public class SAML2ECPProfileHandler extends SSOProfileHandler
修飾子とタイプ | クラスと説明 |
---|---|
protected class |
SAML2ECPProfileHandler.ECPRequestContext
In case we ever add something to the base context
|
SSOProfileHandler.SSORequestContext
AbstractSAML2ProfileHandler.SAML2AuditLogEntry
SAML_VERSION
コンストラクタと説明 |
---|
SAML2ECPProfileHandler()
Constructor.
|
修飾子とタイプ | メソッドと説明 |
---|---|
protected AuthnContext |
buildAuthnContext(SSOProfileHandler.SSORequestContext requestContext)
Creates an
AuthnContext for a successful authentication request. |
protected AuthnStatement |
buildAuthnStatement(SSOProfileHandler.SSORequestContext requestContext)
Creates an authentication statement for the current request.
|
protected HandlerChain |
buildOutboundHandlerChain()
Build the outbound handler chain.
|
protected HandlerChain |
buildPostSecurityInboundHandlerChain()
Build the post-security inbound handler chain.
|
protected HandlerChain |
buildPreSecurityInboundHandlerChain()
Build the pre-security inbound handler chain.
|
protected SAML2ECPProfileHandler.ECPRequestContext |
buildRequestContext(HTTPInTransport in,
HTTPOutTransport out)
Creates an authentication request context from the current environmental information.
|
protected void |
decodeRequest(SAML2ECPProfileHandler.ECPRequestContext requestContext,
HTTPInTransport inTransport,
HTTPOutTransport outTransport)
Decodes an incoming request and stores the information in a created request context.
|
String |
getAuthnContextClassRef()
Gets the AuthnContext class reference.
|
protected SAMLMessageDecoder |
getInboundMessageDecoder(BaseSAMLProfileRequestContext requestContext)
Get the inbound message decoder to use.
|
protected HandlerChainResolver |
getOutboundHandlerChainResolver()
Get the resolver used to resolve the outbound handler chain.
|
protected SAMLMessageEncoder |
getOutboundMessageEncoder(BaseSAMLProfileRequestContext requestContext)
Get the outbound message encoder to use.
|
protected HandlerChainResolver |
getPostSecurityInboundHandlerChainResolver()
Get the resolver used to resolve the post-security inbound handler chain.
|
protected HandlerChainResolver |
getPreSecurityInboundHandlerChainResolver()
Get the resolver used to resolve the pre-security inbound handler chain.
|
String |
getProfileId()
Gets the ID of the profile supported by this handler.
|
void |
initialize()
Initialize the profile handler.
|
protected void |
populateSAMLMessageInformation(BaseSAMLProfileRequestContext requestContext)
Populates the request context with information from the inbound SAML message.
|
void |
processRequest(HTTPInTransport inTransport,
HTTPOutTransport outTransport)
Processes an incoming request.
|
void |
setAuthnContextClassRef(String ref)
Sets the AuthnContext class reference.
|
buildNameId, buildRequestContext, buildSubjectLocality, checkNameIDPolicy, completeAuthenticationRequest, decodeRequest, deserializeRequest, getRequiredNameIDFormat, performAuthentication, populateAssertingPartyInformation, populateRelyingPartyInformation, postProcessAssertion, postProcessResponse, selectEndpoint
buildAssertion, buildAttributeStatement, buildConditions, buildEntityIssuer, buildErrorResponse, buildResponse, buildStatus, buildSubject, buildSubjectConfirmation, checkSamlVersion, getEncrypter, getKeyEncryptionCredential, getSessionIndexFromNameID, isEncryptAssertion, isEncryptNameID, isRequestRequiresEncryptNameID, isSignAssertion, populateRequestContext, populateStatusResponse, populateUserInformation, resolveAttributes, resolvePrincipal, signAssertion, writeAuditLogEntry
encodeResponse, filterNameIDAttributesByFormats, filterNameIDAttributesByProtocol, getAduitLog, getAuditLog, getEntitySupportedFormats, getIdGenerator, getInboundBinding, getMessageDecoders, getMessageEncoders, getMetadataCredentialResolver, getMetadataProvider, getRelyingPartyConfiguration, getSecurityPolicyResolver, getSupportedNameFormats, getSupportedOutboundBindings, getUserSession, getUserSession, isSignResponse, populateProfileInformation, selectNameIDAttributeAndEncoder, selectNameIDAttributeAndEncoder, setIdGenerator, setInboundBinding, setMessageDecoders, setMessageEncoders, setSecurityPolicyResolver, setSupportedOutboundBindings
