package edu.internet2.middleware.shibboleth.idp.profile.saml2;
+import javax.servlet.ServletRequest;
+import javax.servlet.ServletResponse;
+
import org.apache.log4j.Logger;
-import org.opensaml.common.SAMLObjectBuilder;
-import org.opensaml.saml2.core.Advice;
+import org.joda.time.DateTime;
+import org.opensaml.common.binding.BindingException;
+import org.opensaml.common.binding.MessageDecoder;
+import org.opensaml.common.binding.MessageEncoder;
import org.opensaml.saml2.core.Assertion;
-import org.opensaml.saml2.core.Audience;
-import org.opensaml.saml2.core.AudienceRestriction;
-import org.opensaml.saml2.core.Conditions;
-import org.opensaml.saml2.core.Issuer;
-import org.opensaml.saml2.core.ProxyRestriction;
+import org.opensaml.saml2.core.AttributeQuery;
+import org.opensaml.saml2.core.AttributeStatement;
import org.opensaml.saml2.core.Response;
-import org.opensaml.saml2.core.Status;
-import org.opensaml.saml2.core.StatusCode;
-import org.opensaml.saml2.core.Subject;
-import org.opensaml.saml2.encryption.Encrypter;
-import org.opensaml.saml2.metadata.provider.MetadataProvider;
-import org.opensaml.xml.XMLObjectBuilder;
-import org.opensaml.xml.encryption.EncryptionException;
-import org.opensaml.xml.signature.Signature;
-import org.opensaml.xml.signature.Signer;
+import org.opensaml.saml2.metadata.provider.MetadataProviderException;
+import edu.internet2.middleware.shibboleth.common.attribute.AttributeRequestException;
import edu.internet2.middleware.shibboleth.common.attribute.SAML2AttributeAuthority;
import edu.internet2.middleware.shibboleth.common.attribute.provider.ShibbolethAttributeRequestContext;
-import edu.internet2.middleware.shibboleth.common.attribute.provider.ShibbolethSAML2AttributeAuthority;
-import edu.internet2.middleware.shibboleth.common.attribute.resolver.AttributeResolver;
+import edu.internet2.middleware.shibboleth.common.profile.ProfileException;
+import edu.internet2.middleware.shibboleth.common.profile.ProfileRequest;
+import edu.internet2.middleware.shibboleth.common.profile.ProfileResponse;
import edu.internet2.middleware.shibboleth.common.relyingparty.RelyingPartyConfiguration;
import edu.internet2.middleware.shibboleth.common.relyingparty.saml2.AttributeQueryConfiguration;
+import edu.internet2.middleware.shibboleth.idp.session.ServiceInformation;
+import edu.internet2.middleware.shibboleth.idp.session.Session;
/**
* SAML 2.0 Attribute Query profile handler.
/** Class logger. */
private static Logger log = Logger.getLogger(AbstractAttributeQuery.class);
- /** For building response. */
- private SAMLObjectBuilder<Response> responseBuilder;
-
- /** For building status. */
- private SAMLObjectBuilder<Status> statusBuilder;
-
- /** For building statuscode. */
- private SAMLObjectBuilder<StatusCode> statusCodeBuilder;
-
- /** For building assertion. */
- private SAMLObjectBuilder<Assertion> assertionBuilder;
-
- /** For building issuer. */
- private SAMLObjectBuilder<Issuer> issuerBuilder;
-
- /** For building subject. */
- private SAMLObjectBuilder<Subject> subjectBuilder;
-
- /** For building conditions. */
- private SAMLObjectBuilder<Conditions> conditionsBuilder;
-
- /** For building audience restriction. */
- private SAMLObjectBuilder<AudienceRestriction> audienceRestrictionBuilder;
-
- /** For building audience. */
- private SAMLObjectBuilder<Audience> audienceBuilder;
-
- /** For building advice. */
- private SAMLObjectBuilder<Advice> adviceBuilder;
-
- /** For building signature. */
- private XMLObjectBuilder<Signature> signatureBuilder;
-
- /** Attribute authority. */
- private SAML2AttributeAuthority attributeAuthority;
-
/**
- * This creates a new attribute query.
+ * Gets the {@link AttributeQueryConfiguration} for the service provider identified by the given ID.
