use of org.apache.neethi.Assertion in project cxf by apache.
the class PolicyInterceptorsTest method testClientPolicyInFaultInterceptor.
@Test
public void testClientPolicyInFaultInterceptor() {
ClientPolicyInFaultInterceptor interceptor = new ClientPolicyInFaultInterceptor();
doTestBasics(interceptor, true, false);
control.reset();
setupMessage(true, true, false, false, true, true);
EndpointPolicy endpointPolicy = control.createMock(EndpointPolicy.class);
EasyMock.expect(pe.getClientEndpointPolicy(ei, conduit, message)).andReturn(endpointPolicy);
List<Interceptor<? extends Message>> li = createMockInterceptorList();
EasyMock.expect(endpointPolicy.getFaultInterceptors(message)).andReturn(li);
InterceptorChain ic = control.createMock(InterceptorChain.class);
EasyMock.expect(message.getInterceptorChain()).andReturn(ic);
ic.add(li.get(0));
EasyMock.expectLastCall();
Collection<Assertion> assertions = CastUtils.cast(Collections.EMPTY_LIST, Assertion.class);
EasyMock.expect(endpointPolicy.getFaultVocabulary(message)).andReturn(assertions);
control.replay();
interceptor.handleMessage(message);
control.verify();
}
use of org.apache.neethi.Assertion in project cxf by apache.
the class PolicyInterceptorsTest method testClientPolicyOutInterceptor.
@Test
public void testClientPolicyOutInterceptor() {
PolicyOutInterceptor interceptor = new PolicyOutInterceptor();
doTestBasics(interceptor, true, true);
control.reset();
setupMessage(true, true, true, true, true, true);
EffectivePolicy effectivePolicy = control.createMock(EffectivePolicy.class);
EasyMock.expect(pe.getEffectiveClientRequestPolicy(ei, boi, conduit, message)).andReturn(effectivePolicy);
List<Interceptor<? extends Message>> li = createMockInterceptorList();
EasyMock.expect(effectivePolicy.getInterceptors()).andReturn(li);
InterceptorChain ic = control.createMock(InterceptorChain.class);
EasyMock.expect(message.getInterceptorChain()).andReturn(ic);
ic.add(li.get(0));
EasyMock.expectLastCall();
Collection<Assertion> assertions = CastUtils.cast(Collections.EMPTY_LIST, Assertion.class);
EasyMock.expect(effectivePolicy.getChosenAlternative()).andReturn(assertions);
control.replay();
interceptor.handleMessage(message);
control.verify();
}
use of org.apache.neethi.Assertion in project cxf by apache.
the class AssertionInfoMapTest method testAlternativeSupported.
@Test
public void testAlternativeSupported() {
PolicyAssertion a1 = control.createMock(PolicyAssertion.class);
QName aqn = new QName("http://x.y.z", "a");
EasyMock.expect(a1.getName()).andReturn(aqn).anyTimes();
PolicyAssertion a2 = control.createMock(PolicyAssertion.class);
EasyMock.expect(a2.getName()).andReturn(aqn).anyTimes();
PolicyAssertion b = control.createMock(PolicyAssertion.class);
QName bqn = new QName("http://x.y.z", "b");
EasyMock.expect(b.getName()).andReturn(bqn).anyTimes();
PolicyAssertion c = control.createMock(PolicyAssertion.class);
QName cqn = new QName("http://x.y.z", "c");
EasyMock.expect(c.getName()).andReturn(cqn).anyTimes();
AssertionInfoMap aim = new AssertionInfoMap(CastUtils.cast(Collections.EMPTY_LIST, PolicyAssertion.class));
AssertionInfo ai1 = new AssertionInfo(a1);
AssertionInfo ai2 = new AssertionInfo(a2);
Collection<AssertionInfo> ais = new ArrayList<>();
AssertionInfo bi = new AssertionInfo(b);
AssertionInfo ci = new AssertionInfo(c);
ais.add(ai1);
ais.add(ai2);
aim.put(aqn, ais);
aim.put(bqn, Collections.singleton(bi));
