public class OpenSamlImplementation extends SpringSecuritySaml<OpenSamlImplementation>
Constructor and Description |
---|
OpenSamlImplementation(java.time.Clock time) |
Modifier and Type | Method and Description |
---|---|
protected void |
addCondition(org.opensaml.saml.saml2.core.Conditions conditions,
AssertionCondition c) |
protected void |
bootstrap() |
<T> T |
buildSAMLObject(java.lang.Class<T> clazz) |
protected org.opensaml.saml.common.SAMLObject |
decrypt(org.opensaml.saml.saml2.core.EncryptedElementType encrypted,
java.util.List<SimpleKey> keys) |
protected org.opensaml.saml.saml2.core.EncryptedAssertion |
encryptAssertion(org.opensaml.saml.saml2.core.Assertion assertion,
SimpleKey key,
KeyEncryptionMethod keyAlgorithm,
DataEncryptionMethod dataAlgorithm) |
protected NameIdPolicy |
fromNameIDPolicy(org.opensaml.saml.saml2.core.NameIDPolicy nameIDPolicy) |
static javax.crypto.SecretKey |
generateKeyFromURI(DataEncryptionMethod algoURI) |
protected org.opensaml.saml.saml2.metadata.ArtifactResolutionService |
getArtifactResolutionService(Endpoint ep,
int i) |
org.opensaml.saml.saml2.metadata.AssertionConsumerService |
getAssertionConsumerService(Endpoint endpoint,
int index) |
protected org.opensaml.saml.saml2.metadata.AttributeConsumingService |
getAttributeConsumingService(java.util.List<Attribute> attributes) |
protected java.util.List<Attribute> |
getAttributes(java.util.List<org.opensaml.saml.saml2.core.AttributeStatement> attributeStatements,
java.util.List<SimpleKey> localKeys) |
protected AuthenticationContextClassReference |
getAuthenticationContextClassReference(org.opensaml.saml.saml2.core.AuthnRequest request) |
protected java.util.List<AuthenticationStatement> |
getAuthenticationStatements(java.util.List<org.opensaml.saml.saml2.core.AuthnStatement> authnStatements) |
org.opensaml.core.xml.XMLObjectBuilderFactory |
getBuilderFactory() |
protected Conditions |
getConditions(org.opensaml.saml.saml2.core.Conditions conditions) |
protected java.util.List<SubjectConfirmation> |
getConfirmations(java.util.List<org.opensaml.saml.saml2.core.SubjectConfirmation> subjectConfirmations,
java.util.List<SimpleKey> localKeys) |
org.opensaml.security.credential.Credential |
getCredential(SimpleKey key,
org.opensaml.security.credential.impl.KeyStoreCredentialResolver resolver) |
org.opensaml.security.credential.impl.KeyStoreCredentialResolver |
getCredentialsResolver(SimpleKey key) |
protected java.util.List<AssertionCondition> |
getCriteria(java.util.List<org.opensaml.saml.saml2.core.Condition> conditions) |
protected org.opensaml.saml.saml2.encryption.Decrypter |
getDecrypter(SimpleKey key) |
protected Endpoint |
getDiscovery(org.opensaml.saml.saml2.metadata.RoleDescriptor desc) |
protected org.opensaml.saml.saml2.encryption.Encrypter |
getEncrypter(SimpleKey key,
KeyEncryptionMethod keyAlgorithm,
DataEncryptionMethod dataAlgorithm) |
protected Endpoint |
getEndpoint(java.lang.String url,
Binding binding,
int index,
boolean isDefault) |
protected java.util.List<Endpoint> |
getEndpoints(java.util.List<? extends org.opensaml.saml.saml2.metadata.Endpoint> services) |
org.opensaml.saml.saml2.metadata.EntityDescriptor |
getEntityDescriptor() |
org.opensaml.saml.saml2.metadata.IDPSSODescriptor |
getIDPSSODescriptor() |
protected Issuer |
getIssuer(org.opensaml.saml.saml2.core.Issuer issuer) |
protected java.util.List<java.lang.Object> |
getJavaValues(java.util.List<org.opensaml.core.xml.XMLObject> attributeValues) |
org.opensaml.saml.saml2.metadata.KeyDescriptor |
getKeyDescriptor(SimpleKey key) |
protected java.util.List<SimpleKey> |
getKeyFromDescriptor(org.opensaml.saml.saml2.metadata.KeyDescriptor desc) |
org.opensaml.xmlsec.keyinfo.KeyInfoGenerator |
getKeyInfoGenerator(org.opensaml.security.credential.Credential credential) |
