Examples with ProcessingException org.keycloak.saml.common.exceptions.ProcessingException used on opensource projects

Example 26 with ProcessingException

use of org.keycloak.saml.common.exceptions.ProcessingException in project keycloak by keycloak.

the class DSAKeyValueType method convertToPublicKey.

/**
 * Convert to the JDK representation of a DSA Public Key
 *
 * @return
 *
 * @throws org.keycloak.saml.common.exceptions.ProcessingException
 */
public DSAPublicKey convertToPublicKey() throws ProcessingException {
    try {
        BigInteger BigY = new BigInteger(1, massage(Base64.decode(new String(y))));
        BigInteger BigP = new BigInteger(1, massage(Base64.decode(new String(p))));
        BigInteger BigQ = new BigInteger(1, massage(Base64.decode(new String(q))));
        BigInteger BigG = new BigInteger(1, massage(Base64.decode(new String(g))));
        KeyFactory dsaKeyFactory = KeyFactory.getInstance("dsa");
        DSAPublicKeySpec kspec = new DSAPublicKeySpec(BigY, BigP, BigQ, BigG);
        return (DSAPublicKey) dsaKeyFactory.generatePublic(kspec);
    } catch (Exception e) {
        throw new ProcessingException(e);
    }
}

Example 27 with ProcessingException

use of org.keycloak.saml.common.exceptions.ProcessingException in project keycloak by keycloak.

the class DSAKeyValueType method convertToPrivateKey.

/**
 * Convert to the JDK representation of a DSA Private Key
 *
 * @return
 *
 * @throws ProcessingException
 */
public DSAPrivateKey convertToPrivateKey() throws ProcessingException {
    try {
        BigInteger BigY = new BigInteger(1, massage(Base64.decode(new String(y))));
        BigInteger BigP = new BigInteger(1, massage(Base64.decode(new String(p))));
        BigInteger BigQ = new BigInteger(1, massage(Base64.decode(new String(q))));
        BigInteger BigG = new BigInteger(1, massage(Base64.decode(new String(g))));
        KeyFactory dsaKeyFactory = KeyFactory.getInstance("dsa");
        DSAPrivateKeySpec kspec = new DSAPrivateKeySpec(BigY, BigP, BigQ, BigG);
        return (DSAPrivateKey) dsaKeyFactory.generatePrivate(kspec);
    } catch (Exception e) {
        throw new ProcessingException(e);
    }
}

Example 28 with ProcessingException

use of org.keycloak.saml.common.exceptions.ProcessingException in project keycloak by keycloak.

the class RSAKeyValueType method convertToPublicKey.

/**
 * Convert to the JDK representation of a RSA Public Key
 *
 * @return
 *
 * @throws org.keycloak.saml.common.exceptions.ProcessingException
 */
public RSAPublicKey convertToPublicKey() throws ProcessingException {
    try {
        BigInteger bigModulus = new BigInteger(1, massage(Base64.decode(new String(modulus))));
        BigInteger bigEx = new BigInteger(1, massage(Base64.decode(new String(exponent))));
        KeyFactory rsaKeyFactory = KeyFactory.getInstance("rsa");
        RSAPublicKeySpec kspec = new RSAPublicKeySpec(bigModulus, bigEx);
        return (RSAPublicKey) rsaKeyFactory.generatePublic(kspec);
    } catch (Exception e) {
        throw new ProcessingException(e);
    }
}

Example 29 with ProcessingException

use of org.keycloak.saml.common.exceptions.ProcessingException in project keycloak by keycloak.

the class SamlProtocol method buildArtifactAuthenticatedResponse.

