Package se.litsec.opensaml.saml2.common.request

Class PostRequestHttpObject<T extends RequestAbstractType>

java.lang.Object

net.shibboleth.utilities.java.support.component.AbstractInitializableComponent

org.opensaml.messaging.encoder.AbstractMessageEncoder

org.opensaml.messaging.encoder.servlet.AbstractHttpServletResponseMessageEncoder

org.opensaml.messaging.encoder.servlet.BaseHttpServletResponseXMLMessageEncoder

org.opensaml.saml.saml2.binding.encoding.impl.BaseSAML2MessageEncoder

org.opensaml.saml.saml2.binding.encoding.impl.HTTPPostEncoder

se.litsec.opensaml.saml2.common.request.PostRequestHttpObject<T>

Type Parameters:

T - the type of the request

All Implemented Interfaces:

Component, DestructableComponent, InitializableComponent, UnmodifiableComponent, MessageEncoder, HttpServletResponseMessageEncoder, SAMLMessageEncoder, RequestHttpObject<T>

public class PostRequestHttpObject<T extends RequestAbstractType>
extends HTTPPostEncoder
implements RequestHttpObject<T>

A RequestHttpObject for sending using HTTP POST.

If signature credentials are supplied when creating the object the request will be signed.

Author:

Martin Lindström (martin.lindstrom@litsec.se)

Field Summary

Fields inherited from class org.opensaml.saml.saml2.binding.encoding.impl.HTTPPostEncoder

DEFAULT_TEMPLATE_ID

Constructor Summary

Constructors

Constructor	Description
PostRequestHttpObject(T request, String relayState, X509Credential signatureCredentials, String endpoint, EntityDescriptor recipientMetadata)	Constructor that puts together the resulting object.
PostRequestHttpObject(T request, String relayState, X509Credential signatureCredentials, String endpoint, EntityDescriptor recipientMetadata, SignatureSigningConfiguration defaultSignatureSigningConfiguration)	Constructor that puts together the resulting object.

Method Summary

Modifier and Type	Method	Description
Map<String,String>	getHttpHeaders()	Returns a mapping of header names and values that should be used when sending the request.
String	getMethod()	Returns the HTTP method that should be used to send the request, via the user agent, to the Identity Provider.
T	getRequest()	Returns the actual request (for easy access to its elements).
Map<String,String>	getRequestParameters()	If the RequestHttpObject.getMethod() returns "POST" the request should be posted to the Identity Provider.
String	getSendUrl()	Returns the complete URL that the SP application should use when the user agent is sent to the Identity Provider.
String	toString()

Methods inherited from class org.opensaml.saml.saml2.binding.encoding.impl.HTTPPostEncoder

doDestroy, doEncode, doInitialize, getBindingURI, getVelocityEngine, getVelocityTemplateId, populateVelocityContext, postEncode, setVelocityEngine, setVelocityTemplateId

Methods inherited from class org.opensaml.saml.saml2.binding.encoding.impl.BaseSAML2MessageEncoder

getEndpointURL

Methods inherited from class org.opensaml.messaging.encoder.servlet.BaseHttpServletResponseXMLMessageEncoder

encode, getMessageToLog, logEncodedMessage, marshallMessage

Methods inherited from class org.opensaml.messaging.encoder.servlet.AbstractHttpServletResponseMessageEncoder

getHttpServletResponse, setHttpServletResponse

Methods inherited from class org.opensaml.messaging.encoder.AbstractMessageEncoder

getMessageContext, prepareContext, setMessageContext

Methods inherited from class net.shibboleth.utilities.java.support.component.AbstractInitializableComponent

destroy, initialize, isDestroyed, isInitialized

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Methods inherited from interface net.shibboleth.utilities.java.support.component.DestructableComponent

destroy, isDestroyed

Methods inherited from interface net.shibboleth.utilities.java.support.component.InitializableComponent

initialize, isInitialized

Methods inherited from interface org.opensaml.messaging.encoder.MessageEncoder

encode, prepareContext, setMessageContext

Constructor Detail

PostRequestHttpObject

public PostRequestHttpObject(T request,
                             String relayState,
                             X509Credential signatureCredentials,
                             String endpoint,
                             EntityDescriptor recipientMetadata)
                      throws MessageEncodingException,
                             SignatureException

Constructor that puts together the resulting object.

Parameters:

request - the request object

relayState - the relay state

signatureCredentials - optional signature credentials

endpoint - the endpoint where we send this request to

recipientMetadata - the recipient metadata (may be null)

Throws:

MessageEncodingException - for encoding errors

SignatureException - for signature errors

PostRequestHttpObject

public PostRequestHttpObject(T request,
                             String relayState,
                             X509Credential signatureCredentials,
                             String endpoint,
                             EntityDescriptor recipientMetadata,
                             SignatureSigningConfiguration defaultSignatureSigningConfiguration)
                      throws MessageEncodingException,
                             SignatureException

Constructor that puts together the resulting object.

Parameters:

request - the request object

relayState - the relay state

signatureCredentials - optional signature credentials

endpoint - the endpoint where we send this request to

recipientMetadata - the recipient metadata (may be null)

defaultSignatureSigningConfiguration - the default signature configuration for the application. If null, the value returned from SecurityConfigurationSupport.getGlobalSignatureSigningConfiguration() will be used

Throws:

MessageEncodingException - for encoding errors

SignatureException - for signature errors

Method Detail

getSendUrl

public String getSendUrl()

Returns the complete URL that the SP application should use when the user agent is sent to the Identity Provider.

For a redirect, this URL could look something like: https://www.theidp.com/auth?SAMLRequest=<encoded request>&RelayState=abcd.

Note: Additional query parameters may be added to the URL by the using system.

Specified by:

getSendUrl in interface RequestHttpObject<T extends RequestAbstractType>

Returns:

the URL to use when sending the user to the Identity Provider

getMethod

public String getMethod()

Returns the HTTP method that should be used to send the request, via the user agent, to the Identity Provider. Possible values for this implementation is "GET" (redirect) and "POST".

Specified by:

getMethod in interface RequestHttpObject<T extends RequestAbstractType>

Returns:

the HTTP method to use

getRequestParameters

public Map<String,String> getRequestParameters()

If the RequestHttpObject.getMethod() returns "POST" the request should be posted to the Identity Provider. The request parameters are represented using a Map where the entries represent parameter names and values.

Note: for the "GET" method this method returns null.

Specified by:

getRequestParameters in interface RequestHttpObject<T extends RequestAbstractType>

Returns:

a Map holding the POST body

getHttpHeaders

public Map<String,String> getHttpHeaders()

Returns a mapping of header names and values that should be used when sending the request.

Specified by:

getHttpHeaders in interface RequestHttpObject<T extends RequestAbstractType>

Returns:

HTTP headers

getRequest

public T getRequest()

Returns the actual request (for easy access to its elements).

Specified by:

getRequest in interface RequestHttpObject<T extends RequestAbstractType>

Returns:

the request

toString

public String toString()

Overrides:

toString in class Object