org.opensaml.saml.common

Class SAMLObjectContentReference

java.lang.Object

org.opensaml.saml.common.SAMLObjectContentReference

All Implemented Interfaces:

ConfigurableContentReference, ContentReference

public class SAMLObjectContentReference
extends Object
implements ConfigurableContentReference

A content reference for SAML objects that will be signed. The reference is created per the SAML specification.

The default digest algorithm used is SignatureConstants.ALGO_ID_DIGEST_SHA256.

The default set of transforms applied consists of SignatureConstants.TRANSFORM_ENVELOPED_SIGNATURE and SignatureConstants.TRANSFORM_C14N_EXCL_WITH_COMMENTS.

When generating an exclusive canonicalization transform, an inclusive namespace list is generated from the namespaces, retrieved from XMLObject.getNamespaces(), used by the SAML object to be signed and all of it's descendants.

Note that the SAML specification states that: 1) an exclusive canonicalization transform (either with or without comments) SHOULD be used. 2) transforms other than enveloped signature and one of the two exclusive canonicalizations SHOULD NOT be used. Careful consideration should be made before deviating from these recommendations.

Constructor Summary

Constructors

Constructor and Description
SAMLObjectContentReference(SignableSAMLObject newSignableObject) Constructor.

Method Summary

Modifier and Type	Method and Description
void	createReference(org.apache.xml.security.signature.XMLSignature signature) Called by the signature marshaller to allow references to be added to the signature.
String	getDigestAlgorithm() Gets the algorithm used to digest the content.
List<String>	getTransforms() Gets the transforms applied to the content prior to digest generation.
void	setDigestAlgorithm(String newAlgorithm) Sets the algorithm used to digest the content.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SAMLObjectContentReference

public SAMLObjectContentReference(@Nonnull
                                  SignableSAMLObject newSignableObject)

Constructor.

Parameters:

newSignableObject - the SAMLObject this reference refers to

Method Detail

getTransforms

@Nonnull
 @NonnullElements
 @Live
public List<String> getTransforms()

Gets the transforms applied to the content prior to digest generation.

Returns:

the transforms applied to the content prior to digest generation

getDigestAlgorithm

@Nonnull
 @NotEmpty
public String getDigestAlgorithm()

Gets the algorithm used to digest the content..

Specified by:

getDigestAlgorithm in interface ConfigurableContentReference

Returns:

the algorithm used to digest the content

setDigestAlgorithm

public void setDigestAlgorithm(@Nonnull @NotEmpty
                               String newAlgorithm)

Sets the algorithm used to digest the content..

Specified by:

setDigestAlgorithm in interface ConfigurableContentReference

Parameters:

newAlgorithm - the algorithm used to digest the content

createReference

public void createReference(@Nonnull
                            org.apache.xml.security.signature.XMLSignature signature)

Called by the signature marshaller to allow references to be added to the signature.

Specified by:

createReference in interface ContentReference

Parameters:

signature - the signature object