org.opensaml.security

クラス SAMLSignatureProfileValidator

java.lang.Object

org.opensaml.security.SAMLSignatureProfileValidator

すべての実装されたインタフェース:

Validator<Signature>

public class SAMLSignatureProfileValidator
extends Object
implements Validator<Signature>

A validator for instances of Signature, which validates that the signature meets security-related requirements indicated by the SAML profile of XML Signature.

コンストラクタの概要

コンストラクタ

コンストラクタと説明
SAMLSignatureProfileValidator()

メソッドの概要

メソッド

修飾子とタイプ	メソッドと説明
void	validate(Signature signature) Checks to see if a XMLObject is valid.
protected void	validateObjectChildren(org.apache.xml.security.signature.XMLSignature apacheSig) Validate that the Signature instance does not contain any ds:Object children.
protected org.apache.xml.security.signature.Reference	validateReference(org.apache.xml.security.signature.XMLSignature apacheSig) Validate the Signature's SignedInfo Reference.
protected void	validateReferenceURI(String uri, SignableSAMLObject signableObject) Validate the Signature's Reference URI.
protected void	validateReferenceURI(String uri, String id) Validate the Reference URI and parent ID attribute values.
protected void	validateSignatureImpl(SignatureImpl sigImpl) Validate an instance of SignatureImpl, which is in turn based on underlying Apache XML Security XMLSignature instance.
protected void	validateTransforms(org.apache.xml.security.signature.Reference reference) Validate the transforms included in the Signature Reference.

クラスから継承されたメソッド java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

コンストラクタの詳細

SAMLSignatureProfileValidator

public SAMLSignatureProfileValidator()

メソッドの詳細

validate

public void validate(Signature signature)
              throws ValidationException

Checks to see if a XMLObject is valid.

定義:

validate インタフェース内 Validator<Signature>

パラメータ:

signature - the XMLObject to validate

例外:

ValidationException - thrown if the element is not valid

validateSignatureImpl

protected void validateSignatureImpl(SignatureImpl sigImpl)
                              throws ValidationException

Validate an instance of SignatureImpl, which is in turn based on underlying Apache XML Security XMLSignature instance.

パラメータ:

sigImpl - the signature implementation object to validate

例外:

ValidationException - thrown if the signature is not valid with respect to the profile

validateReference

protected org.apache.xml.security.signature.Reference validateReference(org.apache.xml.security.signature.XMLSignature apacheSig)
                                                                 throws ValidationException

Validate the Signature's SignedInfo Reference. The SignedInfo must contain exactly 1 Reference.

パラメータ:

apacheSig - the Apache XML Signature instance

戻り値:

the valid Reference contained within the SignedInfo

例外:

ValidationException - thrown if the Signature does not contain exactly 1 Reference, or if there is an error obtaining the Reference instance

validateReferenceURI

protected void validateReferenceURI(String uri,
                        SignableSAMLObject signableObject)
                             throws ValidationException

Validate the Signature's Reference URI. First validate the Reference URI against the parent's ID itself. Then validate that the URI (if non-empty) resolves to the same Element node as is cached by the SignableSAMLObject.

パラメータ:

uri - the Signature Reference URI attribute value

signableObject - the SignableSAMLObject whose signature is being validated

例外:

ValidationException - if the URI is invalid or doesn't resolve to the expected DOM node

validateReferenceURI

protected void validateReferenceURI(String uri,
                        String id)
                             throws ValidationException

Validate the Reference URI and parent ID attribute values. The URI must either be null or empty (indicating that the entire enclosing document was signed), or else it must be a local document fragment reference and point to the SAMLObject parent via the latter's ID attribute value.

パラメータ:

uri - the Signature Reference URI attribute value

id - the Signature parents ID attribute value

例外:

ValidationException - thrown if the URI or ID attribute values are invalid

validateTransforms

protected void validateTransforms(org.apache.xml.security.signature.Reference reference)
                           throws ValidationException

Validate the transforms included in the Signature Reference. The Reference may contain at most 2 transforms. One of them must be the Enveloped signature transform. An Exclusive Canonicalization transform (with or without comments) may also be present. No other transforms are allowed.

パラメータ:

reference - the Signature reference containing the transforms to evaluate

例外:

ValidationException - thrown if the set of transforms is invalid

validateObjectChildren

protected void validateObjectChildren(org.apache.xml.security.signature.XMLSignature apacheSig)
                               throws ValidationException

Validate that the Signature instance does not contain any ds:Object children.

パラメータ:

apacheSig - the Apache XML Signature instance

例外:

ValidationException - if the signature contains ds:Object children