Examples with WSSecurityEngineResult org.apache.wss4j.dom.engine.WSSecurityEngineResult used on opensource projects

Example 16 with WSSecurityEngineResult

use of org.apache.wss4j.dom.engine.WSSecurityEngineResult in project cxf by apache.

the class STSUnitTest method testBearerSAML2Token.

@Test
public void testBearerSAML2Token() throws URISyntaxException, Exception {
    Bus bus = BusFactory.getDefaultBus();
    String stsEndpoint = "http://localhost:" + System.getProperty("BasicSTSIntegrationTest.PORT") + "/cxf/X509";
    // sts could take a second or two to fully startup, make sure we can get the wsdl
    waitForWSDL(stsEndpoint);
    // Get a token
    SecurityToken token = requestSecurityToken(SAML2_TOKEN_TYPE, BEARER_KEYTYPE, bus, stsEndpoint);
    assertEquals(SAML2_TOKEN_TYPE, token.getTokenType());
    assertNotNull(token.getToken());
    // Process the token
    List<WSSecurityEngineResult> results = processToken(token);
    assertTrue(results != null && results.size() == 1);
    SamlAssertionWrapper assertion = (SamlAssertionWrapper) results.get(0).get(WSSecurityEngineResult.TAG_SAML_ASSERTION);
    assertNotNull(assertion);
    assertTrue(assertion.getSaml1() == null && assertion.getSaml2() != null);
    assertTrue(assertion.isSigned());
    List<String> methods = assertion.getConfirmationMethods();
    String confirmMethod = null;
    if (methods != null && !methods.isEmpty()) {
        confirmMethod = methods.get(0);
    }
    assertTrue(confirmMethod.contains("bearer"));
    bus.shutdown(true);
}

Example 17 with WSSecurityEngineResult

use of org.apache.wss4j.dom.engine.WSSecurityEngineResult in project cxf by apache.

the class DoubleItBSTImpl method doubleIt.

public int doubleIt(int numberToDouble) throws DoubleItFault {
    if (numberToDouble == 0) {
        throw new DoubleItFault("0 can't be doubled!");
    }
    List<WSHandlerResult> results = CastUtils.cast((List<?>) wsContext.getMessageContext().get(WSHandlerConstants.RECV_RESULTS));
    Assert.assertNotNull("Security Results cannot be null", results);
    Assert.assertFalse(results.isEmpty());
    WSHandlerResult result = results.get(0);
    List<WSSecurityEngineResult> securityResults = result.getResults();
    Assert.assertNotNull("Security Results cannot be null", securityResults);
    Assert.assertFalse(securityResults.isEmpty());
    WSSecurityEngineResult securityResult = securityResults.get(0);
    BinarySecurity binarySecurityToken = (BinarySecurity) securityResult.get(WSSecurityEngineResult.TAG_BINARY_SECURITY_TOKEN);
    Assert.assertNotNull(binarySecurityToken);
    Assert.assertArrayEquals(binarySecurityToken.getToken(), "This is a token".getBytes());
    return numberToDouble * 2;
}

Example 18 with WSSecurityEngineResult

use of org.apache.wss4j.dom.engine.WSSecurityEngineResult in project cxf by apache.

the class CustomParameterTest method validateSAMLSecurityTokenResponse.

private Element validateSAMLSecurityTokenResponse(RequestSecurityTokenResponseType securityResponse, boolean saml2) throws Exception {
    RequestedSecurityTokenType requestedSecurityToken = getRequestedSecurityToken(securityResponse);
    assertNotNull(requestedSecurityToken);
    // Process the token
    List<WSSecurityEngineResult> results = processToken((Element) requestedSecurityToken.getAny());
    assertTrue(results != null && results.size() == 1);
    SamlAssertionWrapper assertion = (SamlAssertionWrapper) results.get(0).get(WSSecurityEngineResult.TAG_SAML_ASSERTION);
    assertNotNull(assertion);
    if (saml2) {
        assertTrue(assertion.getSaml2() != null && assertion.getSaml1() == null);
    } else {
        assertTrue(assertion.getSaml2() == null && assertion.getSaml1() != null);
    }
    assertTrue(assertion.isSigned());
    return (Element) results.get(0).get(WSSecurityEngineResult.TAG_TOKEN_ELEMENT);
}

Example 19 with WSSecurityEngineResult

use of org.apache.wss4j.dom.engine.WSSecurityEngineResult in project cxf by apache.

the class LayoutPolicyValidator method validateStrictSignatureTokenPlacement.

private boolean validateStrictSignatureTokenPlacement(List<WSSecurityEngineResult> results) {
    // Go through each Signature and check that the Signing Token appears before the Signature
    for (int i = 0; i < results.size(); i++) {
        WSSecurityEngineResult result = results.get(i);
        Integer actInt = (Integer) result.get(WSSecurityEngineResult.TAG_ACTION);
        if (actInt == WSConstants.SIGN) {
            int correspondingIndex = findCorrespondingTokenIndex(result, results);
            if (correspondingIndex > 0 && correspondingIndex < i) {
                return false;
            }
        }
    }
    return true;
}

Example 20 with WSSecurityEngineResult

use of org.apache.wss4j.dom.engine.WSSecurityEngineResult in project cxf by apache.

the class LayoutPolicyValidator method validateStrictSignaturePlacement.

private boolean validateStrictSignaturePlacement(List<WSSecurityEngineResult> results, List<WSSecurityEngineResult> signedResults) {
    // Go through each Signature and check any security header token is before the Signature
    for (WSSecurityEngineResult signedResult : signedResults) {
        List<WSDataRef> sl = CastUtils.cast((List<?>) signedResult.get(WSSecurityEngineResult.TAG_DATA_REF_URIS));
        Integer actInt = (Integer) signedResult.get(WSSecurityEngineResult.TAG_ACTION);
        if (sl == null || WSConstants.ST_SIGNED == actInt) {
            continue;
        }
        for (WSDataRef r : sl) {
            String xpath = r.getXpath();
            if (xpath != null) {
                String[] nodes = xpath.split("/");
                // envelope/Header/wsse:Security/header
                if (nodes.length == 5) {
                    Element protectedElement = r.getProtectedElement();
                    boolean tokenFound = false;
                    // Results are stored in reverse order
                    for (WSSecurityEngineResult result : results) {
                        Element resultElement = (Element) result.get(WSSecurityEngineResult.TAG_TOKEN_ELEMENT);
                        if (resultElement == protectedElement) {
                            tokenFound = true;
                        }
                        if (tokenFound && result == signedResult) {
                            return false;
                        } else if (resultElement != null && result == signedResult) {
                            break;
                        }
                    }
                }
            }
        }
    }
    return true;
}