Class AbstractSAML2ProfileConfiguration
java.lang.Object
net.shibboleth.shared.component.AbstractInitializableComponent
net.shibboleth.shared.component.AbstractIdentifiedInitializableComponent
net.shibboleth.shared.component.AbstractIdentifiableInitializableComponent
net.shibboleth.profile.config.AbstractProfileConfiguration
net.shibboleth.profile.config.AbstractConditionalProfileConfiguration
net.shibboleth.sp.profile.config.AbstractConditionalProfileConfiguration
net.shibboleth.sp.saml.saml2.profile.config.impl.AbstractSAML2ProfileConfiguration
- All Implemented Interfaces:
ConditionalProfileConfiguration,ProfileConfiguration,SAMLProfileConfiguration,SAML2ProfileConfiguration,Component,DestructableComponent,IdentifiableComponent,IdentifiedComponent,InitializableComponent
- Direct Known Subclasses:
AbstractSAML2ArtifactConsumerProfileConfiguration
public abstract class AbstractSAML2ProfileConfiguration
extends AbstractConditionalProfileConfiguration
implements SAML2ProfileConfiguration
Base class for SAML profile configurations.
-
Field Summary
FieldsModifier and TypeFieldDescriptionprivate Predicate<ProfileRequestContext>Whether encryption is optional in the face of no key, etc.private Predicate<ProfileRequestContext>Predicate used to determine if name identifiers should be encrypted.private Predicate<ProfileRequestContext>Predicate used to determine if request signatures should be ignored.private Function<MessageContext,Function<MessageContext, Exception>> Lookup function to supply a message handler function.private Predicate<ProfileRequestContext>Predicate used to determine if the generated request should be signed.private Predicate<ProfileRequestContext>Predicate used to determine if the generated response should be signed.Fields inherited from interface net.shibboleth.profile.config.ProfileConfiguration
DEFAULT_DISALLOWED_FEATURES -
Constructor Summary
Constructors -
Method Summary
Modifier and TypeMethodDescriptiongetMessageHandler(MessageContext messageContext) booleanisEncryptionOptional(ProfileRequestContext profileRequestContext) booleanisEncryptNameIDs(ProfileRequestContext profileRequestContext) booleanisIgnoreRequestSignatures(ProfileRequestContext profileRequestContext) booleanisSignRequests(ProfileRequestContext profileRequestContext) booleanisSignResponses(ProfileRequestContext profileRequestContext) voidsetEncryptionOptional(boolean flag) Set whether encryption is optional in the face of a missing key, etc.voidSet a condition to determine whether encryption is optional in the face of a missing key, etc.voidsetEncryptNameIDs(boolean flag) Set whether name identifiers should be encrypted.voidsetEncryptNameIDsPredicate(Predicate<ProfileRequestContext> predicate) Set the predicate used to determine if name identifiers should be encrypted.voidsetIgnoreRequestSignatures(boolean flag) Set whether request signatures should be ignored.voidSet the predicate used to determine whether request signatures should be ignored.voidsetMessageHandler(Function<MessageContext, Exception> handler) Set a message handler for a SAML message produced or consumed by this profile.voidsetMessageHandlerLookupStrategy(Function<MessageContext, Function<MessageContext, Exception>> strategy) Set a lookup strategy for a message handler for a SAML message produced or consumed by this profile.voidsetSignRequests(boolean flag) Set whether generated requests should be signed.voidsetSignRequestsPredicate(Predicate<ProfileRequestContext> predicate) Set the predicate used to determine if generated requests should be signed.voidsetSignResponses(boolean flag) Set whether generated responses should be signed.voidsetSignResponsesPredicate(Predicate<ProfileRequestContext> predicate) Set the predicate used to determine if generated responses should be signed.Methods inherited from class net.shibboleth.sp.profile.config.AbstractConditionalProfileConfiguration
setDisallowedFeaturesMethods inherited from class net.shibboleth.profile.config.AbstractConditionalProfileConfiguration
getActivationCondition, setActivationConditionMethods inherited from class net.shibboleth.profile.config.AbstractProfileConfiguration
equals, getDisallowedFeatures, getSecurityConfiguration, hashCode, isFeatureDisallowed, setDisallowedFeatures, setDisallowedFeaturesLookupStrategy, setSecurityConfiguration, setSecurityConfigurationLookupStrategyMethods inherited from class net.shibboleth.shared.component.AbstractIdentifiableInitializableComponent
setIdMethods inherited from class net.shibboleth.shared.component.AbstractIdentifiedInitializableComponent
