org.nuxeo.ecm.platform.auth.saml

Class AbstractSAMLProfile

java.lang.Object

org.nuxeo.ecm.platform.auth.saml.AbstractSAMLProfile

Direct Known Subclasses:

SLOProfileImpl, WebSSOProfileImpl

public abstract class AbstractSAMLProfile
extends Object

Base abstract class for SAML profile processors.

Since:

6.0

Field Summary

Fields

Modifier and Type	Field and Description
protected org.opensaml.xml.XMLObjectBuilderFactory	builderFactory
protected static org.apache.commons.logging.Log	log

Constructor Summary

Constructors

Constructor and Description
AbstractSAMLProfile(org.opensaml.saml2.metadata.Endpoint endpoint)

Method Summary

Modifier and Type	Method and Description
protected <T extends org.opensaml.common.SAMLObject> T	build(QName qName)
protected String	getBaseURL(javax.servlet.ServletRequest request)
org.opensaml.saml2.encryption.Decrypter	getDecrypter()
org.opensaml.saml2.metadata.Endpoint	getEndpoint()
abstract String	getProfileIdentifier()
protected String	getStartPageURL(javax.servlet.ServletRequest request)
org.opensaml.xml.signature.SignatureTrustEngine	getTrustEngine()
protected String	newUUID()
protected org.opensaml.saml2.core.AuthnRequest	retrieveRequest(org.opensaml.saml2.core.Response response)
void	setDecrypter(org.opensaml.saml2.encryption.Decrypter decrypter)
void	setTrustEngine(org.opensaml.xml.signature.SignatureTrustEngine trustEngine)
protected void	validateAssertion(org.opensaml.saml2.core.Assertion assertion, org.opensaml.common.binding.SAMLMessageContext context)
protected void	validateEndpoint(org.opensaml.saml2.core.Response response, org.opensaml.saml2.metadata.Endpoint endpoint)
protected void	validateIssuer(org.opensaml.saml2.core.Issuer issuer, org.opensaml.common.binding.SAMLMessageContext context)
protected void	validateSignature(org.opensaml.xml.signature.Signature signature, String IDPEntityID)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

log

protected static final org.apache.commons.logging.Log log

builderFactory

protected final org.opensaml.xml.XMLObjectBuilderFactory builderFactory

Constructor Detail

AbstractSAMLProfile

public AbstractSAMLProfile(org.opensaml.saml2.metadata.Endpoint endpoint)

Method Detail

getProfileIdentifier

public abstract String getProfileIdentifier()

Returns:

the profile identifier (Uri).

build

protected <T extends org.opensaml.common.SAMLObject> T build(QName qName)

validateSignature

protected void validateSignature(org.opensaml.xml.signature.Signature signature,
                                 String IDPEntityID)
                          throws org.opensaml.xml.validation.ValidationException,
                                 org.opensaml.xml.security.SecurityException

Throws:

org.opensaml.xml.validation.ValidationException

org.opensaml.xml.security.SecurityException

validateIssuer

protected void validateIssuer(org.opensaml.saml2.core.Issuer issuer,
                              org.opensaml.common.binding.SAMLMessageContext context)
                       throws org.opensaml.common.SAMLException

Throws:

org.opensaml.common.SAMLException

validateEndpoint

protected void validateEndpoint(org.opensaml.saml2.core.Response response,
                                org.opensaml.saml2.metadata.Endpoint endpoint)
                         throws org.opensaml.common.SAMLException

Throws:

org.opensaml.common.SAMLException

validateAssertion

protected void validateAssertion(org.opensaml.saml2.core.Assertion assertion,
                                 org.opensaml.common.binding.SAMLMessageContext context)
                          throws org.opensaml.common.SAMLException,
                                 org.opensaml.xml.security.SecurityException,
                                 org.opensaml.xml.validation.ValidationException,
                                 org.opensaml.xml.encryption.DecryptionException

Throws:

org.opensaml.common.SAMLException

org.opensaml.xml.security.SecurityException

org.opensaml.xml.validation.ValidationException

org.opensaml.xml.encryption.DecryptionException

retrieveRequest

protected org.opensaml.saml2.core.AuthnRequest retrieveRequest(org.opensaml.saml2.core.Response response)
                                                        throws org.opensaml.common.SAMLException

Throws:

org.opensaml.common.SAMLException

getEndpoint

public org.opensaml.saml2.metadata.Endpoint getEndpoint()

getTrustEngine

public org.opensaml.xml.signature.SignatureTrustEngine getTrustEngine()

setTrustEngine

public void setTrustEngine(org.opensaml.xml.signature.SignatureTrustEngine trustEngine)

getDecrypter

public org.opensaml.saml2.encryption.Decrypter getDecrypter()

setDecrypter

public void setDecrypter(org.opensaml.saml2.encryption.Decrypter decrypter)

newUUID

protected String newUUID()

getBaseURL

protected String getBaseURL(javax.servlet.ServletRequest request)

getStartPageURL

protected String getStartPageURL(javax.servlet.ServletRequest request)