Package se.swedenconnect.spring.saml.idp.authnrequest.validation

Class AuthnRequestReplayValidator

java.lang.Object

se.swedenconnect.spring.saml.idp.authnrequest.validation.AuthnRequestReplayValidator

All Implemented Interfaces:

AuthnRequestValidator

public class AuthnRequestReplayValidator
extends Object
implements AuthnRequestValidator

A AuthnRequestValidator for protecting against message replay attacks.

Author:

Martin Lindström

Constructor Summary

Constructors

Constructor	Description
AuthnRequestReplayValidator()	Default constructor instantiating an in-memory MessageReplayChecker.
AuthnRequestReplayValidator(MessageReplayChecker replayChecker)	Constructor taking the MessageReplayChecker to use.

Method Summary

Modifier and Type	Method	Description
void	validate(Saml2AuthnRequestAuthenticationToken authnRequestToken)	Performs validation of a feature/requirement regarding the supplied SAML 2 authentication request.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

AuthnRequestReplayValidator

public AuthnRequestReplayValidator()

Default constructor instantiating an in-memory MessageReplayChecker.

Note: This is not recommended in a production environment.

AuthnRequestReplayValidator

public AuthnRequestReplayValidator(MessageReplayChecker replayChecker)

Constructor taking the MessageReplayChecker to use.

Parameters:

replayChecker - the message replay checker

Method Details

validate

public void validate(Saml2AuthnRequestAuthenticationToken authnRequestToken)
              throws UnrecoverableSaml2IdpException,
Saml2ErrorStatusException

Performs validation of a feature/requirement regarding the supplied SAML 2 authentication request.

The method may update the supplied token with information useful in later stages.

Specified by:

validate in interface AuthnRequestValidator

Parameters:

authnRequestToken - the authentication request token

Throws:

UnrecoverableSaml2IdpException - for errors that can not be signalled back to the SAML SP

Saml2ErrorStatusException - for errors that should be sent as SAML error responses