Package org.forgerock.openam.sts.user.invocation
This package contains classes related to creating the json payloads corresponding to REST-STS and TokenGenerationService
invocations. These classes allows these invocations to be constituted programmatically, and also allows the REST-STS
and TokenGenerationService to unmarshall json invocations into java objects.
The builder pattern is followed throughout to support a fluent idiom, and to allow for the flexible addition of additional
state to the various token types.
Some of the classes in this package, e.g. the ProofTokenState, are shared among the REST-STS and the TokenGenerationService.
I want to limit the dependencies between the sts constituent components, so the classes used to invoke the various services,
if shared between services, should be located in this package.
-
Class Summary Class Description OpenAMTokenState Class encapsulating an OpenAM sessionId, and will emit json which includes state necessary to act as the input_token_state in the RestSTSTokenTranslationInvocationState - i.e. the OpenAM session id, and a AMSTSConstants.TOKEN_TYPE_KEY field corresponding to TokenType.OPENAM.name().OpenAMTokenState.OpenAMTokenStateBuilder OpenIdConnectTokenCreationState This class encapsulates client-specified state necessary for the creation of an OpenIdConnect token.OpenIdConnectTokenCreationState.OpenIdConnectTokenCreationStateBuilder OpenIdConnectTokenState Class encapsulating an OpenIdConnect jws string, and will emit json which includes state necessary to act as the input_token_state in the RestSTSTokenTranslationInvocationState - i.e. the jws string, and a AMSTSConstants.TOKEN_TYPE_KEY field corresponding to TokenType.OPENIDCONNECT.name().OpenIdConnectTokenState.OpenIdConnectTokenStateBuilder ProofTokenState When issuing SAML2 Holder-of-Key assertions, the proof token is usually an X509Certificate.ProofTokenState.ProofTokenStateBuilder Builder class forProofTokenStateRestSTSTokenCancellationInvocationState Class which encapsulates the concerns of dispatching a token cancellation request referencing a rest-sts issued tokenRestSTSTokenCancellationInvocationState.RestSTSTokenCancellationInvocationStateBuilder RestSTSTokenTranslationInvocationState Class which provides a means to programmatically create a REST STS token translation invocation.RestSTSTokenTranslationInvocationState.RestSTSTokenTranslationInvocationStateBuilder RestSTSTokenValidationInvocationState An encapsulation of the state necessary to make a rest-sts token validation invocation.RestSTSTokenValidationInvocationState.RestSTSTokenValidationInvocationStateBuilder SAML2TokenCreationState This class encapsulates state passed to the REST STS about the nature of the to-be-issued SAML2 token.SAML2TokenCreationState.SAML2TokenStateBuilder SAML2TokenState Class encapsulating an SAML2 token string, and will emit json which includes state necessary to act as the to-be-validated token state in the RestSTSTokenValidationInvocation state - i.e. the SAML2 assertion string, and a AMSTSConstants.TOKEN_TYPE_KEY field corresponding to TokenType.SAML2.name().SAML2TokenState.SAML2TokenStateBuilder STSIssuedTokenState This class encapsulates state pertaining to a token issued by the STS.STSIssuedTokenState.STSIssuedTokenStateBuilder UsernameTokenState Contains state corresponding to a UsernameToken and will emit json which includes state necessary to act as the input_token_state in the RestSTSTokenTranslationInvocationState - i.e. the username and password state, and a AMSTSConstants.TOKEN_TYPE_KEY field corresponding to TokenType.USERNAME.name().UsernameTokenState.UsernameTokenStateBuilder X509TokenState A very simple class, intended to only represent the token_type of X509 in the token transformation invocation to the rest-sts.