@WebListener
public class SPFormAuthenticationMechanism
extends io.undertow.servlet.handlers.security.ServletFormAuthenticationMechanism
Modifier and Type | Field and Description |
---|---|
protected org.picketlink.identity.federation.core.audit.PicketLinkAuditHelper |
auditHelper |
protected String |
canonicalizationMethod |
protected org.picketlink.identity.federation.core.saml.v2.interfaces.SAML2HandlerChain |
chain |
protected Map<String,Object> |
chainConfigOptions |
protected Lock |
chainLock
A Lock for Handler operations in the chain
|
protected String |
configFile |
protected org.picketlink.identity.federation.web.util.SAMLConfigurationProvider |
configProvider
The user can inject a fully qualified name of a
SAMLConfigurationProvider |
static String |
EMPTY_PASSWORD |
protected boolean |
enableAudit |
static String |
FORM_ACCOUNT_NOTE |
static String |
FORM_REQUEST_NOTE |
protected String |
identityURL |
protected X509Certificate |
idpCertificate
If the service provider is configured with an IDP metadata file, then this certificate can be picked up from the metadata
|
static String |
INITIAL_LOCATION_STORED |
protected String |
issuerID |
protected org.picketlink.identity.federation.core.interfaces.TrustKeyManager |
keyManager |
protected org.picketlink.config.federation.PicketLinkType |
picketLinkConfiguration |
protected String |
samlHandlerChainClass |
protected boolean |
saveRestoreRequest |
protected String |
serviceURL |
protected javax.servlet.ServletContext |
servletContext |
protected org.picketlink.config.federation.SPType |
spConfiguration |
protected Timer |
timer |
protected int |
timerInterval |
Constructor and Description |
---|
SPFormAuthenticationMechanism(io.undertow.server.handlers.form.FormParserFactory parserFactory,
String name,
String loginPage,
String errorPage,
javax.servlet.ServletContext servletContext,
org.picketlink.identity.federation.web.util.SAMLConfigurationProvider configProvider,
org.picketlink.identity.federation.core.audit.PicketLinkAuditHelper auditHelper) |
Modifier and Type | Method and Description |
---|---|
io.undertow.security.api.AuthenticationMechanism.AuthenticationMechanismOutcome |
authenticate(io.undertow.server.HttpServerExchange exchange,
io.undertow.security.api.SecurityContext securityContext) |
protected boolean |
doSupportSignature()
Indicates if digital signatures/validation of SAML assertions are enabled.
|
protected org.picketlink.identity.federation.saml.v2.metadata.IDPSSODescriptorType |
getIdpMetadataFromFile(org.picketlink.config.federation.SPType configuration) |
protected org.picketlink.identity.federation.saml.v2.metadata.IDPSSODescriptorType |
getIDPSSODescriptor(org.picketlink.identity.federation.saml.v2.metadata.EntitiesDescriptorType entities) |
protected org.picketlink.identity.federation.saml.v2.metadata.IDPSSODescriptorType |
handleMetadata(org.picketlink.identity.federation.saml.v2.metadata.EntitiesDescriptorType entities) |
protected org.picketlink.identity.federation.saml.v2.metadata.IDPSSODescriptorType |
handleMetadata(org.picketlink.identity.federation.saml.v2.metadata.EntityDescriptorType entityDescriptor) |
io.undertow.security.api.AuthenticationMechanism.AuthenticationMechanismOutcome |
handleSAML11UnsolicitedResponse(javax.servlet.http.HttpServletRequest request,
javax.servlet.http.HttpServletResponse response,
io.undertow.security.api.SecurityContext securityContext) |
protected void |
initializeHandlerChain() |
protected void |
initKeyProvider(javax.servlet.ServletContext context)
Initialize the KeyProvider configurations.
|
protected boolean |
isHttpPostBinding()
Indicates if the SP is configure with HTTP POST Binding.
