org.opensaml.common.binding.security
Class BaseSAMLSignatureSecurityPolicyRuleFactory.BaseSAMLSignatureSecurityPolicyRule

java.lang.Object
  extended by org.opensaml.ws.security.provider.BaseTrustEngineRule<Signature,javax.servlet.ServletRequest>
      extended by org.opensaml.common.binding.security.BaseSAMLSignatureSecurityPolicyRuleFactory.BaseSAMLSignatureSecurityPolicyRule
All Implemented Interfaces:
SecurityPolicyRule<javax.servlet.ServletRequest>
Direct Known Subclasses:
SAMLProtocolMessageXMLSignatureSecurityPolicyRuleFactory.SAMLProtocolMessageXMLSignatureSecurityPolicyRule
Enclosing class:
BaseSAMLSignatureSecurityPolicyRuleFactory

protected abstract class BaseSAMLSignatureSecurityPolicyRuleFactory.BaseSAMLSignatureSecurityPolicyRule
extends BaseTrustEngineRule<Signature,javax.servlet.ServletRequest>

Base class for SAML security policy rules which evaluate a signature with a signature trust engine.


Constructor Summary
BaseSAMLSignatureSecurityPolicyRuleFactory.BaseSAMLSignatureSecurityPolicyRule(TrustEngine<Signature> engine)
          Constructor.
 
Method Summary
protected  CriteriaSet buildCriteriaSet(java.lang.String entityID, javax.servlet.ServletRequest request, XMLObject message, SecurityPolicyContext context)
          Subclasses are required to implement this method to build a criteria set for the trust engine according to trust engine and application-specific needs.
 
Methods inherited from class org.opensaml.ws.security.provider.BaseTrustEngineRule
evaluate, evaluate, getTrustEngine
 
Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
 

Constructor Detail

BaseSAMLSignatureSecurityPolicyRuleFactory.BaseSAMLSignatureSecurityPolicyRule

public BaseSAMLSignatureSecurityPolicyRuleFactory.BaseSAMLSignatureSecurityPolicyRule(TrustEngine<Signature> engine)
Constructor.

Parameters:
engine - Trust engine used to verify the signature
Method Detail

buildCriteriaSet

protected CriteriaSet buildCriteriaSet(java.lang.String entityID,
                                       javax.servlet.ServletRequest request,
                                       XMLObject message,
                                       SecurityPolicyContext context)
Subclasses are required to implement this method to build a criteria set for the trust engine according to trust engine and application-specific needs.

Specified by:
buildCriteriaSet in class BaseTrustEngineRule<Signature,javax.servlet.ServletRequest>
Parameters:
entityID - the candidate issuer entity ID which is being evaluated
request - the protocol request
message - the incoming message
context - the security policy context to use for evaluation and storage of related state info
Returns:
a newly constructly set of criteria suitable for the configured trust engine