Package org.nuxeo.ecm.platform.auth.saml.key

Class KeyManagerImpl

java.lang.Object

org.nuxeo.runtime.model.DefaultComponent

org.nuxeo.ecm.platform.auth.saml.key.KeyManagerImpl

All Implemented Interfaces:

net.shibboleth.shared.resolver.Resolver<org.opensaml.security.credential.Credential,net.shibboleth.shared.resolver.CriteriaSet>, KeyManager, Adaptable, Component, Extensible, TimestampedService, org.opensaml.security.credential.CredentialResolver

public class KeyManagerImpl
extends DefaultComponent
implements KeyManager

An implementation of KeyManager that uses a JKS key store.

Field Summary

Fields

Modifier and Type	Field	Description
protected KeyDescriptor	config
protected Map<String,KeyHolder>	keyHolders
protected static final String	XP_CONFIGURATION

Fields inherited from class org.nuxeo.runtime.model.DefaultComponent

lastModified, name

Constructor Summary

Constructors

Constructor	Description
KeyManagerImpl()

Method Summary

Modifier and Type	Method	Description
int	getApplicationStartedOrder()	The component notification order for Component.start(ComponentContext).
Set<String>	getAvailableCredentials()
X509Certificate	getCertificate(String alias)
org.opensaml.security.credential.Credential	getCredential(String keyName)
Optional<KeyHolder>	getKeyHolder(String name)
Iterable<org.opensaml.security.credential.Credential>	resolve(net.shibboleth.shared.resolver.CriteriaSet criteria)
org.opensaml.security.credential.Credential	resolveSingle(net.shibboleth.shared.resolver.CriteriaSet criteria)
void	start(ComponentContext context)	Start the component.

Methods inherited from class org.nuxeo.runtime.model.DefaultComponent

activate, addRuntimeMessage, addRuntimeMessage, deactivate, getAdapter, getDescriptor, getDescriptors, getLastModified, getRegistry, register, registerContribution, registerExtension, setLastModified, setModifiedNow, setName, stop, unregister, unregisterContribution, unregisterExtension

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.nuxeo.ecm.platform.auth.saml.key.KeyManager

getEncryptionCredential, getSigningCredential, getTlsCredential

Field Details

XP_CONFIGURATION

protected static final String XP_CONFIGURATION

See Also:

• Constant Field Values

keyHolders

protected Map<String,KeyHolder> keyHolders

config

protected KeyDescriptor config

Constructor Details

KeyManagerImpl

public KeyManagerImpl()

Method Details

getApplicationStartedOrder

public int getApplicationStartedOrder()

Description copied from interface: Component

The component notification order for Component.start(ComponentContext).

Components are notified in increasing order. Order 1000 is the default order for components that don't care. Order 100 is the repository initialization.

Specified by:

getApplicationStartedOrder in interface Component

Returns:

the order, 1000 by default

start

public void start(ComponentContext context)

Description copied from interface: Component

Start the component. This method is called after all the components were resolved and activated

Specified by:

start in interface Component

Overrides:

start in class DefaultComponent

getKeyHolder

public Optional<KeyHolder> getKeyHolder(String name)

Specified by:

getKeyHolder in interface KeyManager

getCredential

public org.opensaml.security.credential.Credential getCredential(String keyName)

Specified by:

getCredential in interface KeyManager

getAvailableCredentials

public Set<String> getAvailableCredentials()

Specified by:

getAvailableCredentials in interface KeyManager

getCertificate

public X509Certificate getCertificate(String alias)

Specified by:

getCertificate in interface KeyManager

resolve

@Nonnull
public Iterable<org.opensaml.security.credential.Credential> resolve(net.shibboleth.shared.resolver.CriteriaSet criteria)
                                                              throws net.shibboleth.shared.resolver.ResolverException

Specified by:

resolve in interface KeyManager

Specified by:

resolve in interface net.shibboleth.shared.resolver.Resolver<org.opensaml.security.credential.Credential,net.shibboleth.shared.resolver.CriteriaSet>

Throws:

net.shibboleth.shared.resolver.ResolverException

resolveSingle

public org.opensaml.security.credential.Credential resolveSingle(net.shibboleth.shared.resolver.CriteriaSet criteria)
                                                          throws net.shibboleth.shared.resolver.ResolverException

Specified by:

resolveSingle in interface KeyManager

Specified by:

resolveSingle in interface net.shibboleth.shared.resolver.Resolver<org.opensaml.security.credential.Credential,net.shibboleth.shared.resolver.CriteriaSet>

Throws:

net.shibboleth.shared.resolver.ResolverException