Class AssertionConsumerServiceValidator

java.lang.Object

se.swedenconnect.spring.saml.idp.authnrequest.validation.AssertionConsumerServiceValidator

All Implemented Interfaces:

AuthnRequestValidator

public class AssertionConsumerServiceValidator
extends Object
implements AuthnRequestValidator

Asserts that the AssertionConsumerService information given in the AuthnRequest is registered in the SAML metadata. Updates the Saml2AuthnRequestAuthenticationToken with this information.

A request where AssertionConsumerServiceIndex is combined with AssertionConsumerServiceURL or ProtocolBinding is rejected. According to SAML Core, Section 3.4.1, these are mutually exclusive.

Author:

Martin Lindström

Constructor Summary

Constructors

Constructor	Description
AssertionConsumerServiceValidator()

Method Summary

Modifier and Type	Method	Description
void	setUriComparator(URIComparator uriComparator)	Assigns a custom URIComparator.
void	validate(Saml2AuthnRequestAuthenticationToken authnRequestToken)	Asserts that the AssertionConsumerService information given in the AuthnRequest is registered in the SAML metadata.

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

AssertionConsumerServiceValidator

public AssertionConsumerServiceValidator()

Method Details

setUriComparator

public void setUriComparator(URIComparator uriComparator)

Assigns a custom URIComparator. The default is BasicURLComparator.

Parameters:

uriComparator - the comparator to use

validate

public void validate(Saml2AuthnRequestAuthenticationToken authnRequestToken)
              throws UnrecoverableSaml2IdpException

Asserts that the AssertionConsumerService information given in the AuthnRequest is registered in the SAML metadata. Updates the Saml2AuthnRequestAuthenticationToken with this information.

Specified by:

validate in interface AuthnRequestValidator

Parameters:

authnRequestToken - the authentication request token

Throws:

UnrecoverableSaml2IdpException - for errors that can not be signalled back to the SAML SP