Examples with AbstractSecurityAssertion org.apache.wss4j.policy.model.AbstractSecurityAssertion used on opensource projects

Example 1 with AbstractSecurityAssertion

use of org.apache.wss4j.policy.model.AbstractSecurityAssertion in project cxf by apache.

the class AlgorithmSuiteTranslater method translateAlgorithmSuites.

public void translateAlgorithmSuites(AssertionInfoMap aim, RequestData data) throws WSSecurityException {
    if (aim == null) {
        return;
    }
    List<org.apache.wss4j.policy.model.AlgorithmSuite> algorithmSuites = getAlgorithmSuites(getBindings(aim));
    if (!algorithmSuites.isEmpty()) {
        // Translate into WSS4J's AlgorithmSuite class
        AlgorithmSuite algorithmSuite = translateAlgorithmSuites(algorithmSuites);
        data.setAlgorithmSuite(algorithmSuite);
    }
    // Now look for an AlgorithmSuite for a SAML Assertion
    Collection<AssertionInfo> ais = PolicyUtils.getAllAssertionsByLocalname(aim, SPConstants.SAML_TOKEN);
    if (!ais.isEmpty()) {
        List<org.apache.wss4j.policy.model.AlgorithmSuite> samlAlgorithmSuites = new ArrayList<>();
        for (AssertionInfo ai : ais) {
            SamlToken samlToken = (SamlToken) ai.getAssertion();
            AbstractSecurityAssertion parentAssertion = samlToken.getParentAssertion();
            if (parentAssertion instanceof SupportingTokens && ((SupportingTokens) parentAssertion).getAlgorithmSuite() != null) {
                samlAlgorithmSuites.add(((SupportingTokens) parentAssertion).getAlgorithmSuite());
            }
        }
        if (!samlAlgorithmSuites.isEmpty()) {
            data.setSamlAlgorithmSuite(translateAlgorithmSuites(samlAlgorithmSuites));
        }
    }
}

Example 2 with AbstractSecurityAssertion

use of org.apache.wss4j.policy.model.AbstractSecurityAssertion in project cxf by apache.

the class UsernameTokenPolicyValidator method isNonEndorsingSupportingToken.

/**
 * Return true if this UsernameToken policy is a (non-endorsing)SupportingToken. If this is
 * true then the corresponding UsernameToken must have a password element.
 */
private boolean isNonEndorsingSupportingToken(org.apache.wss4j.policy.model.UsernameToken usernameTokenPolicy) {
    AbstractSecurityAssertion parentAssertion = usernameTokenPolicy.getParentAssertion();
    if (parentAssertion instanceof SupportingTokens) {
        SupportingTokens supportingToken = (SupportingTokens) parentAssertion;
        String localname = supportingToken.getName().getLocalPart();
        if (localname.equals(SPConstants.SUPPORTING_TOKENS) || localname.equals(SPConstants.SIGNED_SUPPORTING_TOKENS) || localname.equals(SPConstants.ENCRYPTED_SUPPORTING_TOKENS) || localname.equals(SPConstants.SIGNED_ENCRYPTED_SUPPORTING_TOKENS)) {
            return true;
        }
    }
    return false;
}