aim.put(cqn, Collections.singleton(ci));
ai2.setAsserted(true);
bi.setAsserted(true);
ci.setAsserted(true);
EasyMock.expect(a1.equal(a1)).andReturn(true).anyTimes();
EasyMock.expect(a2.equal(a2)).andReturn(true).anyTimes();
EasyMock.expect(b.equal(b)).andReturn(true).anyTimes();
EasyMock.expect(c.equal(c)).andReturn(true).anyTimes();
EasyMock.expect(a2.isAsserted(aim)).andReturn(true).anyTimes();
EasyMock.expect(b.isAsserted(aim)).andReturn(true).anyTimes();
EasyMock.expect(c.isAsserted(aim)).andReturn(true).anyTimes();
List<Assertion> alt1 = new ArrayList<>();
alt1.add(a1);
alt1.add(b);
List<Assertion> alt2 = new ArrayList<>();
alt2.add(a2);
alt2.add(c);
control.replay();
assertFalse(aim.supportsAlternative(alt1, new ArrayList<>()));
assertTrue(aim.supportsAlternative(alt2, new ArrayList<>()));
control.verify();
}
use of org.apache.neethi.Assertion in project cxf by apache.
the class RM12AssertionBuilder method build.
/**
* @see org.apache.neethi.builders.AssertionBuilder#build(org.w3c.dom.Element,
* org.apache.neethi.AssertionBuilderFactory)
*/
public Assertion build(Element elem, AssertionBuilderFactory factory) throws IllegalArgumentException {
Assertion assertion = null;
if (RM11Constants.WSRMP_NAMESPACE_URI.equals(elem.getNamespaceURI())) {
boolean optional = XMLPrimitiveAssertionBuilder.isOptional(elem);
String lname = elem.getLocalName();
if (RMConstants.RMASSERTION_NAME.equals(lname)) {
// top-level RMAssertion, with nested policy
XMLPrimitiveAssertionBuilder nesting = new XMLPrimitiveAssertionBuilder() {
public Assertion newPrimitiveAssertion(Element element, Map<QName, String> mp) {
return new PrimitiveAssertion(RM11Constants.WSRMP_RMASSERTION_QNAME, isOptional(element), isIgnorable(element), mp);
}
public Assertion newPolicyContainingAssertion(Element element, Map<QName, String> mp, Policy policy) {
return new PolicyContainingPrimitiveAssertion(RM11Constants.WSRMP_RMASSERTION_QNAME, isOptional(element), isIgnorable(element), mp, policy);
}
};
assertion = nesting.build(elem, factory);
} else if (SEQUENCESTR_NAME.equals(lname)) {
assertion = new PrimitiveAssertion(SEQSTR_QNAME, optional);
} else if (SEQUENCETRANSEC_NAME.equals(lname)) {
assertion = new PrimitiveAssertion(SEQTRANSSEC_QNAME, optional);
} else if (DELIVERYASSURANCE_NAME.equals(lname)) {
// DeliveryAssurance, with nested policy
XMLPrimitiveAssertionBuilder nesting = new XMLPrimitiveAssertionBuilder() {
public Assertion newPrimitiveAssertion(Element element, Map<QName, String> mp) {
return new PrimitiveAssertion(DELIVERYASSURANCE_QNAME, isOptional(element), isIgnorable(element), mp);
}
public Assertion newPolicyContainingAssertion(Element element, Map<QName, String> mp, Policy policy) {
return new PolicyContainingPrimitiveAssertion(DELIVERYASSURANCE_QNAME, isOptional(element), isIgnorable(element), mp, policy);
}
};
assertion = nesting.build(elem, factory);
} else if (EXACTLYONCE_NAME.equals(lname)) {
assertion = new PrimitiveAssertion(EXACTLYONCE_QNAME, optional);
} else if (ATLEASTONCE_NAME.equals(lname)) {
assertion = new PrimitiveAssertion(ATLEASTONCE_QNAME, optional);
} else if (ATMOSTONCE_NAME.equals(lname)) {
assertion = new PrimitiveAssertion(ATMOSTONCE_QNAME, optional);
} else if (INORDER_NAME.equals(lname)) {
assertion = new PrimitiveAssertion(INORDER_QNAME, optional);
}
}
return assertion;
}
use of org.apache.neethi.Assertion in project cxf by apache.
