Examples with SignatureValidationConfigurationCriterion org.opensaml.xmlsec.criterion.SignatureValidationConfigurationCriterion used on opensource projects

Example 1 with SignatureValidationConfigurationCriterion

use of org.opensaml.xmlsec.criterion.SignatureValidationConfigurationCriterion in project cas by apereo.

the class SamlObjectSignatureValidator method getSigningCredential.

private Credential getSigningCredential(final RoleDescriptorResolver resolver, final RequestAbstractType profileRequest) {
    try {
        final MetadataCredentialResolver kekCredentialResolver = new MetadataCredentialResolver();
        final SignatureValidationConfiguration config = getSignatureValidationConfiguration();
        kekCredentialResolver.setRoleDescriptorResolver(resolver);
        kekCredentialResolver.setKeyInfoCredentialResolver(DefaultSecurityConfigurationBootstrap.buildBasicInlineKeyInfoCredentialResolver());
        kekCredentialResolver.initialize();
        final CriteriaSet criteriaSet = new CriteriaSet();
        criteriaSet.add(new SignatureValidationConfigurationCriterion(config));
        criteriaSet.add(new UsageCriterion(UsageType.SIGNING));
        buildEntityCriteriaForSigningCredential(profileRequest, criteriaSet);
        return kekCredentialResolver.resolveSingle(criteriaSet);
    } catch (final Exception e) {
        throw Throwables.propagate(e);
    }
}