Package org.springframework.security.saml2.provider.service.registration

Class JdbcAssertingPartyMetadataRepository.AssertingPartyMetadataRowMapper.Saml2X509CredentialCollectionDeserializer

java.lang.Object

org.springframework.security.saml2.provider.service.registration.JdbcAssertingPartyMetadataRepository.AssertingPartyMetadataRowMapper.Saml2X509CredentialCollectionDeserializer

All Implemented Interfaces:

org.springframework.core.serializer.Deserializer<Collection<Saml2X509Credential>>

Enclosing class:

JdbcAssertingPartyMetadataRepository.AssertingPartyMetadataRowMapper

public static final class JdbcAssertingPartyMetadataRepository.AssertingPartyMetadataRowMapper.Saml2X509CredentialCollectionDeserializer
extends Object
implements org.springframework.core.serializer.Deserializer<Collection<Saml2X509Credential>>

The default deserializer for verification and encryption credentials.

This is equipped with an allowlist of classes that can be deserialized. If you implement your own, you are responsible for to protecte against insecure deserialization.

Since:

7.0.5

Constructor Summary

Constructors

Constructor	Description
Saml2X509CredentialCollectionDeserializer()

Method Summary

Modifier and Type	Method	Description
Collection<Saml2X509Credential>	deserialize(InputStream in)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.springframework.core.serializer.Deserializer

deserializeFromByteArray

Constructor Details

Saml2X509CredentialCollectionDeserializer

public Saml2X509CredentialCollectionDeserializer()

Method Details

deserialize

public Collection<Saml2X509Credential> deserialize(InputStream in)
                                            throws IOException

Specified by:

deserialize in interface org.springframework.core.serializer.Deserializer<Collection<Saml2X509Credential>>

Throws:

IOException