the class WSSecurityPolicyLoader method registerBuilders.
public void registerBuilders() {
AssertionBuilderRegistry reg = bus.getExtension(AssertionBuilderRegistry.class);
if (reg == null) {
return;
}
reg.registerBuilder(new AlgorithmSuiteBuilder(bus));
reg.registerBuilder(new AsymmetricBindingBuilder());
reg.registerBuilder(new ContentEncryptedElementsBuilder());
reg.registerBuilder(new EncryptedElementsBuilder());
reg.registerBuilder(new EncryptionTokenBuilder());
reg.registerBuilder(new EncryptedPartsBuilder());
reg.registerBuilder(new HttpsTokenBuilder());
reg.registerBuilder(new InitiatorTokenBuilder());
reg.registerBuilder(new InitiatorSignatureTokenBuilder());
reg.registerBuilder(new InitiatorEncryptionTokenBuilder());
reg.registerBuilder(new IssuedTokenBuilder());
reg.registerBuilder(new LayoutBuilder());
reg.registerBuilder(new ProtectionTokenBuilder());
reg.registerBuilder(new RecipientTokenBuilder());
reg.registerBuilder(new RecipientSignatureTokenBuilder());
reg.registerBuilder(new RecipientEncryptionTokenBuilder());
reg.registerBuilder(new RequiredElementsBuilder());
reg.registerBuilder(new RequiredPartsBuilder());
reg.registerBuilder(new SamlTokenBuilder());
reg.registerBuilder(new KerberosTokenBuilder());
reg.registerBuilder(new SecureConversationTokenBuilder());
reg.registerBuilder(new BootstrapPolicyBuilder());
reg.registerBuilder(new SecurityContextTokenBuilder());
reg.registerBuilder(new SignedElementsBuilder());
reg.registerBuilder(new SignedPartsBuilder());
reg.registerBuilder(new SignatureTokenBuilder());
reg.registerBuilder(new SpnegoContextTokenBuilder());
reg.registerBuilder(new SupportingTokensBuilder());
reg.registerBuilder(new SymmetricBindingBuilder());
reg.registerBuilder(new TransportBindingBuilder());
reg.registerBuilder(new TransportTokenBuilder());
reg.registerBuilder(new Trust10Builder());
reg.registerBuilder(new Trust13Builder());
reg.registerBuilder(new UsernameTokenBuilder());
reg.registerBuilder(new KeyValueTokenBuilder());
reg.registerBuilder(new WSS10Builder());
reg.registerBuilder(new WSS11Builder());
reg.registerBuilder(new X509TokenBuilder());
// add generic assertions for these known things to prevent warnings