*
- * @param ar <code>AttributeResolver</code>
- */
- public AbstractAttributeQuery(AttributeResolver<ShibbolethAttributeRequestContext> ar) {
- // instantiate attribute authority
- attributeAuthority = new ShibbolethSAML2AttributeAuthority(ar);
-
- // instantiate XML builders
- responseBuilder = (SAMLObjectBuilder<Response>) getBuilderFactory().getBuilder(Response.DEFAULT_ELEMENT_NAME);
- statusBuilder = (SAMLObjectBuilder<Status>) getBuilderFactory().getBuilder(Status.DEFAULT_ELEMENT_NAME);
- statusCodeBuilder = (SAMLObjectBuilder<StatusCode>) getBuilderFactory().getBuilder(
- StatusCode.DEFAULT_ELEMENT_NAME);
- issuerBuilder = (SAMLObjectBuilder<Issuer>) getBuilderFactory().getBuilder(Issuer.DEFAULT_ELEMENT_NAME);
- assertionBuilder = (SAMLObjectBuilder<Assertion>) getBuilderFactory()
- .getBuilder(Assertion.DEFAULT_ELEMENT_NAME);
- subjectBuilder = (SAMLObjectBuilder<Subject>) getBuilderFactory().getBuilder(Subject.DEFAULT_ELEMENT_NAME);
- conditionsBuilder = (SAMLObjectBuilder<Conditions>) getBuilderFactory().getBuilder(
- Conditions.DEFAULT_ELEMENT_NAME);
- audienceRestrictionBuilder = (SAMLObjectBuilder<AudienceRestriction>) getBuilderFactory().getBuilder(
- AudienceRestriction.DEFAULT_ELEMENT_NAME);
- audienceBuilder = (SAMLObjectBuilder<Audience>) getBuilderFactory().getBuilder(Audience.DEFAULT_ELEMENT_NAME);
- adviceBuilder = (SAMLObjectBuilder<Advice>) getBuilderFactory().getBuilder(Advice.DEFAULT_ELEMENT_NAME);
- signatureBuilder = (XMLObjectBuilder<Signature>) getBuilderFactory().getBuilder(Signature.DEFAULT_ELEMENT_NAME);
- }
-
- /**
- * This returns the <code>RelyingPartyConfiguration</code> for the supplied provider id.
+ * @param spId entity ID of the service provider
*
- * @param providerId <code>String</code>
- * @return <code>RelyingPartyConfiguration</code>
+ * @return configuration for the given service provider or null
*/
- protected RelyingPartyConfiguration getRelyingPartyConfiguration(String providerId) {
- return getRelyingPartyConfigurationManager().getRelyingPartyConfiguration(providerId);
+ protected AttributeQueryConfiguration getAttributeQueryConfiguration(String spId) {
+ return (AttributeQueryConfiguration) getProfileConfiguration(spId, AttributeQueryConfiguration.PROFILE_ID);
}
/**
- * This returns the <code>AttributeQueryConfiguration</code> for the supplied provider id.
+ * Gets the attribute authority for the service provider identified by the given ID.
*
- * @param providerId <code>String</code>
- * @return <code>AttributeQueryConfiguration</code>
- */
- protected AttributeQueryConfiguration getAttributeQueryConfiguration(String providerId) {
- return (AttributeQueryConfiguration) getRelyingPartyConfiguration(providerId).getProfileConfigurations().get(
- AttributeQueryConfiguration.PROFILE_ID);
- }
-
- /**
- * This returns the <code>MetadataProvider</code> for this attribute query.
+ * @param spId entity ID of the service provider
*
- * @return <code>MetadataProvider</code>
+ * @return attribute authority for the service provider or null
*/
- protected MetadataProvider getMetadataProvider() {
- return getRelyingPartyConfigurationManager().getMetadataProvider();
- }
+ protected SAML2AttributeAuthority getAttributeAuthority(String spId) {
+ AttributeQueryConfiguration config = getAttributeQueryConfiguration(spId);
+ if (config != null) {
+ return config.getAttributeAuthority();
+ }
- /**
- * This returns the <code>AttributeAuthority</code> for this attribute query.
- *
- * @return <code>SAML2AttributeAuthority</code>
- */
- protected SAML2AttributeAuthority getAttributeAuthority() {
- return attributeAuthority;
+ return null;
}
- /**
- * This builds the response for this SAML request.
