public class SAMLMDClientCertAuthSecurityHandler extends BaseClientCertAuthSecurityHandler
BaseClientCertAuthSecurityHandler
which provides support for X509Credential
trust engine validation based on SAML metadata.Constructor and Description |
---|
SAMLMDClientCertAuthSecurityHandler() |
Modifier and Type | Method and Description |
---|---|
protected net.shibboleth.utilities.java.support.resolver.CriteriaSet |
buildCriteriaSet(String entityID,
MessageContext messageContext)
Subclasses are required to implement this method to build a criteria set for the trust engine
according to trust engine and application-specific needs.
|
protected String |
getCertificatePresenterEntityID(MessageContext messageContext)
Get the entity ID of the presenter of the client TLS certificate, as will be used for trust evaluation purposes.
|
protected void |
setAuthenticatedCertificatePresenterEntityID(MessageContext messageContext,
String entityID)
Store the successfully authenticated derived entity ID of the certificate presenter in the message context.
|
protected void |
setAuthenticatedState(MessageContext messageContext,
boolean authenticated)
Store the indicated message authentication state in the message context.
|
doEvaluate, doInitialize, doInvoke, doPreInvoke, evaluateCertificateNameDerivedPresenters, evaluateDerivedPresenters, evaluateSubjectAltNames, evaluateSubjectCommonName, evaluateSubjectDN, getAltNames, getCertificateNameOptions, getCommonName, getHttpServletRequest, getSubjectName, resolveTrustEngine, setHttpServletRequest
evaluate, evaluate, getTrustEngine
doPostInvoke, doPostInvoke, getLogPrefix, invoke
destroy, doDestroy, initialize, isDestroyed, isInitialized
@Nonnull protected net.shibboleth.utilities.java.support.resolver.CriteriaSet buildCriteriaSet(@Nullable String entityID, @Nonnull MessageContext messageContext) throws MessageHandlerException
buildCriteriaSet
in class BaseClientCertAuthSecurityHandler
entityID
- the candidate issuer entity ID which is being evaluatedmessageContext
- the message context which is being evaluatedMessageHandlerException
- thrown if criteria set can not be constructed@Nullable protected String getCertificatePresenterEntityID(@Nonnull MessageContext messageContext)
This tends to be performed in a protcol-specific manner, so it is therefore abstract and must be implemented in a concrete subclass.
getCertificatePresenterEntityID
in class BaseClientCertAuthSecurityHandler
messageContext
- the current message contextprotected void setAuthenticatedCertificatePresenterEntityID(@Nonnull MessageContext messageContext, @Nullable String entityID)
This tends to be performed in a protocol-specific manner, so it is therefore abstract and must be implemented in a concrete subclass.
setAuthenticatedCertificatePresenterEntityID
in class BaseClientCertAuthSecurityHandler
messageContext
- the current message contextentityID
- the successfully authenticated derived entity ID of the client TLS certificate presenterprotected void setAuthenticatedState(@Nonnull MessageContext messageContext, boolean authenticated)
This tends to be performed in a protocol-specific manner, so it is therefore abstract and must be implemented in a concrete subclass.
setAuthenticatedState
in class BaseClientCertAuthSecurityHandler
messageContext
- the current message contextauthenticated
- flag indicating what authentication state to storeCopyright © 2018. All rights reserved.