Examples with X509DataType org.keycloak.dom.xmlsec.w3.xmldsig.X509DataType used on opensource projects

Example 1 with X509DataType

use of org.keycloak.dom.xmlsec.w3.xmldsig.X509DataType in project keycloak by keycloak.

the class SAMLParserTest method testSaml20AuthnResponseNonAsciiNameDefaultUtf8.

@Test
public void testSaml20AuthnResponseNonAsciiNameDefaultUtf8() throws Exception {
    ResponseType rt = assertParsed("KEYCLOAK-3971-utf-8-no-header-authnresponse.xml", ResponseType.class);
    assertThat(rt.getAssertions().size(), is(1));
    final AssertionType assertion = rt.getAssertions().get(0).getAssertion();
    assertThat(assertion.getSubject().getSubType().getBaseID(), instanceOf(NameIDType.class));
    NameIDType nameId = (NameIDType) assertion.getSubject().getSubType().getBaseID();
    assertThat(nameId.getValue(), is("roàåאבčéèíñòøöùüßåäöü汉字"));
    assertThat(assertion.getSubject().getConfirmation(), hasSize(1));
    assertThat(assertion.getSubject().getConfirmation().get(0).getSubjectConfirmationData(), notNullValue());
    assertThat(assertion.getSubject().getConfirmation().get(0).getSubjectConfirmationData().getAnyType(), instanceOf(KeyInfoType.class));
    KeyInfoType kit = (KeyInfoType) assertion.getSubject().getConfirmation().get(0).getSubjectConfirmationData().getAnyType();
    assertThat(kit.getContent(), hasItem(instanceOf(X509DataType.class)));
    X509DataType rsaKit = (X509DataType) kit.getContent().get(0);
    assertThat(rsaKit.getDataObjects(), hasSize(1));
    assertThat(rsaKit.getDataObjects().get(0), instanceOf(X509CertificateType.class));
}

Example 2 with X509DataType

use of org.keycloak.dom.xmlsec.w3.xmldsig.X509DataType in project keycloak by keycloak.

the class X509DataParser method processSubElement.

@Override
protected void processSubElement(XMLEventReader xmlEventReader, X509DataType target, XmlDSigQNames element, StartElement elementDetail) throws ParsingException {
    switch(element) {
        case X509_CERTIFICATE:
            StaxParserUtil.advance(xmlEventReader);
            String certValue = StaxParserUtil.getElementText(xmlEventReader);
            X509CertificateType cert = new X509CertificateType();
            cert.setEncodedCertificate(certValue.getBytes(GeneralConstants.SAML_CHARSET));
            target.add(cert);
            break;
        default:
            throw LOGGER.parserUnknownTag(StaxParserUtil.getElementName(elementDetail), elementDetail.getLocation());
    }
}

Example 3 with X509DataType

use of org.keycloak.dom.xmlsec.w3.xmldsig.X509DataType in project keycloak by keycloak.

the class BaseWriter method write.