- *
- * @param responseContext <code>ProfileResponseContext</code>
- * @return <code>Response</code>
- * @throws EncryptionException if an error occurs attempting to encrypt data
- */
- protected Response buildResponse(ProfileResponseContext responseContext) throws EncryptionException {
- AttributeQueryConfiguration config = getAttributeQueryConfiguration(responseContext.getProviderId());
-
- /*
- * required: samlp:Status, ID, Version, IssueInstant
- */
- Response response = responseBuilder.buildObject();
- response.setVersion(SAML_VERSION);
- response.setID(getIdGenerator().generateIdentifier());
- response.setInResponseTo(responseContext.getIssuer());
- response.setIssueInstant(responseContext.getIssueInstant());
- response.setDestination(responseContext.getDestination());
-
- response.setIssuer(buildIssuer(responseContext));
-
- /*
- * Will be hard coded in the future: if (consent != null) { response.setConsent(consent); }
- *
- */
-
- /*
- * No extensions currently exist, will be hardcorded in the future: if (extensions != null) {
- * response.setExtensions(extensions); }
- *
- */
-
- if (config.getSignAssertions()) {
- Signature s = buildSignature();
- s.setSigningKey(config.getSigningCredential().getPrivateKey());
- if (config.getEncryptAssertion()) {
- // TODO load encryption parameters
- Encrypter encrypter = null;
- Assertion a = buildAssertion(responseContext);
- a.setSignature(s);
- Signer.signObject(s);
- response.getEncryptedAssertions().add(encrypter.encrypt(a));
- } else {
- Assertion a = buildAssertion(responseContext);
- a.setSignature(s);
- Signer.signObject(s);
- response.getAssertions().add(a);
- }
- } else {
- if (config.getEncryptAssertion()) {
- // TODO load encryption parameters
- Encrypter encrypter = null;
- response.getEncryptedAssertions().add(encrypter.encrypt(buildAssertion(responseContext)));
- } else {
- response.getAssertions().add(buildAssertion(responseContext));
+ /** {@inheritDoc} */
+ public void processRequest(ProfileRequest<ServletRequest> request, ProfileResponse<ServletResponse> response)
+ throws ProfileException {
+ MessageDecoder<ServletRequest> decoder = getMessageDecoder(request);
+ populateMessageDecoder(decoder);
+ decoder.setRequest(request.getRawRequest());
+
+ // get message from the decoder
+ AttributeQuery attributeQuery = null;
+ try {
+ decoder.decode();
+ if (log.isDebugEnabled()) {
+ log.debug("decoded http servlet request");
}
+ attributeQuery = (AttributeQuery) decoder.getSAMLMessage();
+ } catch (BindingException e) {
+ log.error("Error decoding attribute query message", e);
+ throw new ProfileException("Error decoding attribute query message");
}
- response.setStatus(buildStatus(StatusCode.SUCCESS_URI));
- return response;
- }
- /**
- * This builds the status response for this SAML request.
- *
- * @param statusCodeUri <code>String</code> to set
- * @return <code>Status</code>
- */
- private Status buildStatus(String statusCodeUri) {
- Status status = statusBuilder.buildObject();
- StatusCode statusCode = statusCodeBuilder.buildObject();
- statusCode.setValue(statusCodeUri);
- status.setStatusCode(statusCode);
- return status;
- }
+ String spEntityId = attributeQuery.getIssuer().getValue();
+ String userSessionId = getUserSessionId(request);
+ Session userSession = getSessionManager().getSession(userSessionId);
+ RelyingPartyConfiguration rpConfig = getRelyingPartyConfiguration(spEntityId);
+ AttributeQueryConfiguration profileConfig = getAttributeQueryConfiguration(spEntityId);
+ DateTime issueInstant = new DateTime();
+
+ ShibbolethAttributeRequestContext attributeRequestContext = buildAttributeRequestContext(spEntityId,
+ userSession, request);
+
+ // resolve attributes with the attribute authority
+ AttributeStatement attributeStatement = null;
+ try {
+ SAML2AttributeAuthority attributeAuthority = profileConfig.getAttributeAuthority();
+ attributeStatement = attributeAuthority.performAttributeQuery(attributeRequestContext);
+ } catch (AttributeRequestException e) {
+ log.error("Error resolving attributes", e);
+ throw new ProfileException("Error resolving attributes", e);
+ }
- /**
- * This builds the assertion for this SAML request.
