Examples with SAML2Response org.keycloak.saml.processing.api.saml.v2.response.SAML2Response used on opensource projects

Example 6 with SAML2Response

use of org.keycloak.saml.processing.api.saml.v2.response.SAML2Response in project keycloak by keycloak.

the class SamlDocumentStepBuilder method transformObject.

@SuppressWarnings("unchecked")
public This transformObject(Saml2ObjectTransformer<T> tr) {
    final StringTransformer original = this.transformer;
    this.transformer = s -> {
        final String originalTransformed = original.transform(s);
        if (originalTransformed == null) {
            return null;
        }
        final ByteArrayInputStream baos = new ByteArrayInputStream(originalTransformed.getBytes());
        final T saml2Object = (T) new SAML2Response().getSAML2ObjectFromStream(baos);
        final T transformed = tr.transform(saml2Object);
        if (transformed == null) {
            return null;
        }
        String res = saml2Object2String(transformed);
        LOG.debugf("  ---> %s", res);
        return res;
    };
    return (This) this;
}

Example 7 with SAML2Response

use of org.keycloak.saml.processing.api.saml.v2.response.SAML2Response in project keycloak by keycloak.

the class SAML2LoginResponseBuilder method buildModel.

public ResponseType buildModel() throws ConfigurationException, ProcessingException {
    ResponseType responseType = null;
    SAML2Response saml2Response = new SAML2Response();
    // Create a response type
    String id = IDGenerator.create("ID_");
    IssuerInfoHolder issuerHolder = new IssuerInfoHolder(issuer);
    issuerHolder.setStatusCode(JBossSAMLURIConstants.STATUS_SUCCESS.get());
    IDPInfoHolder idp = new IDPInfoHolder();
    idp.setNameIDFormatValue(nameId);
    idp.setNameIDFormat(nameIdFormat);
    SPInfoHolder sp = new SPInfoHolder();
    sp.setResponseDestinationURI(destination);
    sp.setRequestID(requestID);
    sp.setIssuer(requestIssuer);
    responseType = saml2Response.createResponseType(id, sp, idp, issuerHolder);
    AssertionType assertion = responseType.getAssertions().get(0).getAssertion();
    // Add request issuer as the audience restriction
    AudienceRestrictionType audience = new AudienceRestrictionType();
    audience.addAudience(URI.create(requestIssuer));
    assertion.getConditions().addCondition(audience);
    // Update Conditions NotOnOrAfter
    if (assertionExpiration > 0) {
        ConditionsType conditions = assertion.getConditions();
        conditions.setNotOnOrAfter(XMLTimeUtil.add(conditions.getNotBefore(), assertionExpiration * 1000L));
    }
    // Update SubjectConfirmationData NotOnOrAfter
    if (subjectExpiration > 0) {
        SubjectConfirmationDataType subjectConfirmationData = assertion.getSubject().getConfirmation().get(0).getSubjectConfirmationData();
        subjectConfirmationData.setNotOnOrAfter(XMLTimeUtil.add(assertion.getConditions().getNotBefore(), subjectExpiration * 1000L));
    }
    // Create an AuthnStatementType
    if (!disableAuthnStatement) {
        String authContextRef = JBossSAMLURIConstants.AC_UNSPECIFIED.get();
        if (isNotNull(authMethod))
            authContextRef = authMethod;
        AuthnStatementType authnStatement = StatementUtil.createAuthnStatement(XMLTimeUtil.getIssueInstant(), authContextRef);
        if (sessionExpiration > 0)
            authnStatement.setSessionNotOnOrAfter(XMLTimeUtil.add(authnStatement.getAuthnInstant(), sessionExpiration * 1000L));
        if (sessionIndex != null)
            authnStatement.setSessionIndex(sessionIndex);
        else
            authnStatement.setSessionIndex(assertion.getID());
        assertion.addStatement(authnStatement);
    }
    if (includeOneTimeUseCondition) {
        assertion.getConditions().addCondition(new OneTimeUseType());
    }
    if (!this.extensions.isEmpty()) {
        ExtensionsType extensionsType = new ExtensionsType();
        for (NodeGenerator extension : this.extensions) {
            extensionsType.addExtension(extension);
        }
        responseType.setExtensions(extensionsType);
    }
    return responseType;
}

Example 8 with SAML2Response

use of org.keycloak.saml.processing.api.saml.v2.response.SAML2Response in project keycloak by keycloak.

the class SAMLRequestParser method parseResponseRedirectBinding.

public static SAMLDocumentHolder parseResponseRedirectBinding(String samlMessage) {
    InputStream is;
    try {
        is = RedirectBindingUtil.base64DeflateDecode(samlMessage);
    } catch (IOException e) {
        logger.samlBase64DecodingError(e);
        return null;
    }
    if (log.isDebugEnabled()) {
        String message = null;
        try {
            message = StreamUtil.readString(is, GeneralConstants.SAML_CHARSET);
        } catch (IOException e) {
            throw new RuntimeException(e);
        }
        log.debug("SAML Redirect Binding");
        log.debug(message);
        is = new ByteArrayInputStream(message.getBytes(GeneralConstants.SAML_CHARSET));
    }
    SAML2Response response = new SAML2Response();
    try {
        response.getSAML2ObjectFromStream(is);
        return response.getSamlDocumentHolder();
    } catch (Exception e) {
        logger.samlBase64DecodingError(e);
    }
    return null;
}