[java-identity-provider COMMIT] in /trunk: idp-conf/src/main/resources/system/flows/logout/propagation/saml2-beans.xm...

[noreply at shibboleth.net]

Author: scantor
Date: Thu Oct 29 17:35:44 2015
New Revision: 7909

URL: http://svn.shibboleth.net/view/java-identity-provider?rev=7909&view=rev
Log:
IDP-224 - Mostly complete SAML 2 front-channel logout propagator

Added:
    trunk/idp-saml-api/src/main/java/net/shibboleth/idp/saml/profile/config/logic/SignRequestsPredicate.java   (with props)
    trunk/idp-saml-impl/src/main/java/net/shibboleth/idp/saml/session/impl/AddLogoutRequest.java   (with props)
    trunk/idp-saml-impl/src/main/java/net/shibboleth/idp/saml/session/impl/PrepareInboundMessageContext.java   (with props)
    trunk/idp-saml-impl/src/test/java/net/shibboleth/idp/saml/session/impl/PrepareInboundMessageContextTest.java   (with props)
Modified:
    trunk/idp-conf/src/main/resources/system/flows/logout/propagation/saml2-beans.xml
    trunk/idp-conf/src/main/resources/system/flows/logout/propagation/saml2-flow.xml
    trunk/idp-conf/src/main/resources/system/flows/saml/saml-abstract-beans.xml
    trunk/idp-session-api/src/main/java/net/shibboleth/idp/session/context/LogoutPropagationContext.java

Modified: trunk/idp-conf/src/main/resources/system/flows/logout/propagation/saml2-beans.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/system/flows/logout/propagation/saml2-beans.xml?rev=7909&r1=7908&r2=7909&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/system/flows/logout/propagation/saml2-beans.xml	(original)
+++ trunk/idp-conf/src/main/resources/system/flows/logout/propagation/saml2-beans.xml	Thu Oct 29 17:35:44 2015
@@ -11,4 +11,64 @@
        default-init-method="initialize"
        default-destroy-method="destroy">
 
+    <bean class="org.springframework.context.support.PropertySourcesPlaceholderConfigurer"
+        p:placeholderPrefix="%{" p:placeholderSuffix="}" />
+
+    <bean class="net.shibboleth.idp.profile.impl.ProfileActionBeanPostProcessor" />
+    <bean class="net.shibboleth.ext.spring.config.IdentifiableBeanPostProcessor" />
+
+    <!-- Declares audit field extractor functions injected into beans that populate the audit context. -->
+    <import resource="../../../conf/audit-system.xml" />
+
+    <import resource="../../saml/saml-abstract-beans.xml" />
+
+    <util:constant id="shibboleth.EndpointType"
+        static-field="org.opensaml.saml.saml2.metadata.SingleLogoutService.DEFAULT_ELEMENT_NAME" />
+
+    <util:constant id="shibboleth.MetadataLookup.Protocol"
+        static-field="org.opensaml.saml.common.xml.SAMLConstants.SAML20P_NS" />
+
+    <util:constant id="shibboleth.MetadataLookup.Role"
+        static-field="org.opensaml.saml.saml2.metadata.SPSSODescriptor.DEFAULT_ELEMENT_NAME" />
+
+    <alias name="shibboleth.OutgoingSAML2SLOBindings" alias="shibboleth.OutgoingBindings"/>
+    
+    <bean id="PrepareInboundMessageContext"
+        class="net.shibboleth.idp.saml.session.impl.PrepareInboundMessageContext" scope="prototype" />
+
+    <bean id="InitializeMessageChannelSecurityContext"
+        class="org.opensaml.profile.action.impl.StaticMessageChannelSecurity" scope="prototype"
+        p:confidentialityActive="false" p:integrityActive="false" />
+
+    <bean id="AddLogoutRequest"
+        class="net.shibboleth.idp.saml.session.impl.AddLogoutRequest" scope="prototype"
+            p:overwriteExisting="true"
+            p:issuerLookupStrategy-ref="shibboleth.ResponderIdLookup.Simple">
+        <property name="identifierGeneratorLookupStrategy">
+            <bean class="net.shibboleth.idp.profile.config.navigate.IdentifierGenerationStrategyLookupFunction"
+                p:defaultIdentifierGenerationStrategy-ref="shibboleth.DefaultIdentifierGenerationStrategy" />
+        </property>
+    </bean>
+
+    <bean id="EncryptNameIDs"
+            class="org.opensaml.saml.saml2.profile.impl.EncryptNameIDs" scope="prototype"
+            p:recipientLookupStrategy-ref="shibboleth.RelyingPartyIdLookup.Simple">
+        <property name="encryptionContextLookupStrategy">
+            <bean class="com.google.common.base.Functions" factory-method="compose"
+                c:g-ref="shibboleth.ChildLookup.EncryptionParameters"
+                c:f-ref="shibboleth.ChildLookup.RelyingParty" />
+        </property>
+    </bean>
+    
+    <bean id="shibboleth.PreEncodeMessageHandler"
+            class="org.opensaml.messaging.handler.impl.BasicMessageHandlerChain" scope="prototype">
+        <property name="handlers">
+            <util:list>
+                <bean class="org.opensaml.saml.common.binding.impl.SAMLOutboundDestinationHandler" scope="prototype"/>
+                <bean class="org.opensaml.saml.common.binding.security.impl.EndpointURLSchemeSecurityHandler" scope="prototype"/>
+                <bean class="org.opensaml.saml.common.binding.security.impl.SAMLOutboundProtocolMessageSigningHandler" />
+            </util:list>
+        </property>
+    </bean>
+
 </beans>

Modified: trunk/idp-conf/src/main/resources/system/flows/logout/propagation/saml2-flow.xml

[... 141 lines stripped ...]