- *
- * @param responseContext <code>ProfileResponseContext</code>
- * @return <code>Assertion</code>
- * @throws EncryptionException if an error occurs attempting to encrypt data
- */
- private Assertion buildAssertion(ProfileResponseContext responseContext) throws EncryptionException {
- AttributeQueryConfiguration config = getAttributeQueryConfiguration(responseContext.getProviderId());
+ // construct attribute response
+ Response samlResponse = getResponseBuilder().buildObject();
+ populateStatusResponse(samlResponse, issueInstant, attributeQuery, rpConfig);
- /*
- * required: saml:Issuer, ID, Version, IssueInstant
- */
- Assertion assertion = assertionBuilder.buildObject();
- assertion.setID(getIdGenerator().generateIdentifier());
- assertion.setIssueInstant(responseContext.getIssueInstant());
- assertion.setVersion(SAML_VERSION);
- assertion.setIssuer(buildIssuer(responseContext));
+ Assertion assertion = buildAssertion(issueInstant, rpConfig, profileConfig);
+ assertion.getAttributeStatements().add(attributeStatement);
+ samlResponse.getAssertions().add(assertion);
- // build subject
- assertion.setSubject(buildSubject(responseContext, config.getEncryptNameID()));
- // build conditions
- assertion.setConditions(buildConditions(responseContext));
- // build advice
- assertion.setAdvice(buildAdvice());
- // add attribute statement
- assertion.getAttributeStatements().add(responseContext.getAttributeStatement());
- return assertion;
- }
+ signAssertion(assertion, rpConfig, profileConfig);
+ signResponse(samlResponse, rpConfig, profileConfig);
- /**
- * This builds the issuer response for this SAML request.
- *
- * @param responseContext <code>ProfileResponseContext</code>
- * @return <code>Issuer</code>
- */
- private Issuer buildIssuer(ProfileResponseContext responseContext) {
- RelyingPartyConfiguration relyingPartyConfiguration = getRelyingPartyConfiguration(responseContext
- .getProviderId());
- Issuer issuer = issuerBuilder.buildObject();
- issuer.setValue(relyingPartyConfiguration.getProviderId());
- return issuer;
- }
+ MessageEncoder<ServletResponse> messageEncoder = getMessageEncoder(response);
+ populateMessageEncoder(messageEncoder);
+ messageEncoder.setRelyingParty(spEntityId);
+ messageEncoder.setSAMLMessage(samlResponse);
- /**
- * This builds the subject for this SAML request.
- *
- * @param responseContext <code>ProfileResponseContext</code>
- * @param encryptNameId <code>boolean</code>
- * @return <code>Subject</code>
- * @throws EncryptionException if encryption of the name id fails
- */
- private Subject buildSubject(ProfileResponseContext responseContext, boolean encryptNameId)
- throws EncryptionException {
- Subject subject = subjectBuilder.buildObject();
- if (encryptNameId) {
- // TODO load encryption parameters
- Encrypter encrypter = null;
- subject.setEncryptedID(encrypter.encrypt(responseContext.getMessage().getSubject().getNameID()));
- } else {
- subject.setNameID(responseContext.getMessage().getSubject().getNameID());
- // TODO when is subject.setBaseID(newBaseID) called, if ever?
+ try {
+ messageEncoder.encode();
+ } catch (BindingException e) {
+ // TODO
}
- return subject;
}
/**
- * This builds the conditions for this SAML request.
+ * Builds an attribute request context for this request.
*
- * @param responseContext <code>ProfileResponseContext</code>
- * @return <code>Conditions</code>
- */
- private Conditions buildConditions(ProfileResponseContext responseContext) {
- AttributeQueryConfiguration config = getAttributeQueryConfiguration(responseContext.getProviderId());
-
- Conditions conditions = conditionsBuilder.buildObject();
- conditions.setNotBefore(responseContext.getIssueInstant());
- conditions.setNotOnOrAfter(responseContext.getIssueInstant().plus(config.getAssertionLifetime()));
-
- // add audience restrictions
- AudienceRestriction audienceRestriction = audienceRestrictionBuilder.buildObject();
- for (String s : config.getAssertionAudiences()) {
- Audience audience = audienceBuilder.buildObject();
- audience.setAudienceURI(s);
- audienceRestriction.getAudiences().add(audience);
- }
- conditions.getAudienceRestrictions().add(audienceRestriction);
-
- // add proxy restrictions
- ProxyRestriction proxyRestriction = conditions.getProxyRestriction();
- for (String s : config.getProxyAudiences()) {
- Audience audience = audienceBuilder.buildObject();
- audience.setAudienceURI(s);
- proxyRestriction.getAudiences().add(audience);
- }
- proxyRestriction.setProxyCount(new Integer(config.getProxyCount()));
-
- /*
- * OneTimeUse and additional conditions not supported yet
- */
-
- return conditions;
- }
-
- /**
- * This builds the advice for this SAML request.
