Examples with RelyingPartyRegistration org.springframework.security.saml2.provider.service.registration.RelyingPartyRegistration used on opensource projects

Example 41 with RelyingPartyRegistration

use of org.springframework.security.saml2.provider.service.registration.RelyingPartyRegistration in project spring-security by spring-projects.

the class OpenSamlLogoutResponseResolverTests method resolvePostWhenAuthenticatedThenSuccess.

@Test
public void resolvePostWhenAuthenticatedThenSuccess() {
    RelyingPartyRegistration registration = TestRelyingPartyRegistrations.full().assertingPartyDetails((party) -> party.singleLogoutServiceBinding(Saml2MessageBinding.POST)).build();
    MockHttpServletRequest request = new MockHttpServletRequest();
    LogoutRequest logoutRequest = TestOpenSamlObjects.assertingPartyLogoutRequest(registration);
    request.setParameter(Saml2ParameterNames.SAML_REQUEST, Saml2Utils.samlEncode(OpenSamlSigningUtils.serialize(logoutRequest).getBytes()));
    request.setParameter(Saml2ParameterNames.RELAY_STATE, "abcd");
    Authentication authentication = authentication(registration);
    given(this.relyingPartyRegistrationResolver.resolve(any(), any())).willReturn(registration);
    Saml2LogoutResponse saml2LogoutResponse = this.logoutResponseResolver.resolve(request, authentication);
    assertThat(saml2LogoutResponse.getParameter(Saml2ParameterNames.SIG_ALG)).isNull();
    assertThat(saml2LogoutResponse.getParameter(Saml2ParameterNames.SIGNATURE)).isNull();
    assertThat(saml2LogoutResponse.getParameter(Saml2ParameterNames.RELAY_STATE)).isSameAs("abcd");
    Saml2MessageBinding binding = registration.getAssertingPartyDetails().getSingleLogoutServiceBinding();
    LogoutResponse logoutResponse = getLogoutResponse(saml2LogoutResponse.getSamlResponse(), binding);
    assertThat(logoutResponse.getStatus().getStatusCode().getValue()).isEqualTo(StatusCode.SUCCESS);
}

Example 42 with RelyingPartyRegistration

use of org.springframework.security.saml2.provider.service.registration.RelyingPartyRegistration in project spring-security by spring-projects.

the class Saml2LogoutResponseFilterTests method doFilterWhenSamlResponsePostThenLogout.

@Test
public void doFilterWhenSamlResponsePostThenLogout() throws Exception {
    Authentication authentication = new TestingAuthenticationToken("user", "password");
    SecurityContextHolder.getContext().setAuthentication(authentication);
    MockHttpServletRequest request = new MockHttpServletRequest("POST", "/logout/saml2/slo");
    request.setServletPath("/logout/saml2/slo");
    request.setParameter(Saml2ParameterNames.SAML_RESPONSE, "response");
    MockHttpServletResponse response = new MockHttpServletResponse();
    RelyingPartyRegistration registration = TestRelyingPartyRegistrations.full().build();
    given(this.relyingPartyRegistrationResolver.resolve(request, "registration-id")).willReturn(registration);
    Saml2LogoutRequest logoutRequest = Saml2LogoutRequest.withRelyingPartyRegistration(registration).samlRequest("request").build();
    given(this.logoutRequestRepository.removeLogoutRequest(request, response)).willReturn(logoutRequest);
    given(this.logoutResponseValidator.validate(any())).willReturn(Saml2LogoutValidatorResult.success());
    this.logoutResponseProcessingFilter.doFilterInternal(request, response, new MockFilterChain());
    verify(this.logoutResponseValidator).validate(any());
    verify(this.logoutSuccessHandler).onLogoutSuccess(any(), any(), any());
}

Example 43 with RelyingPartyRegistration

use of org.springframework.security.saml2.provider.service.registration.RelyingPartyRegistration in project spring-security by spring-projects.

the class Saml2RelyingPartyInitiatedLogoutSuccessHandlerTests method onLogoutSuccessWhenRedirectThenRedirectsToAssertingParty.

@Test
public void onLogoutSuccessWhenRedirectThenRedirectsToAssertingParty() throws Exception {
    RelyingPartyRegistration registration = TestRelyingPartyRegistrations.full().build();
    Authentication authentication = authentication(registration);
    SecurityContextHolder.getContext().setAuthentication(authentication);
    Saml2LogoutRequest logoutRequest = Saml2LogoutRequest.withRelyingPartyRegistration(registration).samlRequest("request").build();
    MockHttpServletRequest request = new MockHttpServletRequest("POST", "/saml2/logout");
    request.setServletPath("/saml2/logout");
    MockHttpServletResponse response = new MockHttpServletResponse();
    given(this.logoutRequestResolver.resolve(any(), any())).willReturn(logoutRequest);
    this.logoutRequestSuccessHandler.onLogoutSuccess(request, response, authentication);
    String content = response.getHeader("Location");
    assertThat(content).contains(Saml2ParameterNames.SAML_REQUEST);
    assertThat(content).startsWith(registration.getAssertingPartyDetails().getSingleLogoutServiceLocation());
}

Example 44 with RelyingPartyRegistration

use of org.springframework.security.saml2.provider.service.registration.RelyingPartyRegistration in project spring-security by spring-projects.

the class Saml2RelyingPartyInitiatedLogoutSuccessHandlerTests method onLogoutSuccessWhenPostThenPostsToAssertingParty.

@Test
public void onLogoutSuccessWhenPostThenPostsToAssertingParty() throws Exception {
    RelyingPartyRegistration registration = TestRelyingPartyRegistrations.full().assertingPartyDetails((party) -> party.singleLogoutServiceBinding(Saml2MessageBinding.POST)).build();
    Authentication authentication = authentication(registration);
    SecurityContextHolder.getContext().setAuthentication(authentication);
    Saml2LogoutRequest logoutRequest = Saml2LogoutRequest.withRelyingPartyRegistration(registration).samlRequest("request").build();
    MockHttpServletRequest request = new MockHttpServletRequest("POST", "/saml2/logout");
    request.setServletPath("/saml2/logout");
    MockHttpServletResponse response = new MockHttpServletResponse();
    given(this.logoutRequestResolver.resolve(any(), any())).willReturn(logoutRequest);
    this.logoutRequestSuccessHandler.onLogoutSuccess(request, response, authentication);
    String content = response.getContentAsString();
    assertThat(content).contains(Saml2ParameterNames.SAML_REQUEST);
    assertThat(content).contains(registration.getAssertingPartyDetails().getSingleLogoutServiceLocation());
}

Example 45 with RelyingPartyRegistration

use of org.springframework.security.saml2.provider.service.registration.RelyingPartyRegistration in project spring-security by spring-projects.

the class DefaultRelyingPartyRegistrationResolverTests method resolveWhenRequestContainsInvalidRegistrationIdThenNull.

@Test
public void resolveWhenRequestContainsInvalidRegistrationIdThenNull() {
    MockHttpServletRequest request = new MockHttpServletRequest();
    request.setPathInfo("/some/path/not-" + this.registration.getRegistrationId());
    RelyingPartyRegistration registration = this.resolver.convert(request);
    assertThat(registration).isNull();
}