com.nimbusds.oauth2.sdk.Scope Java Examples

@Override
public void initiateLogin() {
	try {
		ClientID clientID = new ClientID(clientId);
		
		State state = new State(UUID.randomUUID().toString());
		Session.get().setAttribute(SESSION_ATTR_STATE, state.getValue());
		Session.get().setAttribute(SESSION_ATTR_PROVIDER_METADATA, discoverProviderMetadata());
		
		String scopes = "openid email profile";
		if (groupsClaim != null)
			scopes = scopes + " " + groupsClaim;
		
		AuthenticationRequest request = new AuthenticationRequest(
				new URI(getCachedProviderMetadata().getAuthorizationEndpoint()),
			    new ResponseType("code"), Scope.parse(scopes), clientID, getCallbackUri(),
			    state, new Nonce());
		throw new RedirectToUrlException(request.toURI().toString());
	} catch (URISyntaxException|SerializeException e) {
		throw new RuntimeException(e);
	}		
}
 

@Test
public void testValidateScopes() throws IllegalAccessException {
    final String additionalScope_profile = "profile";
    final String additionalScope_abc = "abc";

    final StandardOidcIdentityProvider provider = createOidcProviderWithAdditionalScopes(additionalScope_profile,
        additionalScope_abc);
    Scope scope = provider.getScope();

    // two additional scopes are set, two (openid, email) are hard-coded
    assertEquals(scope.toArray().length, 4);
    assertTrue(scope.contains("openid"));
    assertTrue(scope.contains("email"));
    assertTrue(scope.contains(additionalScope_profile));
    assertTrue(scope.contains(additionalScope_abc));
}
 

@Test
public void getAuthenticationRequest() throws URISyntaxException {
  OidcClient underTest = newSpyOidcClient();
  AuthenticationRequest request = underTest.getAuthenticationRequest(CALLBACK_URL, STATE);
  assertEquals("invalid scope", Scope.parse("openid profile email"), request.getScope());
  assertEquals("invalid client id", new ClientID("id"), request.getClientID());
  assertEquals("invalid state", new State(STATE), request.getState());
  assertEquals("invalid response type", ResponseType.getDefault(), request.getResponseType());
  assertEquals("invalid redirect uri", new URI(CALLBACK_URL), request.getRedirectionURI());
  assertEquals("invalid endpoint uri", new URI(ISSUER_URI).resolve("/protocol/openid-connect/auth"),
      request.getEndpointURI());
}
 

public DefaultJsonConverter() {
    mapper.setVisibility(PropertyAccessor.FIELD, JsonAutoDetect.Visibility.ANY);
    mapper.setVisibility(PropertyAccessor.GETTER, JsonAutoDetect.Visibility.NONE);
    mapper.setVisibility(PropertyAccessor.IS_GETTER, JsonAutoDetect.Visibility.NONE);

    mapper.addMixIn(OAuth1RequestToken.class, OAuth1RequestTokenMixin.class)
        .addMixIn(BearerAccessToken.class, BearerAccessTokenMixin.class)
        .addMixIn(Scope.Value.class, ValueMixin.class)
        .addMixIn(Token.class, TokenMixin.class);
}
 

@Override
public Scope getScope() {
    if (!isOidcEnabled()) {
        throw new IllegalStateException(OPEN_ID_CONNECT_SUPPORT_IS_NOT_CONFIGURED);
    }

    Scope scope = new Scope("openid", "email");

    for (String additionalScope : properties.getOidcAdditionalScopes()) {
        // Scope automatically prevents duplicated entries
        scope.add(additionalScope);
    }

    return scope;
}
 

@Test
public void testNoDuplicatedScopes() throws IllegalAccessException {
    final String additionalScopeDuplicate = "abc";

    final StandardOidcIdentityProvider provider = createOidcProviderWithAdditionalScopes(additionalScopeDuplicate,
            "def", additionalScopeDuplicate);
    Scope scope = provider.getScope();

    // three additional scopes are set but one is duplicated and mustn't be returned; note that there is
    // another one inserted in between the duplicated; two (openid, email) are hard-coded
    assertEquals(scope.toArray().length, 4);
}
 

private Scope getScope() {
  return Scope.parse(config.scopes());
}
 

@JsonCreator
public BearerAccessTokenMixin(@JsonProperty("value") String value, @JsonProperty("lifetime") long lifetime,
        @JsonProperty("scope") Scope scope) {
}
 

/**
 * Returns the OpenId Connect scope.
 *
 * @return scope
 */
public Scope getScope() {
    return identityProvider.getScope();
}
 

/**
 * Returns the scopes supported by the OIDC provider.
 *
 * @return support scopes
 */
Scope getScope();