Examples of org.opensaml.security.SAMLSignatureProfileValidator

org.opensaml.security.SAMLSignatureProfileValidator
A validator for instances of {@link Signature}, which validates that the signature meets security-related requirements indicated by the SAML profile of XML Signature.

     * 
     * @param engine Trust engine used to verify the signature
     */
    public SAMLProtocolMessageXMLSignatureSecurityPolicyRule(TrustEngine<Signature> engine) {
        super(engine);
        sigValidator = new SAMLSignatureProfileValidator();
    }

View Full Code Here

        if (engine == null) {
            throw new IllegalArgumentException("Signature trust engine may not be null");
        }


        signatureTrustEngine = engine;
        sigValidator = new SAMLSignatureProfileValidator();
    }

View Full Code Here

    private void validateSignatureAgainstProfiles(
        Signature signature, 
        SAMLKeyInfo samlKeyInfo
    ) throws WSSecurityException {
        // Validate Signature against profiles
        SAMLSignatureProfileValidator validator = new SAMLSignatureProfileValidator();
        try {
            validator.validate(signature);
        } catch (ValidationException ex) {
            LOG.log(Level.FINE, "Error in validating the SAML Signature: " + ex.getMessage(), ex);
            throw new WSSecurityException(WSSecurityException.FAILURE, "invalidSAMLsecurity");
        }

View Full Code Here

     * @param trustEngine
     */
    protected void validateSignature(final Signature signature, final String idpEntityId,
            final SignatureTrustEngine trustEngine) {


        SAMLSignatureProfileValidator validator = new SAMLSignatureProfileValidator();
        try {
            validator.validate(signature);
        } catch (ValidationException e) {
            throw new SamlException("SAMLSignatureProfileValidator failed to validate signature", e);
        }


        CriteriaSet criteriaSet = new CriteriaSet();

View Full Code Here

    private void validateSignatureAgainstProfiles(
        Signature signature, 
        SAMLKeyInfo samlKeyInfo
    ) throws WSSecurityException {
        // Validate Signature against profiles
        SAMLSignatureProfileValidator validator = new SAMLSignatureProfileValidator();
        try {
            validator.validate(signature);
        } catch (ValidationException ex) {
            LOG.log(Level.FINE, "Error in validating the SAML Signature: " + ex.getMessage(), ex);
            throw new WSSecurityException(WSSecurityException.ErrorCode.FAILURE, "invalidSAMLsecurity");
        }

View Full Code Here


        if (trustEngine == null) {
            throw new SecurityException("Trust engine is not set, signature can't be verified");
        }


        SAMLSignatureProfileValidator validator = new SAMLSignatureProfileValidator();
        validator.validate(signature);
        CriteriaSet criteriaSet = new CriteriaSet();
        criteriaSet.add(new EntityIDCriteria(IDPEntityID));
        criteriaSet.add(new MetadataCriteria(IDPSSODescriptor.DEFAULT_ELEMENT_NAME, SAMLConstants.SAML20P_NS));
        criteriaSet.add(new UsageCriteria(UsageType.SIGNING));
        log.debug("Verifying signature", signature);

View Full Code Here

     * @throws WSSecurityException
     */
    public void validateSignatureAgainstProfile() throws WSSecurityException {
        Signature sig = getSignature();
        if (sig != null) {
            SAMLSignatureProfileValidator validator = new SAMLSignatureProfileValidator();
            try {
                validator.validate(sig);
            } catch (ValidationException ex) {
                throw new WSSecurityException(WSSecurityException.ErrorCode.FAILURE, 
                    "empty", ex, "SAML signature validation failed");
            }
        }

View Full Code Here

        if (engine == null) {
            throw new IllegalArgumentException("Signature trust engine may not be null");
        }


        signatureTrustEngine = engine;
        sigValidator = new SAMLSignatureProfileValidator();
    }

View Full Code Here

     * 
     * @param engine Trust engine used to verify the signature
     */
    public SAMLProtocolMessageXMLSignatureSecurityPolicyRule(TrustEngine<Signature> engine) {
        super(engine);
        sigValidator = new SAMLSignatureProfileValidator();
    }

View Full Code Here

                throw new WSSecurityException(
                    WSSecurityException.FAILURE, "invalidSAMLsecurity",
                    new Object[]{"cannot get certificate or key"}
                );
            }
            SAMLSignatureProfileValidator validator = new SAMLSignatureProfileValidator();
            try {
                validator.validate(sig);
            } catch (ValidationException ex) {
                throw new WSSecurityException("SAML signature validation failed", ex);
            }
            
            BasicX509Credential credential = new BasicX509Credential();

View Full Code Here

0 1 2

TOP

Related Classes of org.opensaml.security.SAMLSignatureProfileValidator

org.apache.cxf.rs.security.saml.sso.SAMLProtocolResponseValidator

org.apache.ws.security.saml.ext.AssertionWrapper

org.apache.wss4j.common.saml.SamlAssertionWrapper

org.apache.xml.security.signature.Reference

org.apache.xml.security.signature.XMLSignature

org.apache.xml.security.transforms.Transform

org.apache.xml.security.transforms.Transforms

org.opensaml.common.binding.security.SAMLProtocolMessageXMLSignatureSecurityPolicyRule

org.opensaml.common.SignableSAMLObject

org.opensaml.saml2.metadata.provider.SignatureValidationFilter

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.