Package org.apache.syncope.core.rest.cxf.service

Class OIDCC4UIServiceImpl

java.lang.Object

org.apache.syncope.core.rest.cxf.service.AbstractService

org.apache.syncope.core.rest.cxf.service.OIDCC4UIServiceImpl

All Implemented Interfaces:

JAXRSService, OIDCC4UIService

public class OIDCC4UIServiceImpl
extends AbstractService
implements OIDCC4UIService

Field Summary

Fields

Modifier and Type	Field	Description
protected final OIDCC4UILogic	logic

Fields inherited from class org.apache.syncope.core.rest.cxf.service.AbstractService

LOG, messageContext, OPTIONS_ALLOW, searchContext, uriInfo

Fields inherited from interface org.apache.syncope.common.rest.api.service.JAXRSService

CRLF, DOUBLE_DASH, PARAM_ANYTYPE_KIND, PARAM_ANYTYPEKEY, PARAM_CONNID_PAGED_RESULTS_COOKIE, PARAM_DETAILS, PARAM_ENTITY_KEY, PARAM_FIQL, PARAM_KEYWORD, PARAM_MAX, PARAM_NOTIFICATION, PARAM_ORDERBY, PARAM_PAGE, PARAM_REALM, PARAM_RECURSIVE, PARAM_RESOURCE, PARAM_SIZE, PARAM_USER

Constructor Summary

Constructors

Constructor	Description
OIDCC4UIServiceImpl(OIDCC4UILogic logic)

Method Summary

Modifier and Type	Method	Description
void	backChannelLogout(String logoutToken, String redirectURI)	Removes the JWT matching the provided OIDC logout token.
OIDCRequest	createLoginRequest(String redirectURI, String op, boolean reauth)	Generates OpenID Connect authentication request for the Provider matching the provided op.
OIDCRequest	createLogoutRequest(String redirectURI)	Returns the endSession endpoint for the OP matching the requesting access token.
OIDCLoginResponse	login(String redirectURI, String authorizationCode, String op)	Uses the provided authorization code to go through the OpenID Connect tokens process and finally creates JWT for the matching user, if found.

Methods inherited from class org.apache.syncope.core.rest.cxf.service.AbstractService

applyPreference, buildPagedResult, checkETag, createResponse, findActualKey, getPreference, isNullPriorityAsync, modificationResponse, pageable, pageable, sort

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

logic

protected final OIDCC4UILogic logic

Constructor Details

OIDCC4UIServiceImpl

public OIDCC4UIServiceImpl(OIDCC4UILogic logic)

Method Details

createLoginRequest

public OIDCRequest createLoginRequest(String redirectURI,
 String op,
 boolean reauth)

Description copied from interface: OIDCC4UIService

Generates OpenID Connect authentication request for the Provider matching the provided op.

Specified by:

createLoginRequest in interface OIDCC4UIService

Parameters:

redirectURI - redirect URI

op - OpenID Connect Provider

reauth - whether max_age=0 and prompt=login shall be set on the request

Returns:

OpenID Connect authentication request

login

public OIDCLoginResponse login(String redirectURI,
 String authorizationCode,
 String op)

Description copied from interface: OIDCC4UIService

Uses the provided authorization code to go through the OpenID Connect tokens process and finally creates JWT for the matching user, if found.

Specified by:

login in interface OIDCC4UIService

Parameters:

redirectURI - redirect URI

authorizationCode - authorization code generated by the remote OpenID Connect Provider

op - OpenID Connect Provider

Returns:

JWT for the matching user plus attributes returned in the response

createLogoutRequest

public OIDCRequest createLogoutRequest(String redirectURI)

Description copied from interface: OIDCC4UIService

Returns the endSession endpoint for the OP matching the requesting access token.

Specified by:

createLogoutRequest in interface OIDCC4UIService

Parameters:

redirectURI - redirect URI

Returns:

endSession endpoint for the OP matching the requesting access token

backChannelLogout

public void backChannelLogout(String logoutToken,
 String redirectURI)

Description copied from interface: OIDCC4UIService

Removes the JWT matching the provided OIDC logout token.

Specified by:

backChannelLogout in interface OIDCC4UIService

Parameters:

logoutToken - logout token

redirectURI - redirect URI