Examples of com.google.step2.discovery.Discovery2

com.google.step2.http.FetchRequest
Implements Next-Generation OpenID discovery, based on Link-headers, link-elements, and host-meta. There are two different discovery operations available: (1) discover the OP endpoint(s) for a "site", and (2) discover the OP endpoint(s) for an OpenID (aka claimed id, which is the id of a user) Case (1) is for when users merely indicate the IdP to the RP, case (2) is for when users actually submit their OpenID (claimed id) to the RP, and also used during the validation of an authentication response from an IdP. The strategy for case (1) is as follows: - find the host-meta file for the site. - find a link in the host-meta that points to an XRD(S) metadata document for the site - follow the links in the XRD(S) to find the OP endpoint. The strategy for case (2) is as follows: - Try host-meta strategy (2a) - If that fails, link-header strategy (2b) - If that fails, try link-element strategy (2c) Strategy (2a) works as follows: - find the host-meta file for the host identified in the claimed id. - in the host-meta file, check whether a Link-Pattern in the host-meta points to an XRD(S) for the claimed id, and if so, skip the next two steps. - if not, find a Link in the host-meta that points to an XRD(S) metadata document for the site. - follow the URITemplate link in the site XRD(S) to find the XRD(S) for the the claimed id. - follow the links in the XRD(S) to find the OP endpoint. Strategy (2b) works as follow: - Find a link in the HTTP headers in the HTTP response that points to an XRD(S) metadata document for the claimed id. - follow the links in the XRD(S) to find the OP endpoint. Strategy (2c) works as follow: - Find an HTML link element in the document returned from the claimed id that points to an XRD(S) metadata document for the claimed id. - follow the links in the XRD(S) to find the OP endpoint. For backwards compatibility, we also provide a generic discover() method, which decides whether to use site-discovery or user-id-discovery based on the type of the provided identifier. This allows us to use this class inside the openid4java library. When calling this class through the legacy generic discover() method, we also employ a "fallback" strategy, i.e. we first try the strategy described above, and then fall back to OpenID 2.0-style discovery, if the strategy above doesn't yield any results.


  public void testFindOpEndpointsForUser_direct() throws Exception {
    UrlIdentifier user = new UrlIdentifier("http://balfanz.net/openid?id=12345");
    URI siteXrdsUri = URI.create("http://example.com/xrds");


    FetchRequest httpRequest = FetchRequest.createGetRequest(siteXrdsUri);


    expect(verifier.verify(isA(byte[].class), (String) isNull()))
        .andStubThrow(new XmlSimpleSignException("no signature"));
    expect(fetcher.fetch(httpRequest)).andReturn(new FakeResponse(USER_XRD));

View Full Code Here


  public void testFindOpEndpointsForUser_directWithLocalId() throws Exception {
    UrlIdentifier user = new UrlIdentifier("http://balfanz.net/openid?id=12345");
    URI siteXrdsUri = URI.create("http://example.com/xrds");


    FetchRequest httpRequest = FetchRequest.createGetRequest(siteXrdsUri);


    expect(verifier.verify(isA(byte[].class), (String) isNull()))
        .andStubThrow(new XmlSimpleSignException("no signature"));
    expect(fetcher.fetch(httpRequest)).andReturn(new FakeResponse(USER_XRD_WITH_LOCAL_ID));

View Full Code Here


  public void testFindOpEndpointsForUser_throughSiteXrds() throws Exception {
    UrlIdentifier user = new UrlIdentifier("http://balfanz.net/openid?id=12345");
    URI siteXrdsUri = URI.create("http://example.com/xrds");


    FetchRequest httpRequest = FetchRequest.createGetRequest(siteXrdsUri);


    expect(verifier.verify(isA(byte[].class), (String) isNull()))
        .andStubThrow(new XmlSimpleSignException("no signature"));
    expect(fetcher.fetch(httpRequest)).andReturn(new FakeResponse(SITE_XRD));


    String userXrdsUri = "https://www.google.com/accounts/o8/user-xrds?uri="
        + URLEncoder.encode(user.getIdentifier(), "UTF-8");


    FetchRequest nextRequest = FetchRequest.createGetRequest(URI.create(userXrdsUri));


    expect(fetcher.fetch(nextRequest)).andReturn(new FakeResponse(USER_XRD));


    control.replay();
    List<SecureDiscoveryInformation> result =

View Full Code Here

  public void testFindOpEndpointsForUser_throughSiteXrds_secure()
      throws Exception {
    UrlIdentifier user = new UrlIdentifier("http://balfanz.net/openid?id=12345");
    URI siteXrdsUri = URI.create("http://example.com/xrds");


    FetchRequest httpRequest = FetchRequest.createGetRequest(siteXrdsUri);
    VerificationResult verification = new VerificationResult(
        ImmutableList.of(
            CertConstantUtil.SERVER_PUB_CERT,
            CertConstantUtil.INTERMEDIATE_PUB_CERT));


    expect(fetcher.fetch(httpRequest)).andReturn(new FakeResponse(SITE_XRD));
    expect(verifier.verify(aryEq(SITE_XRD.getBytes()), (String) isNull()))
        .andReturn(verification);
    expect(validator.matches(CertConstantUtil.SERVER_PUB_CERT, "balfanz.net"))
        .andReturn(Boolean.TRUE);


    String userXrdsUri = "https://www.google.com/accounts/o8/user-xrds?uri="
        + URLEncoder.encode(user.getIdentifier(), "UTF-8");


