Package se.litsec.opensaml.saml2.metadata.provider

Class HTTPMetadataProvider

java.lang.Object

net.shibboleth.utilities.java.support.component.AbstractInitializableComponent

se.litsec.opensaml.saml2.metadata.provider.AbstractMetadataProvider

se.litsec.opensaml.saml2.metadata.provider.HTTPMetadataProvider

All Implemented Interfaces:

Component, DestructableComponent, InitializableComponent, MetadataProvider

public class HTTPMetadataProvider
extends AbstractMetadataProvider

A provider that downloads metadata from a HTTP resource.

Author:

Martin Lindström (martin.lindstrom@litsec.se)

See Also:

HTTPMetadataResolver, FileBackedHTTPMetadataResolver

Nested Class Summary

Nested classes/interfaces inherited from class se.litsec.opensaml.saml2.metadata.provider.AbstractMetadataProvider

AbstractMetadataProvider.EntityDescriptorIterator

Constructor Summary

Constructors

Constructor	Description
HTTPMetadataProvider(String metadataUrl, String backupFile)	Creates a provider that periodically downloads data from the URL given by metadataUrl.
HTTPMetadataProvider(String metadataUrl, String backupFile, org.apache.http.client.HttpClient httpClient)	Creates a provider that periodically downloads data from the URL given by metadataUrl.

Method Summary

Modifier and Type	Method	Description
static org.apache.http.client.HttpClient	createDefaultHttpClient()	Creates a default HttpClient instance that uses system properties and sets a SSLSocketFactory that is configured in a "no trust" mode, meaning that all peer certificates are accepted and no hostname check is made.
static org.apache.http.client.HttpClient	createDefaultHttpClient(KeyStore trustKeyStore, HostnameVerifier hostnameVerifier)	Creates a HttpClient instance that sets up a trust manager that accepts all certificates supplied in the trustKeyStore parameter.
protected void	createMetadataResolver(boolean requireValidMetadata, boolean failFastInitialization, MetadataFilter filter)	Creates the specific MetadataResolver instance for the provider implementation.
protected void	destroyMetadataResolver()	Destroys the metadata resolver.
String	getID()	Returns the identifier for the provider.
MetadataResolver	getMetadataResolver()	Returns the underlying OpenSAML metadata resolver.
protected void	initializeMetadataResolver()	Initializes the metadata resolver.

Methods inherited from class se.litsec.opensaml.saml2.metadata.provider.AbstractMetadataProvider

createFilter, doDestroy, doInitialize, getEntityDescriptor, getIdentityProviders, getIDPSSODescriptor, getLastUpdate, getMetadata, getMetadataDOM, getServiceProviders, getSignatureVerificationCertificates, getSPSSODescriptor, iterator, iterator, refresh, setExclusionPredicates, setFailFastInitialization, setInclusionPredicates, setPerformSchemaValidation, setRequireValidMetadata, setSignatureVerificationCertificate, setSignatureVerificationCertificates

Methods inherited from class net.shibboleth.utilities.java.support.component.AbstractInitializableComponent

destroy, initialize, isDestroyed, isInitialized

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface net.shibboleth.utilities.java.support.component.DestructableComponent

destroy, isDestroyed

Methods inherited from interface net.shibboleth.utilities.java.support.component.InitializableComponent

initialize, isInitialized

Constructor Detail

HTTPMetadataProvider

public HTTPMetadataProvider(String metadataUrl,
                            String backupFile)
                     throws ResolverException

Creates a provider that periodically downloads data from the URL given by metadataUrl. If the backupFile parameter is given the provider also stores the downloaded metadata on disk as backup.

This constructor will initialize the underlying MetadataResolver with a default HttpClient instance that is initialized according to createDefaultHttpClient().

Parameters:

metadataUrl - the URL to use when downloading metadata

backupFile - optional path to the file to where the provider should store downloaded metadata

Throws:

ResolverException - if the supplied metadata URL is invalid

HTTPMetadataProvider

public HTTPMetadataProvider(String metadataUrl,
                            String backupFile,
                            org.apache.http.client.HttpClient httpClient)
                     throws ResolverException

Creates a provider that periodically downloads data from the URL given by metadataUrl. If the backupFile parameter is given the provider also stores the downloaded metadata on disk as backup.

Parameters:

metadataUrl - the URL to use when downloading metadata

backupFile - optional path to the file to where the provider should store downloaded metadata

httpClient - the HttpClient that should be used to download the metadata

Throws:

ResolverException - if the supplied metadata URL is invalid

Method Detail

createDefaultHttpClient

public static org.apache.http.client.HttpClient createDefaultHttpClient()
                                                                 throws ResolverException

Creates a default HttpClient instance that uses system properties and sets a SSLSocketFactory that is configured in a "no trust" mode, meaning that all peer certificates are accepted and no hostname check is made.

TLS security parameters, such as a trust engine, may later be added by assigning a configured HttpClientSecurityParameters instance in the constructor.

Returns:

a default HttpClient instance

Throws:

ResolverException - for errors creating the client

createDefaultHttpClient

public static org.apache.http.client.HttpClient createDefaultHttpClient(KeyStore trustKeyStore,
                                                                        HostnameVerifier hostnameVerifier)
                                                                 throws ResolverException

Creates a HttpClient instance that sets up a trust manager that accepts all certificates supplied in the trustKeyStore parameter. The hostnameVerifier parameter tells which hostname verifier that should be used. If not supplied, a DefaultHostnameVerifier will be used.

Parameters:

trustKeyStore - a KeyStore holding the certificates that should be accepted (if null, all certificates are accepted)

hostnameVerifier - the HostnameVerifier to use (if null a DefaultHostnameVerifier is used)

Returns:

a HttpClient instance

Throws:

ResolverException - for errors creating the client

getID

public String getID()

Returns the identifier for the provider.

Returns:

the identifier

getMetadataResolver

public MetadataResolver getMetadataResolver()

Returns the underlying OpenSAML metadata resolver.

Returns:

OpenSAML metadata resolver

createMetadataResolver

protected void createMetadataResolver(boolean requireValidMetadata,
                                      boolean failFastInitialization,
                                      MetadataFilter filter)
                               throws ResolverException

Creates the specific MetadataResolver instance for the provider implementation.

The filter parameter is a MetadataFilter that must be installed for the resolver. Any other filters that should be installed by the specific instance should be placed last in a filter chain.

Specified by:

createMetadataResolver in class AbstractMetadataProvider

Parameters:

requireValidMetadata - should be passed into MetadataResolver.setRequireValidMetadata(boolean)

failFastInitialization - should be passed into AbstractMetadataResolver.setFailFastInitialization(boolean) (if applicable)

filter - filter that must be installed for the resolver

Throws:

ResolverException - for errors creating the resolver

initializeMetadataResolver

protected void initializeMetadataResolver()
                                   throws ComponentInitializationException

Initializes the metadata resolver.

Specified by:

initializeMetadataResolver in class AbstractMetadataProvider

Throws:

ComponentInitializationException - for initialization errors

destroyMetadataResolver

protected void destroyMetadataResolver()

Destroys the metadata resolver.

Specified by:

destroyMetadataResolver in class AbstractMetadataProvider