OKTA-289663: Add IdP Integration Tests

api/src/main/java/com/okta/sdk/resource/identity/provider/FacebookIdentityProviderBuilder.java

@@ -0,0 +1,14 @@
+package com.okta.sdk.resource.identity.provider;
+
+import com.okta.commons.lang.Classes;
+
+public interface FacebookIdentityProviderBuilder extends IdentityProviderBuilder<FacebookIdentityProviderBuilder> {
+
+    static FacebookIdentityProviderBuilder instance() {
+        return Classes.newInstance("com.okta.sdk.impl.resource.identity.provider.DefaultFacebookIdentityProviderBuilder");
+    }
+
+    FacebookIdentityProviderBuilder setIsProfileMaster(Boolean isProfileMaster);
+
+    FacebookIdentityProviderBuilder setUserNameTemplate(String userNameTemplate);
+}

api/src/main/java/com/okta/sdk/resource/identity/provider/GoogleIdentityProviderBuilder.java

@@ -0,0 +1,14 @@
+package com.okta.sdk.resource.identity.provider;
+
+import com.okta.commons.lang.Classes;
+
+public interface GoogleIdentityProviderBuilder extends IdentityProviderBuilder<GoogleIdentityProviderBuilder> {
+
+    static GoogleIdentityProviderBuilder instance() {
+        return Classes.newInstance("com.okta.sdk.impl.resource.identity.provider.DefaultGoogleIdentityProviderBuilder");
+    }
+
+    GoogleIdentityProviderBuilder setIsProfileMaster(Boolean isProfileMaster);
+
+    GoogleIdentityProviderBuilder setUserNameTemplate(String userNameTemplate);
+}

api/src/main/java/com/okta/sdk/resource/identity/provider/IdentityProviderBuilder.java

@@ -0,0 +1,43 @@
+/*
+ * Copyright 2020-Present Okta, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+package com.okta.sdk.resource.identity.provider;
+
+import com.okta.commons.lang.Classes;
+import com.okta.sdk.client.Client;
+import com.okta.sdk.resource.policy.PolicySubjectMatchType;
+
+import java.util.List;
+
+public interface IdentityProviderBuilder<T extends IdentityProviderBuilder> {
+
+    static IdentityProviderBuilder<IdentityProviderBuilder> instance() {
+        return Classes.newInstance("com.okta.sdk.impl.resource.identity.provider.DefaultIdentityProviderBuilder");
+    }
+
+    T setName(String name);
+
+    T setScopes(List<String> scopes);
+
+    T setClientId(String clientId);
+
+    T setClientSecret(String clientSecret);
+
+    T setMaxClockSkew(Integer maxClockSkew);
+
+    T setPolicySubjectMatchType(PolicySubjectMatchType policySubjectMatchType);
+
+    IdentityProvider buildAndCreate(Client client);
+}

api/src/main/java/com/okta/sdk/resource/identity/provider/LinkedInIdentityProviderBuilder.java

@@ -0,0 +1,14 @@
+package com.okta.sdk.resource.identity.provider;
+
+import com.okta.commons.lang.Classes;
+
+public interface LinkedInIdentityProviderBuilder extends IdentityProviderBuilder<LinkedInIdentityProviderBuilder> {
+
+    static LinkedInIdentityProviderBuilder instance() {
+        return Classes.newInstance("com.okta.sdk.impl.resource.identity.provider.DefaultLinkedInIdentityProviderBuilder");
+    }
+
+    LinkedInIdentityProviderBuilder setIsProfileMaster(Boolean isProfileMaster);
+
+    LinkedInIdentityProviderBuilder setUserNameTemplate(String userNameTemplate);
+}

api/src/main/java/com/okta/sdk/resource/identity/provider/MicrosoftIdentityProviderBuilder.java

