Examples with Validator org.apache.wss4j.dom.validate.Validator used on opensource projects

Example 6 with Validator

use of org.apache.wss4j.dom.validate.Validator in project ddf by codice.

the class SimpleSign method validateSignature.

public void validateSignature(Signature signature, Document doc) throws SignatureException {
    RequestData requestData = new RequestData();
    requestData.setWsDocInfo(new WSDocInfo(doc));
    requestData.setSigVerCrypto(crypto.getSignatureCrypto());
    WSSConfig wssConfig = WSSConfig.getNewInstance();
    requestData.setWssConfig(wssConfig);
    SAMLKeyInfo samlKeyInfo = null;
    KeyInfo keyInfo = signature.getKeyInfo();
    if (keyInfo != null) {
        try {
            samlKeyInfo = SAMLUtil.getCredentialFromKeyInfo(keyInfo.getDOM(), new WSSSAMLKeyInfoProcessor(requestData), crypto.getSignatureCrypto());
        } catch (WSSecurityException e) {
            throw new SignatureException("Unable to get KeyInfo.", e);
        }
    }
    if (samlKeyInfo == null) {
        throw new SignatureException("No KeyInfo supplied in the signature");
    }
    validateSignatureAndSamlKey(signature, samlKeyInfo);
    Credential trustCredential = new Credential();
    trustCredential.setPublicKey(samlKeyInfo.getPublicKey());
    trustCredential.setCertificates(samlKeyInfo.getCerts());
    Validator signatureValidator = new SignatureTrustValidator();
    try {
        signatureValidator.validate(trustCredential, requestData);
    } catch (WSSecurityException e) {
        throw new SignatureException("Error validating signature", e);
    }
}

Example 7 with Validator

use of org.apache.wss4j.dom.validate.Validator in project jbossws-cxf by jbossws.

the class SubjectCreatingInterceptor method getSecurityEngine.

@Override
protected WSSecurityEngine getSecurityEngine(boolean utNoCallbacks) {
    Map<QName, Object> profiles = new HashMap<QName, Object>(1);
    Validator validator = new CustomValidator();
    profiles.put(WSConstants.USERNAME_TOKEN, validator);
    return createSecurityEngine(profiles);
}