[java-opensaml COMMIT] in /trunk/opensaml-xmlsec-impl/src: main/java/org/opensaml/xmlsec/impl/AbstractSecurityParamet...

noreply at shibboleth.net noreply at shibboleth.net
Thu May 8 13:53:14 EDT 2014


Author: putmanb
Date: Thu May  8 13:53:13 2014
New Revision: 3847

URL: http://svn.shibboleth.net/view/java-opensaml?rev=3847&view=rev
Log:
Checkpoint some security config/resolver work.
Add some trace logging to resolver impls.

Added:
    trunk/opensaml-xmlsec-impl/src/test/java/org/opensaml/xmlsec/impl/BasicDecryptionParametersResolverTest.java   (with props)
    trunk/opensaml-xmlsec-impl/src/test/java/org/opensaml/xmlsec/impl/BasicSignatureSigningParametersResolverTest.java   (with props)
    trunk/opensaml-xmlsec-impl/src/test/java/org/opensaml/xmlsec/impl/BasicSignatureValidationParametersResolverTest.java   (with props)
Modified:
    trunk/opensaml-xmlsec-impl/src/main/java/org/opensaml/xmlsec/impl/AbstractSecurityParametersResolver.java
    trunk/opensaml-xmlsec-impl/src/main/java/org/opensaml/xmlsec/impl/BasicSignatureSigningParametersResolver.java

Modified: trunk/opensaml-xmlsec-impl/src/main/java/org/opensaml/xmlsec/impl/AbstractSecurityParametersResolver.java
URL: http://svn.shibboleth.net/view/java-opensaml/trunk/opensaml-xmlsec-impl/src/main/java/org/opensaml/xmlsec/impl/AbstractSecurityParametersResolver.java?rev=3847&r1=3846&r2=3847&view=diff
==============================================================================
--- trunk/opensaml-xmlsec-impl/src/main/java/org/opensaml/xmlsec/impl/AbstractSecurityParametersResolver.java (original)
+++ trunk/opensaml-xmlsec-impl/src/main/java/org/opensaml/xmlsec/impl/AbstractSecurityParametersResolver.java Thu May  8 13:53:13 2014
@@ -37,6 +37,8 @@
 import org.opensaml.xmlsec.keyinfo.KeyInfoGenerator;
 import org.opensaml.xmlsec.keyinfo.KeyInfoGeneratorFactory;
 import org.opensaml.xmlsec.keyinfo.NamedKeyInfoGeneratorManager;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
 
 import com.google.common.base.Predicate;
 import com.google.common.base.Predicates;
@@ -49,6 +51,9 @@
 public abstract class AbstractSecurityParametersResolver<ProductType> 
         implements Resolver<ProductType, CriteriaSet>{
     
+    /** Logger. */
+    private Logger log = LoggerFactory.getLogger(AbstractSecurityParametersResolver.class);
+    
     /**
      * Resolve a {@link KeyInfoGenerator} instance based on a {@link NamedKeyInfoGeneratorManager}, 
      * {@link Credential} and optional KeyInfo generation profile name.
@@ -94,28 +99,37 @@
             @Nonnull @NonnullElements @NotEmpty final List<? extends WhitelistBlacklistConfiguration> configs) {
         
         Collection<String> whitelist = resolveEffectiveWhitelist(criteria, configs);
+        log.trace("Resolved effective whitelist: {}", whitelist);
+        
         Collection<String> blacklist = resolveEffectiveBlacklist(criteria, configs);
+        log.trace("Resolved effective blacklist: {}", blacklist);
         
         if (whitelist.isEmpty() && blacklist.isEmpty()) {
+            log.trace("Both empty, nothing to populate");
             return;
         }
         
         if (whitelist.isEmpty()) {
+            log.trace("Whitelist empty, populating blacklist");
             params.setBlacklistedAlgorithmURIs(blacklist);
             return;
         }
         
         if (blacklist.isEmpty()) {
+            log.trace("Blacklist empty, populating whitelist");
             params.setWhitelistedAlgorithmURIs(whitelist);
             return;
         }
         
         WhitelistBlacklistConfiguration.Precedence precedence = resolveWhitelistBlacklistPrecedence(criteria, configs);
+        log.trace("Resolved effective precedence: {}", precedence);
         switch(precedence) {
             case WHITELIST:
+                log.trace("Based on precedence, populating whitelist");
                 params.setWhitelistedAlgorithmURIs(whitelist);
                 break;
             case BLACKLIST:
+                log.trace("Based on precedence, populating blacklist");
                 params.setBlacklistedAlgorithmURIs(blacklist);
                 break;
             default:
@@ -137,25 +151,34 @@
             @Nonnull @NonnullElements @NotEmpty final List<? extends WhitelistBlacklistConfiguration> configs) {
         
         Collection<String> whitelist = resolveEffectiveWhitelist(criteria, configs);
+        log.trace("Resolved effective whitelist: {}", whitelist);
+        
         Collection<String> blacklist = resolveEffectiveBlacklist(criteria, configs);
+        log.trace("Resolved effective blacklist: {}", blacklist);
         
         if (whitelist.isEmpty() && blacklist.isEmpty()) {
+            log.trace("Both empty, returning alwaysTrue predicate");
             return Predicates.alwaysTrue();
         }
         
         if (whitelist.isEmpty()) {
+            log.trace("Whitelist empty, returning BlacklistPredicate");
             return new BlacklistPredicate(blacklist);
         }
         
         if (blacklist.isEmpty()) {
+            log.trace("Blacklist empty, returning WhitelistPredicate");
             return new WhitelistPredicate(whitelist);
         }
         

[... 49 lines stripped ...]


More information about the commits mailing list