net.shibboleth.idp.saml.nameid.impl

Class CryptoTransientIdGenerationStrategy

java.lang.Object

net.shibboleth.utilities.java.support.component.AbstractInitializableComponent

net.shibboleth.utilities.java.support.component.AbstractIdentifiedInitializableComponent

net.shibboleth.utilities.java.support.component.AbstractIdentifiableInitializableComponent

net.shibboleth.idp.saml.nameid.impl.CryptoTransientIdGenerationStrategy

All Implemented Interfaces:

TransientIdGenerationStrategy, Component, DestructableComponent, IdentifiableComponent, IdentifiedComponent, InitializableComponent

public class CryptoTransientIdGenerationStrategy
extends AbstractIdentifiableInitializableComponent
implements TransientIdGenerationStrategy

Generates transients using a DataSealer to encrypt the result into a recoverable value, for use with stateless clustering.

Field Summary

Fields

Modifier and Type	Field and Description
private DataSealer	dataSealer Object used to protect and encrypt the data.
private long	idLifetime Length, in milliseconds, tokens are valid.
private org.slf4j.Logger	log Class logger.

Constructor Summary

Constructors

Constructor and Description
CryptoTransientIdGenerationStrategy() Constructor.

Method Summary

Methods

Modifier and Type	Method and Description
protected void	doInitialize()
String	generate(String relyingPartyId, String principalName) Generate a new Transient ID.
long	getIdLifetime() Get the time, in milliseconds, ids are valid.
void	setDataSealer(DataSealer sealer) Set the data sealer to use.
void	setIdLifetime(long lifetime) Set the time, in milliseconds, ids are valid.

Methods inherited from class net.shibboleth.utilities.java.support.component.AbstractIdentifiableInitializableComponent

setId

Methods inherited from class net.shibboleth.utilities.java.support.component.AbstractIdentifiedInitializableComponent

getId

Methods inherited from class net.shibboleth.utilities.java.support.component.AbstractInitializableComponent

destroy, doDestroy, initialize, isDestroyed, isInitialized

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface net.shibboleth.utilities.java.support.component.IdentifiedComponent

getId

Field Detail

log

@Nonnull
private final org.slf4j.Logger log

Class logger.

dataSealer

@NonnullAfterInit
private DataSealer dataSealer

Object used to protect and encrypt the data.

idLifetime

@Duration
@Positive
private long idLifetime

Length, in milliseconds, tokens are valid.

Constructor Detail

CryptoTransientIdGenerationStrategy

public CryptoTransientIdGenerationStrategy()

Constructor.

Method Detail

setDataSealer

public void setDataSealer(@Nonnull
                 DataSealer sealer)

Set the data sealer to use.

Parameters:

sealer - object used to protect and encrypt the data

getIdLifetime

@Positive
@Duration
public long getIdLifetime()

Get the time, in milliseconds, ids are valid.

Returns:

time, in milliseconds, ids are valid

setIdLifetime

@Duration
public void setIdLifetime(@Duration@Positive
                          long lifetime)

Set the time, in milliseconds, ids are valid.

Parameters:

lifetime - time, in milliseconds, ids are valid

doInitialize

protected void doInitialize()
                     throws ComponentInitializationException

Overrides:

doInitialize in class AbstractIdentifiedInitializableComponent

Throws:

ComponentInitializationException

generate

@Nonnull
@NotEmpty
public String generate(@Nonnull@NotEmpty
                               String relyingPartyId,
                               @Nonnull@NotEmpty
                               String principalName)
                throws org.opensaml.saml.common.SAMLException

Generate a new Transient ID.

Specified by:

generate in interface TransientIdGenerationStrategy

Parameters:

relyingPartyId - the relying party for whom we're generating

principalName - the principal to map to

Returns:

the new identifier

Throws:

org.opensaml.saml.common.SAMLException - if an error occurs generating the identifier