/**
 * This method, instead of sending the actual response with the token sends
 * the artifact message via post or redirect.
 *
 * @param clientSession  the current authenticated client session
 * @param redirectUri    the redirect uri to the client
 * @param samlDocument   a Document containing the saml Response
 * @param bindingBuilder the current JaxrsSAML2BindingBuilder configured with information for signing and encryption
 * @return A response (POSTed form or redirect) with a newly generated artifact
 * @throws ConfigurationException
 * @throws ProcessingException
 * @throws IOException
 */
protected Response buildArtifactAuthenticatedResponse(AuthenticatedClientSessionModel clientSession, String redirectUri, SAML2Object samlDocument, JaxrsSAML2BindingBuilder bindingBuilder) throws ProcessingException, ConfigurationException {
    try {
        String artifact = buildArtifactAndStoreResponse(samlDocument, clientSession);
        String relayState = clientSession.getNote(GeneralConstants.RELAY_STATE);
        logger.debugf("Sending artifact %s to client %s", artifact, clientSession.getClient().getClientId());
        if (isPostBinding(clientSession)) {
            return artifactPost(redirectUri, artifact, relayState, bindingBuilder);
        } else {
            return artifactRedirect(redirectUri, artifact, relayState);
        }
    } catch (ArtifactResolverProcessingException e) {
        throw new ProcessingException(e);
    }
}

Example 30 with ProcessingException

use of org.keycloak.saml.common.exceptions.ProcessingException in project keycloak by keycloak.

the class SamlService method artifactResponseMessage.

private Response artifactResponseMessage(ArtifactResolveType artifactResolveMessage, Document artifactResponseDocument, ClientModel clientModel) throws ProcessingException, ConfigurationException {
    // Add "inResponseTo" to artifactResponse
    if (artifactResolveMessage.getID() != null && !artifactResolveMessage.getID().trim().isEmpty()) {
        Element artifactResponseElement = artifactResponseDocument.getDocumentElement();
        artifactResponseElement.setAttribute("InResponseTo", artifactResolveMessage.getID());
    }
    JaxrsSAML2BindingBuilder bindingBuilder = new JaxrsSAML2BindingBuilder(session);
    if (clientModel != null) {
        SamlClient samlClient = new SamlClient(clientModel);
        // Sign document/assertion if necessary, necessary to do this here, as the "inResponseTo" can only be set at this point
        if (samlClient.requiresRealmSignature() || samlClient.requiresAssertionSignature()) {
            KeyManager keyManager = session.keys();
            KeyManager.ActiveRsaKey keys = keyManager.getActiveRsaKey(realm);
            String keyName = samlClient.getXmlSigKeyInfoKeyNameTransformer().getKeyName(keys.getKid(), keys.getCertificate());
            String canonicalization = samlClient.getCanonicalizationMethod();
            if (canonicalization != null) {
                bindingBuilder.canonicalizationMethod(canonicalization);
            }
            bindingBuilder.signatureAlgorithm(samlClient.getSignatureAlgorithm()).signWith(keyName, keys.getPrivateKey(), keys.getPublicKey(), keys.getCertificate());
            if (samlClient.requiresRealmSignature())
                bindingBuilder.signDocument();
            if (samlClient.requiresAssertionSignature())
                bindingBuilder.signAssertions();
        }
        // Encrypt assertion if client requires it
        if (samlClient.requiresEncryption()) {
            PublicKey publicKey = null;
            try {
                publicKey = SamlProtocolUtils.getEncryptionKey(clientModel);
            } catch (Exception e) {
                logger.error("Failed to obtain encryption key for client", e);
                return emptyArtifactResponseMessage(artifactResolveMessage, null);
            }
            bindingBuilder.encrypt(publicKey);
        }
    }
    bindingBuilder.postBinding(artifactResponseDocument);
    Soap.SoapMessageBuilder messageBuilder = Soap.createMessage();
    messageBuilder.addToBody(artifactResponseDocument);
    if (logger.isDebugEnabled()) {
        String artifactResponse = DocumentUtil.asString(artifactResponseDocument);
        logger.debugf("Sending artifactResponse message for artifact %s. Message: \n %s", artifactResolveMessage.getArtifact(), artifactResponse);
    }
    return messageBuilder.build();
}