Constructor Detail

• AbstractSamlPolicyValidator

  public AbstractSamlPolicyValidator()

Method Detail

• isTokenRequired

  protected boolean isTokenRequired(org.apache.wss4j.policy.model.AbstractToken token,
                        org.apache.cxf.message.Message message)

  Check to see if a token is required or not.

  Overrides:

  isTokenRequired in class AbstractTokenPolicyValidator

  Parameters:

  token - the token

  message - The message

  Returns:

  true if the token is required

• checkHolderOfKey

  public boolean checkHolderOfKey(org.apache.wss4j.common.saml.SamlAssertionWrapper assertionWrapper,
                         List<org.apache.wss4j.dom.WSSecurityEngineResult> signedResults,
                         Certificate[] tlsCerts)

  Check the holder-of-key requirements against the received assertion. The subject credential of the SAML Assertion must have been used to sign some portion of the message, thus showing proof-of-possession of the private/secret key. Alternatively, the subject credential of the SAML Assertion must match a client certificate credential when 2-way TLS is used.

  Parameters:

  assertionWrapper - the SAML Assertion wrapper object

  signedResults - a list of all of the signed results

• compareCredentials

  protected boolean compareCredentials(org.apache.wss4j.common.saml.SAMLKeyInfo subjectKeyInfo,
                           List<org.apache.wss4j.dom.WSSecurityEngineResult> signedResults,
                           Certificate[] tlsCerts)

  Compare the credentials of the assertion to the credentials used in 2-way TLS or those used to verify signatures. Return true on a match

  Parameters:

  subjectKeyInfo - the SAMLKeyInfo object

  signedResults - a list of all of the signed results

  Returns:

  true if the credentials of the assertion were used to verify a signature