Package org.gatein.sso.saml.plugin.valve

Class AbstractSAML11SPRedirectFormAuthenticator

java.lang.Object

org.apache.catalina.util.LifecycleBase

org.apache.catalina.util.LifecycleMBeanBase

org.apache.catalina.valves.ValveBase

org.apache.catalina.authenticator.AuthenticatorBase

org.apache.catalina.authenticator.FormAuthenticator

org.gatein.sso.saml.plugin.valve.BaseFormAuthenticator

org.gatein.sso.saml.plugin.valve.AbstractSPFormAuthenticator

org.gatein.sso.saml.plugin.valve.AbstractSAML11SPRedirectFormAuthenticator

All Implemented Interfaces:

MBeanRegistration, javax.security.auth.message.config.RegistrationListener, org.apache.catalina.Authenticator, org.apache.catalina.Contained, org.apache.catalina.JmxEnabled, org.apache.catalina.Lifecycle, org.apache.catalina.Valve

public abstract class AbstractSAML11SPRedirectFormAuthenticator
extends AbstractSPFormAuthenticator

Authenticator for SAML 1.1 processing at the Service Provider forked from org.picketlink.identity.federation.bindings.tomcat.sp.AbstractSAML11SPRedirectFormAuthenticator and made compatible with Tomcat 8.5 since picketlink doesn't provide such a support

Nested Class Summary

Nested classes/interfaces inherited from class org.apache.catalina.authenticator.AuthenticatorBase

org.apache.catalina.authenticator.AuthenticatorBase.AllowCorsPreflight

Nested classes/interfaces inherited from interface org.apache.catalina.Lifecycle

org.apache.catalina.Lifecycle.SingleUse

Field Summary

Fields inherited from class org.gatein.sso.saml.plugin.valve.AbstractSPFormAuthenticator

jbossEnv

Fields inherited from class org.gatein.sso.saml.plugin.valve.BaseFormAuthenticator

auditHelper, canonicalizationMethod, chain, chainConfigOptions, chainLock, configFile, configProvider, enableAudit, identityURL, idpAddress, idpCertificate, issuerID, keyManager, logger, picketLinkConfiguration, samlHandlerChainClass, saveRestoreRequest, serviceURL, spConfiguration, timer, timerInterval

Fields inherited from class org.apache.catalina.authenticator.FormAuthenticator

characterEncoding, landingPage

Fields inherited from class org.apache.catalina.authenticator.AuthenticatorBase

alwaysUseSession, AUTH_HEADER_NAME, cache, changeSessionIdOnAuthentication, context, disableProxyCaching, jaspicCallbackHandlerClass, REALM_NAME, securePagesWithPragma, secureRandomAlgorithm, secureRandomClass, secureRandomProvider, sendAuthInfoResponseHeaders, sessionIdGenerator, sm, sso

Fields inherited from class org.apache.catalina.valves.ValveBase

asyncSupported, container, containerLog, next

Fields inherited from class org.apache.catalina.util.LifecycleMBeanBase

mserver

Fields inherited from interface org.apache.catalina.Lifecycle

AFTER_DESTROY_EVENT, AFTER_INIT_EVENT, AFTER_START_EVENT, AFTER_STOP_EVENT, BEFORE_DESTROY_EVENT, BEFORE_INIT_EVENT, BEFORE_START_EVENT, BEFORE_STOP_EVENT, CONFIGURE_START_EVENT, CONFIGURE_STOP_EVENT, PERIODIC_EVENT, START_EVENT, STOP_EVENT

Constructor Summary

Constructors

Constructor	Description
AbstractSAML11SPRedirectFormAuthenticator()

Method Summary

Modifier and Type	Method	Description
boolean	authenticate(org.apache.catalina.connector.Request request, javax.servlet.http.HttpServletResponse response)	Authenticate the request
boolean	authenticate(org.apache.catalina.connector.Request request, javax.servlet.http.HttpServletResponse response, org.apache.tomcat.util.descriptor.web.LoginConfig loginConfig)
static boolean	handleSAML11UnsolicitedResponse(org.apache.catalina.connector.Request request, javax.servlet.http.HttpServletResponse response, org.apache.tomcat.util.descriptor.web.LoginConfig loginConfig, AbstractSPFormAuthenticator formAuthenticator)
protected void	startPicketLink()

