All Classes and Interfaces
Class
Description
Base class for actions that need access to the
Agent in an AgentRequestContext.Base class for agent profile actions that handles lookup of the
AgentRequestContext.Base class for functions that need access to an
AgentRequestContext.Base class for functions that need access to an
AgentRequestContext.Base class for actions that need access to the
Application in an AgentRequestContext.An SP-specific subclass for all profile configurations that implements any logic not yet promoted back into our shared layer.
Simple base class for resolvers to supply an
Ordered implementation if they don't
need a dedicated base class.This is more or less a duplicate of an OpenSAML implementation class to filter by usage.
Base class for
StateManager implementations.Base class for protocol-specific "token consumer" flow actions that prepare the
response for the agent when completing processing.
Represents a deployment of an SP "Agent", the stub that operates in a web server or application
and leverages the Hub to secure access to resources.
Audit field extractor that pulls the Agent ID from the active request.
Audit field extractor that pulls out and converts a particular input member from an
Agent's request message.
General context for an agent request tracking basic information about the request, the messages
from and back to the agent, and wrapped servlet interfaces.
Interface to a resolution service that identifies the target
Agent
for a request based on extensible criteria.Simple
CredentialValidator implementation that relies on the shared secrets configured
directly against Agent instances.A collection of resources protected by the SP and treated as a unit for the purposes of
the configuration.
Basic implementation of an
Agent.Basic implementation of an
Application.Subclass of OpenSAML version to provide support for CredentialResolver service
through a bridging class.
Basic implementation of a descriptor for a logout consumer flow.
This is a simple implementation of the
ProtocolSupportService interface for use
by plugins that need to implement it.Basic implementation of a descriptor for a session initiator flow.
Basic implementation of a descriptor for a token consumer flow.
A record capturing cached authentication state for an agent.
Subclass of OpenSAML chaining resolver that limits itself to implementations of the
OrderedCredentialResolver interface.Constants for token and logout consumer operations.
StateManager implemented by storing the data directly into a cookie.A profile action to build the "shell" of an Agent response (a DDF), optionally
including the
RemotedHttpServletResponse.STRUCTURE_NAME member and wrapped
response facade to leave subsequent actions with a consistent state to operate on.Support object for bridging legacy OpenSAML interfaces to new credential resolver service.
The core object in the DDF mode, this is a node in a tree of objects that
make up the entire data structure.
Type enum.
Helper methods for
DDF usage.A profile action to decode an agent request and stash the resulting
DDF in the
AgentRequestContext.Subclass of OpenSAML
DecodeMessage action that wraps the
execute step to stash off the RemotedHttpServletRequest from the AgentRequestContext
for access by the MessageDecoder.Default implementation of
AgentResolver.Subclass of
BasicRelyingPartyConfiguration that will handle absent settings
by delegating to an injected instance of Application.Simple action for testing adds the current time to the output.
Action that implements a remote API for SP agents to leverage a
DataSealer.Action that implements a remote API for SP agents to mamage sessions remotely.
Action that implements a remote API for SP agents to access or alter
StorageService records.A profile action to encode an agent response from the output
DDF in the
AgentRequestContext.Subclass of OpenSAML
EncodeMessage action that wraps the execute step to
stash off the RemotedHttpServletResponse from the AgentRequestContext
for access by the MessageEncoder.A predicate that supports configurable evaluation of servlet request state to
produce a result via the
HttpServletRequestValidator interface.An authentication action that relies on extracted HTTP authentication credentials
to resolve the appropriate
Agent and create an AgentRequestContext.Constants for session initiator operations.
Custom condition class that checks an input parameter of a given name and checks
that it starts with a supplied substring.
Generates a request to a discovery service per the protocol defined originally by us under
the SAML TC at OASIS.
A descriptor for a logout consumer subflow.
Manager of
LogoutConsumerFlowDescriptor objects.Condition that evaluates a message context for a specific message type.
