org.apache.ws.security.saml

Class SAMLUtil

java.lang.Object

org.apache.ws.security.saml.SAMLUtil

public class SAMLUtil
extends java.lang.Object

Utility methods for SAML stuff

Constructor Summary

Constructors

Constructor and Description
SAMLUtil()

Method Summary

Modifier and Type	Method and Description
static java.lang.String	getAssertionId(org.w3c.dom.Element envelope, java.lang.String elemName, java.lang.String nmSpace)
static java.security.cert.X509Certificate[]	getCertificatesFromSAML(org.w3c.dom.Element elem) Extracts the certificate(s) from the SAML token reference.
static java.util.Set	getClaims(org.opensaml.SAMLAssertion assertion) Extract the URIs of the set of claims available in a SAML 1.0/1.1 assertion.
static SAMLKeyInfo	getSAMLKeyInfo(org.w3c.dom.Element elem, Crypto crypto, javax.security.auth.callback.CallbackHandler cb) Extract certificates or the key available in the SAMLAssertion
static SAMLKeyInfo	getSAMLKeyInfo(org.opensaml.SAMLAssertion assertion, Crypto crypto, javax.security.auth.callback.CallbackHandler cb)
static Timestamp	getTimestampForSAMLAssertion(org.w3c.dom.Element assertion) Create a TimeStamp object from the SAML assertion.
static void	validateSignature(org.opensaml.SAMLAssertion assertion, Crypto sigCrypto) Validate the signature of the SAML assertion

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SAMLUtil

public SAMLUtil()

Method Detail

getSAMLKeyInfo

public static SAMLKeyInfo getSAMLKeyInfo(org.w3c.dom.Element elem,
                                         Crypto crypto,
                                         javax.security.auth.callback.CallbackHandler cb)
                                  throws WSSecurityException

Extract certificates or the key available in the SAMLAssertion

Parameters:

elem -

Returns:

the SAML Key Info

Throws:

WSSecurityException

getSAMLKeyInfo

public static SAMLKeyInfo getSAMLKeyInfo(org.opensaml.SAMLAssertion assertion,
                                         Crypto crypto,
                                         javax.security.auth.callback.CallbackHandler cb)
                                  throws WSSecurityException

Throws:

WSSecurityException

getCertificatesFromSAML

public static java.security.cert.X509Certificate[] getCertificatesFromSAML(org.w3c.dom.Element elem)
                                                                    throws WSSecurityException

Extracts the certificate(s) from the SAML token reference.

Parameters:

elem - The element containing the SAML token.

Returns:

an array of X509 certificates

Throws:

WSSecurityException

getAssertionId

public static java.lang.String getAssertionId(org.w3c.dom.Element envelope,
                                              java.lang.String elemName,
                                              java.lang.String nmSpace)
                                       throws WSSecurityException

Throws:

WSSecurityException

getTimestampForSAMLAssertion

public static Timestamp getTimestampForSAMLAssertion(org.w3c.dom.Element assertion)
                                              throws WSSecurityException

Create a TimeStamp object from the SAML assertion.

Parameters:

assertion -

Returns:

Throws:

WSSecurityException

getClaims

public static java.util.Set getClaims(org.opensaml.SAMLAssertion assertion)

Extract the URIs of the set of claims available in a SAML 1.0/1.1 assertion. This method will iterate through the set of AttributeStatements available and extract the namespaces of the claim.

Parameters:

assertion - SAML 1.0/1.1 assertion

Returns:

A TreeSet instance comprise of all the claims available in a SAML assertion

validateSignature

public static void validateSignature(org.opensaml.SAMLAssertion assertion,
                                     Crypto sigCrypto)
                              throws WSSecurityException

Validate the signature of the SAML assertion

Parameters:

assertion - SAML 1.0/1.1 assertion

sigCrypto - Crypto object containing the certificate of the token issuer

Throws:

WSSecurityException - if the token does not contain certificate information, the certificate of the issuer is not trusted or the signature is invalid.