Package org.elasticsearch.xpack.security.authc.saml

Class SamlUtils

java.lang.Object

org.elasticsearch.xpack.security.authc.saml.SamlUtils

public class SamlUtils
extends Object

Constructor Summary

Constructors

Constructor	Description
SamlUtils()

Method Summary

Modifier and Type	Method	Description
static <T extends org.opensaml.core.xml.XMLObject> T	buildObject(Class<T> type, QName elementName)
static String	generateSecureNCName(int numberBytes)
static DocumentBuilder	getHardenedBuilder(String[] schemaFiles)	Constructs a DocumentBuilder with all the necessary features for it to be secure
static Transformer	getHardenedXMLTransformer()
static boolean	isSamlException(org.elasticsearch.ElasticsearchSecurityException exception)
static org.elasticsearch.ElasticsearchSecurityException	samlException(String msg, Exception cause, Object... args)
static org.elasticsearch.ElasticsearchSecurityException	samlException(String msg, Object... args)	Constructs an exception that can be distinguished (via isSamlException(org.elasticsearch.ElasticsearchSecurityException) as a SAML specific exception Used to distinguish "expected" exceptions (such as SAML signature failures, or missing attributes) that should be treated as a simple authentication failure (with a clear cause)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

SamlUtils

public SamlUtils()

Method Details

samlException

public static org.elasticsearch.ElasticsearchSecurityException samlException(String msg,
 Object... args)

Constructs an exception that can be distinguished (via isSamlException(org.elasticsearch.ElasticsearchSecurityException) as a SAML specific exception Used to distinguish "expected" exceptions (such as SAML signature failures, or missing attributes) that should be treated as a simple authentication failure (with a clear cause)

samlException

public static org.elasticsearch.ElasticsearchSecurityException samlException(String msg,
 Exception cause,
 Object... args)

See Also:

• samlException(String, Object...)

isSamlException

public static boolean isSamlException(org.elasticsearch.ElasticsearchSecurityException exception)

See Also:

• samlException(String, Object...)

buildObject

public static <T extends org.opensaml.core.xml.XMLObject>
T buildObject(Class<T> type,
 QName elementName)

generateSecureNCName

public static String generateSecureNCName(int numberBytes)

getHardenedXMLTransformer

public static Transformer getHardenedXMLTransformer()
                                             throws TransformerConfigurationException

Throws:

TransformerConfigurationException

getHardenedBuilder

public static DocumentBuilder getHardenedBuilder(String[] schemaFiles)
                                          throws ParserConfigurationException

Constructs a DocumentBuilder with all the necessary features for it to be secure

Throws:

ParserConfigurationException - if one of the features can't be set on the DocumentBuilderFactory