se.litsec.swedisheid.opensaml.saml2.validation

Class SwedishEidSubjectConfirmationValidator

java.lang.Object

org.opensaml.saml.saml2.assertion.impl.AbstractSubjectConfirmationValidator

se.litsec.swedisheid.opensaml.saml2.validation.SwedishEidSubjectConfirmationValidator

All Implemented Interfaces:

SubjectConfirmationValidator

public class SwedishEidSubjectConfirmationValidator
extends AbstractSubjectConfirmationValidator

A subject confirmation validator compliant with the Swedish eID Framework.

Author:

Martin Lindström (martin.lindstrom@litsec.se)

Constructor Summary

Constructors

Constructor and Description
SwedishEidSubjectConfirmationValidator()

Method Summary

Modifier and Type	Method and Description
protected ValidationResult	doValidate(SubjectConfirmation confirmation, Assertion assertion, ValidationContext context) Extends the validator with checks for the Swedish eID Framework.
String	getServicedMethod() Returns SubjectConfirmation.METHOD_BEARER.
protected ValidationResult	validateAddress(SubjectConfirmation confirmation, Assertion assertion, ValidationContext context) Overrides the default implementation.
protected ValidationResult	validateInResponseTo(SubjectConfirmation confirmation, Assertion assertion, ValidationContext context) Ensures that the InResponseTo attribute is present and that it matches the ID of the AuthnRequest.

Methods inherited from class org.opensaml.saml.saml2.assertion.impl.AbstractSubjectConfirmationValidator

validate, validateNotBefore, validateNotOnOrAfter, validateRecipient

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SwedishEidSubjectConfirmationValidator

public SwedishEidSubjectConfirmationValidator()

Method Detail

getServicedMethod

public String getServicedMethod()

Returns SubjectConfirmation.METHOD_BEARER.

Returns:

the bearer method

doValidate

protected ValidationResult doValidate(SubjectConfirmation confirmation,
                                      Assertion assertion,
                                      ValidationContext context)
                               throws AssertionValidationException

Extends the validator with checks for the Swedish eID Framework.

Specified by:

doValidate in class AbstractSubjectConfirmationValidator

Throws:

AssertionValidationException

validateInResponseTo

protected ValidationResult validateInResponseTo(SubjectConfirmation confirmation,
                                                Assertion assertion,
                                                ValidationContext context)

Ensures that the InResponseTo attribute is present and that it matches the ID of the AuthnRequest. The ID is found in the context parameter under the key CoreValidatorParameters.AUTHN_REQUEST_ID or from the object stored under CoreValidatorParameters.AUTHN_REQUEST.

Parameters:

confirmation - the subject confirmation element

assertion - the assertion

context - the validation context

Returns:

validation result

validateAddress

protected ValidationResult validateAddress(SubjectConfirmation confirmation,
                                           Assertion assertion,
                                           ValidationContext context)
                                    throws AssertionValidationException

Overrides the default implementation.

Overrides:

validateAddress in class AbstractSubjectConfirmationValidator

Throws:

AssertionValidationException