org.opensaml.core.xml.io.MarshallerFactory |
getMarshallerFactory() |
protected Metadata |
getMetadata(java.util.List<? extends Provider> ssoProviders) |
org.opensaml.saml.saml2.metadata.Extensions |
getMetadataExtensions() |
protected org.opensaml.saml.saml2.core.NameID |
getNameID(org.opensaml.saml.saml2.core.NameID id,
org.opensaml.saml.saml2.core.EncryptedID eid,
java.util.List<SimpleKey> localKeys) |
org.opensaml.saml.saml2.metadata.NameIDFormat |
getNameIDFormat(NameId nameId) |
protected org.opensaml.saml.saml2.core.NameIDPolicy |
getNameIDPolicy(NameIdPolicy nameIdPolicy) |
protected NameIdPrincipal |
getNameIdPrincipal(org.opensaml.saml.saml2.core.NameID p) |
protected java.util.List<NameId> |
getNameIDs(java.util.List<org.opensaml.saml.saml2.metadata.NameIDFormat> nameIDFormats) |
net.shibboleth.utilities.java.support.xml.BasicParserPool |
getParserPool() |
protected NameIdPrincipal |
getPrincipal(org.opensaml.saml.saml2.core.Subject subject,
java.util.List<SimpleKey> localKeys) |
protected java.util.List<SimpleKey> |
getProviderKeys(org.opensaml.saml.saml2.metadata.RoleDescriptor descriptor) |
protected java.util.List<Attribute> |
getRequestAttributes(org.opensaml.saml.saml2.metadata.SPSSODescriptor desc) |
protected java.util.List<Attribute> |
getRequestedAttributes(java.util.List<org.opensaml.saml.saml2.metadata.RequestedAttribute> attributes) |
protected org.opensaml.saml.saml2.core.RequestedAuthnContext |
getRequestedAuthenticationContext(AuthenticationRequest request) |
protected RequestedAuthenticationContext |
getRequestedAuthenticationContext(org.opensaml.saml.saml2.core.AuthnRequest request) |
protected Endpoint |
getRequestInitiation(org.opensaml.saml.saml2.metadata.RoleDescriptor desc) |
protected java.util.List<org.opensaml.saml.saml2.metadata.RoleDescriptor> |
getRoleDescriptors(Metadata<? extends Metadata> metadata) |
SamlKeyStoreProvider |
getSamlKeyStoreProvider() |
protected Signature |
getSignature(org.opensaml.saml.common.SignableSAMLObject target) |
org.opensaml.saml.saml2.metadata.SingleLogoutService |
getSingleLogoutService(Endpoint endpoint) |
org.opensaml.saml.saml2.metadata.SingleSignOnService |
getSingleSignOnService(Endpoint endpoint,
int index) |
org.opensaml.saml.saml2.metadata.SPSSODescriptor |
getSPSSODescriptor() |
protected SsoProvider |
getSsoProvider(org.opensaml.saml.saml2.metadata.RoleDescriptor descriptor) |
protected java.util.List<? extends Provider> |
getSsoProviders(org.opensaml.saml.saml2.metadata.EntityDescriptor descriptor) |
protected Status |
getStatus(org.opensaml.saml.saml2.core.Status status) |
protected Subject |
getSubject(org.opensaml.saml.saml2.core.Subject subject,
java.util.List<SimpleKey> localKeys) |
org.opensaml.core.xml.io.UnmarshallerFactory |
getUnmarshallerFactory() |
protected org.opensaml.saml.saml2.core.Assertion |
internalToXml(Assertion request) |
protected org.opensaml.saml.saml2.core.AuthnRequest |
internalToXml(AuthenticationRequest request) |
protected org.opensaml.saml.saml2.core.LogoutRequest |
internalToXml(LogoutRequest request) |
protected org.opensaml.saml.saml2.core.LogoutResponse |
internalToXml(LogoutResponse response) |
protected org.opensaml.saml.saml2.metadata.EntityDescriptor |
internalToXml(Metadata<? extends Metadata> metadata) |
protected org.opensaml.saml.saml2.core.Response |
internalToXml(Response response) |
protected java.lang.String |
marshallToXml(org.opensaml.core.xml.XMLObject auth) |
protected org.opensaml.core.xml.XMLObject |
objectToXmlObject(java.lang.Object o) |
protected org.opensaml.core.xml.XMLObject |
parse(byte[] xml) |
Saml2Object |
resolve(byte[] xml,
java.util.List<SimpleKey> verificationKeys,
java.util.List<SimpleKey> localKeys) |
Saml2Object |
resolve(java.lang.String xml,
java.util.List<SimpleKey> verificationKeys,
