|
PicketLink Federation Common Server Bindings for Apache Tomcat 2.1.6.Final-redhat-2 | |||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | |||||||||
SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |
java.lang.Objectorg.apache.catalina.valves.ValveBase
org.apache.catalina.authenticator.AuthenticatorBase
org.apache.catalina.authenticator.FormAuthenticator
org.picketlink.identity.federation.bindings.tomcat.sp.BaseFormAuthenticator
org.picketlink.identity.federation.bindings.tomcat.sp.AbstractSPFormAuthenticator
public abstract class AbstractSPFormAuthenticator
Abstract class to be extended by Service Provider valves to handle SAML requests and responses.
Field Summary | |
---|---|
protected boolean |
jbossEnv
|
Fields inherited from class org.picketlink.identity.federation.bindings.tomcat.sp.BaseFormAuthenticator |
---|
auditHelper, canonicalizationMethod, chain, chainConfigOptions, chainLock, configFile, configProvider, enableAudit, identityURL, idpAddress, idpCertificate, issuerID, keyManager, logger, picketLinkConfiguration, samlHandlerChainClass, saveRestoreRequest, serviceURL, spConfiguration |
Fields inherited from class org.apache.catalina.authenticator.FormAuthenticator |
---|
characterEncoding, info |
Fields inherited from class org.apache.catalina.authenticator.AuthenticatorBase |
---|
algorithm, cache, changeSessionIdOnAuthentication, context, DEFAULT_ALGORITHM, digest, disableProxyCaching, entropy, lifecycle, random, randomClass, REALM_NAME, securePagesWithPragma, SESSION_ID_BYTES, sm, sso, started |
Fields inherited from class org.apache.catalina.valves.ValveBase |
---|
container, containerLog, controller, domain, mserver, next, oname |
Fields inherited from interface org.apache.catalina.Lifecycle |
---|
AFTER_START_EVENT, AFTER_STOP_EVENT, BEFORE_START_EVENT, BEFORE_STOP_EVENT, DESTROY_EVENT, INIT_EVENT, PERIODIC_EVENT, START_EVENT, STOP_EVENT |
Constructor Summary | |
---|---|
AbstractSPFormAuthenticator()
|
Method Summary | |
---|---|
boolean |
authenticate(org.apache.catalina.connector.Request request,
javax.servlet.http.HttpServletResponse response,
org.apache.catalina.deploy.LoginConfig config)
Authenticate the request |
boolean |
authenticate(org.apache.catalina.connector.Request request,
org.apache.catalina.connector.Response response,
org.apache.catalina.deploy.LoginConfig loginConfig)
|
protected String |
getBinding()
Return the SAML Binding that this authenticator supports |
protected org.apache.catalina.Context |
getContext()
|
protected abstract String |
getContextPath()
Subclasses need to return the context path based on the capability of their servlet api |
protected Principal |
getGenericPrincipal(org.apache.catalina.connector.Request request,
String username,
List<String> roles)
|
protected void |
initKeyProvider(org.apache.catalina.Context context)
Initialize the KeyProvider configurations. |
protected boolean |
isHttpPostBinding()
Indicates if the SP is configure with HTTP POST Binding. |
protected boolean |
isPOSTBindingResponse()
|
protected void |
sendHttpPostBindingRequest(String destination,
Document samlDocument,
String relayState,
org.apache.catalina.connector.Response response,
boolean willSendRequest)
Sends a HTTP POST request to the IDP. |
protected void |
sendHttpRedirectRequest(String destination,
Document samlDocument,
String relayState,
org.apache.catalina.connector.Response response,
boolean willSendRequest,
String destinationQueryStringWithSignature)
Sends a HTTP Redirect request to the IDP. |
protected void |
sendRequestToIDP(String destination,
Document samlDocument,
String relayState,
org.apache.catalina.connector.Response response,
boolean willSendRequest,
String destinationQueryStringWithSignature)
Send the request to the IDP. |
protected void |
startPicketLink()
|
Methods inherited from class org.picketlink.identity.federation.bindings.tomcat.sp.BaseFormAuthenticator |
---|
doSupportSignature, getConfigFile, getConfiguration, getIdentityURL, getIdpCertificate, getIDPSSODescriptor, handleMetadata, handleMetadata, initializeHandlerChain, localAuthentication, populateChainConfig, processConfiguration, processIDPMetadataFile, register, sendToLogoutPage, setAuditHelper, setConfigFile, setConfigProvider, setConfigProvider, setIdpAddress, setIssuerID, setLogOutPage, setSamlHandlerChainClass, setSaveRestoreRequest, setServiceURL, testStart, validate |
Methods inherited from class org.apache.catalina.authenticator.FormAuthenticator |
---|
forwardToErrorPage, forwardToLoginPage, getCharacterEncoding, getInfo, matchRequest, restoreRequest, savedRequestURL, saveRequest, setCharacterEncoding |
