Examples with SamlSession org.keycloak.adapters.saml.SamlSession used on opensource projects

Example 1 with SamlSession

use of org.keycloak.adapters.saml.SamlSession in project keycloak by keycloak.

the class SendUsernameServlet method getSessionInfo.

private String getSessionInfo() {
    HttpSession session = httpServletRequest.getSession(false);
    if (session != null) {
        final SamlSession samlSession = (SamlSession) httpServletRequest.getSession(false).getAttribute(SamlSession.class.getName());
        if (samlSession != null) {
            String output = "Session ID: " + samlSession.getSessionIndex() + "\n";
            XMLGregorianCalendar sessionNotOnOrAfter = samlSession.getSessionNotOnOrAfter();
            output += "SessionNotOnOrAfter: " + (sessionNotOnOrAfter == null ? "null" : sessionNotOnOrAfter.toString());
            return output;
        }
        return "SamlSession doesn't exist";
    }
    return "Session doesn't exist";
}

Example 2 with SamlSession

use of org.keycloak.adapters.saml.SamlSession in project keycloak by keycloak.

the class WebBrowserSsoAuthenticationHandler method globalLogout.

private AuthOutcome globalLogout() {
    SamlSession account = sessionStore.getAccount();
    if (account == null) {
        return AuthOutcome.NOT_ATTEMPTED;
    }
    SAML2LogoutRequestBuilder logoutBuilder = new SAML2LogoutRequestBuilder().assertionExpiration(30).issuer(deployment.getEntityID()).sessionIndex(account.getSessionIndex()).nameId(account.getPrincipal().getNameID()).destination(deployment.getIDP().getSingleLogoutService().getRequestBindingUrl());
    BaseSAML2BindingBuilder binding = new BaseSAML2BindingBuilder();
    if (deployment.getIDP().getSingleLogoutService().signRequest()) {
        if (deployment.getSignatureCanonicalizationMethod() != null)
            binding.canonicalizationMethod(deployment.getSignatureCanonicalizationMethod());
        binding.signatureAlgorithm(deployment.getSignatureAlgorithm());
        binding.signWith(null, deployment.getSigningKeyPair()).signDocument();
    // TODO: As part of KEYCLOAK-3810, add KeyID to the SAML document
    // <related DocumentBuilder>.addExtension(new KeycloakKeySamlExtensionGenerator(<key ID>));
    }
    binding.relayState("logout");
    try {
        SamlUtil.sendSaml(true, facade, deployment.getIDP().getSingleLogoutService().getRequestBindingUrl(), binding, logoutBuilder.buildDocument(), deployment.getIDP().getSingleLogoutService().getRequestBinding());
        sessionStore.setCurrentAction(SamlSessionStore.CurrentAction.LOGGING_OUT);
    } catch (Exception e) {
        log.error("Could not send global logout SAML request", e);
        return AuthOutcome.FAILED;
    }
    return AuthOutcome.NOT_ATTEMPTED;
}

Example 3 with SamlSession

use of org.keycloak.adapters.saml.SamlSession in project keycloak by keycloak.

the class FilterSamlSessionStore method saveAccount.

@Override
public void saveAccount(SamlSession account) {
    HttpSession session = request.getSession(true);
    session.setAttribute(SamlSession.class.getName(), account);
    if (idMapper != null)
        idMapper.map(account.getSessionIndex(), account.getPrincipal().getSamlSubject(), session.getId());
}

Example 4 with SamlSession

use of org.keycloak.adapters.saml.SamlSession in project keycloak by keycloak.

the class FilterSamlSessionStore method logoutByPrincipal.

@Override
public void logoutByPrincipal(String principal) {
    SamlSession account = getAccount();
    if (account != null && account.getPrincipal().getSamlSubject().equals(principal)) {
        logoutAccount();
    }
    if (idMapper != null) {
        Set<String> sessions = idMapper.getUserSessions(principal);
        if (sessions != null) {
            List<String> ids = new LinkedList<String>();
            ids.addAll(sessions);
            for (String id : ids) {
                idMapper.removeSession(id);
            }
        }
    }
}

Example 5 with SamlSession

use of org.keycloak.adapters.saml.SamlSession in project keycloak by keycloak.

the class JettySamlSessionStore method logoutAccount.

@Override
public void logoutAccount() {
    HttpSession session = request.getSession(false);
    if (session != null) {
        SamlSession samlSession = (SamlSession) session.getAttribute(SamlSession.class.getName());
        if (samlSession != null) {
            if (samlSession.getSessionIndex() != null) {
                idMapper.removeSession(session.getId());
            }
            session.removeAttribute(SamlSession.class.getName());
        }
        session.removeAttribute(SAML_REDIRECT_URI);
    }
}