Examples with RelyingPartyRegistration org.springframework.security.saml2.provider.service.registration.RelyingPartyRegistration used on opensource projects

Example 51 with RelyingPartyRegistration

use of org.springframework.security.saml2.provider.service.registration.RelyingPartyRegistration in project spring-boot by spring-projects.

the class Saml2RelyingPartyRegistrationConfiguration method asRegistration.

private RelyingPartyRegistration asRegistration(String id, Registration properties) {
    boolean usingMetadata = StringUtils.hasText(properties.getIdentityprovider().getMetadataUri());
    Builder builder = (usingMetadata) ? RelyingPartyRegistrations.fromMetadataLocation(properties.getIdentityprovider().getMetadataUri()).registrationId(id) : RelyingPartyRegistration.withRegistrationId(id);
    builder.assertionConsumerServiceLocation(properties.getAcs().getLocation());
    builder.assertionConsumerServiceBinding(properties.getAcs().getBinding());
    builder.assertingPartyDetails(mapIdentityProvider(properties, usingMetadata));
    builder.signingX509Credentials((credentials) -> properties.getSigning().getCredentials().stream().map(this::asSigningCredential).forEach(credentials::add));
    builder.decryptionX509Credentials((credentials) -> properties.getDecryption().getCredentials().stream().map(this::asDecryptionCredential).forEach(credentials::add));
    builder.assertingPartyDetails((details) -> details.verificationX509Credentials((credentials) -> properties.getIdentityprovider().getVerification().getCredentials().stream().map(this::asVerificationCredential).forEach(credentials::add)));
    builder.entityId(properties.getEntityId());
    RelyingPartyRegistration registration = builder.build();
    boolean signRequest = registration.getAssertingPartyDetails().getWantAuthnRequestsSigned();
    validateSigningCredentials(properties, signRequest);
    return registration;
}

Example 52 with RelyingPartyRegistration

use of org.springframework.security.saml2.provider.service.registration.RelyingPartyRegistration in project spring-boot by spring-projects.

the class Saml2RelyingPartyAutoConfigurationTests method autoconfigurationWhenNoMetadataUrlOrPropertyPresentShouldUseRedirectBinding.

@Test
void autoconfigurationWhenNoMetadataUrlOrPropertyPresentShouldUseRedirectBinding() {
    this.contextRunner.withPropertyValues(getPropertyValuesWithoutSsoBinding()).run((context) -> {
        RelyingPartyRegistrationRepository repository = context.getBean(RelyingPartyRegistrationRepository.class);
        RelyingPartyRegistration registration = repository.findByRegistrationId("foo");
        assertThat(registration.getAssertingPartyDetails().getSingleSignOnServiceBinding()).isEqualTo(Saml2MessageBinding.REDIRECT);
    });
}

Example 53 with RelyingPartyRegistration

use of org.springframework.security.saml2.provider.service.registration.RelyingPartyRegistration in project spring-boot by spring-projects.

the class Saml2RelyingPartyAutoConfigurationTests method autoconfigurationWhenMetadataUrlAndPropertyPresentShouldUseBindingFromProperty.

@Test
void autoconfigurationWhenMetadataUrlAndPropertyPresentShouldUseBindingFromProperty() throws Exception {
    try (MockWebServer server = new MockWebServer()) {
        server.start();
        String metadataUrl = server.url("").toString();
        setupMockResponse(server, new ClassPathResource("saml/idp-metadata"));
        this.contextRunner.withPropertyValues(PREFIX + ".foo.identityprovider.metadata-uri=" + metadataUrl, PREFIX + ".foo.identityprovider.singlesignon.binding=redirect").run((context) -> {
            RelyingPartyRegistrationRepository repository = context.getBean(RelyingPartyRegistrationRepository.class);
            RelyingPartyRegistration registration = repository.findByRegistrationId("foo");
            assertThat(registration.getAssertingPartyDetails().getSingleSignOnServiceBinding()).isEqualTo(Saml2MessageBinding.REDIRECT);
        });
    }
}

Example 54 with RelyingPartyRegistration

use of org.springframework.security.saml2.provider.service.registration.RelyingPartyRegistration in project spring-boot by spring-projects.

the class Saml2RelyingPartyAutoConfigurationTests method autoconfigurationShouldUseBindingFromMetadataUrlIfPresent.

@Test
void autoconfigurationShouldUseBindingFromMetadataUrlIfPresent() throws Exception {
    try (MockWebServer server = new MockWebServer()) {
        server.start();
        String metadataUrl = server.url("").toString();
        setupMockResponse(server, new ClassPathResource("saml/idp-metadata"));
        this.contextRunner.withPropertyValues(PREFIX + ".foo.identityprovider.metadata-uri=" + metadataUrl).run((context) -> {
            RelyingPartyRegistrationRepository repository = context.getBean(RelyingPartyRegistrationRepository.class);
            RelyingPartyRegistration registration = repository.findByRegistrationId("foo");
            assertThat(registration.getAssertingPartyDetails().getSingleSignOnServiceBinding()).isEqualTo(Saml2MessageBinding.POST);
        });
    }
}

Example 55 with RelyingPartyRegistration

use of org.springframework.security.saml2.provider.service.registration.RelyingPartyRegistration in project spring-boot by spring-projects.

the class Saml2RelyingPartyAutoConfigurationTests method relyingPartyRegistrationRepositoryBeanShouldBeCreatedWhenPropertiesPresent.

@Test
void relyingPartyRegistrationRepositoryBeanShouldBeCreatedWhenPropertiesPresent() {
    this.contextRunner.withPropertyValues(getPropertyValues()).run((context) -> {
        RelyingPartyRegistrationRepository repository = context.getBean(RelyingPartyRegistrationRepository.class);
        RelyingPartyRegistration registration = repository.findByRegistrationId("foo");
        assertThat(registration.getAssertingPartyDetails().getSingleSignOnServiceLocation()).isEqualTo("https://simplesaml-for-spring-saml.cfapps.io/saml2/idp/SSOService.php");
        assertThat(registration.getAssertingPartyDetails().getEntityId()).isEqualTo("https://simplesaml-for-spring-saml.cfapps.io/saml2/idp/metadata.php");
        assertThat(registration.getAssertionConsumerServiceLocation()).isEqualTo("{baseUrl}/login/saml2/foo-entity-id");
        assertThat(registration.getAssertionConsumerServiceBinding()).isEqualTo(Saml2MessageBinding.REDIRECT);
        assertThat(registration.getAssertingPartyDetails().getSingleSignOnServiceBinding()).isEqualTo(Saml2MessageBinding.POST);
        assertThat(registration.getAssertingPartyDetails().getWantAuthnRequestsSigned()).isEqualTo(false);
        assertThat(registration.getSigningX509Credentials()).hasSize(1);
        assertThat(registration.getDecryptionX509Credentials()).hasSize(1);
        assertThat(registration.getAssertingPartyDetails().getVerificationX509Credentials()).isNotNull();
        assertThat(registration.getEntityId()).isEqualTo("{baseUrl}/saml2/foo-entity-id");
    });
}