Methods inherited from class org.gatein.sso.saml.plugin.valve.AbstractSPFormAuthenticator

doAuthenticate, getBinding, getContext, getContextPath, getGenericPrincipal, initKeyProvider, isHttpPostBinding, isPOSTBindingResponse, restoreRequest, sendHttpPostBindingRequest, sendHttpRedirectRequest, sendRequestToIDP

Methods inherited from class org.gatein.sso.saml.plugin.valve.BaseFormAuthenticator

doSupportSignature, getConfigFile, getConfiguration, getIdentityURL, getIdpCertificate, getIDPSSODescriptor, handleMetadata, handleMetadata, initializeHandlerChain, localAuthentication, populateChainConfig, processConfiguration, processIDPMetadataFile, sendToLogoutPage, setAuditHelper, setConfigFile, setConfigProvider, setConfigProvider, setIdpAddress, setIssuerID, setLogOutPage, setSamlHandlerChainClass, setSaveRestoreRequest, setServiceURL, setTimerInterval, testStart, validate

Methods inherited from class org.apache.catalina.authenticator.FormAuthenticator

forwardToErrorPage, forwardToLoginPage, getAuthMethod, getCharacterEncoding, getLandingPage, isContinuationRequired, matchRequest, register, savedRequestURL, saveRequest, setCharacterEncoding, setLandingPage

Methods inherited from class org.apache.catalina.authenticator.AuthenticatorBase

allowCorsPreflightBypass, associate, changeSessionID, checkForCachedAuthentication, doLogin, getAllowCorsPreflight, getAlwaysUseSession, getCache, getChangeSessionIdOnAuthentication, getContainer, getDisableProxyCaching, getJaspicCallbackHandlerClass, getRealmName, getSecurePagesWithPragma, getSecureRandomAlgorithm, getSecureRandomClass, getSecureRandomProvider, invoke, isPreemptiveAuthPossible, isSendAuthInfoResponseHeaders, login, logout, notify, reauthenticateFromSSO, register, setAllowCorsPreflight, setAlwaysUseSession, setCache, setChangeSessionIdOnAuthentication, setContainer, setDisableProxyCaching, setJaspicCallbackHandlerClass, setSecurePagesWithPragma, setSecureRandomAlgorithm, setSecureRandomClass, setSecureRandomProvider, setSendAuthInfoResponseHeaders, startInternal, stopInternal

Methods inherited from class org.apache.catalina.valves.ValveBase

backgroundProcess, getDomainInternal, getNext, getObjectNameKeyProperties, initInternal, isAsyncSupported, setAsyncSupported, setNext, toString

Methods inherited from class org.apache.catalina.util.LifecycleMBeanBase

destroyInternal, getDomain, getObjectName, postDeregister, postRegister, preDeregister, preRegister, register, setDomain, unregister, unregister

Methods inherited from class org.apache.catalina.util.LifecycleBase

addLifecycleListener, destroy, findLifecycleListeners, fireLifecycleEvent, getState, getStateName, getThrowOnFailure, init, removeLifecycleListener, setState, setState, setThrowOnFailure, start, stop

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Constructor Details

AbstractSAML11SPRedirectFormAuthenticator

public AbstractSAML11SPRedirectFormAuthenticator()

Method Details

authenticate

public boolean authenticate(org.apache.catalina.connector.Request request,
 javax.servlet.http.HttpServletResponse response)
                     throws IOException

Description copied from class: AbstractSPFormAuthenticator

Authenticate the request

Specified by:

authenticate in interface org.apache.catalina.Authenticator

Overrides:

authenticate in class AbstractSPFormAuthenticator

Parameters:

request - Apache Catalina Request

response - Apache Catalina Response

Returns:

true if authenticated, else false

Throws:

IOException - any I/O exception

authenticate

public boolean authenticate(org.apache.catalina.connector.Request request,
 javax.servlet.http.HttpServletResponse response,
 org.apache.tomcat.util.descriptor.web.LoginConfig loginConfig)
                     throws IOException

Throws:

IOException

handleSAML11UnsolicitedResponse

public static boolean handleSAML11UnsolicitedResponse(org.apache.catalina.connector.Request request,
 javax.servlet.http.HttpServletResponse response,
 org.apache.tomcat.util.descriptor.web.LoginConfig loginConfig,
 AbstractSPFormAuthenticator formAuthenticator)
                                               throws IOException

Throws:

IOException

startPicketLink

protected void startPicketLink()
                        throws org.apache.catalina.LifecycleException

Overrides:

startPicketLink in class AbstractSPFormAuthenticator

Throws:

org.apache.catalina.LifecycleException