+ * @param spEntityId entity ID of the service provider
+ * @param userSession current user's session
+ * @param request current request
*
- * @return <code>Advice</code>
- */
- private Advice buildAdvice() {
- /*
- * Advice not supported at this time
- */
- Advice advice = adviceBuilder.buildObject();
- return advice;
- }
-
- /**
- * This builds a signature for this SAML request.
+ * @return the attribute request context
*
- * @return <code>Signature</code>
+ * @throws ProfileException thrown if the metadata information can not be located for the given service provider
*/
- private Signature buildSignature() {
- Signature signature = signatureBuilder.buildObject(Signature.DEFAULT_ELEMENT_NAME);
- return signature;
+ protected ShibbolethAttributeRequestContext buildAttributeRequestContext(String spEntityId, Session userSession,
+ ProfileRequest<ServletRequest> request) throws ProfileException {
+ ServiceInformation spInformation = userSession.getServiceInformation(spEntityId);
+ ShibbolethAttributeRequestContext requestContext = null;
+ try {
+ requestContext = new ShibbolethAttributeRequestContext(getMetadataProvider(),
+ getRelyingPartyConfiguration(spEntityId));
+ requestContext.setPrincipalName(userSession.getPrincipalID());
+ requestContext.setPrincipalAuthenticationMethod(spInformation.getAuthenticationMethod()
+ .getAuthenticationMethod());
+ requestContext.setRequest(request.getRawRequest());
+ return requestContext;
+ } catch (MetadataProviderException e) {
+ log.error("Error creating ShibbolethAttributeRequestContext", e);
+ throw new ProfileException("Error retrieving metadata", e);
+ }
}
}
\ No newline at end of file
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletRequest;
-import javax.servlet.http.HttpServletResponse;
-import org.apache.log4j.Logger;
-import org.opensaml.common.binding.BindingException;
+import org.opensaml.common.binding.MessageDecoder;
+import org.opensaml.common.binding.MessageEncoder;
import org.opensaml.saml2.binding.HTTPSOAP11Decoder;
import org.opensaml.saml2.binding.HTTPSOAP11Encoder;
-import org.opensaml.saml2.core.AttributeStatement;
-import org.opensaml.saml2.core.Response;
-import org.opensaml.saml2.metadata.provider.MetadataProviderException;
-import org.opensaml.xml.encryption.EncryptionException;
-import edu.internet2.middleware.shibboleth.common.attribute.AttributeRequestException;
-import edu.internet2.middleware.shibboleth.common.attribute.provider.ShibbolethAttributeRequestContext;
-import edu.internet2.middleware.shibboleth.common.attribute.resolver.AttributeResolver;
import edu.internet2.middleware.shibboleth.common.profile.ProfileException;
import edu.internet2.middleware.shibboleth.common.profile.ProfileRequest;
import edu.internet2.middleware.shibboleth.common.profile.ProfileResponse;
-import edu.internet2.middleware.shibboleth.idp.session.ServiceInformation;
+import edu.internet2.middleware.shibboleth.idp.session.Session;
/**
* SAML 2.0 SOAP Attribute Query profile handler.
*/
public class HTTPSOAPAttributeQuery extends AbstractAttributeQuery {
- /** Class logger. */
- private static Logger log = Logger.getLogger(HTTPSOAPAttributeQuery.class);
-
- /**
- * This creates a new http soap attribute query.
