Package org.apache.cxf.rs.security.saml

Class AbstractSamlInHandler

java.lang.Object

org.apache.cxf.rs.security.saml.AbstractSamlInHandler

All Implemented Interfaces:

javax.ws.rs.container.ContainerRequestFilter

Direct Known Subclasses:

AbstractSamlBase64InHandler, SamlEnvelopedInHandler

@PreMatching
public abstract class AbstractSamlInHandler
extends Object
implements javax.ws.rs.container.ContainerRequestFilter

Constructor Summary

Constructors

Constructor	Description
AbstractSamlInHandler()

Method Summary

Modifier and Type	Method	Description
protected boolean	checkBearer(org.apache.wss4j.common.saml.SamlAssertionWrapper assertionWrapper, Certificate[] tlsCerts)
protected boolean	checkHolderOfKey(org.apache.cxf.message.Message message, org.apache.wss4j.common.saml.SamlAssertionWrapper assertionWrapper, Certificate[] tlsCerts)
protected boolean	checkSenderVouches(org.apache.cxf.message.Message message, org.apache.wss4j.common.saml.SamlAssertionWrapper assertionWrapper, Certificate[] tlsCerts)	Check the sender-vouches requirements against the received assertion.
protected void	checkSubjectConfirmationData(org.apache.cxf.message.Message message, org.apache.wss4j.common.saml.SamlAssertionWrapper assertion)
protected void	configureAudienceRestriction(org.apache.cxf.message.Message msg, org.apache.wss4j.dom.handler.RequestData reqData)
protected org.apache.wss4j.common.saml.SAMLKeyInfo	createKeyInfoFromDefaultAlias(org.apache.wss4j.common.crypto.Crypto sigCrypto)
protected Element	readToken(org.apache.cxf.message.Message message, InputStream tokenStream)
void	setKeyInfoMustBeAvailable(boolean keyInfoMustBeAvailable)
protected void	setSecurityContext(org.apache.cxf.message.Message message, org.apache.wss4j.common.saml.SamlAssertionWrapper wrapper)
void	setSecurityContextProvider(SecurityContextProvider p)
void	setValidator(org.apache.wss4j.dom.validate.Validator validator)
protected void	throwFault(String error, Exception ex)
protected org.apache.wss4j.common.saml.SamlAssertionWrapper	toWrapper(Element tokenElement)
protected void	validateToken(org.apache.cxf.message.Message message, InputStream tokenStream)
protected void	validateToken(org.apache.cxf.message.Message message, org.apache.wss4j.common.saml.SamlAssertionWrapper assertion)
protected void	validateToken(org.apache.cxf.message.Message message, Element tokenElement)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface javax.ws.rs.container.ContainerRequestFilter

filter

Constructor Detail

AbstractSamlInHandler

public AbstractSamlInHandler()

Method Detail

setValidator

public void setValidator(org.apache.wss4j.dom.validate.Validator validator)

setSecurityContextProvider

public void setSecurityContextProvider(SecurityContextProvider p)

validateToken

protected void validateToken(org.apache.cxf.message.Message message,
                             InputStream tokenStream)

readToken

protected Element readToken(org.apache.cxf.message.Message message,
                            InputStream tokenStream)

validateToken

protected void validateToken(org.apache.cxf.message.Message message,
                             Element tokenElement)

toWrapper

protected org.apache.wss4j.common.saml.SamlAssertionWrapper toWrapper(Element tokenElement)

validateToken

protected void validateToken(org.apache.cxf.message.Message message,
                             org.apache.wss4j.common.saml.SamlAssertionWrapper assertion)

configureAudienceRestriction

protected void configureAudienceRestriction(org.apache.cxf.message.Message msg,
                                            org.apache.wss4j.dom.handler.RequestData reqData)

createKeyInfoFromDefaultAlias

protected org.apache.wss4j.common.saml.SAMLKeyInfo createKeyInfoFromDefaultAlias(org.apache.wss4j.common.crypto.Crypto sigCrypto)
                                                                          throws org.apache.wss4j.common.ext.WSSecurityException

Throws:

org.apache.wss4j.common.ext.WSSecurityException

checkSubjectConfirmationData

protected void checkSubjectConfirmationData(org.apache.cxf.message.Message message,
                                            org.apache.wss4j.common.saml.SamlAssertionWrapper assertion)

setSecurityContext

protected void setSecurityContext(org.apache.cxf.message.Message message,
                                  org.apache.wss4j.common.saml.SamlAssertionWrapper wrapper)

throwFault

protected void throwFault(String error,
                          Exception ex)

checkSenderVouches

protected boolean checkSenderVouches(org.apache.cxf.message.Message message,
                                     org.apache.wss4j.common.saml.SamlAssertionWrapper assertionWrapper,
                                     Certificate[] tlsCerts)

Check the sender-vouches requirements against the received assertion. The SAML Assertion and the request body must be signed by the same signature.

checkHolderOfKey

protected boolean checkHolderOfKey(org.apache.cxf.message.Message message,
                                   org.apache.wss4j.common.saml.SamlAssertionWrapper assertionWrapper,
                                   Certificate[] tlsCerts)

checkBearer

protected boolean checkBearer(org.apache.wss4j.common.saml.SamlAssertionWrapper assertionWrapper,
                              Certificate[] tlsCerts)

setKeyInfoMustBeAvailable

public void setKeyInfoMustBeAvailable(boolean keyInfoMustBeAvailable)