org.codice.ddf.security.delegation.x509

Class X509DelegationHandler

java.lang.Object

org.codice.ddf.security.delegation.x509.X509DelegationHandler

All Implemented Interfaces:

org.apache.cxf.sts.token.delegation.TokenDelegationHandler

public class X509DelegationHandler
extends Object
implements org.apache.cxf.sts.token.delegation.TokenDelegationHandler

The SAML TokenDelegationHandler implementation. It disallows ActAs or OnBehalfOf for all cases apart from the case of a Bearer SAML Token. In addition, the AppliesTo address (if supplied) must match an AudienceRestriction address (if in token), if the "checkAudienceRestriction" property is set to "true".

Field Summary

Fields

Modifier and Type	Field and Description
static String	BASE64_ENCODING
static String	X509_PKI_PATH
static String	X509_V3

Constructor Summary

Constructors

Constructor and Description
X509DelegationHandler()

Method Summary

Modifier and Type	Method and Description
boolean	canHandleToken(org.apache.cxf.sts.request.ReceivedToken delegateTarget)
org.apache.cxf.sts.token.delegation.TokenDelegationResponse	isDelegationAllowed(org.apache.cxf.sts.token.delegation.TokenDelegationParameters tokenParameters)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

X509_PKI_PATH

public static final String X509_PKI_PATH

See Also:

Constant Field Values

X509_V3

public static final String X509_V3

See Also:

Constant Field Values

BASE64_ENCODING

public static final String BASE64_ENCODING

See Also:

Constant Field Values

Constructor Detail

X509DelegationHandler

public X509DelegationHandler()

Method Detail

canHandleToken

public boolean canHandleToken(org.apache.cxf.sts.request.ReceivedToken delegateTarget)

Specified by:

canHandleToken in interface org.apache.cxf.sts.token.delegation.TokenDelegationHandler

isDelegationAllowed

public org.apache.cxf.sts.token.delegation.TokenDelegationResponse isDelegationAllowed(org.apache.cxf.sts.token.delegation.TokenDelegationParameters tokenParameters)

Specified by:

isDelegationAllowed in interface org.apache.cxf.sts.token.delegation.TokenDelegationHandler