doInitialize, ensureId, getId, ifDestroyedThrowDestroyedComponentException, ifInitializedThrowUnmodifiabledComponentException, ifNotInitializedThrowUninitializedComponentExceptionMethods inherited from class net.shibboleth.shared.component.AbstractInitializableComponent
checkComponentActive, checkSetterPreconditions, destroy, doDestroy, initialize, isDestroyed, isInitializedMethods inherited from class java.lang.Object
clone, finalize, getClass, notify, notifyAll, toString, wait, wait, waitMethods inherited from interface net.shibboleth.shared.component.IdentifiedComponent
getIdMethods inherited from interface net.shibboleth.profile.config.ProfileConfiguration
getDisallowedFeatures, getSecurityConfiguration, isFeatureDisallowed
-
Field Details
-
ignoreRequestSignaturesPredicate
Predicate used to determine if request signatures should be ignored. Default returns false. -
signRequestsPredicate
Predicate used to determine if the generated request should be signed. Default returns false. -
signResponsesPredicate
Predicate used to determine if the generated response should be signed. Default returns false. -
encryptionOptionalPredicate
Whether encryption is optional in the face of no key, etc. -
encryptNameIDsPredicate
Predicate used to determine if name identifiers should be encrypted. -
messageHandlerLookupStrategy
@Nonnull private Function<MessageContext,Function<MessageContext, messageHandlerLookupStrategyException>> Lookup function to supply a message handler function.
-
-
Constructor Details
-
AbstractSAML2ProfileConfiguration
Constructor.- Parameters:
profileId- ID of the communication profile
-
-
Method Details
-
isIgnoreRequestSignatures
- Specified by:
isIgnoreRequestSignaturesin interfaceSAML2ProfileConfiguration
-
setIgnoreRequestSignatures
public void setIgnoreRequestSignatures(boolean flag) Set whether request signatures should be ignored.- Parameters:
flag- flag to set
-
setIgnoreRequestSignaturesPredicate
public void setIgnoreRequestSignaturesPredicate(@Nonnull Predicate<ProfileRequestContext> predicate) Set the predicate used to determine whether request signatures should be ignored.- Parameters:
predicate- condition to set
-
isSignRequests
- Specified by:
isSignRequestsin interfaceSAMLProfileConfiguration
-
setSignRequests
public void setSignRequests(boolean flag) Set whether generated requests should be signed.- Parameters:
flag- flag to set
-
setSignRequestsPredicate
Set the predicate used to determine if generated requests should be signed.- Parameters:
predicate- predicate used to determine if generated requests should be signed
-
isSignResponses
- Specified by:
isSignResponsesin interfaceSAMLProfileConfiguration
-
setSignResponses
public void setSignResponses(boolean flag) Set whether generated responses should be signed.- Parameters:
flag- flag to set
-
setSignResponsesPredicate
Set the predicate used to determine if generated responses should be signed.- Parameters:
predicate- predicate used to determine if generated responses should be signed
-
isEncryptionOptional
- Specified by:
isEncryptionOptionalin interfaceSAML2ProfileConfiguration
-
setEncryptionOptional
public void setEncryptionOptional(boolean flag) Set whether encryption is optional in the face of a missing key, etc.- Parameters:
flag- flag to set
-
setEncryptionOptionalPredicate
Set a condition to determine whether encryption is optional in the face of a missing key, etc.- Parameters:
condition- condition to set
-
isEncryptNameIDs
- Specified by:
isEncryptNameIDsin interfaceSAML2ProfileConfiguration
-
setEncryptNameIDs
public void setEncryptNameIDs(boolean flag) Set whether name identifiers should be encrypted.- Parameters:
flag- flag to set
-
setEncryptNameIDsPredicate
Set the predicate used to determine if name identifiers should be encrypted.- Parameters:
predicate- predicate used to determine if name identifiers should be encrypted
-
getMessageHandler
@Nullable public Function<MessageContext,Exception> getMessageHandler(@Nullable MessageContext messageContext) - Specified by:
getMessageHandlerin interfaceSAMLProfileConfiguration
-
setMessageHandler
Set a message handler for a SAML message produced or consumed by this profile.- Parameters:
handler- message handler
-
setMessageHandlerLookupStrategy
public void setMessageHandlerLookupStrategy(@Nonnull Function<MessageContext, Function<MessageContext, Exception>> strategy) Set a lookup strategy for a message handler for a SAML message produced or consumed by this profile.- Parameters:
strategy- lookup strategy
-