use of uk.gov.ida.common.shared.security.X509CertificateFactory in project verify-hub by alphagov.
the class SamlSoapProxyModule method configure.
@Override
protected void configure() {
bind(TrustStoreConfiguration.class).to(SamlSoapProxyConfiguration.class);
bind(EventSinkProxy.class).to(EventSinkHttpProxy.class);
bind(PublicKeyInputStreamFactory.class).toInstance(new PublicKeyFileInputStreamFactory());
bind(InternalPublicKeyStore.class).to(HubMetadataPublicKeyStore.class);
bind(RestfulClientConfiguration.class).to(SamlSoapProxyConfiguration.class);
bind(Client.class).toProvider(DefaultClientProvider.class).asEagerSingleton();
bind(new TypeLiteral<ConfigurationFactoryFactory<SupportedMsaVersions>>() {
}).toInstance(new DefaultConfigurationFactoryFactory<SupportedMsaVersions>() {
});
bind(new TypeLiteral<SupportedMsaVersionsRepository>() {
}).asEagerSingleton();
bind(SupportedMsaVersionsBootstrap.class).asEagerSingleton();
bind(SupportedMsaVersionsLoader.class).asEagerSingleton();
bind(MetadataRefreshTask.class).asEagerSingleton();
bind(ConfigServiceKeyStore.class).asEagerSingleton();
bind(ExpiredCertificateMetadataFilter.class).toInstance(new ExpiredCertificateMetadataFilter());
bind(UrlConfigurationSourceProvider.class).toInstance(new UrlConfigurationSourceProvider());
bind(TrustStoreForCertificateProvider.class);
bind(JsonResponseProcessor.class);
bind(ObjectMapper.class).toInstance(new ObjectMapper());
bind(X509CertificateFactory.class).toInstance(new X509CertificateFactory());
bind(CertificateChainValidator.class);
bind(CertificatesConfigProxy.class);
bind(PKIXParametersProvider.class).toInstance(new PKIXParametersProvider());
bind(KeyStoreCache.class);
bind(KeyStoreLoader.class).toInstance(new KeyStoreLoader());
bind(MatchingServiceHealthCheckHandler.class);
bind(MatchingServiceHealthChecker.class);
bind(MatchingServiceConfigProxy.class);
bind(MatchingServiceHealthCheckClient.class);
bind(HealthCheckEventLogger.class);
bind(SamlEngineProxy.class);
bind(HealthCheckSoapRequestClient.class);
bind(AttributeQueryRequestRunnableFactory.class);
bind(ExecuteAttributeQueryRequest.class);
bind(AttributeQueryRequestClient.class);
bind(ProtectiveMonitoringLogger.class).toInstance(new ProtectiveMonitoringLogger());
bind(SoapRequestClient.class);
bind(HubMatchingServiceResponseReceiverProxy.class);
bind(ExternalCommunicationEventLogger.class);
bind(SoapMessageManager.class).toInstance(new SoapMessageManager());
bind(IpAddressResolver.class).toInstance(new IpAddressResolver());
bind(TimeoutEvaluator.class).toInstance(new TimeoutEvaluator());
bind(MetadataHealthCheckRegistry.class).asEagerSingleton();
}
use of uk.gov.ida.common.shared.security.X509CertificateFactory in project verify-hub by alphagov.
the class ExecuteAttributeQueryRequestTest method run_shouldThrowCertChainValidationExceptionOnResponse.
@Test
public void run_shouldThrowCertChainValidationExceptionOnResponse() throws Exception {
when(attributeQueryRequestClient.sendQuery(any(Element.class), anyString(), any(SessionId.class), any(URI.class))).thenReturn(matchingServiceResponse);
final BasicX509Credential x509Credential = new BasicX509Credential(new X509CertificateFactory().createCertificate(UNCHAINED_PUBLIC_CERT), new PrivateKeyFactory().createPrivateKey(Base64.decode(UNCHAINED_PRIVATE_KEY.getBytes())));
Response response = aResponse().withSigningCredential(x509Credential).withIssuer(anIssuer().withIssuerId("issuer-id").build()).build();
when(elementToResponseTransformer.apply(matchingServiceResponse)).thenReturn(response);
executeAttributeQueryRequest.execute(sessionId, attributeQueryContainerDto);
verify(matchingResponseSignatureValidator).validate(response, AttributeAuthorityDescriptor.DEFAULT_ELEMENT_NAME);
}
Aggregations