Examples of com.google.step2.discovery.Discovery2

com.google.step2.xmlsimplesign.XmlSimpleSignException
Implements Next-Generation OpenID discovery, based on Link-headers, link-elements, and host-meta. There are two different discovery operations available: (1) discover the OP endpoint(s) for a "site", and (2) discover the OP endpoint(s) for an OpenID (aka claimed id, which is the id of a user) Case (1) is for when users merely indicate the IdP to the RP, case (2) is for when users actually submit their OpenID (claimed id) to the RP, and also used during the validation of an authentication response from an IdP. The strategy for case (1) is as follows: - find the host-meta file for the site. - find a link in the host-meta that points to an XRD(S) metadata document for the site - follow the links in the XRD(S) to find the OP endpoint. The strategy for case (2) is as follows: - Try host-meta strategy (2a) - If that fails, link-header strategy (2b) - If that fails, try link-element strategy (2c) Strategy (2a) works as follows: - find the host-meta file for the host identified in the claimed id. - in the host-meta file, check whether a Link-Pattern in the host-meta points to an XRD(S) for the claimed id, and if so, skip the next two steps. - if not, find a Link in the host-meta that points to an XRD(S) metadata document for the site. - follow the URITemplate link in the site XRD(S) to find the XRD(S) for the the claimed id. - follow the links in the XRD(S) to find the OP endpoint. Strategy (2b) works as follow: - Find a link in the HTTP headers in the HTTP response that points to an XRD(S) metadata document for the claimed id. - follow the links in the XRD(S) to find the OP endpoint. Strategy (2c) works as follow: - Find an HTML link element in the document returned from the claimed id that points to an XRD(S) metadata document for the claimed id. - follow the links in the XRD(S) to find the OP endpoint. For backwards compatibility, we also provide a generic discover() method, which decides whether to use site-discovery or user-id-discovery based on the type of the provided identifier. This allows us to use this class inside the openid4java library. When calling this class through the legacy generic discover() method, we also employ a "fallback" strategy, i.e. we first try the strategy described above, and then fall back to OpenID 2.0-style discovery, if the strategy above doesn't yield any results.

    URI siteXrdsUri = URI.create("http://example.com/xrds");


    FetchRequest httpRequest = FetchRequest.createGetRequest(siteXrdsUri);


    expect(verifier.verify(isA(byte[].class), (String) isNull()))
        .andStubThrow(new XmlSimpleSignException("no signature"));
    expect(fetcher.fetch(httpRequest)).andReturn(new FakeResponse(SITE_XRD));


    control.replay();
    List<SecureDiscoveryInformation> result =
        xrdResolver.findOpEndpointsForSite(host, siteXrdsUri);

View Full Code Here

    URI siteXrdsUri = URI.create("http://example.com/xrds");


    FetchRequest httpRequest = FetchRequest.createGetRequest(siteXrdsUri);


    expect(verifier.verify(isA(byte[].class), (String) isNull()))
        .andStubThrow(new XmlSimpleSignException("no signature"));
    expect(fetcher.fetch(httpRequest)).andReturn(new FakeResponse(USER_XRD));


    control.replay();
    List<SecureDiscoveryInformation> result =
        xrdResolver.findOpEndpointsForUser(user, siteXrdsUri);

View Full Code Here

    URI siteXrdsUri = URI.create("http://example.com/xrds");


    FetchRequest httpRequest = FetchRequest.createGetRequest(siteXrdsUri);


    expect(verifier.verify(isA(byte[].class), (String) isNull()))
        .andStubThrow(new XmlSimpleSignException("no signature"));
    expect(fetcher.fetch(httpRequest)).andReturn(new FakeResponse(USER_XRD_WITH_LOCAL_ID));


    control.replay();
    List<SecureDiscoveryInformation> result =
        xrdResolver.findOpEndpointsForUser(user, siteXrdsUri);

View Full Code Here

    URI siteXrdsUri = URI.create("http://example.com/xrds");


    FetchRequest httpRequest = FetchRequest.createGetRequest(siteXrdsUri);


    expect(verifier.verify(isA(byte[].class), (String) isNull()))
        .andStubThrow(new XmlSimpleSignException("no signature"));
    expect(fetcher.fetch(httpRequest)).andReturn(new FakeResponse(SITE_XRD));


    String userXrdsUri = "https://www.google.com/accounts/o8/user-xrds?uri="
        + URLEncoder.encode(user.getIdentifier(), "UTF-8");

View Full Code Here

0 1 2 3 4 5 6 7 8 9

TOP

Related Classes of com.google.step2.discovery.Discovery2

com.google.appengine.api.urlfetch.HTTPRequest

com.google.appengine.api.urlfetch.HTTPResponse

com.google.code.samples.apps.marketplace.OpenIdServlet

com.google.step2.AuthRequestHelper

com.google.step2.AuthResponseHelper

com.google.step2.ConsumerHelper

com.google.step2.discovery.DefaultHostMetaFetcherTest

com.google.step2.discovery.IdpIdentifier

com.google.step2.discovery.LegacyXrdsResolver

com.google.step2.discovery.LegacyXrdsResolverTest

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.