Package org.nuxeo.ecm.platform.auth.saml

Class AbstractSAMLProfile

java.lang.Object

org.nuxeo.ecm.platform.auth.saml.AbstractSAMLProfile

Direct Known Subclasses:

SLOProfileImpl, WebSSOProfileImpl

public abstract class AbstractSAMLProfile
extends Object

Base abstract class for SAML profile processors.

Since:

6.0

Field Summary

Fields

Modifier and Type	Field	Description
protected org.opensaml.xml.XMLObjectBuilderFactory	builderFactory
protected static Log	log
protected BooleanSupplier	signatureRequired
protected org.opensaml.xml.signature.SignatureTrustEngine	trustEngine

Constructor Summary

Constructors

Constructor	Description
AbstractSAMLProfile(org.opensaml.saml2.metadata.Endpoint endpoint)

Method Summary

Modifier and Type	Method	Description
protected <T extends org.opensaml.common.SAMLObject> T	build(QName qName)
protected String	getBaseURL(javax.servlet.ServletRequest request)
org.opensaml.saml2.encryption.Decrypter	getDecrypter()
org.opensaml.saml2.metadata.Endpoint	getEndpoint()
abstract String	getProfileIdentifier()
int	getSkewTimeMillis()
protected String	getStartPageURL(javax.servlet.ServletRequest request)
org.opensaml.xml.signature.SignatureTrustEngine	getTrustEngine()
protected String	newUUID()
protected org.opensaml.saml2.core.AuthnRequest	retrieveRequest(org.opensaml.saml2.core.Response response)
void	setDecrypter(org.opensaml.saml2.encryption.Decrypter decrypter)
void	setSignatureRequired(BooleanSupplier signatureRequired)
void	setSkewTimeMillis(int skewTimeMillis)
void	setTrustEngine(org.opensaml.xml.signature.SignatureTrustEngine trustEngine)
protected void	validateAssertion(org.opensaml.saml2.core.Assertion assertion, org.opensaml.common.binding.SAMLMessageContext context)
protected void	validateEndpoint(org.opensaml.saml2.core.Response response, org.opensaml.saml2.metadata.Endpoint endpoint)
protected void	validateIssuer(org.opensaml.saml2.core.Issuer issuer, org.opensaml.common.binding.SAMLMessageContext context)
protected void	validateSignature(org.opensaml.xml.signature.Signature signature, String IDPEntityID)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

log

protected static final Log log

builderFactory

protected final org.opensaml.xml.XMLObjectBuilderFactory builderFactory

trustEngine

protected org.opensaml.xml.signature.SignatureTrustEngine trustEngine

signatureRequired

protected BooleanSupplier signatureRequired

Constructor Detail

AbstractSAMLProfile

public AbstractSAMLProfile(org.opensaml.saml2.metadata.Endpoint endpoint)

Method Detail

getProfileIdentifier

public abstract String getProfileIdentifier()

Returns:

the profile identifier (Uri).

build

protected <T extends org.opensaml.common.SAMLObject> T build(QName qName)

validateSignature

protected void validateSignature(org.opensaml.xml.signature.Signature signature,
                                 String IDPEntityID)
                          throws org.opensaml.common.SAMLException

Throws:

org.opensaml.common.SAMLException

validateIssuer

protected void validateIssuer(org.opensaml.saml2.core.Issuer issuer,
                              org.opensaml.common.binding.SAMLMessageContext context)
                       throws org.opensaml.common.SAMLException

Throws:

org.opensaml.common.SAMLException

validateEndpoint

protected void validateEndpoint(org.opensaml.saml2.core.Response response,
                                org.opensaml.saml2.metadata.Endpoint endpoint)
                         throws org.opensaml.common.SAMLException

Throws:

org.opensaml.common.SAMLException

validateAssertion

protected void validateAssertion(org.opensaml.saml2.core.Assertion assertion,
                                 org.opensaml.common.binding.SAMLMessageContext context)
                          throws org.opensaml.common.SAMLException

Throws:

org.opensaml.common.SAMLException

retrieveRequest

protected org.opensaml.saml2.core.AuthnRequest retrieveRequest(org.opensaml.saml2.core.Response response)
                                                        throws org.opensaml.common.SAMLException

Throws:

org.opensaml.common.SAMLException

getEndpoint

public org.opensaml.saml2.metadata.Endpoint getEndpoint()

getTrustEngine

public org.opensaml.xml.signature.SignatureTrustEngine getTrustEngine()

setTrustEngine

public void setTrustEngine(org.opensaml.xml.signature.SignatureTrustEngine trustEngine)

setSignatureRequired

public void setSignatureRequired(BooleanSupplier signatureRequired)

getDecrypter

public org.opensaml.saml2.encryption.Decrypter getDecrypter()

setDecrypter

public void setDecrypter(org.opensaml.saml2.encryption.Decrypter decrypter)

getSkewTimeMillis

public int getSkewTimeMillis()

setSkewTimeMillis

public void setSkewTimeMillis(int skewTimeMillis)

newUUID

protected String newUUID()

getBaseURL

protected String getBaseURL(javax.servlet.ServletRequest request)

getStartPageURL

protected String getStartPageURL(javax.servlet.ServletRequest request)