@@ -0,0 +1,14 @@
+package com.okta.sdk.resource.identity.provider;
+
+import com.okta.commons.lang.Classes;
+
+public interface MicrosoftIdentityProviderBuilder extends IdentityProviderBuilder<MicrosoftIdentityProviderBuilder> {
+
+    static MicrosoftIdentityProviderBuilder instance() {
+        return Classes.newInstance("com.okta.sdk.impl.resource.identity.provider.DefaultMicrosoftIdentityProviderBuilder");
+    }
+
+    MicrosoftIdentityProviderBuilder setIsProfileMaster(Boolean isProfileMaster);
+
+    MicrosoftIdentityProviderBuilder setUserNameTemplate(String userNameTemplate);
+}

api/src/main/java/com/okta/sdk/resource/identity/provider/OIDCIdentityProviderBuilder.java

@@ -0,0 +1,44 @@
+package com.okta.sdk.resource.identity.provider;
+
+import com.okta.commons.lang.Classes;
+
+public interface OIDCIdentityProviderBuilder extends IdentityProviderBuilder<OIDCIdentityProviderBuilder> {
+
+    static OIDCIdentityProviderBuilder instance() {
+        return Classes.newInstance("com.okta.sdk.impl.resource.identity.provider.DefaultOIDCIdentityProviderBuilder");
+    }
+
+    OIDCIdentityProviderBuilder setIssuerMode(IdentityProvider.IssuerModeEnum issuerMode);
+
+    OIDCIdentityProviderBuilder setRequestSignatureAlgorithm(String requestSignatureAlgorithm);
+
+    OIDCIdentityProviderBuilder setRequestSignatureScope(ProtocolAlgorithmTypeSignature.ScopeEnum requestSignatureScope);
+
+    OIDCIdentityProviderBuilder setResponseSignatureAlgorithm(String responseSignatureAlgorithm);
+
+    OIDCIdentityProviderBuilder setResponseSignatureScope(ProtocolAlgorithmTypeSignature.ScopeEnum responseSignatureScope);
+
+    OIDCIdentityProviderBuilder setAcsEndpointBinding(ProtocolEndpoint.BindingEnum acsEndpointBinding);
+
+    OIDCIdentityProviderBuilder setAcsEndpointType(ProtocolEndpoint.TypeEnum acsEndpointType);
+
+    OIDCIdentityProviderBuilder setAuthorizationEndpointBinding(ProtocolEndpoint.BindingEnum authorizationEndpointBinding);
+
+    OIDCIdentityProviderBuilder setAuthorizationEndpointUrl(String authorizationEndpointUrl);
+
+    OIDCIdentityProviderBuilder setTokenEndpointBinding(ProtocolEndpoint.BindingEnum tokenEndpointBinding);
+
+    OIDCIdentityProviderBuilder setTokenEndpointUrl(String tokenEndpointUrl);
+
+    OIDCIdentityProviderBuilder setUserInfoEndpointBinding(ProtocolEndpoint.BindingEnum userInfoEndpointBinding);
+
+    OIDCIdentityProviderBuilder setUserInfoEndpointUrl(String userInfoEndpointUrl);
+
+    OIDCIdentityProviderBuilder setJwksEndpointBinding(ProtocolEndpoint.BindingEnum jwksEndpointBinding);
+
+    OIDCIdentityProviderBuilder setJwksEndpointUrl(String jwksEndpointUrl);
+
+    OIDCIdentityProviderBuilder setBaseUrl(String baseUrl);
+
+    OIDCIdentityProviderBuilder setSubjectTemplate(String subjectTemplate);
+}

impl/src/main/java/com/okta/sdk/impl/resource/identity/provider/DefaultFacebookIdentityProviderBuilder.java