Methods inherited from class org.apache.catalina.authenticator.AuthenticatorBase |
---|
addLifecycleListener, associate, findLifecycleListeners, generateSessionId, getAlgorithm, getCache, getChangeSessionIdOnAuthentication, getContainer, getDigest, getDisableProxyCaching, getEntropy, getRandom, getRandomClass, getSecurePagesWithPragma, invoke, reauthenticateFromSSO, removeLifecycleListener, setAlgorithm, setCache, setChangeSessionIdOnAuthentication, setContainer, setDisableProxyCaching, setEntropy, setRandomClass, setSecurePagesWithPragma, start, stop |
Methods inherited from class org.apache.catalina.valves.ValveBase |
---|
backgroundProcess, createObjectName, event, getContainerName, getController, getDomain, getNext, getObjectName, getParentName, postDeregister, postRegister, preDeregister, preRegister, setController, setNext, setObjectName, toString |
Methods inherited from class java.lang.Object |
---|
clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait |
Field Detail |
---|
protected boolean jbossEnv
Constructor Detail |
---|
public AbstractSPFormAuthenticator()
Method Detail |
---|
protected void startPicketLink() throws org.apache.catalina.LifecycleException
startPicketLink
in class BaseFormAuthenticator
org.apache.catalina.LifecycleException
protected void sendRequestToIDP(String destination, Document samlDocument, String relayState, org.apache.catalina.connector.Response response, boolean willSendRequest, String destinationQueryStringWithSignature) throws ProcessingException, ConfigurationException, IOException
Send the request to the IDP. Subclasses should override this method to implement how requests must be sent to the IDP.
destination
- idp urlsamlDocument
- request or response documentrelayState
- response
- willSendRequest
- are we sending Request or Response to IDPdestinationQueryStringWithSignature
- used only with Redirect binding and with signature enabled.
ProcessingException
ConfigurationException
IOException
protected void sendHttpRedirectRequest(String destination, Document samlDocument, String relayState, org.apache.catalina.connector.Response response, boolean willSendRequest, String destinationQueryStringWithSignature) throws IOException, ProcessingException, ConfigurationException
Sends a HTTP Redirect request to the IDP.
destination
- relayState
- response
- willSendRequest
- destinationQueryStringWithSignature
-
IOException
UnsupportedEncodingException
ConfigurationException
ProcessingException
protected void sendHttpPostBindingRequest(String destination, Document samlDocument, String relayState, org.apache.catalina.connector.Response response, boolean willSendRequest) throws ProcessingException, IOException, ConfigurationException
Sends a HTTP POST request to the IDP.
destination
- samlDocument
- relayState
- response
- willSendRequest
-
TrustKeyProcessingException
ProcessingException
IOException
ConfigurationException
protected void initKeyProvider(org.apache.catalina.Context context) throws org.apache.catalina.LifecycleException
Initialize the KeyProvider configurations. This configurations are to be used during signing and validation of SAML assertions.
initKeyProvider
in class BaseFormAuthenticator
context
-
org.apache.catalina.LifecycleException
public boolean authenticate(org.apache.catalina.connector.Request request, javax.servlet.http.HttpServletResponse response, org.apache.catalina.deploy.LoginConfig config) throws IOException
request
- response
- config
-
IOException
{@link
- RuntimeException} when the response is not of type catalina response objectpublic boolean authenticate(org.apache.catalina.connector.Request request, org.apache.catalina.connector.Response response, org.apache.catalina.deploy.LoginConfig loginConfig) throws IOException
authenticate
in class org.apache.catalina.authenticator.FormAuthenticator
IOException
protected boolean isPOSTBindingResponse()
protected String getBinding()
BaseFormAuthenticator
getBinding
in class BaseFormAuthenticator
JBossSAMLURIConstants#SAML_HTTP_POST_BINDING}
,
JBossSAMLURIConstants#SAML_HTTP_REDIRECT_BINDING}
protected boolean isHttpPostBinding()
Indicates if the SP is configure with HTTP POST Binding.
protected org.apache.catalina.Context getContext()
protected abstract String getContextPath()
protected Principal getGenericPrincipal(org.apache.catalina.connector.Request request, String username, List<String> roles)
|
PicketLink Federation Common Server Bindings for Apache Tomcat 2.1.6.Final-redhat-2 | |||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | |||||||||
SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |