Examples with Response org.opensaml.saml2.core.Response used on opensource projects

Example 16 with Response

use of org.opensaml.saml2.core.Response in project spring-security by spring-projects.

the class OpenSamlAuthenticationProviderTests method authenticateWhenInvalidSignatureOnAssertionThenThrowAuthenticationException.

@Test
public void authenticateWhenInvalidSignatureOnAssertionThenThrowAuthenticationException() {
    Response response = response();
    response.getAssertions().add(assertion());
    Saml2AuthenticationToken token = token(response, verifying(registration()));
    assertThatExceptionOfType(Saml2AuthenticationException.class).isThrownBy(() -> this.provider.authenticate(token)).satisfies(errorOf(Saml2ErrorCodes.INVALID_SIGNATURE));
}

Example 17 with Response

use of org.opensaml.saml2.core.Response in project spring-security by spring-projects.

the class OpenSamlAuthenticationProviderTests method authenticateWhenResponseAuthenticationConverterConfiguredThenUses.

@Test
public void authenticateWhenResponseAuthenticationConverterConfiguredThenUses() {
    Converter<ResponseToken, Saml2Authentication> authenticationConverter = mock(Converter.class);
    OpenSamlAuthenticationProvider provider = new OpenSamlAuthenticationProvider();
    provider.setResponseAuthenticationConverter(authenticationConverter);
    Response response = TestOpenSamlObjects.signedResponseWithOneAssertion();
    Saml2AuthenticationToken token = token(response, verifying(registration()));
    provider.authenticate(token);
    verify(authenticationConverter).convert(any());
}

Example 18 with Response

use of org.opensaml.saml2.core.Response in project spring-security by spring-projects.

the class OpenSamlAuthenticationProviderTests method authenticateWhenEncryptedNameIdWithSignatureThenItSucceeds.

@Test
public void authenticateWhenEncryptedNameIdWithSignatureThenItSucceeds() {
    Response response = response();
    Assertion assertion = assertion();
    NameID nameId = assertion.getSubject().getNameID();
    EncryptedID encryptedID = TestOpenSamlObjects.encrypted(nameId, TestSaml2X509Credentials.assertingPartyEncryptingCredential());
    assertion.getSubject().setNameID(null);
    assertion.getSubject().setEncryptedID(encryptedID);
    response.getAssertions().add(assertion);
    TestOpenSamlObjects.signed(assertion, TestSaml2X509Credentials.assertingPartySigningCredential(), RELYING_PARTY_ENTITY_ID);
    Saml2AuthenticationToken token = token(response, decrypting(verifying(registration())));
    this.provider.authenticate(token);
}

Example 19 with Response

use of org.opensaml.saml2.core.Response in project spring-security by spring-projects.

the class OpenSamlAuthenticationProviderTests method authenticateWhenInvalidDestinationThenThrowAuthenticationException.

@Test
public void authenticateWhenInvalidDestinationThenThrowAuthenticationException() {
    Response response = response(DESTINATION + "invalid", ASSERTING_PARTY_ENTITY_ID);
    response.getAssertions().add(assertion());
    TestOpenSamlObjects.signed(response, TestSaml2X509Credentials.assertingPartySigningCredential(), RELYING_PARTY_ENTITY_ID);
    Saml2AuthenticationToken token = token(response, verifying(registration()));
    assertThatExceptionOfType(Saml2AuthenticationException.class).isThrownBy(() -> this.provider.authenticate(token)).satisfies(errorOf(Saml2ErrorCodes.INVALID_DESTINATION));
}

Example 20 with Response

use of org.opensaml.saml2.core.Response in project spring-security by spring-projects.

the class OpenSamlAuthenticationProviderTests method authenticateWhenUsernameMissingThenThrowAuthenticationException.

@Test
public void authenticateWhenUsernameMissingThenThrowAuthenticationException() {
    Response response = response();
    Assertion assertion = assertion();
    assertion.getSubject().getNameID().setValue(null);
    TestOpenSamlObjects.signed(assertion, TestSaml2X509Credentials.assertingPartySigningCredential(), RELYING_PARTY_ENTITY_ID);
    response.getAssertions().add(assertion);
    Saml2AuthenticationToken token = token(response, verifying(registration()));
    assertThatExceptionOfType(Saml2AuthenticationException.class).isThrownBy(() -> this.provider.authenticate(token)).satisfies(errorOf(Saml2ErrorCodes.SUBJECT_NOT_FOUND));
}