- *
- * @param ar <code>AttributeResolver</code>
- */
- public HTTPSOAPAttributeQuery(AttributeResolver<ShibbolethAttributeRequestContext> ar) {
- super(ar);
+ /** Constructor. */
+ public HTTPSOAPAttributeQuery() {
+ super();
}
/** {@inheritDoc} */
- public void processRequest(ProfileRequest<ServletRequest> request, ProfileResponse<ServletResponse> response)
+ protected MessageDecoder<ServletRequest> getMessageDecoder(ProfileRequest<ServletRequest> request)
throws ProfileException {
- if (log.isDebugEnabled()) {
- log.debug("begin processRequest");
- }
-
- // check that request/response is of proper type
- if (!(request.getRawRequest() instanceof HttpServletRequest)) {
- throw new ProfileException(HTTPSOAPAttributeQuery.class.getName() + " can only process requests of type "
- + HttpServletRequest.class.getName());
- } else if (!(response.getRawResponse() instanceof HttpServletResponse)) {
- throw new ProfileException(HTTPSOAPAttributeQuery.class.getName() + " can only process responses of type "
- + HttpServletResponse.class.getName());
- }
-
- // create decoder
- HTTPSOAP11Decoder decoder = new HTTPSOAP11Decoder();
- decoder.setMetadataProvider(getMetadataProvider());
- // TODO decoder.setSecurityPolicy(policy);
- // TODO decoder.setTrustEngine(newEngine);
-
- // get message from the decoder
- org.opensaml.saml2.core.AttributeQuery message = null;
- try {
- decoder.setRequest((HttpServletRequest) request.getRawRequest());
- decoder.decode();
- if (log.isDebugEnabled()) {
- log.debug("decoded http servlet request");
- }
- message = (org.opensaml.saml2.core.AttributeQuery) decoder.getSAMLMessage();
- } catch (BindingException e) {
- log.error("Error decoding attribute query message", e);
- throw new ProfileException("Error decoding attribute query message");
- }
-
- // get the provider id from the message issuer
- String providerId = message.getIssuer().getSPProvidedID();
-
- // TODO get user data from the session, need sessionId
- // ?? getSessionManager().getSession(null).getServicesInformation().get(0);
- ServiceInformation serviceInformation = null;
- String principalName = serviceInformation.getSubjectNameID().getSPProvidedID();
- String authenticationMethod = serviceInformation.getAuthenticationMethod().getAuthenticationMethod();
-
- // create attribute request for the attribute authority
- ShibbolethAttributeRequestContext requestContext = null;
- try {
- requestContext = new ShibbolethAttributeRequestContext(getMetadataProvider(),
- getRelyingPartyConfiguration(providerId));
- requestContext.setPrincipalName(principalName);
- requestContext.setPrincipalAuthenticationMethod(authenticationMethod);
- requestContext.setRequest(request.getRawRequest());
- } catch (MetadataProviderException e) {
- log.error("Error creating ShibbolethAttributeRequestContext", e);
- throw new ProfileException("Error retrieving metadata", e);
- }
+ MessageDecoder<ServletRequest> decoder = new HTTPSOAP11Decoder();
+ decoder.setRequest(request.getRawRequest());
+ return decoder;
+ }
- // resolve attributes with the attribute authority
- AttributeStatement statement = null;
- try {
- statement = getAttributeAuthority().performAttributeQuery(requestContext);
- } catch (AttributeRequestException e) {
- log.error("Error resolving attributes", e);
- throw new ProfileException("Error resolving attributes", e);
- }
+ /** {@inheritDoc} */
+ protected MessageEncoder<ServletResponse> getMessageEncoder(ProfileResponse<ServletResponse> response)
+ throws ProfileException {
+ MessageEncoder<ServletResponse> encoder = new HTTPSOAP11Encoder();
+ encoder.setResponse(response.getRawResponse());
+ return encoder;
+ }
- // construct attribute response
- Response samlResponse = null;
- try {
- ProfileResponseContext profileResponse = new ProfileResponseContext(request, message);
- profileResponse.setIssuer(decoder.getSecurityPolicy().getIssuer().toString());
- profileResponse.setDestination(request.getRawRequest().getRemoteHost());
- profileResponse.setAttributeStatement(statement);
- samlResponse = buildResponse(profileResponse);
- } catch (EncryptionException e) {
- log.error("Error encrypting SAML response", e);
- throw new ProfileException("Error encrypting SAML response", e);
- }
- if (log.isDebugEnabled()) {
- log.debug("built saml2 response: " + samlResponse);
+ /** {@inheritDoc} */
+ protected String getUserSessionId(ProfileRequest<ServletRequest> request) {
+ HttpServletRequest rawRequest = (HttpServletRequest) request.getRawRequest();
+ if (rawRequest != null) {
+ return (String) rawRequest.getSession().getAttribute(Session.HTTP_SESSION_BINDING_ATTRIBUTE);
}
- // encode response
- try {
- HTTPSOAP11Encoder encoder = new HTTPSOAP11Encoder();
- encoder.setMetadataProvider(getMetadataProvider());
- encoder.setRelyingParty(getRelyingPartyConfiguration(providerId).getRelyingPartyId());
- encoder.setResponse((HttpServletResponse) response.getRawResponse());
- encoder.setSAMLMessage(samlResponse);
- encoder.encode();
- } catch (BindingException e) {
- log.error("Error encoding attribute query response", e);
- throw new ProfileException("Error encoding attribute query response", e);
- }
+ return null;
}
-}
+}
\ No newline at end of file
projects / java-idp.git / commitdiff