getBuilderFactory, getParserPool, getProfileConfiguration, getRelyingPartyConfigurationManager, getSessionManager, getStorageService, setParserPool, setRelyingPartyConfigurationManager, setSessionManager, setStorageService
getRequestPaths, setRequestPaths
public void initialize()
public String getProfileId()
getProfileId
クラス内 SSOProfileHandler
public void setAuthnContextClassRef(String ref)
ref
- AuthnContext class reference to setpublic String getAuthnContextClassRef()
public void processRequest(HTTPInTransport inTransport, HTTPOutTransport outTransport) throws ProfileException
processRequest
インタフェース内 ProfileHandler<HTTPInTransport,HTTPOutTransport>
processRequest
クラス内 SSOProfileHandler
inTransport
- the incoming request transportoutTransport
- the outgoing response transportProfileException
- throw if there was a problem while processing the requestprotected void decodeRequest(SAML2ECPProfileHandler.ECPRequestContext requestContext, HTTPInTransport inTransport, HTTPOutTransport outTransport) throws ProfileException
inTransport
- inbound transportoutTransport
- outbound transportrequestContext
- request context to which decoded information should be addedProfileException
- thrown if the incoming message failed decodingprotected SAML2ECPProfileHandler.ECPRequestContext buildRequestContext(HTTPInTransport in, HTTPOutTransport out) throws ProfileException
in
- inbound transportout
- outbount transportProfileException
- thrown if there is a problem creating the contextprotected void populateSAMLMessageInformation(BaseSAMLProfileRequestContext requestContext) throws ProfileException
populateSAMLMessageInformation
クラス内 SSOProfileHandler
requestContext
- current request contextProfileException
- thrown if the inbound SAML message or subject identifier is nullprotected AuthnStatement buildAuthnStatement(SSOProfileHandler.SSORequestContext requestContext)
buildAuthnStatement
クラス内 SSOProfileHandler
requestContext
- current request contextprotected AuthnContext buildAuthnContext(SSOProfileHandler.SSORequestContext requestContext)
AuthnContext
for a successful authentication request.buildAuthnContext
クラス内 SSOProfileHandler
requestContext
- current requestprotected HandlerChain buildPreSecurityInboundHandlerChain()
protected HandlerChain buildPostSecurityInboundHandlerChain()
protected HandlerChainResolver getPreSecurityInboundHandlerChainResolver()
protected HandlerChainResolver getPostSecurityInboundHandlerChainResolver()
protected HandlerChain buildOutboundHandlerChain()
protected HandlerChainResolver getOutboundHandlerChainResolver()
protected SAMLMessageEncoder getOutboundMessageEncoder(BaseSAMLProfileRequestContext requestContext) throws ProfileException
The default implementation uses the binding URI from the
SAMLMessageContext.getPeerEntityEndpoint()
to lookup the encoder from the
supported message encoders defined in AbstractSAMLProfileHandler.getMessageEncoders()
.
Subclasses may override to implement a different mechanism to determine the encoder to use, such as for example cases where an active intermediary actor sits between this provider and the peer entity endpoint (e.g. the SAML 2 ECP case).
getOutboundMessageEncoder
クラス内 AbstractSAMLProfileHandler
requestContext
- current request contextProfileException
- if the encoder to use can not be resolved based on the request contextprotected SAMLMessageDecoder getInboundMessageDecoder(BaseSAMLProfileRequestContext requestContext) throws ProfileException
The default implementation uses the binding URI from AbstractSAMLProfileHandler.getInboundBinding()
to lookup the decoder from the
supported message decoders defined in AbstractSAMLProfileHandler.getMessageDecoders()
.
Subclasses may override to implement a different mechanism to determine the decoder to use.
getInboundMessageDecoder
クラス内 AbstractSAMLProfileHandler
requestContext
- current request contextProfileException
- if the decoder to use can not be resolved based on the request contextCopyright © 2012. All Rights Reserved.