Package org.forgerock.openig.fapi.authorization.par.validation

Class FapiParRequestValidationFilter

java.lang.Object

org.forgerock.openig.fapi.authorization.AbstractFapiAuthorizeRequestValidationFilter

org.forgerock.openig.fapi.authorization.par.validation.FapiParRequestValidationFilter

All Implemented Interfaces:

Filter

public class FapiParRequestValidationFilter
extends AbstractFapiAuthorizeRequestValidationFilter

Validates that a request made to the OAuth2.0 /par (Pushed Authorization Request) endpoint is FAPI compliant.

For more details on /par requests see: OAuth 2.0 Pushed Authorization Requests.

Constructor Summary

Constructors

Constructor	Description
FapiParRequestValidationFilter()	Default constructor for FapiParRequestValidationFilter.

Method Summary

Modifier and Type	Method	Description
protected void	checkEndpointSpecificClaims(JwtClaimsSet requestJwtClaimSet)	For the PAR endpoint we need to check that the CODE_CHALLENGE_METHOD is S256.
protected AuthorizationRequest	createAuthorizationRequest(Request request)	Create a specific AuthorizationRequest for the endpoint.

Methods inherited from class org.forgerock.openig.fapi.authorization.AbstractFapiAuthorizeRequestValidationFilter

errorResponse, filter

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

FapiParRequestValidationFilter

public FapiParRequestValidationFilter()

Default constructor for FapiParRequestValidationFilter.

Method Details

createAuthorizationRequest

protected AuthorizationRequest createAuthorizationRequest(Request request)

Description copied from class: AbstractFapiAuthorizeRequestValidationFilter

Create a specific AuthorizationRequest for the endpoint.

Specified by:

createAuthorizationRequest in class AbstractFapiAuthorizeRequestValidationFilter

Parameters:

request - the request to use

Returns:

the AuthorizationRequest created

checkEndpointSpecificClaims

protected void checkEndpointSpecificClaims(JwtClaimsSet requestJwtClaimSet)
                                    throws AuthorizationRequestException

For the PAR endpoint we need to check that the CODE_CHALLENGE_METHOD is S256.

Specified by:

checkEndpointSpecificClaims in class AbstractFapiAuthorizeRequestValidationFilter

Parameters:

requestJwtClaimSet - the claims found in the JAR object

Throws:

AuthorizationRequestException