Class SAMLProtocolResponseValidator


  • public class SAMLProtocolResponseValidator
    extends Object
    Validate a SAML (1.1 or 2.0) Protocol Response. It validates the Response against the specs, the signature of the Response (if it exists), and any internal Assertion stored in the Response - including any signature. It validates the status code of the Response as well.
    • Constructor Detail

      • SAMLProtocolResponseValidator

        public SAMLProtocolResponseValidator()
    • Method Detail

      • validateSamlResponse

        public void validateSamlResponse​(org.opensaml.saml.saml2.core.Response samlResponse,
                                         org.apache.wss4j.common.crypto.Crypto sigCrypto,
                                         CallbackHandler callbackHandler)
                                  throws org.apache.wss4j.common.ext.WSSecurityException
        Validate a SAML 2 Protocol Response
        Parameters:
        samlResponse -
        sigCrypto -
        callbackHandler -
        Throws:
        org.apache.wss4j.common.ext.WSSecurityException
      • validateSamlResponse

        public void validateSamlResponse​(org.opensaml.saml.saml1.core.Response samlResponse,
                                         org.apache.wss4j.common.crypto.Crypto sigCrypto,
                                         CallbackHandler callbackHandler)
                                  throws org.apache.wss4j.common.ext.WSSecurityException
        Validate a SAML 1.1 Protocol Response
        Parameters:
        samlResponse -
        sigCrypto -
        callbackHandler -
        Throws:
        org.apache.wss4j.common.ext.WSSecurityException
      • createKeyInfoFromDefaultAlias

        protected org.apache.wss4j.common.saml.SAMLKeyInfo createKeyInfoFromDefaultAlias​(org.apache.wss4j.common.crypto.Crypto sigCrypto)
                                                                                  throws org.apache.wss4j.common.ext.WSSecurityException
        Throws:
        org.apache.wss4j.common.ext.WSSecurityException
      • setKeyInfoMustBeAvailable

        public void setKeyInfoMustBeAvailable​(boolean keyInfoMustBeAvailable)
      • getFutureTTL

        public int getFutureTTL()
      • setFutureTTL

        public void setFutureTTL​(int futureTTL)