List<QName> others = Arrays.asList(new QName[] { SP12Constants.INCLUDE_TIMESTAMP, SP11Constants.INCLUDE_TIMESTAMP, SP12Constants.ENCRYPT_SIGNATURE, SP11Constants.ENCRYPT_SIGNATURE, SP12Constants.PROTECT_TOKENS, SP11Constants.PROTECT_TOKENS, SP12Constants.ONLY_SIGN_ENTIRE_HEADERS_AND_BODY, SP11Constants.ONLY_SIGN_ENTIRE_HEADERS_AND_BODY, SP12Constants.WSS_X509_V1_TOKEN_10, SP12Constants.WSS_X509_V1_TOKEN_11, SP12Constants.WSS_X509_V3_TOKEN_10, SP12Constants.WSS_X509_V3_TOKEN_11, SP11Constants.WSS_X509_V1_TOKEN_10, SP11Constants.WSS_X509_V1_TOKEN_11, SP11Constants.WSS_X509_V3_TOKEN_10, SP11Constants.WSS_X509_V3_TOKEN_11, SP12Constants.WSS_X509_PKCS7_TOKEN_11, SP12Constants.WSS_X509_PKI_PATH_V1_TOKEN_11, SP11Constants.WSS_X509_PKCS7_TOKEN_11, SP11Constants.WSS_X509_PKI_PATH_V1_TOKEN_11, SP12Constants.REQUIRE_THUMBPRINT_REFERENCE, SP11Constants.REQUIRE_THUMBPRINT_REFERENCE, SP12Constants.REQUIRE_DERIVED_KEYS, SP11Constants.REQUIRE_DERIVED_KEYS, SP12Constants.REQUIRE_INTERNAL_REFERENCE, SP11Constants.REQUIRE_INTERNAL_REFERENCE, SP12Constants.REQUIRE_ISSUER_SERIAL_REFERENCE, SP11Constants.REQUIRE_ISSUER_SERIAL_REFERENCE, SP12Constants.REQUIRE_EMBEDDED_TOKEN_REFERENCE, SP11Constants.REQUIRE_EMBEDDED_TOKEN_REFERENCE, SP12Constants.ENCRYPT_BEFORE_SIGNING, SP11Constants.ENCRYPT_BEFORE_SIGNING, SP12Constants.SIGN_BEFORE_ENCRYPTING, SP11Constants.SIGN_BEFORE_ENCRYPTING, SP12Constants.REQUIRE_KEY_IDENTIFIER_REFERENCE, SP11Constants.REQUIRE_KEY_IDENTIFIER_REFERENCE, SP12Constants.PROTECT_TOKENS, SP11Constants.PROTECT_TOKENS, SP12Constants.RSA_KEY_VALUE, // Layout
SP11Constants.LAX, SP11Constants.LAXTSFIRST, SP11Constants.LAXTSLAST, SP11Constants.STRICT, SP12Constants.LAX, SP12Constants.LAXTSFIRST, SP12Constants.LAXTSLAST, SP12Constants.STRICT, // UsernameToken
SP11Constants.WSS_USERNAME_TOKEN10, SP12Constants.WSS_USERNAME_TOKEN10, SP11Constants.WSS_USERNAME_TOKEN11, SP12Constants.WSS_USERNAME_TOKEN11, SP12Constants.HASH_PASSWORD, SP12Constants.NO_PASSWORD, SP13Constants.CREATED, SP13Constants.NONCE, SP12Constants.REQUIRE_INTERNAL_REFERENCE, SP11Constants.REQUIRE_INTERNAL_REFERENCE, SP12Constants.REQUIRE_EXTERNAL_REFERNCE, SP11Constants.REQUIRE_EXTERNAL_REFERNCE, // Kerberos
new QName(SP11Constants.SP_NS, "WssKerberosV5ApReqToken11"), new QName(SP12Constants.SP_NS, "WssKerberosV5ApReqToken11"), new QName(SP11Constants.SP_NS, "WssGssKerberosV5ApReqToken11"), new QName(SP12Constants.SP_NS, "WssGssKerberosV5ApReqToken11"), // Spnego
SP12Constants.MUST_NOT_SEND_AMEND, SP12Constants.MUST_NOT_SEND_CANCEL, SP12Constants.MUST_NOT_SEND_RENEW, // Backwards compatibility thing
new QName("http://schemas.microsoft.com/ws/2005/07/securitypolicy", SPConstants.MUST_NOT_SEND_CANCEL), // SCT
SP12Constants.REQUIRE_EXTERNAL_URI_REFERENCE, SP12Constants.SC13_SECURITY_CONTEXT_TOKEN, SP11Constants.SC10_SECURITY_CONTEXT_TOKEN, // WSS10
