[java-opensaml COMMIT] /trunk/opensaml-saml-impl/src/main/java/org/opensaml/saml/metadata/resolver/filter/impl/Signat...
noreply at shibboleth.net
noreply at shibboleth.net
Fri Nov 6 18:44:56 EST 2015
Author: putmanb
Date: Fri Nov 6 18:44:55 2015
New Revision: 4400
URL: http://svn.shibboleth.net/view/java-opensaml?rev=4400&view=rev
Log:
OSJ-120: On SignatureValidationFilter change 'requireSignature' to something more descriptive
Modified:
trunk/opensaml-saml-impl/src/main/java/org/opensaml/saml/metadata/resolver/filter/impl/SignatureValidationFilter.java
Modified: trunk/opensaml-saml-impl/src/main/java/org/opensaml/saml/metadata/resolver/filter/impl/SignatureValidationFilter.java
URL: http://svn.shibboleth.net/view/java-opensaml/trunk/opensaml-saml-impl/src/main/java/org/opensaml/saml/metadata/resolver/filter/impl/SignatureValidationFilter.java?rev=4400&r1=4399&r2=4400&view=diff
==============================================================================
--- trunk/opensaml-saml-impl/src/main/java/org/opensaml/saml/metadata/resolver/filter/impl/SignatureValidationFilter.java (original)
+++ trunk/opensaml-saml-impl/src/main/java/org/opensaml/saml/metadata/resolver/filter/impl/SignatureValidationFilter.java Fri Nov 6 18:44:55 2015
@@ -61,8 +61,8 @@
/** Trust engine used to validate a signature. */
@Nonnull private SignatureTrustEngine signatureTrustEngine;
- /** Indicates whether signed metadata is required. */
- private boolean requireSignature;
+ /** Indicates whether the metadata root element is required to be signed. */
+ private boolean requireSignedRoot;
/** Set of externally specified default criteria for input to the trust engine. */
@Nullable private CriteriaSet defaultCriteria;
@@ -89,7 +89,7 @@
public SignatureValidationFilter(@Nonnull final SignatureTrustEngine engine) {
Constraint.isNotNull(engine, "SignatureTrustEngine cannot be null");
- requireSignature = true;
+ requireSignedRoot = true;
signatureTrustEngine = engine;
signaturePrevalidator = new SAMLSignatureProfileValidator();
@@ -156,8 +156,33 @@
*
* @return whether incoming metadata is required to be signed
*/
+ public boolean getRequireSignedRoot() {
+ return requireSignedRoot;
+ }
+
+ /**
+ * Set whether incoming metadata's root element is required to be signed.
+ *
+ * <p>Defaults to <code>true</code>.</p>
+ *
+ * @param require whether incoming metadata is required to be signed
+ */
+ public void setRequireSignedRoot(final boolean require) {
+ requireSignedRoot = require;
+ }
+
+ /**
+ * Get whether incoming metadata's root element is required to be signed.
+ *
+ * <p>Defaults to <code>true</code>.</p>
+ *
+ * @return whether incoming metadata is required to be signed
+ *
+ * @deprecated use instead {@link #getRequireSignedRoot()}
+ */
+ @Deprecated
public boolean getRequireSignature() {
- return requireSignature;
+ return getRequireSignedRoot();
}
/**
@@ -166,9 +191,12 @@
* <p>Defaults to <code>true</code>.</p>
*
* @param require whether incoming metadata is required to be signed
- */
+ *
+ * @deprecated use instead {@link #setRequireSignedRoot(boolean)}
+ */
+ @Deprecated
public void setRequireSignature(final boolean require) {
- requireSignature = require;
+ setRequireSignedRoot(require);
}
/**
@@ -203,7 +231,7 @@
final SignableXMLObject signableMetadata = (SignableXMLObject) metadata;
if (!signableMetadata.isSigned()){
- if (getRequireSignature()) {
+ if (getRequireSignedRoot()) {
log.warn("Metadata root element was unsigned and signatures are required, "
+ "metadata will be filtered out.");
return null;
More information about the commits
mailing list