private void write(SubjectConfirmationDataType subjectConfirmationData) throws ProcessingException {
    StaxUtil.writeStartElement(writer, ASSERTION_PREFIX, JBossSAMLConstants.SUBJECT_CONFIRMATION_DATA.get(), ASSERTION_NSURI.get());
    // Let us look at attributes
    String inResponseTo = subjectConfirmationData.getInResponseTo();
    if (StringUtil.isNotNull(inResponseTo)) {
        StaxUtil.writeAttribute(writer, JBossSAMLConstants.IN_RESPONSE_TO.get(), inResponseTo);
    }
    XMLGregorianCalendar notBefore = subjectConfirmationData.getNotBefore();
    if (notBefore != null) {
        StaxUtil.writeAttribute(writer, JBossSAMLConstants.NOT_BEFORE.get(), notBefore.toString());
    }
    XMLGregorianCalendar notOnOrAfter = subjectConfirmationData.getNotOnOrAfter();
    if (notOnOrAfter != null) {
        StaxUtil.writeAttribute(writer, JBossSAMLConstants.NOT_ON_OR_AFTER.get(), notOnOrAfter.toString());
    }
    String recipient = subjectConfirmationData.getRecipient();
    if (StringUtil.isNotNull(recipient)) {
        StaxUtil.writeAttribute(writer, JBossSAMLConstants.RECIPIENT.get(), recipient);
    }
    String address = subjectConfirmationData.getAddress();
    if (StringUtil.isNotNull(address)) {
        StaxUtil.writeAttribute(writer, JBossSAMLConstants.ADDRESS.get(), address);
    }
    if (subjectConfirmationData instanceof KeyInfoConfirmationDataType) {
        KeyInfoConfirmationDataType kicd = (KeyInfoConfirmationDataType) subjectConfirmationData;
        KeyInfoType keyInfo = (KeyInfoType) kicd.getAnyType();
        StaxWriterUtil.writeKeyInfo(writer, keyInfo);
    /*
             * if (keyInfo.getContent() == null || keyInfo.getContent().size() == 0) throw new
             * ProcessingException(ErrorCodes.WRITER_INVALID_KEYINFO_NULL_CONTENT); StaxUtil.writeStartElement(this.writer,
             * WSTrustConstants.XMLDSig.DSIG_PREFIX, WSTrustConstants.XMLDSig.KEYINFO, WSTrustConstants.XMLDSig.DSIG_NS);
             * StaxUtil.writeNameSpace(this.writer, WSTrustConstants.XMLDSig.DSIG_PREFIX, WSTrustConstants.XMLDSig.DSIG_NS); //
             * write the keyInfo content. Object content = keyInfo.getContent().get(0); if (content instanceof Element) {
             * Element element = (Element) keyInfo.getContent().get(0); StaxUtil.writeDOMNode(this.writer, element); } else if
             * (content instanceof X509DataType) { X509DataType type = (X509DataType) content; if (type.getDataObjects().size()
             * == 0) throw new ProcessingException(ErrorCodes.WRITER_NULL_VALUE + "X509Data");
             * StaxUtil.writeStartElement(this.writer, WSTrustConstants.XMLDSig.DSIG_PREFIX, WSTrustConstants.XMLDSig.X509DATA,
             * WSTrustConstants.XMLDSig.DSIG_NS); Object obj = type.getDataObjects().get(0); if (obj instanceof Element) {
             * Element element = (Element) obj; StaxUtil.writeDOMElement(this.writer, element); } else if (obj instanceof
             * X509CertificateType) { X509CertificateType cert = (X509CertificateType) obj;
             * StaxUtil.writeStartElement(this.writer, WSTrustConstants.XMLDSig.DSIG_PREFIX, WSTrustConstants.XMLDSig.X509CERT,
             * WSTrustConstants.XMLDSig.DSIG_NS); StaxUtil.writeCharacters(this.writer, new
             * String(cert.getEncodedCertificate())); StaxUtil.writeEndElement(this.writer); }
             * StaxUtil.writeEndElement(this.writer); } StaxUtil.writeEndElement(this.writer);
             */
    }
    StaxUtil.writeEndElement(writer);
    StaxUtil.flush(writer);
}

Example 4 with X509DataType

use of org.keycloak.dom.xmlsec.w3.xmldsig.X509DataType in project keycloak by keycloak.

the class SAML11ParserUtil method parseKeyInfo.

public static KeyInfoType parseKeyInfo(XMLEventReader xmlEventReader) throws ParsingException {
    KeyInfoType keyInfo = new KeyInfoType();
    StartElement startElement = StaxParserUtil.getNextStartElement(xmlEventReader);
    StaxParserUtil.validate(startElement, WSTrustConstants.XMLDSig.KEYINFO);
    XMLEvent xmlEvent = null;
    String tag = null;
    while (xmlEventReader.hasNext()) {
        xmlEvent = StaxParserUtil.peek(xmlEventReader);
        if (xmlEvent instanceof EndElement) {
            tag = StaxParserUtil.getElementName((EndElement) xmlEvent);
            if (tag.equals(WSTrustConstants.XMLDSig.KEYINFO)) {
                xmlEvent = StaxParserUtil.getNextEndElement(xmlEventReader);
                break;
            } else
                throw logger.parserUnknownEndElement(tag, xmlEvent.getLocation());
        }
        startElement = (StartElement) xmlEvent;
        tag = StaxParserUtil.getElementName(startElement);
        if (tag.equals(WSTrustConstants.XMLEnc.ENCRYPTED_KEY)) {
            keyInfo.addContent(StaxParserUtil.getDOMElement(xmlEventReader));
        } else if (tag.equals(WSTrustConstants.XMLDSig.X509DATA)) {
            startElement = StaxParserUtil.getNextStartElement(xmlEventReader);
            X509DataType x509 = new X509DataType();
            // Let us go for the X509 certificate
            startElement = StaxParserUtil.getNextStartElement(xmlEventReader);
            StaxParserUtil.validate(startElement, WSTrustConstants.XMLDSig.X509CERT);
            X509CertificateType cert = new X509CertificateType();
            String certValue = StaxParserUtil.getElementText(xmlEventReader);
            cert.setEncodedCertificate(certValue.getBytes(GeneralConstants.SAML_CHARSET));
            x509.add(cert);
            EndElement endElement = StaxParserUtil.getNextEndElement(xmlEventReader);
            StaxParserUtil.validate(endElement, WSTrustConstants.XMLDSig.X509DATA);
            keyInfo.addContent(x509);
        } else if (tag.equals(WSTrustConstants.XMLDSig.KEYVALUE)) {
            startElement = StaxParserUtil.getNextStartElement(xmlEventReader);
            KeyValueType keyValue = null;
            startElement = StaxParserUtil.peekNextStartElement(xmlEventReader);
            tag = StaxParserUtil.getElementName(startElement);
            if (tag.equals(WSTrustConstants.XMLDSig.RSA_KEYVALUE)) {
                keyValue = parseRSAKeyValue(xmlEventReader);
            } else if (tag.equals(WSTrustConstants.XMLDSig.DSA_KEYVALUE)) {
                keyValue = parseDSAKeyValue(xmlEventReader);
            } else
                throw logger.parserUnknownTag(tag, startElement.getLocation());
            EndElement endElement = StaxParserUtil.getNextEndElement(xmlEventReader);
            StaxParserUtil.validate(endElement, WSTrustConstants.XMLDSig.KEYVALUE);
            keyInfo.addContent(keyValue);
        }
    }
    return keyInfo;
}

