weblogic.wsee.security.saml
Class CSSUtils

java.lang.Object
  weblogic.wsee.security.saml.CSSUtils

public class CSSUtils
extends Object

Utility for saml User: jlee Date: Sep 30, 2004 Time: 1:12:56 PM

SAML_ATTRIBUTES

protected static final String SAML_ATTRIBUTES

SAML2_ATTRIBUTES

protected static final String SAML2_ATTRIBUTES

SAML_ATTRIBUTE_ONLY

protected static final String SAML_ATTRIBUTE_ONLY

CSSUtils

public CSSUtils()

setupSAMLContextElements

public static void setupSAMLContextElements(boolean isSAML2,
                                            SecurityTokenContextHandler samlCtxHandler,
                                            ContextHandler ctxHandler)

Set up contexthandler properties required by SAMLCredMapper

Parameters:

isSAML2 - true if processing for a SAML 2.0 assertion

samlCtxHandler -

ctxHandler -

setupSAMLAttributesContextElements

public static void setupSAMLAttributesContextElements(boolean isSAML2,
                                                      SecurityTokenContextHandler samlCtxHandler,
                                                      boolean attributesOnly,
                                                      SAMLAttributeStatementData samlAttributes)

Set up contexthandler properties for SAML Attributes

Parameters:

isSAML2 - true if processing for a SAML 2.0 assertion

samlCtxHandler - Context Handler to be passed to CSS

attributesOnly - true if this is a SAML Attributes only request

samlAttributes - SAMLAttributeStatementData

getSAMLCredential

public static Object getSAMLCredential(boolean isSAML2,
                                       String tokenType,
                                       SecurityTokenContextHandler samlCtxHandler,
                                       Object keyInfoCredential)

Get the saml credential from CredentialManager

Parameters:

isSAML2 - true if requesting a SAML 2.0 assertion

tokenType - tokenType of requested assertion

samlCtxHandler - the SecurityTokenContextHandler contains Claims

keyInfoCredential -

Returns:

credential

getSAMLCredential

public static Object getSAMLCredential(boolean isSAML2,
                                       String tokenType,
                                       SecurityTokenContextHandler samlCtxHandler,
                                       Object keyInfoCredential,
                                       AuthenticatedSubject as)

isHolderOfKey

public static boolean isHolderOfKey(boolean isSAML2,
                                    SecurityTokenContextHandler samlCtxHandler)

isHolderOfKey

public static boolean isHolderOfKey(String subjConfirmation)

getCurrentAuthenticatedSubject

public static Subject getCurrentAuthenticatedSubject()

This will return the current authenticated subject for getting the SAML Attributes

getX509CredFromPKICredMapper

public static X509Credential getX509CredFromPKICredMapper(SecurityTokenContextHandler samlCtxHandler)

load pki keypair

Parameters:

samlCtxHandler -

Returns:

X509Credential object

getSAMLAssertionFromCredMapper

public static Object[] getSAMLAssertionFromCredMapper(SecurityTokenContextHandler samlCtxHandler,
                                                      String assertionType)

This will get the crednetial object array of Element assertions from CM.

Parameters:

samlCtxHandler - The KeyInfo node must be insert into the SecurityTokenContextHandler before the call.

assertionType - Assert type to get

Returns:

credential objects array of Element assertions

getSAMLAssertionFromCredMapper

public static Object[] getSAMLAssertionFromCredMapper(SecurityTokenContextHandler samlCtxHandler,
                                                      String assertionType,
                                                      AuthenticatedSubject as)

assertIdentity

public static AuthenticatedSubject assertIdentity(Node credential,
                                                  ContextHandler ctxHandler,
                                                  boolean isV2Assertion)
                                           throws LoginException

Use PrincipalAuthenticator to assert the identity of saml assertion

Parameters:

credential - saml assertion

ctxHandler - context handler

Returns:

AuthenticatedSubject

Throws:

LoginException - occurs during process

getParser

protected static DocumentBuilder getParser()

returnParser

protected static void returnParser(DocumentBuilder builder)

getEndpointPath

protected static String getEndpointPath(boolean isSaml2,
                                        String url)

mapSAML2ConfMethod

protected static String mapSAML2ConfMethod(String method)

mapSAMLConfMethod

protected static String mapSAMLConfMethod(String method)