@@ -0,0 +1,92 @@
+/*
+ * Copyright 2020-Present Okta, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+package com.okta.sdk.impl.resource.identity.provider;
+
+import com.okta.sdk.client.Client;
+import com.okta.sdk.resource.identity.provider.FacebookIdentityProviderBuilder;
+import com.okta.sdk.resource.identity.provider.IdentityProvider;
+import com.okta.sdk.resource.identity.provider.IdentityProviderBuilder;
+import com.okta.sdk.resource.identity.provider.IdentityProviderCredentials;
+import com.okta.sdk.resource.identity.provider.IdentityProviderCredentialsClient;
+import com.okta.sdk.resource.identity.provider.OIDCIdentityProviderBuilder;
+import com.okta.sdk.resource.identity.provider.Protocol;
+import com.okta.sdk.resource.identity.provider.Provisioning;
+import com.okta.sdk.resource.identity.provider.ProvisioningConditions;
+import com.okta.sdk.resource.identity.provider.ProvisioningDeprovisionedCondition;
+import com.okta.sdk.resource.identity.provider.ProvisioningGroups;
+import com.okta.sdk.resource.identity.provider.ProvisioningSuspendedCondition;
+import com.okta.sdk.resource.policy.IdentityProviderPolicy;
+import com.okta.sdk.resource.policy.PolicyAccountLink;
+import com.okta.sdk.resource.policy.PolicySubject;
+import com.okta.sdk.resource.policy.PolicySubjectMatchType;
+import com.okta.sdk.resource.policy.PolicyUserNameTemplate;
+
+import java.util.List;
+
+public class DefaultFacebookIdentityProviderBuilder extends DefaultIdentityProviderBuilder<FacebookIdentityProviderBuilder>
+    implements FacebookIdentityProviderBuilder {
+
+    private Boolean isProfileMaster;
+    private String userNameTemplate;
+
+    @Override
+    public FacebookIdentityProviderBuilder setIsProfileMaster(Boolean isProfileMaster) {
+        this.isProfileMaster = isProfileMaster;
+        return this;
+    }
+
+    @Override
+    public FacebookIdentityProviderBuilder setUserNameTemplate(String userNameTemplate) {
+        this.userNameTemplate = userNameTemplate;
+        return this;
+    }
+
+    @Override
+    public IdentityProvider buildAndCreate(Client client) {
+
+        IdentityProvider createdIdp = client.createIdentityProvider(client.instantiate(IdentityProvider.class)
+            .setType(IdentityProvider.TypeEnum.FACEBOOK)
+            .setName(name)
+            .setProtocol(client.instantiate(Protocol.class)
+                .setType(Protocol.TypeEnum.OAUTH2)
+                .setScopes(scopes)
+                .setCredentials(client.instantiate(IdentityProviderCredentials.class)
+                    .setClient(client.instantiate(IdentityProviderCredentialsClient.class)
+                        .setClientId(clientId)
+                        .setClientSecret(clientSecret))))
+            .setPolicy(client.instantiate(IdentityProviderPolicy.class)
+                .setProvisioning(client.instantiate(Provisioning.class)
+                    .setAction(Provisioning.ActionEnum.AUTO)
+                    .setProfileMaster(isProfileMaster)
+                    .setGroups(client.instantiate(ProvisioningGroups.class)
+                        .setAction(ProvisioningGroups.ActionEnum.NONE))
+                    .setConditions(client.instantiate(ProvisioningConditions.class)
+                        .setDeprovisioned(client.instantiate(ProvisioningDeprovisionedCondition.class)
+                            .setAction(ProvisioningDeprovisionedCondition.ActionEnum.NONE))
+                        .setSuspended(client.instantiate(ProvisioningSuspendedCondition.class)
+                            .setAction(ProvisioningSuspendedCondition.ActionEnum.NONE))))
+                .setAccountLink(client.instantiate(PolicyAccountLink.class)
+                    .setFilter(null)
+                    .setAction(PolicyAccountLink.ActionEnum.AUTO))
+                .setSubject(client.instantiate(PolicySubject.class)
+                    .setUserNameTemplate(client.instantiate(PolicyUserNameTemplate.class)
+                        .setTemplate(userNameTemplate))
+                    .setMatchType(policySubjectMatchType))
+                .setMaxClockSkew(maxClockSkew)));
+
+        return createdIdp;
+    }
+}

impl/src/main/java/com/okta/sdk/impl/resource/identity/provider/DefaultGoogleIdentityProviderBuilder.java

