org.opensaml.saml2.binding.security

クラス SAML2HTTPPostSimpleSignRule

java.lang.Object

org.opensaml.common.binding.security.BaseSAMLSimpleSignatureSecurityPolicyRule

org.opensaml.saml2.binding.security.SAML2HTTPPostSimpleSignRule

すべての実装されたインタフェース:

SecurityPolicyRule

public class SAML2HTTPPostSimpleSignRule
extends BaseSAMLSimpleSignatureSecurityPolicyRule

Security policy which evaluates simple "blob" signatures according to the SAML 2 HTTP-POST-SimpleSign binding.

コンストラクタの概要

コンストラクタ

コンストラクタと説明
SAML2HTTPPostSimpleSignRule(SignatureTrustEngine engine, ParserPool parserPool, KeyInfoCredentialResolver keyInfoCredResolver) Constructor.

メソッドの概要

メソッド

修飾子とタイプ	メソッドと説明
protected List<Credential>	getRequestCredentials(javax.servlet.http.HttpServletRequest request, SAMLMessageContext samlContext) Extract any candidate validation credentials from the request and/or message context.
protected byte[]	getSignedContent(javax.servlet.http.HttpServletRequest request) Get the content over which to validate the signature, in the form suitable for input into SignatureTrustEngine.validate(byte[], byte[], String, CriteriaSet, Credential).
protected boolean	ruleHandles(javax.servlet.http.HttpServletRequest request, SAMLMessageContext samlMsgCtx) Determine whether the rule should handle the request, based on the unwrapped HTTP servlet request and/or message context.

クラスから継承されたメソッド org.opensaml.common.binding.security.BaseSAMLSimpleSignatureSecurityPolicyRule

buildCriteriaSet, deriveSignerEntityID, evaluate, getSignature, getSignatureAlgorithm, getTrustEngine, validateSignature

クラスから継承されたメソッド java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

コンストラクタの詳細

SAML2HTTPPostSimpleSignRule

public SAML2HTTPPostSimpleSignRule(SignatureTrustEngine engine,
                           ParserPool parserPool,
                           KeyInfoCredentialResolver keyInfoCredResolver)

Constructor.

パラメータ:

engine - the trust engine to use

parserPool - the parser pool used to parse the KeyInfo request parameter

keyInfoCredResolver - the KeyInfo credential resovler to use to extract credentials from the KeyInfo request parameter

メソッドの詳細

ruleHandles

protected boolean ruleHandles(javax.servlet.http.HttpServletRequest request,
                  SAMLMessageContext samlMsgCtx)

Determine whether the rule should handle the request, based on the unwrapped HTTP servlet request and/or message context.

定義:

ruleHandles クラス内 BaseSAMLSimpleSignatureSecurityPolicyRule

パラメータ:

request - the HTTP servlet request being processed

samlMsgCtx - the SAML message context being processed

戻り値:

true if the rule should attempt to process the request, otherwise false

getSignedContent

protected byte[] getSignedContent(javax.servlet.http.HttpServletRequest request)
                           throws SecurityPolicyException

Get the content over which to validate the signature, in the form suitable for input into SignatureTrustEngine.validate(byte[], byte[], String, CriteriaSet, Credential).

定義:

getSignedContent クラス内 BaseSAMLSimpleSignatureSecurityPolicyRule

パラメータ:

request - the HTTP servlet request being processed

戻り値:

the signed content extracted from the request, in the format suitable for input to the trust engine.

例外:

SecurityPolicyException - thrown if there is an error during request processing

getRequestCredentials

protected List<Credential> getRequestCredentials(javax.servlet.http.HttpServletRequest request,
                                     SAMLMessageContext samlContext)
                                          throws SecurityPolicyException

Extract any candidate validation credentials from the request and/or message context. Some bindings allow validataion keys for the simple signature to be supplied, and others do not.

オーバーライド:

getRequestCredentials クラス内 BaseSAMLSimpleSignatureSecurityPolicyRule

パラメータ:

request - the HTTP servlet request being processed

samlContext - the SAML message context being processed

戻り値:

a list of candidate validation credentials in the request, or null if none were present

例外:

SecurityPolicyException - thrown if there is an error during request processing