org.picketlink.identity.federation.bindings.tomcat.sp

Class AbstractSPFormAuthenticator

java.lang.Object

FormAuthenticator

org.picketlink.identity.federation.bindings.tomcat.sp.BaseFormAuthenticator

org.picketlink.identity.federation.bindings.tomcat.sp.AbstractSPFormAuthenticator

Direct Known Subclasses:

AbstractSAML11SPRedirectFormAuthenticator

public abstract class AbstractSPFormAuthenticator
extends BaseFormAuthenticator

Abstract class to be extended by Service Provider valves to handle SAML requests and responses.

Author:

Anil Saldhana, Pedro Silva

Field Summary

Fields

Modifier and Type	Field and Description
protected boolean	jbossEnv

Fields inherited from class org.picketlink.identity.federation.bindings.tomcat.sp.BaseFormAuthenticator

auditHelper, canonicalizationMethod, chain, chainConfigOptions, chainLock, configFile, configProvider, enableAudit, identityURL, idpAddress, idpCertificate, issuerID, keyManager, logger, picketLinkConfiguration, samlHandlerChainClass, saveRestoreRequest, serviceURL, spConfiguration, timer, timerInterval

Constructor Summary

Constructors

Constructor and Description
AbstractSPFormAuthenticator()

Method Summary

Modifier and Type	Method and Description
boolean	authenticate(Request request, HttpServletResponse response, LoginConfig config) Authenticate the request
boolean	authenticate(Request request, Response response, LoginConfig loginConfig)
protected String	getBinding() Return the SAML Binding that this authenticator supports
Context	getContext()
protected abstract String	getContextPath() Subclasses need to return the context path based on the capability of their servlet api
protected Principal	getGenericPrincipal(Request request, String username, List<String> roles)
protected void	initKeyProvider(Context context) Initialize the KeyProvider configurations.
protected boolean	isHttpPostBinding() Indicates if the SP is configure with HTTP POST Binding.
protected boolean	isPOSTBindingResponse()
boolean	restoreRequest(Request request, Session session)
protected void	sendHttpPostBindingRequest(String destination, Document samlDocument, String relayState, Response response, boolean willSendRequest) Sends a HTTP POST request to the IDP.
protected void	sendHttpRedirectRequest(String destination, Document samlDocument, String relayState, Response response, boolean willSendRequest, String destinationQueryStringWithSignature) Sends a HTTP Redirect request to the IDP.
protected void	sendRequestToIDP(String destination, Document samlDocument, String relayState, Request request, Response response, boolean willSendRequest, String destinationQueryStringWithSignature) Send the request to the IDP.
protected void	startPicketLink()

Methods inherited from class org.picketlink.identity.federation.bindings.tomcat.sp.BaseFormAuthenticator

doSupportSignature, getConfigFile, getConfiguration, getIdentityURL, getIdpCertificate, getIDPSSODescriptor, handleMetadata, handleMetadata, initializeHandlerChain, localAuthentication, populateChainConfig, processConfiguration, processIDPMetadataFile, register, sendToLogoutPage, setAuditHelper, setConfigFile, setConfigProvider, setConfigProvider, setIdpAddress, setIssuerID, setLogOutPage, setSamlHandlerChainClass, setSaveRestoreRequest, setServiceURL, setTimerInterval, testStart, validate

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

jbossEnv

protected boolean jbossEnv

Constructor Detail

AbstractSPFormAuthenticator

public AbstractSPFormAuthenticator()

Method Detail

startPicketLink

protected void startPicketLink()
                        throws LifecycleException

Overrides:

startPicketLink in class BaseFormAuthenticator

Throws:

LifecycleException

sendRequestToIDP

protected void sendRequestToIDP(String destination,
                                Document samlDocument,
                                String relayState,
                                Request request,
                                Response response,
                                boolean willSendRequest,
                                String destinationQueryStringWithSignature)
                         throws ProcessingException,
                                ConfigurationException,
                                IOException

Send the request to the IDP. Subclasses should override this method to implement how requests must be sent to the IDP.

Parameters:

destination - idp url

samlDocument - request or response document

relayState -

response -

request -

willSendRequest - are we sending Request or Response to IDP

destinationQueryStringWithSignature - used only with Redirect binding and with signature enabled.

Throws:

ProcessingException

ConfigurationException

IOException

sendHttpRedirectRequest

protected void sendHttpRedirectRequest(String destination,
                                       Document samlDocument,
                                       String relayState,
                                       Response response,
                                       boolean willSendRequest,
                                       String destinationQueryStringWithSignature)
                                throws IOException,
                                       ProcessingException,
                                       ConfigurationException

Sends a HTTP Redirect request to the IDP.

Parameters:

destination -

relayState -

response -

willSendRequest -

destinationQueryStringWithSignature -

Throws:

IOException

UnsupportedEncodingException

ConfigurationException

ProcessingException

sendHttpPostBindingRequest

protected void sendHttpPostBindingRequest(String destination,
                                          Document samlDocument,
                                          String relayState,
                                          Response response,
                                          boolean willSendRequest)
                                   throws ProcessingException,
                                          IOException,
                                          ConfigurationException

Sends a HTTP POST request to the IDP.

Parameters:

destination -

samlDocument -

relayState -

response -

willSendRequest -

Throws:

TrustKeyProcessingException

ProcessingException

IOException

ConfigurationException

initKeyProvider

protected void initKeyProvider(Context context)
                        throws LifecycleException

Initialize the KeyProvider configurations. This configurations are to be used during signing and validation of SAML assertions.

Specified by:

initKeyProvider in class BaseFormAuthenticator

Parameters:

context -

Throws:

LifecycleException

authenticate

public boolean authenticate(Request request,
                            HttpServletResponse response,
                            LoginConfig config)
                     throws IOException

Authenticate the request

Parameters:

request -

response -

config -

Returns:

Throws:

IOException

{@link - RuntimeException} when the response is not of type catalina response object

authenticate

public boolean authenticate(Request request,
                            Response response,
                            LoginConfig loginConfig)
                     throws IOException

Throws:

IOException

isPOSTBindingResponse

protected boolean isPOSTBindingResponse()

getBinding

protected String getBinding()

Description copied from class: BaseFormAuthenticator

Return the SAML Binding that this authenticator supports

Specified by:

getBinding in class BaseFormAuthenticator

Returns:

See Also:

JBossSAMLURIConstants#SAML_HTTP_POST_BINDING}, JBossSAMLURIConstants#SAML_HTTP_REDIRECT_BINDING}

isHttpPostBinding

protected boolean isHttpPostBinding()

Indicates if the SP is configure with HTTP POST Binding.

Returns:

getContext

public Context getContext()

restoreRequest

public boolean restoreRequest(Request request,
                              Session session)
                       throws IOException

Throws:

IOException

getContextPath

protected abstract String getContextPath()

Subclasses need to return the context path based on the capability of their servlet api

Returns:

getGenericPrincipal

protected Principal getGenericPrincipal(Request request,
                                        String username,
                                        List<String> roles)