Examples of org.opensaml.security.MetadataCredentialResolver

org.opensaml.security.MetadataCredentialResolver
A credential resolver capable of resolving credentials from SAML 2 metadata; The instance of {@link CriteriaSet} passed to {@link #resolve(CriteriaSet)} and {@link #resolveSingle(CriteriaSet)}must minimally contain 2 criteria: {@link EntityIDCriteria} and {@link MetadataCriteria}. The values for {@link EntityIDCriteria#getEntityID()} and {@link MetadataCriteria#getRole()} are mandatory. If the protocol valueobtained via {@link MetadataCriteria#getProtocol()} is not supplied, credentials will be resolved from all matchingroles, regardless of protocol support. Specification of a {@link UsageCriteria} is optional. If usage criteria isabsent from the criteria set, the effective value {@link UsageType#UNSPECIFIED} will be used for credentialresolution. This credential resolver will cache the resolved the credentials in a memory-sensitive cache. If the metadata provider is an {@link ObservableMetadataProvider} this resolver will also clear its cache when the underlyingmetadata changes.

    public SignatureTrustEngineProvider(final MetadataProvider metadataProvider) {
        this.metadataProvider = metadataProvider;
    }


    public SignatureTrustEngine build() {
        MetadataCredentialResolver metadataResolver = new MetadataCredentialResolver(this.metadataProvider);
        return new ExplicitKeySignatureTrustEngine(metadataResolver, Configuration.getGlobalSecurityConfiguration()
                .getDefaultKeyInfoCredentialResolver());
    }

View Full Code Here

        Assert.notNull(keyManager, "Key manager must be set");
        Assert.notNull(metadata, "Metadata must be set");
        Assert.notNull(storageFactory, "MessageStorageFactory must be set");


        if (metadataResolver == null) {
            MetadataCredentialResolver resolver = new org.springframework.security.saml.trust.MetadataCredentialResolver(metadata, keyManager);
            resolver.setMeetAllCriteria(false);
            resolver.setUnevaluableSatisfies(true);
            this.metadataResolver = resolver;
        }


        if (pkixResolver == null) {
            pkixResolver = new PKIXInformationResolver(metadataResolver, metadata, keyManager);

View Full Code Here

TOP

Related Classes of org.opensaml.security.MetadataCredentialResolver

org.opensaml.saml2.metadata.provider.ObservableMetadataProvider

org.opensaml.saml2.metadata.RoleDescriptor

org.opensaml.xml.security.credential.BasicCredential

org.opensaml.xml.security.credential.UsageType

org.opensaml.xml.security.criteria.EntityIDCriteria

org.opensaml.xml.security.criteria.UsageCriteria

org.opensaml.xml.security.CriteriaSet

org.opensaml.xml.security.keyinfo.KeyInfoCriteria

org.pac4j.saml.crypto.SignatureTrustEngineProvider

org.springframework.security.saml.context.SAMLContextProviderImpl

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.