Examples with ClaimCollection org.apache.cxf.rt.security.claims.ClaimCollection used on opensource projects

Example 51 with ClaimCollection

use of org.apache.cxf.rt.security.claims.ClaimCollection in project cxf by apache.

the class RequestParser method parseClaims.

/**
 * Create a ClaimCollection from a DOM Element
 */
private ClaimCollection parseClaims(Element claimsElement, List<ClaimsParser> claimsParsers) {
    String dialectAttr = null;
    ClaimCollection requestedClaims = new ClaimCollection();
    try {
        dialectAttr = claimsElement.getAttributeNS(null, "Dialect");
        if (dialectAttr != null && !"".equals(dialectAttr)) {
            requestedClaims.setDialect(new URI(dialectAttr));
        }
    } catch (URISyntaxException e1) {
        LOG.log(Level.WARNING, "Cannot create URI from the given Dialect attribute value " + dialectAttr, e1);
    }
    Element childClaimType = DOMUtils.getFirstElement(claimsElement);
    while (childClaimType != null) {
        Claim requestClaim = parseChildClaimType(childClaimType, dialectAttr, claimsParsers);
        if (requestClaim != null) {
            requestedClaims.add(requestClaim);
        }
        childClaimType = DOMUtils.getNextElement(childClaimType);
    }
    return requestedClaims;
}

Example 52 with ClaimCollection

use of org.apache.cxf.rt.security.claims.ClaimCollection in project cxf by apache.

the class RequestParser method parseClaims.

/**
 * Create a ClaimCollection from a JAXB ClaimsType object
 */
private static ClaimCollection parseClaims(ClaimsType claimsType, List<ClaimsParser> claimsParsers) {
    String dialectAttr = null;
    ClaimCollection requestedClaims = new ClaimCollection();
    try {
        dialectAttr = claimsType.getDialect();
        if (dialectAttr != null && !"".equals(dialectAttr)) {
            requestedClaims.setDialect(new URI(dialectAttr));
        }
    } catch (URISyntaxException e1) {
        LOG.log(Level.WARNING, "Cannot create URI from the given Dialect attribute value " + dialectAttr, e1);
    }
    for (Object claim : claimsType.getAny()) {
        if (claim instanceof Element) {
            Claim requestClaim = parseChildClaimType((Element) claim, dialectAttr, claimsParsers);
            if (requestClaim != null) {
                requestedClaims.add(requestClaim);
            }
        }
    }
    return requestedClaims;
}

Example 53 with ClaimCollection

use of org.apache.cxf.rt.security.claims.ClaimCollection in project cxf by apache.

the class DefaultSAMLRoleParser method parseRolesFromAssertion.

/**
 * Return the set of User/Principal roles from the Assertion.
 * @param principal the Principal associated with the Assertion
 * @param subject the JAAS Subject associated with a successful validation of the Assertion
 * @param assertion The Assertion object
 * @return the set of User/Principal roles from the Assertion.
 */
public Set<Principal> parseRolesFromAssertion(Principal principal, Subject subject, SamlAssertionWrapper assertion) {
    if (subject != null && useJaasSubject) {
        return super.parseRolesFromSubject(principal, subject);
    }
    ClaimCollection claims = SAMLUtils.getClaims(assertion);
    Set<Principal> roles = SAMLUtils.parseRolesFromClaims(claims, roleAttributeName, null);
    SAMLSecurityContext context = new SAMLSecurityContext(principal, roles, claims);
    return context.getUserRoles();
}

Example 54 with ClaimCollection

use of org.apache.cxf.rt.security.claims.ClaimCollection in project ddf by codice.

the class RoleClaimsHandlerTest method testRetrieveClaimsValuesNullPrincipal.

@Test
public void testRetrieveClaimsValuesNullPrincipal() {
    RoleClaimsHandler claimsHandler = new RoleClaimsHandler();
    ClaimsParameters claimsParameters = new ClaimsParameters();
    ClaimCollection claimCollection = new ClaimCollection();
    ProcessedClaimCollection processedClaims = claimsHandler.retrieveClaimValues(claimCollection, claimsParameters);
    assertThat(processedClaims, is(empty()));
}

Example 55 with ClaimCollection

use of org.apache.cxf.rt.security.claims.ClaimCollection in project ddf by codice.

the class GuestClaimsHandlerTest method testRetrieveClaims.

@Test
public void testRetrieveClaims() throws URISyntaxException {
    GuestClaimsHandler claimsHandler = new GuestClaimsHandler();
    claimsHandler.setAttributes(Arrays.asList("http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier=Guest", "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress=Guest@guest.com|someguy@somesite.com|somedude@cool.com", "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname=Guest"));
    ClaimCollection requestClaims = new ClaimCollection();
    Claim requestClaim = new Claim();
    URI nameURI = new URI("http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier");
    requestClaim.setClaimType(nameURI);
    requestClaims.add(requestClaim);
    requestClaim = new Claim();
    URI emailURI = new URI("http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress");
    requestClaim.setClaimType(emailURI);
    requestClaims.add(requestClaim);
    requestClaim = new Claim();
    URI fooURI = new URI("http://schemas.xmlsoap.org/ws/2005/05/identity/claims/foobar");
    requestClaim.setClaimType(fooURI);
    requestClaim.setOptional(true);
    requestClaims.add(requestClaim);
    ClaimsParameters claimsParameters = new ClaimsParameters();
    claimsParameters.setPrincipal(new GuestPrincipal("127.0.0.1"));
    List<URI> supportedClaims = claimsHandler.getSupportedClaimTypes();
    assertEquals(3, supportedClaims.size());
    ProcessedClaimCollection claimsCollection = claimsHandler.retrieveClaimValues(requestClaims, claimsParameters);
    assertEquals(3, claimsCollection.size());
    for (ProcessedClaim claim : claimsCollection) {
        if (claim.getClaimType().equals(nameURI)) {
            assertEquals(1, claim.getValues().size());
            assertEquals("Guest", claim.getValues().get(0));
        } else if (claim.getClaimType().equals(emailURI)) {
            assertEquals(3, claim.getValues().size());
            List<Object> values = claim.getValues();
            assertEquals("Guest@guest.com", values.get(0));
            assertEquals("someguy@somesite.com", values.get(1));
            assertEquals("somedude@cool.com", values.get(2));
        } else if (claim.getClaimType().equals("IpAddress")) {
            assertEquals("127.0.0.1", claim.getValues().get(0));
        }
        assertFalse(claim.getClaimType().equals(fooURI));
    }
    claimsParameters = new ClaimsParameters();
    claimsCollection = claimsHandler.retrieveClaimValues(requestClaims, claimsParameters);
    assertEquals(2, claimsCollection.size());
    claimsParameters = new ClaimsParameters();
    claimsParameters.setPrincipal(new CustomTokenPrincipal("SomeValue"));
    claimsCollection = claimsHandler.retrieveClaimValues(requestClaims, claimsParameters);
    assertEquals(2, claimsCollection.size());
}