java.util.List<SimpleKey> localKeys) |
protected Assertion |
resolveAssertion(org.opensaml.saml.saml2.core.Assertion parsed,
java.util.List<SimpleKey> verificationKeys,
java.util.List<SimpleKey> localKeys) |
protected AuthenticationRequest |
resolveAuthenticationRequest(org.opensaml.saml.saml2.core.AuthnRequest parsed) |
protected LogoutRequest |
resolveLogoutRequest(org.opensaml.saml.saml2.core.LogoutRequest request,
java.util.List<SimpleKey> verificationKeys,
java.util.List<SimpleKey> localKeys) |
protected LogoutResponse |
resolveLogoutResponse(org.opensaml.saml.saml2.core.LogoutResponse response,
java.util.List<SimpleKey> verificationKeys,
java.util.List<SimpleKey> localKeys) |
protected Metadata |
resolveMetadata(org.opensaml.saml.saml2.metadata.EntitiesDescriptor parsed,
java.util.List<SimpleKey> verificationKeys,
java.util.List<SimpleKey> localKeys) |
protected Metadata |
resolveMetadata(org.opensaml.saml.saml2.metadata.EntityDescriptor parsed) |
protected Response |
resolveResponse(org.opensaml.saml.saml2.core.Response parsed,
java.util.List<SimpleKey> verificationKeys,
java.util.List<SimpleKey> localKeys) |
OpenSamlImplementation |
setSamlKeyStoreProvider(SamlKeyStoreProvider samlKeyStoreProvider) |
void |
signObject(org.opensaml.saml.common.SignableSAMLObject signable,
SimpleKey key,
AlgorithmMethod algorithm,
DigestMethod digest) |
javax.xml.datatype.Duration |
toDuration(long millis) |
protected org.opensaml.saml.saml2.core.Issuer |
toIssuer(Issuer issuer) |
long |
toMillis(javax.xml.datatype.Duration duration) |
java.lang.String |
toXml(Saml2Object saml2Object) |
Signature |
validateSignature(Saml2Object saml2Object,
java.util.List<SimpleKey> trustedKeys) |
Signature |
validateSignature(org.opensaml.saml.common.SignableSAMLObject object,
java.util.List<SimpleKey> keys) |
protected java.lang.String |
xmlObjectToString(org.opensaml.core.xml.XMLObject o) |
decode, deflate, encode, getTime, inflate, init, performInit
public SamlKeyStoreProvider getSamlKeyStoreProvider()
public OpenSamlImplementation setSamlKeyStoreProvider(SamlKeyStoreProvider samlKeyStoreProvider)
public net.shibboleth.utilities.java.support.xml.BasicParserPool getParserPool()
public org.opensaml.core.xml.io.MarshallerFactory getMarshallerFactory()
public org.opensaml.core.xml.io.UnmarshallerFactory getUnmarshallerFactory()
public org.opensaml.saml.saml2.metadata.EntityDescriptor getEntityDescriptor()
public org.opensaml.saml.saml2.metadata.SPSSODescriptor getSPSSODescriptor()
public org.opensaml.saml.saml2.metadata.IDPSSODescriptor getIDPSSODescriptor()
public org.opensaml.saml.saml2.metadata.Extensions getMetadataExtensions()
public org.opensaml.core.xml.XMLObjectBuilderFactory getBuilderFactory()
protected void bootstrap()
bootstrap
in class SpringSecuritySaml<OpenSamlImplementation>
public long toMillis(javax.xml.datatype.Duration duration)
toMillis
in class SpringSecuritySaml<OpenSamlImplementation>
public javax.xml.datatype.Duration toDuration(long millis)
toDuration
in class SpringSecuritySaml<OpenSamlImplementation>
public java.lang.String toXml(Saml2Object saml2Object)
toXml
in class SpringSecuritySaml<OpenSamlImplementation>
public Saml2Object resolve(java.lang.String xml, java.util.List<SimpleKey> verificationKeys, java.util.List<SimpleKey> localKeys)
resolve
in class SpringSecuritySaml<OpenSamlImplementation>
public Saml2Object resolve(byte[] xml, java.util.List<SimpleKey> verificationKeys, java.util.List<SimpleKey> localKeys)
resolve
in class SpringSecuritySaml<OpenSamlImplementation>
public Signature validateSignature(Saml2Object saml2Object, java.util.List<SimpleKey> trustedKeys)
validateSignature
in class SpringSecuritySaml<OpenSamlImplementation>
public Signature validateSignature(org.opensaml.saml.common.SignableSAMLObject object, java.util.List<SimpleKey> keys)
