private static void tokenizeUserSubject(StringBuilder state, UserSubject subject) { if (subject != null) { // 1 state.append(tokenizeString(subject.getLogin())); state.append("."); // 2 state.append(tokenizeString(subject.getId())); state.append("."); // 3 state.append(subject.getRoles().toString()); state.append("."); // 4 state.append(subject.getProperties().toString()); } else { state.append(" "); } }
private static void tokenizeUserSubject(StringBuilder state, UserSubject subject) { if (subject != null) { // 1 state.append(tokenizeString(subject.getLogin())); state.append("."); // 2 state.append(tokenizeString(subject.getId())); state.append("."); // 3 state.append(subject.getRoles().toString()); state.append("."); // 4 state.append(subject.getProperties().toString()); } else { state.append(" "); } }
public UserSubject(UserSubject sub) { this(sub.getLogin(), sub.getId(), sub.getRoles()); this.properties = sub.getProperties(); this.am = sub.getAuthenticationMethod(); }
public UserSubject(UserSubject sub) { this(sub.getLogin(), sub.getId(), sub.getRoles()); this.properties = sub.getProperties(); this.am = sub.getAuthenticationMethod(); }
private String getProcessedIdToken(OAuthRedirectionState state, UserSubject subject, List<String> scopes) { if (subject.getProperties().containsKey(OidcUtils.ID_TOKEN)) { return subject.getProperties().get(OidcUtils.ID_TOKEN); } else if (idTokenProvider != null) { IdToken idToken = idTokenProvider.getIdToken(state.getClientId(), subject, scopes); return processIdToken(state, idToken); } else if (subject instanceof OidcUserSubject) { OidcUserSubject sub = (OidcUserSubject)subject; IdToken idToken = new IdToken(sub.getIdToken()); idToken.setAudience(state.getClientId()); idToken.setAuthorizedParty(state.getClientId()); return processIdToken(state, idToken); } else { return null; } }
private String getProcessedIdToken(OAuthRedirectionState state, UserSubject subject, List<String> scopes) { if (subject.getProperties().containsKey(OidcUtils.ID_TOKEN)) { return subject.getProperties().get(OidcUtils.ID_TOKEN); } else if (idTokenProvider != null) { IdToken idToken = idTokenProvider.getIdToken(state.getClientId(), subject, scopes); return processIdToken(state, idToken); } else if (subject instanceof OidcUserSubject) { OidcUserSubject sub = (OidcUserSubject)subject; IdToken idToken = new IdToken(sub.getIdToken()); idToken.setAudience(state.getClientId()); idToken.setAuthorizedParty(state.getClientId()); return processIdToken(state, idToken); } else { return null; } }
private String getProcessedIdToken(ServerAccessToken st) { if (idTokenProvider != null) { IdToken idToken = idTokenProvider.getIdToken(st.getClient().getClientId(), st.getSubject(), OAuthUtils.convertPermissionsToScopeList(st.getScopes())); setAtHashAndNonce(idToken, st); return processJwt(new JwtToken(idToken), st.getClient()); } else if (st.getSubject().getProperties().containsKey(OidcUtils.ID_TOKEN)) { return st.getSubject().getProperties().get(OidcUtils.ID_TOKEN); } else if (st.getSubject() instanceof OidcUserSubject) { OidcUserSubject sub = (OidcUserSubject)st.getSubject(); if (sub.getIdToken() != null) { IdToken idToken = new IdToken(sub.getIdToken()); idToken.setAudience(st.getClient().getClientId()); idToken.setAuthorizedParty(st.getClient().getClientId()); // if this token was refreshed then the cloned IDToken might need to have its // issuedAt and expiry time properties adjusted if it proves to be necessary setAtHashAndNonce(idToken, st); return processJwt(new JwtToken(idToken), st.getClient()); } } return null; } private void setAtHashAndNonce(IdToken idToken, ServerAccessToken st) {
private String getProcessedIdToken(ServerAccessToken st) { if (idTokenProvider != null) { IdToken idToken = idTokenProvider.getIdToken(st.getClient().getClientId(), st.getSubject(), OAuthUtils.convertPermissionsToScopeList(st.getScopes())); setAtHashAndNonce(idToken, st); return processJwt(new JwtToken(idToken), st.getClient()); } else if (st.getSubject().getProperties().containsKey(OidcUtils.ID_TOKEN)) { return st.getSubject().getProperties().get(OidcUtils.ID_TOKEN); } else if (st.getSubject() instanceof OidcUserSubject) { OidcUserSubject sub = (OidcUserSubject)st.getSubject(); if (sub.getIdToken() != null) { IdToken idToken = new IdToken(sub.getIdToken()); idToken.setAudience(st.getClient().getClientId()); idToken.setAuthorizedParty(st.getClient().getClientId()); // if this token was refreshed then the cloned IDToken might need to have its // issuedAt and expiry time properties adjusted if it proves to be necessary setAtHashAndNonce(idToken, st); return processJwt(new JwtToken(idToken), st.getClient()); } } return null; } private void setAtHashAndNonce(IdToken idToken, ServerAccessToken st) {