsFrontChannelLogoutSession(boolean frontChannelLogoutSessionSupported)
Sets the support for front-channel logout with a session ID. Corresponds to thefrontchannel_logout_session_supported
metadata field.- Parameters:
frontChannelLogoutSessionSupported
-true
if front-channel logout with a session ID is supported, elsefalse
.
-
supportsBackChannelLogout
public boolean supportsBackChannelLogout()
Gets the support for back-channel logout. Corresponds to thebackchannel_logout_supported
metadata field.- Returns:
true
if back-channel logout is supported, elsefalse
.
-
setSupportsBackChannelLogout
public void setSupportsBackChannelLogout(boolean backChannelLogoutSupported)
Sets the support for back-channel logout. Corresponds to thebackchannel_logout_supported
metadata field.- Parameters:
backChannelLogoutSupported
-true
if back-channel logout is supported, elsefalse
.
-
supportsBackChannelLogoutSession
public boolean supportsBackChannelLogoutSession()
Gets the support for back-channel logout with a session ID. Corresponds to thebackchannel_logout_session_supported
metadata field.- Returns:
true
if back-channel logout with a session ID is supported, elsefalse
.
-
setSupportsBackChannelLogoutSession
public void setSupportsBackChannelLogoutSession(boolean backChannelLogoutSessionSupported)
Sets the support for back-channel logout with a session ID. Corresponds to thebackchannel_logout_session_supported
metadata field.- Parameters:
backChannelLogoutSessionSupported
-true
if back-channel logout with a session ID is supported, elsefalse
.
-
applyDefaults
public void applyDefaults()
Applies the OpenID Provider metadata defaults where no values have been specified.- The response modes default to
["query", "fragment"]
. - The grant types default to
["authorization_code", "implicit"]
. - The token endpoint authentication methods default to
["client_secret_basic"]
. - The claim types default to
["normal]
.
- Overrides:
applyDefaults
in classAuthorizationServerMetadata
- The response modes default to
-
toJSONObject
public net.minidev.json.JSONObject toJSONObject()
Returns the JSON object representation of this OpenID Connect provider metadata.- Overrides:
toJSONObject
in classAuthorizationServerMetadata
- Returns:
- The JSON object representation.
-
parse
public static OIDCProviderMetadata parse(net.minidev.json.JSONObject jsonObject) throws ParseException
Parses an OpenID Provider metadata from the specified JSON object.- Parameters:
jsonObject
- The JSON object to parse. Must not benull
.- Returns:
- The OpenID Provider metadata.
- Throws:
ParseException
- If the JSON object couldn't be parsed to an OpenID Provider metadata.
-
parse
public static OIDCProviderMetadata parse(String s) throws ParseException
Parses an OpenID Provider metadata from the specified JSON object string.- Parameters:
s
- The JSON object sting to parse. Must not benull
.- Returns:
- The OpenID Provider metadata.
- Throws:
ParseException
- If the JSON object string couldn't be parsed to an OpenID Provider metadata.
-
resolveURL
public static URL resolveURL(Issuer issuer) throws GeneralException
Resolves OpenID Provider metadata URL from the specified issuer identifier.- Parameters:
issuer
- The OpenID Provider issuer identifier. Must represent a valid HTTPS or HTTP URL. Must not benull
.- Returns:
- The OpenID Provider metadata URL.
- Throws:
GeneralException
- If the issuer identifier is invalid.
-
resolve
public static OIDCProviderMetadata resolve(Issuer issuer) throws GeneralException, IOException
Resolves OpenID Provider metadata from the specified issuer identifier. The metadata is downloaded by HTTP GET from[issuer-url]/.well-known/openid-configuration
.- Parameters:
issuer
- The OpenID Provider issuer identifier. Must represent a valid HTTPS or HTTP URL. Must not benull
.- Returns:
- The OpenID Provider metadata.
- Throws:
GeneralException
- If the issuer identifier or the downloaded metadata are invalid.IOException
- On a HTTP exception.
-
resolve
public static OIDCProviderMetadata resolve(Issuer issuer, int connectTimeout, int readTimeout) throws GeneralException, IOException
Resolves OpenID Provider metadata from the specified issuer identifier. The metadata is downloaded by HTTP GET from[issuer-url]/.well-known/openid-configuration
, using the specified HTTP timeouts.- Parameters:
issuer
- The issuer identifier. Must represent a valid HTTPS or HTTP URL. Must not benull
.connectTimeout
- The HTTP connect timeout, in milliseconds. Zero implies no timeout. Must not be negative.readTimeout
- The HTTP response read timeout, in milliseconds. Zero implies no timeout. Must not be negative.- Returns:
- The OpenID Provider metadata.
- Throws:
GeneralException
- If the issuer identifier or the downloaded metadata are invalid.IOException
- On a HTTP exception.
-
-