org.opensaml.ws.security.provider

Class HTTPRule

java.lang.Object

org.opensaml.ws.security.provider.HTTPRule

All Implemented Interfaces:

SecurityPolicyRule

public class HTTPRule
extends Object
implements SecurityPolicyRule

A security rule that checks basic HTTP connection properties.

Constructor Summary

Constructors

Constructor and Description
HTTPRule(String type, String method, boolean secured) Constructor.

Method Summary

Methods

Modifier and Type	Method and Description
protected void	doEvaluate(MessageContext messageContext) Evaluates if the message context transport, guaranteed to be of type HTTPTransport, meets all requirements.
void	evaluate(MessageContext messageContext) Evaluates the message context against the rule.
protected void	evaluateContentType(HTTPTransport transport) Checks if the transport is of the correct content type.
protected void	evaluateRequestMethod(HTTPTransport transport) Checks if the transport is of the correct request method.
protected void	evaluateSecured(HTTPTransport transport) Checks if the transport is secured.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

HTTPRule

public HTTPRule(String type,
        String method,
        boolean secured)

Constructor.

Parameters:

type - expected content type

method - expected request method

secured - whether the request must be secured

Method Detail

evaluate

public void evaluate(MessageContext messageContext)
              throws SecurityPolicyException

Evaluates the message context against the rule.

Specified by:

evaluate in interface SecurityPolicyRule

Parameters:

messageContext - the message context being evaluated

Throws:

SecurityPolicyException - thrown if the message context does not meet the requirements of the rule, or if there is a non-recoverable error during evaluation

doEvaluate

protected void doEvaluate(MessageContext messageContext)
                   throws SecurityPolicyException

Evaluates if the message context transport, guaranteed to be of type HTTPTransport, meets all requirements.

Parameters:

messageContext - message context being evaluated

Throws:

SecurityPolicyException - thrown if the message context does not meet the requirements of an evaluated rule

evaluateContentType

protected void evaluateContentType(HTTPTransport transport)
                            throws SecurityPolicyException

Checks if the transport is of the correct content type.

Parameters:

transport - transport being evalauted

Throws:

SecurityPolicyException - thrown if the content type was an unexpected value

evaluateRequestMethod

protected void evaluateRequestMethod(HTTPTransport transport)
                              throws SecurityPolicyException

Checks if the transport is of the correct request method.

Parameters:

transport - transport being evalauted

Throws:

SecurityPolicyException - thrown if the request method was an unexpected value

evaluateSecured

protected void evaluateSecured(HTTPTransport transport)
                        throws SecurityPolicyException

Checks if the transport is secured.

Parameters:

transport - transport being evalauted

Throws:

SecurityPolicyException - thrown if the transport is not secure and was required to be