Mock
AgentResolver for tests.Marker interface for a
CredentialResolver providing control over order
during Spring auto-wiring.StateManager implemented by returning data encoded as is.A profile action to encode the current event (typically an error) into an agent response in an
AgentRequestContext.Extracts target resource URL from input message and prepares a
StateDataContext for
subsequent preservation handling.Action that detects submitted form data, and when permitted, stores it in a
StorageService and
issues a cookie associated with the active state token to preserve a pointer to the data for recovery.Base class for an action that maps
StateData from a StateDataContext to a token
suitable for safe transmission to a peer such that it can be used later to recover the information.A wrapper class for collecting plugin-supplied
ProfileConfiguration beans
and using them as an implicit defaults to install into Application beans in place
of a deployer-managed manual list.This is an interface to a plugin-provided infrastructure bean that will be auto-wired
into the Hub's supporting code in order to automatically install support for various
aspects of a protocol's features.
Manager of
ProtocolSupportService objects.Action that detects submitted form data, and when permitted, stores it in a
StorageService and
issues a cookie associated with the active state token to preserve a pointer to the data for recovery.Action that maps a state token into a
StateData (or subclass) object.Default lookup strategy locates state token from Agent request.
This is a duplicate of a higher level class in order to override the "type" of the
RelyingPartyConfiguration to create.Wraps a
DDF object reflecting a remoted message encapsulating an HTTP request.Helper class cribbed from Spring.
Class which holds and makes available the indirected HTTP servlet request and response via ThreadLocal storage.
An implementation of
NonnullSupplier which looks up the current thread-local
servlet request obtained from RemotedHttpServletRequestResponseContext, raising an
IllegalStateException if null.Uses a
DDF object to reflect an HTTP response back to a remote caller.Wrapper allowing use of containers of arrays.
An implementation of
NonnullSupplier which looks up the current thread-local
servlet response obtained from RemotedHttpServletRequestResponseContext, raising an
IllegalStateException if null.An action that maps a message request from an agent to the corresponding
Application
defined for that agent.Action that checks all enabled logout consumer flows and returns the flow ID of the first
enabled flow indicating it can handle the request.
This action attempts to resolve a
RelyingPartyConfiguration and adds it to a RelyingPartyContext,
using the requesting Application as the source of configurations rather than the generic resolver used
by the IdP.Action that checks all enabled token consumer flows and returns the flow ID of the first
enabled flow indicating it can handle the request.
IdPModule implementation.Details about the SP server plugin.
A descriptor for a session initiator subflow.
Manager of
SessionInitiatorFlowDescriptor objects.Constants for token and logout consumer operations.
Constants for SP agent operations.
A DTO class that carries protocol state information that needs to be recovered to validate a protocol
response; this class is designed for JSON serialization and deserialization for storage e.g.
A context to hold state information about a request.
Interface to a service that manages "state" tokens, used in most SSO protocols
to manage stateful request/response correlation and to limit exposure of the
resource URLs accessed by clients to allow recovery of the URL for final redirection.
A static resolver that subclasses the functionality needed for SP usage.
A resolver that adds statically-defined
Criterion objects to the CriteriaSet
fed into an underlying resolver.A static resolver that relies on maps to associate credentials with the core objects
that constitute an SP deployment, primarily assuming limited, exception-driven rules
to avoid scaling problems.
StateManager implemented with a StorageService and an optional CSRF-mitigation cookie.General strategy function for producing a String value from a String-based Velocity
template.
A descriptor for a token consumer subflow.
Manager of
TokenConsumerFlowDescriptor objects.An action that validates the requesting client address is allowed for the identified
Agent identity.Subclass of validation action from IdP that sidesteps all the unneeded machinery outside of building
the
Subject and verifying the result.An action that checks for a record in the
HttpSession to bypass agent authentication.Subclass of OpenSAML
ValidateHttpServletRequest action that wraps
the execute step to stash off the RemotedHttpServletRequest from the AgentRequestContext
for access by the MessageDecoder.Initiating action of a typical Session Initiator flow, this validates the input message for
correctness, and may create a
RelyingPartyContext based on the identity of the
eventual authenticating authority (the IdP/OP/etc.) if this is part of the request.Class for getting and printing the version of the plugin.
Subclass of adaptor that populates thread-local remoted servlet request/resoonse objects.
Subclass of IdP auditing action that overrides the
HttpServletRequest accessor
to bypass the "non-null" assumptions built into our profile action classes.