net.shibboleth.idp.saml.nameid.impl

Class ComputedPersistentIdGenerationStrategy

java.lang.Object

net.shibboleth.utilities.java.support.component.AbstractInitializableComponent

net.shibboleth.idp.saml.nameid.impl.ComputedPersistentIdGenerationStrategy

All Implemented Interfaces:

PersistentIdGenerationStrategy, Component, DestructableComponent, InitializableComponent

public class ComputedPersistentIdGenerationStrategy
extends AbstractInitializableComponent
implements PersistentIdGenerationStrategy

The basis of a PersistentIdGenerationStrategy that generates a unique ID by computing the hash of a given attribute value, the entity ID of the inbound message issuer, and a provided salt.

Field Summary

Fields

Modifier and Type	Field and Description
private String	algorithm JCE digest algorithm name to use.
private org.slf4j.Logger	log Class logger.
private byte[]	salt Salt used when computing the ID.

Constructor Summary

Constructors

Constructor and Description
ComputedPersistentIdGenerationStrategy() Constructor.

Method Summary

Methods

Modifier and Type	Method and Description
protected void	doInitialize()
String	generate(String assertingPartyId, String relyingPartyId, String principalName, String sourceId) Get a Persistent ID that corresponds to the inputs.
byte[]	getSalt() Get the salt used when computing the ID.
void	setAlgorithm(String alg) Set the JCE algorithm name of the digest algorithm to use (default is SHA).
void	setEncodedSalt(String newValue) Set the base64-encoded salt used when computing the ID.
void	setSalt(byte[] newValue) Set the salt used when computing the ID.

Methods inherited from class net.shibboleth.utilities.java.support.component.AbstractInitializableComponent

destroy, doDestroy, initialize, isDestroyed, isInitialized

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

log

@Nonnull
private final org.slf4j.Logger log

Class logger.

salt

@NonnullAfterInit
private byte[] salt

Salt used when computing the ID.

algorithm

@Nonnull
@NotEmpty
private String algorithm

JCE digest algorithm name to use.

Constructor Detail

ComputedPersistentIdGenerationStrategy

public ComputedPersistentIdGenerationStrategy()

Constructor.

Method Detail

getSalt

@NonnullAfterInit
public byte[] getSalt()

Get the salt used when computing the ID.

Returns:

salt used when computing the ID

setSalt

public void setSalt(@Nullable
           byte[] newValue)

Set the salt used when computing the ID.

An empty/null input is ignored.

Parameters:

newValue - used when computing the ID

setEncodedSalt

public void setEncodedSalt(@Nullable
                  String newValue)

Set the base64-encoded salt used when computing the ID.

An empty/null input is ignored.

Parameters:

newValue - used when computing the ID

Since:

3.3.0

setAlgorithm

public void setAlgorithm(@Nonnull@NotEmpty
                String alg)

Set the JCE algorithm name of the digest algorithm to use (default is SHA).

Parameters:

alg - JCE message digest algorithm

doInitialize

protected void doInitialize()
                     throws ComponentInitializationException

Overrides:

doInitialize in class AbstractInitializableComponent

Throws:

ComponentInitializationException

generate

@Nonnull
@NotEmpty
public String generate(@Nonnull@NotEmpty
                               String assertingPartyId,
                               @Nonnull@NotEmpty
                               String relyingPartyId,
                               @Nonnull@NotEmpty
                               String principalName,
                               @Nonnull@NotEmpty
                               String sourceId)
                throws SAMLException

Get a Persistent ID that corresponds to the inputs.

This may be generated directly from the inputs or retrieved from some other source.

Specified by:

generate in interface PersistentIdGenerationStrategy

Parameters:

assertingPartyId - the asserting party providing the identifier

relyingPartyId - the relying party for whom we're obtaining the identifier

principalName - name of the subject

sourceId - an underlying identifier for the subject

Returns:

the identifier

Throws:

SAMLException - if an error occurs generating the identifier