Class PopulateLibertyContext
java.lang.Object
net.shibboleth.utilities.java.support.component.AbstractInitializableComponent
org.opensaml.profile.action.AbstractProfileAction
org.opensaml.profile.action.AbstractConditionalProfileAction
net.shibboleth.idp.profile.AbstractProfileAction
net.shibboleth.idp.saml.saml2.profile.delegation.impl.PopulateLibertyContext
- All Implemented Interfaces:
Component,DestructableComponent,InitializableComponent,ProfileAction,Aware,MessageSource,MessageSourceAware,Action
Locate a pre-validated
Assertion WS-Security token,
and populate the LibertySSOSContext.
The default token strategy is to resolve the first instance of SAML20AssertionToken
present in the inbound WSSecurityContext which has a validation status of
Token.ValidationStatus.VALID
- Event:
AuthnEventIds.NO_CREDENTIALS- Precondition:
assertionTokenStrategy.apply() != null
- Postcondition:
profileRequestContext.getSubcontext(LibertySSOSContext.class) != null
,LibertySSOSContext.getAttestedToken() != null
,LibertySSOSContext.getAttestedSubjectConfirmationMethod != null
-
Nested Class Summary
Nested ClassesModifier and TypeClassDescriptionclassDefault strategy for resolving the assertion token to process. -
Field Summary
FieldsModifier and TypeFieldDescriptionprivate SAML20AssertionTokenThe SAML 2 Assertion token being processed.Function used to resolve the assertion token to process.Function used to resolve the Liberty context to populate.private org.slf4j.LoggerLogger.private LibertySSOSContextLiberty context to populate. -
Constructor Summary
Constructors -
Method Summary
Modifier and TypeMethodDescriptionprotected voiddoExecute(ProfileRequestContext profileRequestContext) protected booleandoPreExecute(ProfileRequestContext profileRequestContext) voidSet the strategy used to locate the requester ID for canonicalization.voidSet the strategy used to locate theLibertySSOSContextto populate.Methods inherited from class net.shibboleth.idp.profile.AbstractProfileAction
doExecute, execute, getBean, getBean, getMessage, getMessage, getMessage, getParameter, getParameter, getProfileContextLookupStrategy, getRequestContext, getResult, setMessageSource, setProfileContextLookupStrategyMethods inherited from class org.opensaml.profile.action.AbstractConditionalProfileAction
getActivationCondition, setActivationConditionMethods inherited from class org.opensaml.profile.action.AbstractProfileAction
doPostExecute, doPostExecute, execute, getHttpServletRequest, getHttpServletRequestSupplier, getHttpServletResponse, getHttpServletResponseSupplier, getLogPrefix, setHttpServletRequest, setHttpServletRequestSupplier, setHttpServletResponse, setHttpServletResponseSupplierMethods inherited from class net.shibboleth.utilities.java.support.component.AbstractInitializableComponent
destroy, doDestroy, doInitialize, initialize, isDestroyed, isInitializedMethods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, waitMethods inherited from interface net.shibboleth.utilities.java.support.component.InitializableComponent
initialize, isInitialized
-
Field Details
-
log
@Nonnull private org.slf4j.Logger logLogger. -
assertionTokenStrategy
Function used to resolve the assertion token to process. -
libertyContextLookupStrategy
Function used to resolve the Liberty context to populate. -
assertionToken
The SAML 2 Assertion token being processed. -
ssosContext
Liberty context to populate.
-
-
Constructor Details
-
PopulateLibertyContext
public PopulateLibertyContext()Constructor.
-
-
Method Details
-
setLibertyContextLookupStrategy
public void setLibertyContextLookupStrategy(@Nonnull Function<ProfileRequestContext, LibertySSOSContext> strategy) Set the strategy used to locate theLibertySSOSContextto populate.- Parameters:
strategy- lookup strategy
-
setAssertionTokenStrategy
public void setAssertionTokenStrategy(@Nonnull Function<ProfileRequestContext, SAML20AssertionToken> strategy) Set the strategy used to locate the requester ID for canonicalization.- Parameters:
strategy- lookup strategy
-
doPreExecute
- Overrides:
doPreExecutein classAbstractConditionalProfileAction
-
doExecute
- Overrides:
doExecutein classAbstractProfileAction
-