org.opensaml.saml.saml2.binding.encoding.impl

Class HTTPRedirectDeflateEncoder

java.lang.Object

net.shibboleth.utilities.java.support.component.AbstractInitializableComponent

org.opensaml.messaging.encoder.AbstractMessageEncoder<MessageType>

org.opensaml.messaging.encoder.servlet.AbstractHttpServletResponseMessageEncoder<MessageType>

org.opensaml.messaging.encoder.servlet.BaseHttpServletResponseXMLMessageEncoder<SAMLObject>

org.opensaml.saml.saml2.binding.encoding.impl.BaseSAML2MessageEncoder

org.opensaml.saml.saml2.binding.encoding.impl.HTTPRedirectDeflateEncoder

All Implemented Interfaces:

net.shibboleth.utilities.java.support.component.Component, net.shibboleth.utilities.java.support.component.DestructableComponent, net.shibboleth.utilities.java.support.component.InitializableComponent, net.shibboleth.utilities.java.support.component.UnmodifiableComponent, MessageEncoder<SAMLObject>, HttpServletResponseMessageEncoder<SAMLObject>, SAMLMessageEncoder

public class HTTPRedirectDeflateEncoder
extends BaseSAML2MessageEncoder

SAML 2.0 HTTP Redirect encoder using the DEFLATE encoding method. This encoder only supports DEFLATE compression and DSA-SHA1 and RSA-SHA1 signatures.

Constructor Summary

Constructors

Constructor and Description
HTTPRedirectDeflateEncoder() Constructor.

Method Summary

Modifier and Type	Method and Description
protected String	buildRedirectURL(MessageContext<SAMLObject> messageContext, String endpoint, String message) Builds the URL to redirect the client to.
protected String	deflateAndBase64Encode(SAMLObject message) DEFLATE (RFC1951) compresses the given SAML message.
protected void	doEncode() Performs the encoding logic.
protected String	generateSignature(Credential signingCredential, String algorithmURI, String queryString) Generates the signature over the query string.
String	getBindingURI() Gets the SAML binding URI supported by this encoder.
protected String	getSignatureAlgorithmURI(SignatureSigningParameters signingParameters) Gets the signature algorithm URI to use.
protected void	removeSignature(SAMLObject message) Removes the signature from the protocol message.

Methods inherited from class org.opensaml.saml.saml2.binding.encoding.impl.BaseSAML2MessageEncoder

getEndpointURL

Methods inherited from class org.opensaml.messaging.encoder.servlet.BaseHttpServletResponseXMLMessageEncoder

encode, getMessageToLog, logEncodedMessage, marshallMessage

Methods inherited from class org.opensaml.messaging.encoder.servlet.AbstractHttpServletResponseMessageEncoder

doDestroy, doInitialize, getHttpServletResponse, setHttpServletResponse

Methods inherited from class org.opensaml.messaging.encoder.AbstractMessageEncoder

getMessageContext, prepareContext, setMessageContext

Methods inherited from class net.shibboleth.utilities.java.support.component.AbstractInitializableComponent

destroy, initialize, isDestroyed, isInitialized

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.opensaml.messaging.encoder.MessageEncoder

encode, prepareContext, setMessageContext

Methods inherited from interface net.shibboleth.utilities.java.support.component.InitializableComponent

initialize, isInitialized

Methods inherited from interface net.shibboleth.utilities.java.support.component.DestructableComponent

destroy, isDestroyed

Constructor Detail

HTTPRedirectDeflateEncoder

public HTTPRedirectDeflateEncoder()

Constructor.

Method Detail

getBindingURI

public String getBindingURI()

Gets the SAML binding URI supported by this encoder.

Returns:

SAML binding URI supported by this encoder

doEncode

protected void doEncode()
                 throws MessageEncodingException

Performs the encoding logic. By the time this is called, this encoder has already been initialized and checked to ensure that it has not been destroyed.

Specified by:

doEncode in class AbstractMessageEncoder<SAMLObject>

Throws:

MessageEncodingException - thrown if there is a problem encoding the message

removeSignature

protected void removeSignature(SAMLObject message)

Removes the signature from the protocol message.

Parameters:

message - current message context

deflateAndBase64Encode

protected String deflateAndBase64Encode(SAMLObject message)
                                 throws MessageEncodingException

DEFLATE (RFC1951) compresses the given SAML message.

Parameters:

message - SAML message

Returns:

DEFLATE compressed message

Throws:

MessageEncodingException - thrown if there is a problem compressing the message

buildRedirectURL

protected String buildRedirectURL(MessageContext<SAMLObject> messageContext,
                                  String endpoint,
                                  String message)
                           throws MessageEncodingException

Builds the URL to redirect the client to.

Parameters:

messageContext - current message context

endpoint - endpoint URL to send encoded message to

message - Deflated and Base64 encoded message

Returns:

URL to redirect client to

Throws:

MessageEncodingException - thrown if the SAML message is neither a RequestAbstractType or Response

getSignatureAlgorithmURI

protected String getSignatureAlgorithmURI(SignatureSigningParameters signingParameters)
                                   throws MessageEncodingException

Gets the signature algorithm URI to use.

Parameters:

signingParameters - the signing parameters to use

Returns:

signature algorithm to use with the associated signing credential

Throws:

MessageEncodingException - thrown if the algorithm URI is not supplied explicitly and could not be derived from the supplied credential

generateSignature

protected String generateSignature(Credential signingCredential,
                                   String algorithmURI,
                                   String queryString)
                            throws MessageEncodingException

Generates the signature over the query string.

Parameters:

signingCredential - credential that will be used to sign query string

algorithmURI - algorithm URI of the signing credential

queryString - query string to be signed

Returns:

base64 encoded signature of query string

Throws:

MessageEncodingException - there is an error computing the signature