public org.opensaml.security.credential.Credential getCredential(SimpleKey key, org.opensaml.security.credential.impl.KeyStoreCredentialResolver resolver)
public org.opensaml.security.credential.impl.KeyStoreCredentialResolver getCredentialsResolver(SimpleKey key)
protected Signature getSignature(org.opensaml.saml.common.SignableSAMLObject target)
protected org.opensaml.saml.saml2.core.EncryptedAssertion encryptAssertion(org.opensaml.saml.saml2.core.Assertion assertion, SimpleKey key, KeyEncryptionMethod keyAlgorithm, DataEncryptionMethod dataAlgorithm)
protected org.opensaml.saml.common.SAMLObject decrypt(org.opensaml.saml.saml2.core.EncryptedElementType encrypted, java.util.List<SimpleKey> keys)
protected org.opensaml.saml.saml2.encryption.Encrypter getEncrypter(SimpleKey key, KeyEncryptionMethod keyAlgorithm, DataEncryptionMethod dataAlgorithm)
public static javax.crypto.SecretKey generateKeyFromURI(DataEncryptionMethod algoURI)
protected org.opensaml.saml.saml2.encryption.Decrypter getDecrypter(SimpleKey key)
protected org.opensaml.core.xml.XMLObject parse(byte[] xml)
protected java.util.List<? extends Provider> getSsoProviders(org.opensaml.saml.saml2.metadata.EntityDescriptor descriptor)
protected SsoProvider getSsoProvider(org.opensaml.saml.saml2.metadata.RoleDescriptor descriptor)
protected java.util.List<Attribute> getRequestAttributes(org.opensaml.saml.saml2.metadata.SPSSODescriptor desc)
protected Endpoint getRequestInitiation(org.opensaml.saml.saml2.metadata.RoleDescriptor desc)
protected Endpoint getDiscovery(org.opensaml.saml.saml2.metadata.RoleDescriptor desc)
protected java.util.List<SimpleKey> getProviderKeys(org.opensaml.saml.saml2.metadata.RoleDescriptor descriptor)
protected java.util.List<SimpleKey> getKeyFromDescriptor(org.opensaml.saml.saml2.metadata.KeyDescriptor desc)
protected java.util.List<Endpoint> getEndpoints(java.util.List<? extends org.opensaml.saml.saml2.metadata.Endpoint> services)
protected java.util.List<NameId> getNameIDs(java.util.List<org.opensaml.saml.saml2.metadata.NameIDFormat> nameIDFormats)
protected org.opensaml.saml.saml2.core.Response internalToXml(Response response)
protected org.opensaml.saml.saml2.metadata.EntityDescriptor internalToXml(Metadata<? extends Metadata> metadata)
protected java.util.List<org.opensaml.saml.saml2.metadata.RoleDescriptor> getRoleDescriptors(Metadata<? extends Metadata> metadata)
protected org.opensaml.saml.saml2.metadata.AttributeConsumingService getAttributeConsumingService(java.util.List<Attribute> attributes)
protected org.opensaml.saml.saml2.metadata.ArtifactResolutionService getArtifactResolutionService(Endpoint ep, int i)
protected org.opensaml.saml.saml2.core.LogoutResponse internalToXml(LogoutResponse response)
protected org.opensaml.saml.saml2.core.LogoutRequest internalToXml(LogoutRequest request)
protected org.opensaml.saml.saml2.core.Assertion internalToXml(Assertion request)
protected void addCondition(org.opensaml.saml.saml2.core.Conditions conditions, AssertionCondition c)
protected org.opensaml.saml.saml2.core.AuthnRequest internalToXml(AuthenticationRequest request)
protected java.lang.String marshallToXml(org.opensaml.core.xml.XMLObject auth)
protected org.opensaml.saml.saml2.core.RequestedAuthnContext getRequestedAuthenticationContext(AuthenticationRequest request)
protected org.opensaml.saml.saml2.core.NameIDPolicy getNameIDPolicy(NameIdPolicy nameIdPolicy)
protected NameIdPolicy fromNameIDPolicy(org.opensaml.saml.saml2.core.NameIDPolicy nameIDPolicy)
protected Response resolveResponse(org.opensaml.saml.saml2.core.Response parsed, java.util.List<SimpleKey> verificationKeys, java.util.List<SimpleKey> localKeys)
protected LogoutResponse resolveLogoutResponse(org.opensaml.saml.saml2.core.LogoutResponse response, java.util.List<SimpleKey> verificationKeys, java.util.List<SimpleKey> localKeys)