|
protected io.undertow.security.api.AuthenticationMechanism.AuthenticationMechanismOutcome |
localAuthentication(io.undertow.server.HttpServerExchange httpServerExchange,
io.undertow.security.api.SecurityContext securityContext)
Fall back on local authentication at the service provider side
|
protected boolean |
matchRequest(javax.servlet.http.HttpServletRequest request) |
protected void |
populateChainConfig() |
protected void |
processConfiguration() |
protected void |
register(io.undertow.security.api.SecurityContext securityContext,
io.undertow.security.idm.Account account) |
protected String |
savedRequestURL(javax.servlet.http.HttpSession session) |
io.undertow.security.api.AuthenticationMechanism.ChallengeResult |
sendChallenge(io.undertow.server.HttpServerExchange exchange,
io.undertow.security.api.SecurityContext securityContext) |
protected boolean |
sessionIsValid(javax.servlet.http.HttpSession session) |
protected void |
startPicketLink() |
public static final String INITIAL_LOCATION_STORED
protected transient String samlHandlerChainClass
protected final javax.servlet.ServletContext servletContext
protected org.picketlink.identity.federation.web.util.SAMLConfigurationProvider configProvider
SAMLConfigurationProvider
protected transient X509Certificate idpCertificate
protected int timerInterval
protected Timer timer
public static final String EMPTY_PASSWORD
protected boolean enableAudit
public static final String FORM_ACCOUNT_NOTE
public static final String FORM_REQUEST_NOTE
protected transient org.picketlink.identity.federation.core.saml.v2.interfaces.SAML2HandlerChain chain
protected org.picketlink.config.federation.SPType spConfiguration
protected org.picketlink.config.federation.PicketLinkType picketLinkConfiguration
protected String serviceURL
protected String identityURL
protected String issuerID
protected String configFile
protected boolean saveRestoreRequest
protected Lock chainLock
protected String canonicalizationMethod
protected org.picketlink.identity.federation.core.audit.PicketLinkAuditHelper auditHelper
protected org.picketlink.identity.federation.core.interfaces.TrustKeyManager keyManager
public SPFormAuthenticationMechanism(io.undertow.server.handlers.form.FormParserFactory parserFactory, String name, String loginPage, String errorPage, javax.servlet.ServletContext servletContext, org.picketlink.identity.federation.web.util.SAMLConfigurationProvider configProvider, org.picketlink.identity.federation.core.audit.PicketLinkAuditHelper auditHelper)
public io.undertow.security.api.AuthenticationMechanism.ChallengeResult sendChallenge(io.undertow.server.HttpServerExchange exchange, io.undertow.security.api.SecurityContext securityContext)
sendChallenge
in interface io.undertow.security.api.AuthenticationMechanism
sendChallenge
in class io.undertow.security.impl.FormAuthenticationMechanism
public io.undertow.security.api.AuthenticationMechanism.AuthenticationMechanismOutcome authenticate(io.undertow.server.HttpServerExchange exchange, io.undertow.security.api.SecurityContext securityContext)
authenticate
in interface io.undertow.security.api.AuthenticationMechanism
authenticate
in class io.undertow.security.impl.FormAuthenticationMechanism
protected boolean matchRequest(javax.servlet.http.HttpServletRequest request)
protected void register(io.undertow.security.api.SecurityContext securityContext, io.undertow.security.idm.Account account)
protected io.undertow.security.api.AuthenticationMechanism.AuthenticationMechanismOutcome localAuthentication(io.undertow.server.HttpServerExchange httpServerExchange, io.undertow.security.api.SecurityContext securityContext) throws IOException
httpServerExchange
- securityContext
- IOException
protected boolean isHttpPostBinding()
Indicates if the SP is configure with HTTP POST Binding.
protected boolean sessionIsValid(javax.servlet.http.HttpSession session)
protected String savedRequestURL(javax.servlet.http.HttpSession session)
protected void startPicketLink()
protected void initKeyProvider(javax.servlet.ServletContext context)
Initialize the KeyProvider configurations. This configurations are to be used during signing and validation of SAML assertions.
context
- protected boolean doSupportSignature()
Indicates if digital signatures/validation of SAML assertions are enabled. Subclasses that supports signature should override this method.
protected void processConfiguration()
protected org.picketlink.identity.federation.saml.v2.metadata.IDPSSODescriptorType getIdpMetadataFromFile(org.picketlink.config.federation.SPType configuration)
protected org.picketlink.identity.federation.saml.v2.metadata.IDPSSODescriptorType handleMetadata(org.picketlink.identity.federation.saml.v2.metadata.EntitiesDescriptorType entities)
protected org.picketlink.identity.federation.saml.v2.metadata.IDPSSODescriptorType getIDPSSODescriptor(org.picketlink.identity.federation.saml.v2.metadata.EntitiesDescriptorType entities)
protected org.picketlink.identity.federation.saml.v2.metadata.IDPSSODescriptorType handleMetadata(org.picketlink.identity.federation.saml.v2.metadata.EntityDescriptorType entityDescriptor)
protected void initializeHandlerChain() throws org.picketlink.common.exceptions.ConfigurationException, org.picketlink.common.exceptions.ProcessingException
org.picketlink.common.exceptions.ConfigurationException
org.picketlink.common.exceptions.ProcessingException
protected void populateChainConfig() throws org.picketlink.common.exceptions.ConfigurationException, org.picketlink.common.exceptions.ProcessingException
org.picketlink.common.exceptions.ConfigurationException
org.picketlink.common.exceptions.ProcessingException
public io.undertow.security.api.AuthenticationMechanism.AuthenticationMechanismOutcome handleSAML11UnsolicitedResponse(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response, io.undertow.security.api.SecurityContext securityContext)
Copyright © 2017. All rights reserved.