Package org.codice.ddf.security.idp.client

Class AssertionConsumerService

java.lang.Object

org.codice.ddf.security.idp.client.AssertionConsumerService

@Path("sso")
public class AssertionConsumerService
extends Object

Constructor Summary

Constructors

Constructor	Description
AssertionConsumerService(ddf.security.samlp.impl.SimpleSign simpleSign, IdpMetadata metadata, ddf.security.samlp.impl.SystemCrypto crypto, ddf.security.samlp.impl.RelayStates<String> relayStates)

Method Summary

Modifier and Type	Method	Description
org.codice.ddf.platform.filter.SecurityFilter	getLoginFilter()
javax.ws.rs.core.Response	getSamlResponse(String deflatedSamlResponse, String relayState, String signatureAlgorithm, String signature)	The HTTP-Redirect binding should not be used for Single Sign-On responses.
javax.ws.rs.core.Response	postSamlResponse(String encodedSamlResponse, String relayState)
javax.ws.rs.core.Response	processSamlResponse(String authnResponse, String relayState, boolean wasRedirectSigned)
javax.ws.rs.core.Response	processSamlResponse(org.opensaml.saml.saml2.core.Response samlResponse, String relayState, boolean wasRedirectSigned)
javax.ws.rs.core.Response	processSoapResponse(InputStream body, javax.servlet.http.HttpServletRequest request)
javax.ws.rs.core.Response	retrieveMetadata()
void	setContextPolicyManager(org.codice.ddf.security.policy.context.ContextPolicyManager contextPolicyManager)
void	setLoginFilter(org.codice.ddf.platform.filter.SecurityFilter loginFilter)
void	setRequest(javax.servlet.http.HttpServletRequest request)
void	setSamlSecurity(org.codice.ddf.security.jaxrs.SamlSecurity samlSecurity)
void	setSessionFactory(ddf.security.http.SessionFactory sessionFactory)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

AssertionConsumerService

public AssertionConsumerService(ddf.security.samlp.impl.SimpleSign simpleSign,
 IdpMetadata metadata,
 ddf.security.samlp.impl.SystemCrypto crypto,
 ddf.security.samlp.impl.RelayStates<String> relayStates)

Method Details

postSamlResponse

@POST
@Consumes("*/*")
@Produces("application/x-www-form-urlencoded")
public javax.ws.rs.core.Response postSamlResponse(@FormParam("SAMLResponse")
 String encodedSamlResponse,
 @FormParam("RelayState")
 String relayState)

processSoapResponse

@POST
@Consumes({"text/xml","application/soap+xml"})
public javax.ws.rs.core.Response processSoapResponse(InputStream body,
 @Context
 javax.servlet.http.HttpServletRequest request)

getSamlResponse

@GET
public javax.ws.rs.core.Response getSamlResponse(@QueryParam("SAMLResponse")
 String deflatedSamlResponse,
 @QueryParam("RelayState")
 String relayState,
 @QueryParam("SigAlg")
 String signatureAlgorithm,
 @QueryParam("Signature")
 String signature)

The HTTP-Redirect binding should not be used for Single Sign-On responses.

SAML Profiles Spec: The identity provider issues a message to be delivered by the user agent to the service provider. Either the HTTP POST, or HTTP Artifact binding can be used to transfer the message to the service provider through the user agent. The HTTP Redirect binding MUST NOT be used, as the response will typically exceed the URL length permitted by most user agents.

Keeping this method to work with non-conformant Identity Providers.

processSamlResponse

public javax.ws.rs.core.Response processSamlResponse(org.opensaml.saml.saml2.core.Response samlResponse,
 String relayState,
 boolean wasRedirectSigned)

processSamlResponse

public javax.ws.rs.core.Response processSamlResponse(String authnResponse,
 String relayState,
 boolean wasRedirectSigned)

setSessionFactory

public void setSessionFactory(ddf.security.http.SessionFactory sessionFactory)

retrieveMetadata

@GET
@Path("/metadata")
@Produces("application/xml")
public javax.ws.rs.core.Response retrieveMetadata()
                                           throws org.apache.wss4j.common.ext.WSSecurityException,
CertificateEncodingException

Throws:

org.apache.wss4j.common.ext.WSSecurityException

CertificateEncodingException

getLoginFilter

public org.codice.ddf.platform.filter.SecurityFilter getLoginFilter()

setLoginFilter

public void setLoginFilter(org.codice.ddf.platform.filter.SecurityFilter loginFilter)

setRequest

public void setRequest(javax.servlet.http.HttpServletRequest request)

setContextPolicyManager

public void setContextPolicyManager(org.codice.ddf.security.policy.context.ContextPolicyManager contextPolicyManager)

setSamlSecurity

public void setSamlSecurity(org.codice.ddf.security.jaxrs.SamlSecurity samlSecurity)