    FetchRequest nextRequest = FetchRequest.createGetRequest(
        URI.create(userXrdsUri));


    expect(fetcher.fetch(nextRequest)).andReturn(new FakeResponse(USER_XRD));
    expect(verifier.verify(aryEq(USER_XRD.getBytes()), (String) isNull()))
        .andReturn(verification);

View Full Code Here

  public void testFindOpEndpointsForUser_throughSiteXrds_withNextAuthority()
      throws Exception {
    UrlIdentifier user = new UrlIdentifier("http://balfanz.net/openid?id=12345");
    URI siteXrdsUri = URI.create("http://example.com/xrds");


    FetchRequest httpRequest = FetchRequest.createGetRequest(siteXrdsUri);
    VerificationResult verification = new VerificationResult(
        ImmutableList.of(
            CertConstantUtil.SERVER_PUB_CERT,
            CertConstantUtil.INTERMEDIATE_PUB_CERT));


    expect(fetcher.fetch(httpRequest))
        .andReturn(new FakeResponse(SITE_XRD_NEXT_AUTHORITY));
    expect(verifier.verify(aryEq(SITE_XRD_NEXT_AUTHORITY.getBytes()),
        (String) isNull()))
        .andReturn(verification);
    expect(validator.matches(CertConstantUtil.SERVER_PUB_CERT, "balfanz.net"))
        .andReturn(Boolean.TRUE);


    String userXrdsUri = "https://www.google.com/accounts/o8/user-xrds?uri="
        + URLEncoder.encode(user.getIdentifier(), "UTF-8");


    FetchRequest nextRequest = FetchRequest.createGetRequest(
        URI.create(userXrdsUri));


    expect(fetcher.fetch(nextRequest)).andReturn(new FakeResponse(USER_XRD));
    expect(verifier.verify(aryEq(USER_XRD.getBytes()), (String) isNull()))
        .andReturn(verification);

View Full Code Here

  public void testFindOpEndpointsForUser_throughSiteXrds_SignatureInHeader()
      throws Exception {
    UrlIdentifier user = new UrlIdentifier("http://balfanz.net/openid?id=12345");
    URI siteXrdsUri = URI.create("http://example.com/xrds");


    FetchRequest httpRequest = FetchRequest.createGetRequest(siteXrdsUri);
    VerificationResult verification = new VerificationResult(
        ImmutableList.of(
            CertConstantUtil.SERVER_PUB_CERT,
            CertConstantUtil.INTERMEDIATE_PUB_CERT));
    FakeResponse siteResponse = new FakeResponse(SITE_XRD);
    siteResponse.setSignature("siteSig");


    FakeResponse userResponse = new FakeResponse(USER_XRD);
    userResponse.setSignature("userSig");


    expect(fetcher.fetch(httpRequest)).andReturn(siteResponse);
    expect(verifier.verify(aryEq(SITE_XRD.getBytes()), eq("siteSig")))
        .andReturn(verification);
    expect(validator.matches(CertConstantUtil.SERVER_PUB_CERT, "balfanz.net"))
        .andReturn(Boolean.TRUE);


    String userXrdsUri = "https://www.google.com/accounts/o8/user-xrds?uri="
        + URLEncoder.encode(user.getIdentifier(), "UTF-8");


    FetchRequest nextRequest = FetchRequest.createGetRequest(
        URI.create(userXrdsUri));


    expect(fetcher.fetch(nextRequest)).andReturn(userResponse);
    expect(verifier.verify(aryEq(USER_XRD.getBytes()), eq("userSig")))
        .andReturn(verification);

View Full Code Here

    fetcher = new DefaultHostMetaFetcher(http);
  }


  public void testGet() throws Exception {
    String host = "host.com";
    FetchRequest request =
        FetchRequest.createGetRequest(new URI("http://host.com/host-meta"));
    FetchResponse response = new FakeFetchResponse(200,
        "Link: <http://foo.com/bar>; rel=foobar; type=foo\n");


    expect(http.fetch(request)).andReturn(response);

View Full Code Here

    assertInputStreamIsClosed(response);
  }


  public void testGet_syntaxError() throws Exception {
    String host = "host.com";
    FetchRequest request =
        FetchRequest.createGetRequest(new URI("http://host.com/host-meta"));
    FetchResponse response = new FakeFetchResponse(200,
        "Link: <http://foo.com/bar>; rel=foobar type=foo\n");


    expect(http.fetch(request)).andReturn(response);

View Full Code Here

    assertInputStreamIsClosed(response);
  }


  public void testGet_fetchException() throws Exception {
    String host = "host.com";
    FetchRequest request =
        FetchRequest.createGetRequest(new URI("http://host.com/host-meta"));


    expect(http.fetch(request)).andThrow(new FetchException());


    control.replay();

View Full Code Here

    control.verify();
  }


  public void testGet_httpErrorCode() throws Exception {
    String host = "host.com";
    FetchRequest request =
        FetchRequest.createGetRequest(new URI("http://host.com/host-meta"));
    FetchResponse response = new FakeFetchResponse(400, "error");


    expect(http.fetch(request)).andReturn(response);

View Full Code Here

0 1 2 3 4 5 6 7 8 9

TOP

Related Classes of com.google.step2.discovery.Discovery2

com.google.appengine.api.urlfetch.HTTPRequest

com.google.appengine.api.urlfetch.HTTPResponse

com.google.code.samples.apps.marketplace.OpenIdServlet

com.google.step2.AuthRequestHelper

com.google.step2.AuthResponseHelper

com.google.step2.ConsumerHelper

com.google.step2.discovery.DefaultHostMetaFetcherTest

com.google.step2.discovery.IdpIdentifier

com.google.step2.discovery.LegacyXrdsResolver

com.google.step2.discovery.LegacyXrdsResolverTest

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.