SP12Constants.MUST_SUPPORT_REF_KEY_IDENTIFIER, SP11Constants.MUST_SUPPORT_REF_KEY_IDENTIFIER, SP12Constants.MUST_SUPPORT_REF_ISSUER_SERIAL, SP11Constants.MUST_SUPPORT_REF_ISSUER_SERIAL, SP12Constants.MUST_SUPPORT_REF_EXTERNAL_URI, SP12Constants.MUST_SUPPORT_REF_EXTERNAL_URI, SP12Constants.MUST_SUPPORT_REF_EMBEDDED_TOKEN, SP11Constants.MUST_SUPPORT_REF_EMBEDDED_TOKEN, // WSS11
SP12Constants.MUST_SUPPORT_REF_THUMBPRINT, SP11Constants.MUST_SUPPORT_REF_THUMBPRINT, SP12Constants.MUST_SUPPORT_REF_ENCRYPTED_KEY, SP11Constants.MUST_SUPPORT_REF_ENCRYPTED_KEY, SP12Constants.REQUIRE_SIGNATURE_CONFIRMATION, SP11Constants.REQUIRE_SIGNATURE_CONFIRMATION, // SAML
new QName(SP11Constants.SP_NS, "WssSamlV11Token10"), new QName(SP12Constants.SP_NS, "WssSamlV11Token10"), new QName(SP11Constants.SP_NS, "WssSamlV11Token11"), new QName(SP12Constants.SP_NS, "WssSamlV11Token11"), new QName(SP11Constants.SP_NS, "WssSamlV20Token11"), new QName(SP12Constants.SP_NS, "WssSamlV20Token11"), // HTTPs
SP12Constants.HTTP_BASIC_AUTHENTICATION, SP12Constants.HTTP_DIGEST_AUTHENTICATION, SP12Constants.REQUIRE_CLIENT_CERTIFICATE, // Trust13
SP12Constants.MUST_SUPPORT_CLIENT_CHALLENGE, SP11Constants.MUST_SUPPORT_CLIENT_CHALLENGE, SP12Constants.MUST_SUPPORT_SERVER_CHALLENGE, SP11Constants.MUST_SUPPORT_SERVER_CHALLENGE, SP12Constants.REQUIRE_CLIENT_ENTROPY, SP11Constants.REQUIRE_CLIENT_ENTROPY, SP12Constants.REQUIRE_SERVER_ENTROPY, SP11Constants.REQUIRE_SERVER_ENTROPY, SP12Constants.MUST_SUPPORT_ISSUED_TOKENS, SP11Constants.MUST_SUPPORT_ISSUED_TOKENS, SP12Constants.REQUIRE_REQUEST_SECURITY_TOKEN_COLLECTION, SP12Constants.REQUIRE_APPLIES_TO, SP13Constants.SCOPE_POLICY_15, SP13Constants.MUST_SUPPORT_INTERACTIVE_CHALLENGE, // AlgorithmSuite misc
new QName(SP11Constants.SP_NS, SPConstants.INCLUSIVE_C14N), new QName(SP12Constants.SP_NS, SPConstants.INCLUSIVE_C14N) });
final Map<QName, Assertion> assertions = new HashMap<>();
for (QName q : others) {
assertions.put(q, new PrimitiveAssertion(q));
}
for (String s : AlgorithmSuite.getSupportedAlgorithmSuiteNames()) {
QName q = new QName(SP11Constants.SP_NS, s);
assertions.put(q, new PrimitiveAssertion(q));
q = new QName(SP12Constants.SP_NS, s);
assertions.put(q, new PrimitiveAssertion(q));
}
reg.registerBuilder(new PrimitiveAssertionBuilder(assertions.keySet()) {
public Assertion build(Element element, AssertionBuilderFactory fact) {
if (XMLPrimitiveAssertionBuilder.isOptional(element) || XMLPrimitiveAssertionBuilder.isIgnorable(element)) {
return super.build(element, fact);
}
QName q = new QName(element.getNamespaceURI(), element.getLocalName());
return assertions.get(q);
}
});
}
Aggregations