1 <?xml version="1.0" encoding="UTF-8"?>
3 PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
4 "DTD/xhtml1-strict.dtd">
5 <%@ taglib uri="/WEB-INF/tlds/struts-logic.tld" prefix="logic" %>
6 <%@ taglib uri="/WEB-INF/tlds/struts-bean.tld" prefix="bean" %>
8 <jsp:useBean id="logoLocation" scope="application" class="java.lang.String"/>
10 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
12 <link rel="stylesheet" type="text/css" href="main.css" />
13 <title>Shibboleth Protected Page</title>
18 <img src="<bean:write name="logoLocation" />" alt="Logo" />
19 <h1>Shibboleth Inter-institutional Access Control System</h1>
22 <p>This is an example of a page protected by the Shibboleth system.</p>
24 <p>Because of the "require valid-user" rule, any user from a trusted
25 Identity Provider is allowed access, once they establish a session using
28 <p>Here are some pieces of information I can tell about you using
29 the information Shibboleth gives me:<p>
35 java.util.Enumeration headers = request.getHeaderNames();
36 while (headers != null && headers.hasMoreElements()) {
37 h = (String)headers.nextElement();
38 if (!h.equals("Shib-Attributes") && !h.equals("Shib-Application-ID") && ((h.startsWith("Shib-") || h.equalsIgnoreCase("remote_user")))) {
40 <li><%= h %> is: <b><%= request.getHeader(h) %></b></li>
48 <p>The raw SAML attribute assertion I received is below. If it makes sense to
49 you, seek medical attention immediately.</p>
51 String encoded=request.getHeader("Shib-Attributes");
53 if (encoded != null && !encoded.equals("")) {
54 byte[] decoded=org.apache.xml.security.utils.Base64.decode(encoded.getBytes());
55 a = new String(decoded);
59 <textarea wrap="soft" rows="20" cols="80"><%= a %></textarea>