org.codice.ddf.security.idp.plugin.subjectconfirmation

Class SubjectConfirmationPresignPlugin

java.lang.Object

org.codice.ddf.security.idp.plugin.subjectconfirmation.SubjectConfirmationPresignPlugin

All Implemented Interfaces:

SamlPresignPlugin

public class SubjectConfirmationPresignPlugin
extends Object
implements SamlPresignPlugin

Pre-sign plugin that ensures that "At lease[sic] one bearer <SubjectConfirmation> element MUST contain a <SubjectConfirmationData> element that itself MUST contain a Recipient attribute containing the service provider's assertion consumer service URL and a NotOnOrAfter attribute that limits the window during which the assertion can be confirmed by the relying party." as per section 4.1.4.2 of the SAML Spec.

See Also:

Profiles for the OASIS Security Assertion Markup Language (SAML) V2.0 – Errata Composite

Constructor Summary

Constructors

Constructor and Description
SubjectConfirmationPresignPlugin()

Method Summary

Modifier and Type	Method and Description
void	processPresign(org.opensaml.saml.saml2.core.Response response, org.opensaml.saml.saml2.core.AuthnRequest authnRequest, List<String> spMetadata, Set<SamlProtocol.Binding> supportedBindings) Modifies SAML response prior to re-signing and returning.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SubjectConfirmationPresignPlugin

public SubjectConfirmationPresignPlugin()

Method Detail

processPresign

public void processPresign(org.opensaml.saml.saml2.core.Response response,
                           org.opensaml.saml.saml2.core.AuthnRequest authnRequest,
                           List<String> spMetadata,
                           Set<SamlProtocol.Binding> supportedBindings)

Description copied from interface: SamlPresignPlugin

Modifies SAML response prior to re-signing and returning.

Specified by:

processPresign in interface SamlPresignPlugin

Parameters:

response - the SAML response to modify

authnRequest - the associated authentication request

spMetadata - list of Strings holding the Service Provider(s) metadata

supportedBindings - set of supported SAML binding types, e.g. Post/Redirect/SOAP