net.shibboleth.idp.saml.profile.impl

Class BaseAddAuthenticationStatementToAssertion

java.lang.Object

net.shibboleth.utilities.java.support.component.AbstractInitializableComponent

org.opensaml.profile.action.AbstractProfileAction<InboundMessageType,OutboundMessageType>

org.opensaml.profile.action.AbstractConditionalProfileAction<InboundMessageType,OutboundMessageType>

net.shibboleth.idp.profile.AbstractProfileAction<InboundMessageType,OutboundMessageType>

net.shibboleth.idp.authn.AbstractAuthenticationAction

net.shibboleth.idp.saml.profile.impl.BaseAddAuthenticationStatementToAssertion

All Implemented Interfaces:

Component, DestructableComponent, InitializableComponent, org.opensaml.profile.action.ProfileAction, org.springframework.beans.factory.Aware, org.springframework.context.MessageSource, org.springframework.context.MessageSourceAware, org.springframework.webflow.execution.Action

Direct Known Subclasses:

AddAuthenticationStatementToAssertion, AddAuthnStatementToAssertion

public abstract class BaseAddAuthenticationStatementToAssertion
extends AbstractAuthenticationAction

Base class for actions that encode authentication information into a SAML 1 or SAML 2 statement.

Event:

EventIds.PROCEED_EVENT_ID, EventIds.INVALID_PROFILE_CTX, EventIds.INVALID_MSG_CTX, AuthnEventIds.INVALID_AUTHN_CTX

Field Summary

Fields

Modifier and Type	Field and Description
private AuthenticationResult	authenticationResult AuthenticationResult basis of statement.
private IdentifierGenerationStrategy	idGenerator The generator to use.
private Function<org.opensaml.profile.context.ProfileRequestContext,IdentifierGenerationStrategy>	idGeneratorLookupStrategy Strategy used to locate the IdentifierGenerationStrategy to use.
private String	issuerId EntityID to populate as assertion issuer.
private Function<org.opensaml.profile.context.ProfileRequestContext,String>	issuerLookupStrategy Strategy used to obtain the assertion issuer value.
private org.slf4j.Logger	log Class logger.
private boolean	statementInOwnAssertion Whether the generated authentication statement should be placed in its own assertion or added to one if it exists.

Constructor Summary

Constructors

Constructor and Description
BaseAddAuthenticationStatementToAssertion() Constructor.

Method Summary

Methods

Modifier and Type	Method and Description
protected boolean	doPreExecute(org.opensaml.profile.context.ProfileRequestContext profileRequestContext, AuthenticationContext authenticationContext)
AuthenticationResult	getAuthenticationResult() Get the AuthenticationResult to encode.
IdentifierGenerationStrategy	getIdGenerator() Get the IdentifierGenerationStrategy to use if an assertion must be created.
String	getIssuerId() Get the issuer name to use if an assertion must be created.
boolean	isStatementInOwnAssertion() Set whether the generated statement should be placed in its own assertion or added to one if it exists.
void	setIdentifierGeneratorLookupStrategy(Function<org.opensaml.profile.context.ProfileRequestContext,IdentifierGenerationStrategy> strategy) Set the strategy used to locate the IdentifierGenerationStrategy to use.
void	setIssuerLookupStrategy(Function<org.opensaml.profile.context.ProfileRequestContext,String> strategy) Set the strategy used to locate the issuer value to use.
void	setStatementInOwnAssertion(boolean inOwnAssertion) Set whether the generated authentication statement should be placed in its own assertion or added to one if it exists.

Methods inherited from class net.shibboleth.idp.authn.AbstractAuthenticationAction

doExecute, doExecute, doPreExecute, setLookupStrategy

Methods inherited from class net.shibboleth.idp.profile.AbstractProfileAction

doExecute, execute, getMessage, getMessage, getMessage, getProfileContextLookupStrategy, getRequestContext, getResult, setMessageSource, setProfileContextLookupStrategy

Methods inherited from class org.opensaml.profile.action.AbstractConditionalProfileAction

getActivationCondition, setActivationCondition

Methods inherited from class org.opensaml.profile.action.AbstractProfileAction

doPostExecute, doPostExecute, execute, getHttpServletRequest, getHttpServletResponse, getLogPrefix, setHttpServletRequest, setHttpServletResponse

Methods inherited from class net.shibboleth.utilities.java.support.component.AbstractInitializableComponent

destroy, doDestroy, doInitialize, initialize, isDestroyed, isInitialized

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface net.shibboleth.utilities.java.support.component.InitializableComponent

initialize, isInitialized

Field Detail

log

@Nonnull
private final org.slf4j.Logger log

Class logger.

statementInOwnAssertion

private boolean statementInOwnAssertion

Whether the generated authentication statement should be placed in its own assertion or added to one if it exists.

idGeneratorLookupStrategy

@Nonnull
private Function<org.opensaml.profile.context.ProfileRequestContext,IdentifierGenerationStrategy> idGeneratorLookupStrategy

Strategy used to locate the IdentifierGenerationStrategy to use.

issuerLookupStrategy

@Nonnull
private Function<org.opensaml.profile.context.ProfileRequestContext,String> issuerLookupStrategy

Strategy used to obtain the assertion issuer value.

authenticationResult

@Nullable
private AuthenticationResult authenticationResult

AuthenticationResult basis of statement.

idGenerator

@Nullable
private IdentifierGenerationStrategy idGenerator

The generator to use.

issuerId

@Nullable
private String issuerId

EntityID to populate as assertion issuer.

Constructor Detail

BaseAddAuthenticationStatementToAssertion

public BaseAddAuthenticationStatementToAssertion()

Constructor.

Method Detail

isStatementInOwnAssertion

public boolean isStatementInOwnAssertion()

Set whether the generated statement should be placed in its own assertion or added to one if it exists.

Returns:

whether the generated statement should be placed in its own assertion or added to one if it exists

setStatementInOwnAssertion

public void setStatementInOwnAssertion(boolean inOwnAssertion)

Set whether the generated authentication statement should be placed in its own assertion or added to one if it exists.

Parameters:

inOwnAssertion - whether the generated authentication statement should be placed in its own assertion or added to one if it exists

setIdentifierGeneratorLookupStrategy

public void setIdentifierGeneratorLookupStrategy(@Nonnull
                                        Function<org.opensaml.profile.context.ProfileRequestContext,IdentifierGenerationStrategy> strategy)

Set the strategy used to locate the IdentifierGenerationStrategy to use.

Parameters:

strategy - lookup strategy

setIssuerLookupStrategy

public void setIssuerLookupStrategy(@Nonnull
                           Function<org.opensaml.profile.context.ProfileRequestContext,String> strategy)

Set the strategy used to locate the issuer value to use.

Parameters:

strategy - lookup strategy

getAuthenticationResult

@Nonnull
public AuthenticationResult getAuthenticationResult()

Get the AuthenticationResult to encode.

Returns:

the result to encode

getIdGenerator

@Nonnull
public IdentifierGenerationStrategy getIdGenerator()

Get the IdentifierGenerationStrategy to use if an assertion must be created.

Returns:

the ID generation strategy

getIssuerId

@Nonnull
public String getIssuerId()

Get the issuer name to use if an assertion must be created.

Returns:

the issuer name

doPreExecute

protected boolean doPreExecute(@Nonnull
                   org.opensaml.profile.context.ProfileRequestContext profileRequestContext,
                   @Nonnull
                   AuthenticationContext authenticationContext)

Overrides:

doPreExecute in class AbstractAuthenticationAction