Package se.swedenconnect.spring.saml.idp.extensions

Class DefaultSignatureMessageExtensionExtractor

java.lang.Object

se.swedenconnect.spring.saml.idp.extensions.DefaultSignatureMessageExtensionExtractor

All Implemented Interfaces:

SignatureMessageExtensionExtractor

public class DefaultSignatureMessageExtensionExtractor
extends Object
implements SignatureMessageExtensionExtractor

Default implementation of the SignatureMessageExtensionExtractor interface.

Author:

Martin Lindström

Constructor Summary

Constructors

Constructor	Description
DefaultSignatureMessageExtensionExtractor(String entityId, List<PkiCredential> credentials)	Constructor setting up the object for decrypting SignMessage objects.
DefaultSignatureMessageExtensionExtractor(IdentityProviderSettings settings)	Constructor setting up the object for decrypting SignMessage objects.

Method Summary

Modifier and Type	Method	Description
SignatureMessageExtension	extract(Saml2AuthnRequestAuthenticationToken token)	Given an authentication request, the method will extract the SignMessage extension, and if it is encrypted also decrypt it.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

DefaultSignatureMessageExtensionExtractor

public DefaultSignatureMessageExtensionExtractor(String entityId,
 List<PkiCredential> credentials)

Constructor setting up the object for decrypting SignMessage objects.

Parameters:

entityId - the IdP entityID

credentials - a list of decryption credentials (if null decryption will not be supported)

DefaultSignatureMessageExtensionExtractor

public DefaultSignatureMessageExtensionExtractor(IdentityProviderSettings settings)

Constructor setting up the object for decrypting SignMessage objects.

Parameters:

settings - IdP settings

Method Details

extract

public SignatureMessageExtension extract(Saml2AuthnRequestAuthenticationToken token)
                                  throws Saml2ErrorStatusException

Given an authentication request, the method will extract the SignMessage extension, and if it is encrypted also decrypt it.

Specified by:

extract in interface SignatureMessageExtensionExtractor

Parameters:

token - the authentication request token

Returns:

a SignatureMessageExtension or null if no SignMessage is available

Throws:

Saml2ErrorStatusException - for decryption errors