Examples with Response org.opensaml.saml2.core.Response used on opensource projects

Example 26 with Response

use of org.opensaml.saml2.core.Response in project spring-security by spring-projects.

the class OpenSamlAuthenticationProviderTests method authenticateWhenOpenSAMLValidationErrorThenThrowAuthenticationException.

@Test
public void authenticateWhenOpenSAMLValidationErrorThenThrowAuthenticationException() {
    Response response = response();
    Assertion assertion = assertion();
    assertion.getSubject().getSubjectConfirmations().get(0).getSubjectConfirmationData().setNotOnOrAfter(DateTime.now().minus(Duration.standardDays(3)));
    TestOpenSamlObjects.signed(assertion, TestSaml2X509Credentials.assertingPartySigningCredential(), RELYING_PARTY_ENTITY_ID);
    response.getAssertions().add(assertion);
    Saml2AuthenticationToken token = token(response, verifying(registration()));
    assertThatExceptionOfType(Saml2AuthenticationException.class).isThrownBy(() -> this.provider.authenticate(token)).satisfies(errorOf(Saml2ErrorCodes.INVALID_ASSERTION));
}

Example 27 with Response

use of org.opensaml.saml2.core.Response in project spring-security by spring-projects.

the class OpenSamlAuthenticationProviderTests method response.

private Response response(String destination, String issuerEntityId) {
    Response response = TestOpenSamlObjects.response(destination, issuerEntityId);
    response.setIssueInstant(DateTime.now());
    return response;
}

Example 28 with Response

use of org.opensaml.saml2.core.Response in project spring-security by spring-projects.

the class OpenSamlAuthenticationProviderTests method authenticateWhenCustomAssertionElementsDecrypterThenDecryptsAssertion.

@Test
public void authenticateWhenCustomAssertionElementsDecrypterThenDecryptsAssertion() {
    Response response = response();
    Assertion assertion = assertion();
    EncryptedID id = new EncryptedIDBuilder().buildObject();
    id.setEncryptedData(new EncryptedDataBuilder().buildObject());
    assertion.getSubject().setEncryptedID(id);
    TestOpenSamlObjects.signed(assertion, TestSaml2X509Credentials.assertingPartySigningCredential(), RELYING_PARTY_ENTITY_ID);
    response.getAssertions().add(assertion);
    Saml2AuthenticationToken token = token(response, verifying(registration()));
    this.provider.setAssertionElementsDecrypter((tuple) -> {
        NameID name = new NameIDBuilder().buildObject();
        name.setValue("decrypted name");
        tuple.getAssertion().getSubject().setNameID(name);
    });
    Authentication authentication = this.provider.authenticate(token);
    assertThat(authentication.getName()).isEqualTo("decrypted name");
}

Example 29 with Response

use of org.opensaml.saml2.core.Response in project spring-security by spring-projects.

the class OpenSamlAuthenticationProviderTests method authenticateWhenEncryptedAssertionWithResponseSignatureThenItSucceeds.

@Test
public void authenticateWhenEncryptedAssertionWithResponseSignatureThenItSucceeds() {
    Response response = response();
    EncryptedAssertion encryptedAssertion = TestOpenSamlObjects.encrypted(assertion(), TestSaml2X509Credentials.assertingPartyEncryptingCredential());
    response.getEncryptedAssertions().add(encryptedAssertion);
    TestOpenSamlObjects.signed(response, TestSaml2X509Credentials.assertingPartySigningCredential(), RELYING_PARTY_ENTITY_ID);
    Saml2AuthenticationToken token = token(response, decrypting(verifying(registration())));
    this.provider.authenticate(token);
}

Example 30 with Response

use of org.opensaml.saml2.core.Response in project spring-security by spring-projects.

the class OpenSamlSigningUtilsTests method whenSigningAnObjectThenKeyInfoIsPartOfTheSignature.

@Test
public void whenSigningAnObjectThenKeyInfoIsPartOfTheSignature() throws Exception {
    Response response = TestOpenSamlObjects.response();
    OpenSamlSigningUtils.sign(response, this.registration);
    Signature signature = response.getSignature();
    assertThat(signature).isNotNull();
    assertThat(signature.getKeyInfo()).isNotNull();
}