Example 5 with X509DataType

use of org.keycloak.dom.xmlsec.w3.xmldsig.X509DataType in project keycloak by keycloak.

the class StaxWriterUtil method writeKeyInfo.

/**
 * Write the {@link org.keycloak.dom.xmlsec.w3.xmldsig.KeyInfoType}
 *
 * @param writer
 * @param keyInfo
 *
 * @throws org.keycloak.saml.common.exceptions.ProcessingException
 */
public static void writeKeyInfo(XMLStreamWriter writer, KeyInfoType keyInfo) throws ProcessingException {
    if (keyInfo.getContent() == null || keyInfo.getContent().size() == 0)
        throw logger.writerInvalidKeyInfoNullContentError();
    StaxUtil.writeStartElement(writer, WSTrustConstants.XMLDSig.DSIG_PREFIX, WSTrustConstants.XMLDSig.KEYINFO, WSTrustConstants.XMLDSig.DSIG_NS);
    StaxUtil.writeNameSpace(writer, WSTrustConstants.XMLDSig.DSIG_PREFIX, WSTrustConstants.XMLDSig.DSIG_NS);
    // write the keyInfo content.
    Object content = keyInfo.getContent().get(0);
    if (content instanceof Element) {
        Element element = (Element) keyInfo.getContent().get(0);
        StaxUtil.writeDOMNode(writer, element);
    } else if (content instanceof X509DataType) {
        X509DataType type = (X509DataType) content;
        if (type.getDataObjects().size() == 0)
            throw logger.writerNullValueError("X509Data");
        StaxUtil.writeStartElement(writer, WSTrustConstants.XMLDSig.DSIG_PREFIX, WSTrustConstants.XMLDSig.X509DATA, WSTrustConstants.XMLDSig.DSIG_NS);
        Object obj = type.getDataObjects().get(0);
        if (obj instanceof Element) {
            Element element = (Element) obj;
            StaxUtil.writeDOMElement(writer, element);
        } else if (obj instanceof X509CertificateType) {
            X509CertificateType cert = (X509CertificateType) obj;
            StaxUtil.writeStartElement(writer, WSTrustConstants.XMLDSig.DSIG_PREFIX, WSTrustConstants.XMLDSig.X509CERT, WSTrustConstants.XMLDSig.DSIG_NS);
            StaxUtil.writeCharacters(writer, new String(cert.getEncodedCertificate(), GeneralConstants.SAML_CHARSET));
            StaxUtil.writeEndElement(writer);
        }
        StaxUtil.writeEndElement(writer);
    } else if (content instanceof KeyValueType) {
        KeyValueType keyvalueType = (KeyValueType) content;
        StaxUtil.writeStartElement(writer, WSTrustConstants.XMLDSig.DSIG_PREFIX, WSTrustConstants.XMLDSig.KEYVALUE, WSTrustConstants.XMLDSig.DSIG_NS);
        if (keyvalueType instanceof DSAKeyValueType) {
            writeDSAKeyValueType(writer, (DSAKeyValueType) keyvalueType);
        }
        if (keyvalueType instanceof RSAKeyValueType) {
            writeRSAKeyValueType(writer, (RSAKeyValueType) keyvalueType);
        }
        StaxUtil.writeEndElement(writer);
    } else
        throw new ProcessingException(ErrorCodes.UNSUPPORTED_TYPE + content);
    StaxUtil.writeEndElement(writer);
}