[java-shib-profile] branch main updated: JSATTR-6: SAML AttributeQuery DataConnector

Brent Putman putmanb at georgetown.edu
Thu May 29 22:50:51 UTC 2025


This is an automated email from the git hooks/post-receive script.

putmanb pushed a commit to branch main
in repository java-shib-profile.

View the commit online:
http://git.shibboleth.net/view/?p=java-shib-profile.git;a=commit;h=4b91acf02079f2f0eca46f046e9c9966b2f28219

The following commit(s) were added to refs/heads/main by this push:
     new 4b91acf  JSATTR-6: SAML AttributeQuery DataConnector
4b91acf is described below

commit 4b91acf02079f2f0eca46f046e9c9966b2f28219
Author: Brent Putman <putmanb at georgetown.edu>
AuthorDate: Thu May 29 18:49:36 2025 -0400

    JSATTR-6: SAML AttributeQuery DataConnector
    
    SOAP client security config predicate impls.
---
 .../ClientTLSSOAPAttributeQueriesPredicate.java    | 41 ++++++++++++++++++++++
 .../SignSOAPAttributeQueriesPredicate.java         | 41 ++++++++++++++++++++++
 2 files changed, 82 insertions(+)

diff --git a/shib-saml-profile-api/src/main/java/net/shibboleth/saml/saml2/profile/config/logic/messaging/ClientTLSSOAPAttributeQueriesPredicate.java b/shib-saml-profile-api/src/main/java/net/shibboleth/saml/saml2/profile/config/logic/messaging/ClientTLSSOAPAttributeQueriesPredicate.java
new file mode 100644
index 0000000..eab8b55
--- /dev/null
+++ b/shib-saml-profile-api/src/main/java/net/shibboleth/saml/saml2/profile/config/logic/messaging/ClientTLSSOAPAttributeQueriesPredicate.java
@@ -0,0 +1,41 @@
+/*
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *    http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package net.shibboleth.saml.saml2.profile.config.logic.messaging;
+
+import javax.annotation.Nullable;
+
+import org.opensaml.messaging.context.MessageContext;
+
+import net.shibboleth.profile.context.RelyingPartyContext;
+import net.shibboleth.profile.context.logic.messaging.AbstractRelyingPartyPredicate;
+import net.shibboleth.saml.saml2.profile.config.AttributeQueryProfileConfiguration;
+
+/** A predicate implementation that forwards to 
+ * {@link AttributeQueryProfileConfiguration#isClientTLSSOAPRequests(MessageContext)}. */
+public class ClientTLSSOAPAttributeQueriesPredicate extends AbstractRelyingPartyPredicate {
+    
+    /** {@inheritDoc} */
+    public boolean test(@Nullable final MessageContext input) {
+        final RelyingPartyContext rpc = getRelyingPartyContext(input);
+        if (rpc != null) {
+            if (rpc.getProfileConfig() instanceof AttributeQueryProfileConfiguration config) {
+                return config.isClientTLSSOAPRequests(input);
+            }
+        }
+        
+        return false;
+    }
+
+}
\ No newline at end of file
diff --git a/shib-saml-profile-api/src/main/java/net/shibboleth/saml/saml2/profile/config/logic/messaging/SignSOAPAttributeQueriesPredicate.java b/shib-saml-profile-api/src/main/java/net/shibboleth/saml/saml2/profile/config/logic/messaging/SignSOAPAttributeQueriesPredicate.java
new file mode 100644
index 0000000..8dfd345
--- /dev/null
+++ b/shib-saml-profile-api/src/main/java/net/shibboleth/saml/saml2/profile/config/logic/messaging/SignSOAPAttributeQueriesPredicate.java
@@ -0,0 +1,41 @@
+/*
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *    http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package net.shibboleth.saml.saml2.profile.config.logic.messaging;
+
+import javax.annotation.Nullable;
+
+import org.opensaml.messaging.context.MessageContext;
+
+import net.shibboleth.profile.context.RelyingPartyContext;
+import net.shibboleth.profile.context.logic.messaging.AbstractRelyingPartyPredicate;
+import net.shibboleth.saml.saml2.profile.config.AttributeQueryProfileConfiguration;
+
+/** A predicate implementation that forwards to 
+ * {@link AttributeQueryProfileConfiguration#isSignSOAPRequests(MessageContext)}. */
+public class SignSOAPAttributeQueriesPredicate extends AbstractRelyingPartyPredicate {
+    
+    /** {@inheritDoc} */
+    public boolean test(@Nullable final MessageContext input) {
+        final RelyingPartyContext rpc = getRelyingPartyContext(input);
+        if (rpc != null) {
+            if (rpc.getProfileConfig() instanceof AttributeQueryProfileConfiguration config) {
+                return config.isSignSOAPRequests(input);
+            }
+        }
+        
+        return false;
+    }
+
+}
\ No newline at end of file

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list