protected LogoutRequest resolveLogoutRequest(org.opensaml.saml.saml2.core.LogoutRequest request, java.util.List<SimpleKey> verificationKeys, java.util.List<SimpleKey> localKeys)
protected Status getStatus(org.opensaml.saml.saml2.core.Status status)
protected Assertion resolveAssertion(org.opensaml.saml.saml2.core.Assertion parsed, java.util.List<SimpleKey> verificationKeys, java.util.List<SimpleKey> localKeys)
protected java.util.List<Attribute> getRequestedAttributes(java.util.List<org.opensaml.saml.saml2.metadata.RequestedAttribute> attributes)
protected java.util.List<Attribute> getAttributes(java.util.List<org.opensaml.saml.saml2.core.AttributeStatement> attributeStatements, java.util.List<SimpleKey> localKeys)
protected java.util.List<java.lang.Object> getJavaValues(java.util.List<org.opensaml.core.xml.XMLObject> attributeValues)
protected java.util.List<AuthenticationStatement> getAuthenticationStatements(java.util.List<org.opensaml.saml.saml2.core.AuthnStatement> authnStatements)
protected Conditions getConditions(org.opensaml.saml.saml2.core.Conditions conditions)
protected java.util.List<AssertionCondition> getCriteria(java.util.List<org.opensaml.saml.saml2.core.Condition> conditions)
protected Subject getSubject(org.opensaml.saml.saml2.core.Subject subject, java.util.List<SimpleKey> localKeys)
protected java.util.List<SubjectConfirmation> getConfirmations(java.util.List<org.opensaml.saml.saml2.core.SubjectConfirmation> subjectConfirmations, java.util.List<SimpleKey> localKeys)
protected org.opensaml.saml.saml2.core.NameID getNameID(org.opensaml.saml.saml2.core.NameID id, org.opensaml.saml.saml2.core.EncryptedID eid, java.util.List<SimpleKey> localKeys)
protected NameIdPrincipal getPrincipal(org.opensaml.saml.saml2.core.Subject subject, java.util.List<SimpleKey> localKeys)
protected NameIdPrincipal getNameIdPrincipal(org.opensaml.saml.saml2.core.NameID p)
protected org.opensaml.saml.saml2.core.Issuer toIssuer(Issuer issuer)
protected Issuer getIssuer(org.opensaml.saml.saml2.core.Issuer issuer)
protected AuthenticationRequest resolveAuthenticationRequest(org.opensaml.saml.saml2.core.AuthnRequest parsed)
protected AuthenticationContextClassReference getAuthenticationContextClassReference(org.opensaml.saml.saml2.core.AuthnRequest request)
protected RequestedAuthenticationContext getRequestedAuthenticationContext(org.opensaml.saml.saml2.core.AuthnRequest request)
protected Metadata resolveMetadata(org.opensaml.saml.saml2.metadata.EntitiesDescriptor parsed, java.util.List<SimpleKey> verificationKeys, java.util.List<SimpleKey> localKeys)
protected Metadata resolveMetadata(org.opensaml.saml.saml2.metadata.EntityDescriptor parsed)
protected org.opensaml.core.xml.XMLObject objectToXmlObject(java.lang.Object o)
protected java.lang.String xmlObjectToString(org.opensaml.core.xml.XMLObject o)
protected Endpoint getEndpoint(java.lang.String url, Binding binding, int index, boolean isDefault)
public org.opensaml.saml.saml2.metadata.NameIDFormat getNameIDFormat(NameId nameId)
public org.opensaml.saml.saml2.metadata.SingleSignOnService getSingleSignOnService(Endpoint endpoint, int index)
public org.opensaml.saml.saml2.metadata.AssertionConsumerService getAssertionConsumerService(Endpoint endpoint, int index)
public org.opensaml.saml.saml2.metadata.SingleLogoutService getSingleLogoutService(Endpoint endpoint)
public org.opensaml.saml.saml2.metadata.KeyDescriptor getKeyDescriptor(SimpleKey key)
public org.opensaml.xmlsec.keyinfo.KeyInfoGenerator getKeyInfoGenerator(org.opensaml.security.credential.Credential credential)
public void signObject(org.opensaml.saml.common.SignableSAMLObject signable, SimpleKey key, AlgorithmMethod algorithm, DigestMethod digest)
public <T> T buildSAMLObject(java.lang.Class<T> clazz)