Examples with EntityDescriptor org.opensaml.saml2.metadata.EntityDescriptor used on opensource projects

Example 11 with EntityDescriptor

use of org.opensaml.saml2.metadata.EntityDescriptor in project pac4j by pac4j.

the class SAML2ContextProvider method addContext.

protected final void addContext(final SAML2MetadataResolver entityId, final BaseContext parentContext, final QName elementName) {
    final EntityDescriptor entityDescriptor;
    final RoleDescriptor roleDescriptor;
    try {
        final CriteriaSet set = new CriteriaSet();
        set.add(new EntityIdCriterion(entityId.getEntityId()));
        entityDescriptor = this.metadata.resolveSingle(set);
        if (entityDescriptor == null) {
            throw new SAMLException("Cannot find entity " + entityId + " in metadata provider");
        }
        final List<RoleDescriptor> list = entityDescriptor.getRoleDescriptors(elementName, SAMLConstants.SAML20P_NS);
        roleDescriptor = CommonHelper.isNotEmpty(list) ? list.get(0) : null;
        if (roleDescriptor == null) {
            throw new SAMLException("Cannot find entity " + entityId + " or role " + elementName + " in metadata provider");
        }
    } catch (final ResolverException e) {
        throw new SAMLException("An error occured while getting IDP descriptors", e);
    }
    final SAMLMetadataContext mdCtx = parentContext.getSubcontext(SAMLMetadataContext.class, true);
    mdCtx.setEntityDescriptor(entityDescriptor);
    mdCtx.setRoleDescriptor(roleDescriptor);
}

Example 12 with EntityDescriptor

use of org.opensaml.saml2.metadata.EntityDescriptor in project spring-security by spring-projects.

the class OpenSamlMetadataAssertingPartyDetailsConverterTests method readWhenDescriptorFullySpecifiedThenConfigures.

@Test
public void readWhenDescriptorFullySpecifiedThenConfigures() throws Exception {
    String payload = String.format(ENTITY_DESCRIPTOR_TEMPLATE, String.format(IDP_SSO_DESCRIPTOR_TEMPLATE, String.format(KEY_DESCRIPTOR_TEMPLATE, "use=\"signing\"") + String.format(KEY_DESCRIPTOR_TEMPLATE, "use=\"encryption\"") + EXTENSIONS_TEMPLATE + String.format(SINGLE_SIGN_ON_SERVICE_TEMPLATE)));
    InputStream inputStream = new ByteArrayInputStream(payload.getBytes());
    RelyingPartyRegistration.AssertingPartyDetails details = this.converter.convert(inputStream).iterator().next().build();
    assertThat(details.getWantAuthnRequestsSigned()).isFalse();
    assertThat(details.getSigningAlgorithms()).containsExactly(SignatureConstants.ALGO_ID_DIGEST_SHA512);
    assertThat(details.getSingleSignOnServiceLocation()).isEqualTo("sso-location");
    assertThat(details.getSingleSignOnServiceBinding()).isEqualTo(Saml2MessageBinding.REDIRECT);
    assertThat(details.getEntityId()).isEqualTo("entity-id");
    assertThat(details.getVerificationX509Credentials()).hasSize(1);
    assertThat(details.getVerificationX509Credentials().iterator().next().getCertificate()).isEqualTo(x509Certificate(CERTIFICATE));
    assertThat(details.getEncryptionX509Credentials()).hasSize(1);
    assertThat(details.getEncryptionX509Credentials().iterator().next().getCertificate()).isEqualTo(x509Certificate(CERTIFICATE));
    assertThat(details).isInstanceOf(OpenSamlAssertingPartyDetails.class);
    OpenSamlAssertingPartyDetails openSamlDetails = (OpenSamlAssertingPartyDetails) details;
    EntityDescriptor entityDescriptor = openSamlDetails.getEntityDescriptor();
    assertThat(entityDescriptor).isNotNull();
    assertThat(entityDescriptor.getEntityID()).isEqualTo(details.getEntityId());
}

Example 13 with EntityDescriptor

use of org.opensaml.saml2.metadata.EntityDescriptor in project spring-security by spring-projects.

the class OpenSamlMetadataResolver method resolve.

@Override
public String resolve(RelyingPartyRegistration relyingPartyRegistration) {
    EntityDescriptor entityDescriptor = build(EntityDescriptor.ELEMENT_QNAME);
    entityDescriptor.setEntityID(relyingPartyRegistration.getEntityId());
    SPSSODescriptor spSsoDescriptor = buildSpSsoDescriptor(relyingPartyRegistration);
    entityDescriptor.getRoleDescriptors(SPSSODescriptor.DEFAULT_ELEMENT_NAME).add(spSsoDescriptor);
    return serialize(entityDescriptor);
}

Example 14 with EntityDescriptor

use of org.opensaml.saml2.metadata.EntityDescriptor in project spring-security by spring-projects.

the class OpenSamlMetadataAssertingPartyDetailsConverter method convert.

Collection<RelyingPartyRegistration.AssertingPartyDetails.Builder> convert(InputStream inputStream) {
    List<RelyingPartyRegistration.AssertingPartyDetails.Builder> builders = new ArrayList<>();
    XMLObject xmlObject = xmlObject(inputStream);
    if (xmlObject instanceof EntitiesDescriptor) {
        EntitiesDescriptor descriptors = (EntitiesDescriptor) xmlObject;
        for (EntityDescriptor descriptor : descriptors.getEntityDescriptors()) {
            builders.add(convert(descriptor));
        }
        return builders;
    }
    if (xmlObject instanceof EntityDescriptor) {
        EntityDescriptor descriptor = (EntityDescriptor) xmlObject;
        return Arrays.asList(convert(descriptor));
    }
    throw new Saml2Exception("Unsupported element of type " + xmlObject.getClass());
}

Example 15 with EntityDescriptor

use of org.opensaml.saml2.metadata.EntityDescriptor in project spring-security by spring-projects.

the class OpenSamlMetadataAssertingPartyDetailsConverter method signingMethods.

private List<SigningMethod> signingMethods(IDPSSODescriptor idpssoDescriptor) {
    Extensions extensions = idpssoDescriptor.getExtensions();
    List<SigningMethod> result = signingMethods(extensions);
    if (!result.isEmpty()) {
        return result;
    }
    EntityDescriptor descriptor = (EntityDescriptor) idpssoDescriptor.getParent();
    extensions = descriptor.getExtensions();
    return signingMethods(extensions);
}