@@ -0,0 +1,98 @@
+/*
+ * Copyright 2020-Present Okta, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+package com.okta.sdk.impl.resource.identity.provider;
+
+import com.okta.sdk.client.Client;
+import com.okta.sdk.resource.identity.provider.GoogleIdentityProviderBuilder;
+import com.okta.sdk.resource.identity.provider.IdentityProvider;
+import com.okta.sdk.resource.identity.provider.IdentityProviderCredentials;
+import com.okta.sdk.resource.identity.provider.IdentityProviderCredentialsClient;
+import com.okta.sdk.resource.identity.provider.Protocol;
+import com.okta.sdk.resource.identity.provider.Provisioning;
+import com.okta.sdk.resource.identity.provider.ProvisioningConditions;
+import com.okta.sdk.resource.identity.provider.ProvisioningDeprovisionedCondition;
+import com.okta.sdk.resource.identity.provider.ProvisioningGroups;
+import com.okta.sdk.resource.identity.provider.ProvisioningSuspendedCondition;
+import com.okta.sdk.resource.policy.IdentityProviderPolicy;
+import com.okta.sdk.resource.policy.PolicyAccountLink;
+import com.okta.sdk.resource.policy.PolicySubject;
+import com.okta.sdk.resource.policy.PolicySubjectMatchType;
+import com.okta.sdk.resource.policy.PolicyUserNameTemplate;
+
+public class DefaultGoogleIdentityProviderBuilder extends DefaultIdentityProviderBuilder<GoogleIdentityProviderBuilder>
+    implements GoogleIdentityProviderBuilder {
+
+    private Boolean isProfileMaster;
+    private String userNameTemplate;
+
+    @Override
+    public DefaultGoogleIdentityProviderBuilder setIsProfileMaster(Boolean isProfileMaster) {
+        this.isProfileMaster = isProfileMaster;
+        return this;
+    }
+
+    @Override
+    public DefaultGoogleIdentityProviderBuilder setMaxClockSkew(Integer maxClockSkew) {
+        this.maxClockSkew = maxClockSkew;
+        return this;
+    }
+
+    @Override
+    public DefaultGoogleIdentityProviderBuilder setUserNameTemplate(String userNameTemplate) {
+        this.userNameTemplate = userNameTemplate;
+        return this;
+    }
+
+    @Override
+    public DefaultGoogleIdentityProviderBuilder setPolicySubjectMatchType(PolicySubjectMatchType policySubjectMatchType) {
+        this.policySubjectMatchType = policySubjectMatchType;
+        return this;
+    }
+
+    @Override
+    public IdentityProvider buildAndCreate(Client client) {
+
+        return client.createIdentityProvider(client.instantiate(IdentityProvider.class)
+            .setType(IdentityProvider.TypeEnum.GOOGLE)
+            .setName(name)
+            .setProtocol(client.instantiate(Protocol.class)
+                .setType(Protocol.TypeEnum.OIDC)
+                .setScopes(scopes)
+                .setCredentials(client.instantiate(IdentityProviderCredentials.class)
+                    .setClient(client.instantiate(IdentityProviderCredentialsClient.class)
+                        .setClientId(clientId)
+                        .setClientSecret(clientSecret))))
+            .setPolicy(client.instantiate(IdentityProviderPolicy.class)
+                .setProvisioning(client.instantiate(Provisioning.class)
+                    .setAction(Provisioning.ActionEnum.AUTO)
+                    .setProfileMaster(isProfileMaster)
+                    .setGroups(client.instantiate(ProvisioningGroups.class)
+                        .setAction(ProvisioningGroups.ActionEnum.NONE))
+                    .setConditions(client.instantiate(ProvisioningConditions.class)
+                        .setDeprovisioned(client.instantiate(ProvisioningDeprovisionedCondition.class)
+                            .setAction(ProvisioningDeprovisionedCondition.ActionEnum.NONE))
+                        .setSuspended(client.instantiate(ProvisioningSuspendedCondition.class)
+                            .setAction(ProvisioningSuspendedCondition.ActionEnum.NONE))))
+                .setAccountLink(client.instantiate(PolicyAccountLink.class)
+                    .setFilter(null)
+                    .setAction(PolicyAccountLink.ActionEnum.AUTO))
+                .setSubject(client.instantiate(PolicySubject.class)
+                    .setUserNameTemplate(client.instantiate(PolicyUserNameTemplate.class)
+                        .setTemplate(userNameTemplate))
+                    .setMatchType(policySubjectMatchType))
+                .setMaxClockSkew(maxClockSkew)));
+    }
+}