[java-identity-provider COMMIT] in /trunk: idp-conf/src/main/resources/system/conf/utilities.xml idp-profile-impl/src...
noreply at shibboleth.net
noreply at shibboleth.net
Fri May 9 23:20:05 EDT 2014
Author: scantor
Date: Fri May 9 23:20:05 2014
New Revision: 5899
URL: http://svn.shibboleth.net/view/java-identity-provider?rev=5899&view=rev
Log:
Refactor security configuration handling to allow for IdP default configs.
Modified:
trunk/idp-conf/src/main/resources/system/conf/utilities.xml
trunk/idp-profile-impl/src/main/java/net/shibboleth/idp/profile/config/navigate/DecryptionConfigurationLookupFunction.java
trunk/idp-profile-impl/src/main/java/net/shibboleth/idp/profile/config/navigate/EncryptionConfigurationLookupFunction.java
trunk/idp-profile-impl/src/main/java/net/shibboleth/idp/profile/config/navigate/SignatureSigningConfigurationLookupFunction.java
trunk/idp-profile-impl/src/main/java/net/shibboleth/idp/profile/config/navigate/SignatureValidationConfigurationLookupFunction.java
trunk/idp-saml-impl/src/main/java/net/shibboleth/idp/saml/saml2/profile/impl/PopulateEncryptionParameters.java
Modified: trunk/idp-conf/src/main/resources/system/conf/utilities.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/system/conf/utilities.xml?rev=5899&r1=5898&r2=5899&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/system/conf/utilities.xml (original)
+++ trunk/idp-conf/src/main/resources/system/conf/utilities.xml Fri May 9 23:20:05 2014
@@ -39,13 +39,17 @@
class="net.shibboleth.idp.profile.context.navigate.RelyingPartyIdLookupFunction" />
<bean id="shibboleth.SignatureValidationConfigurationLookup"
- class="net.shibboleth.idp.profile.config.navigate.SignatureValidationConfigurationLookupFunction" />
+ class="net.shibboleth.idp.profile.config.navigate.SignatureValidationConfigurationLookupFunction"
+ p:relyingPartyConfigurationResolver-ref="shibboleth.RelyingPartyConfigurationResolver" />
<bean id="shibboleth.SignatureSigningConfigurationLookup"
- class="net.shibboleth.idp.profile.config.navigate.SignatureSigningConfigurationLookupFunction" />
+ class="net.shibboleth.idp.profile.config.navigate.SignatureSigningConfigurationLookupFunction"
+ p:relyingPartyConfigurationResolver-ref="shibboleth.RelyingPartyConfigurationResolver" />
<bean id="shibboleth.DecryptionConfigurationLookup"
- class="net.shibboleth.idp.profile.config.navigate.DecryptionConfigurationLookupFunction" />
+ class="net.shibboleth.idp.profile.config.navigate.DecryptionConfigurationLookupFunction"
+ p:relyingPartyConfigurationResolver-ref="shibboleth.RelyingPartyConfigurationResolver" />
<bean id="shibboleth.EncryptionConfigurationLookup"
- class="net.shibboleth.idp.profile.config.navigate.EncryptionConfigurationLookupFunction" />
+ class="net.shibboleth.idp.profile.config.navigate.EncryptionConfigurationLookupFunction"
+ p:relyingPartyConfigurationResolver-ref="shibboleth.RelyingPartyConfigurationResolver" />
<util:list id="Shibboleth.SAML1Status.VersionMismatch">
<util:constant static-field="org.opensaml.saml.saml1.core.StatusCode.VERSION_MISMATCH" />
Modified: trunk/idp-profile-impl/src/main/java/net/shibboleth/idp/profile/config/navigate/DecryptionConfigurationLookupFunction.java
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-profile-impl/src/main/java/net/shibboleth/idp/profile/config/navigate/DecryptionConfigurationLookupFunction.java?rev=5899&r1=5898&r2=5899&view=diff
==============================================================================
--- trunk/idp-profile-impl/src/main/java/net/shibboleth/idp/profile/config/navigate/DecryptionConfigurationLookupFunction.java (original)
+++ trunk/idp-profile-impl/src/main/java/net/shibboleth/idp/profile/config/navigate/DecryptionConfigurationLookupFunction.java Fri May 9 23:20:05 2014
@@ -17,32 +17,38 @@
package net.shibboleth.idp.profile.config.navigate;
-import javax.annotation.Nonnull;
+import java.util.List;
+
import javax.annotation.Nullable;
import net.shibboleth.idp.profile.config.ProfileConfiguration;
+import net.shibboleth.idp.profile.config.SecurityConfiguration;
import net.shibboleth.idp.profile.context.RelyingPartyContext;
-import net.shibboleth.utilities.java.support.logic.Constraint;
+import net.shibboleth.idp.relyingparty.RelyingPartyConfigurationResolver;
import org.opensaml.messaging.context.navigate.ChildContextLookup;
import org.opensaml.profile.context.ProfileRequestContext;
import org.opensaml.xmlsec.DecryptionConfiguration;
+import org.opensaml.xmlsec.SecurityConfigurationSupport;
import com.google.common.base.Function;
+import com.google.common.collect.Lists;
/**
- * A function that returns a {@link DecryptionConfiguration} by way of a {@link RelyingPartyContext}
- * obtained via a lookup function, by default a child of the {@link ProfileRequestContext}.
+ * A function that returns a {@link DecryptionConfiguration} list by way of various lookup strategies.
*
* <p>If a specific setting is unavailable, a null value is returned.</p>
*/
[... 633 lines stripped ...]
More information about the commits
mailing list