Class SwedishEidResponseValidator
- java.lang.Object
-
- se.litsec.opensaml.common.validation.AbstractObjectValidator<T>
-
- se.litsec.opensaml.common.validation.AbstractSignableObjectValidator<Response>
-
- se.litsec.opensaml.saml2.common.response.ResponseValidator
-
- se.litsec.swedisheid.opensaml.saml2.validation.SwedishEidResponseValidator
-
- All Implemented Interfaces:
ObjectValidator<Response>
public class SwedishEidResponseValidator extends ResponseValidator
Extends the default response validator with requirements for the Swedish eID Framework.Supports the following
ValidationContextstatic parameters as described inResponseValidator.- Author:
- Martin Lindström (martin.lindstrom@litsec.se)
-
-
Field Summary
-
Fields inherited from class se.litsec.opensaml.common.validation.AbstractSignableObjectValidator
signaturePrevalidator, trustEngine
-
Fields inherited from class se.litsec.opensaml.common.validation.AbstractObjectValidator
DEFAULT_MAX_AGE_RECEIVED_MESSAGE
-
-
Constructor Summary
Constructors Constructor Description SwedishEidResponseValidator(SignatureTrustEngine trustEngine, SignaturePrevalidator signaturePrevalidator)Constructor.
-
Method Summary
All Methods Instance Methods Concrete Methods Modifier and Type Method Description ValidationResultvalidateAssertions(Response response, ValidationContext context)Checks according toResponseValidator.validateAssertions(Response, ValidationContext)and extends the check to validate that assertion is encrypted.protected ValidationResultvalidateSignature(Response token, ValidationContext context)Overrides the default signature validation by enforcing signature validation because a Response message MUST be signed according to the Swedish eID Framework.-
Methods inherited from class se.litsec.opensaml.saml2.common.response.ResponseValidator
getID, getIssuer, getObjectName, validate, validateConsent, validateDestination, validateExtensions, validateID, validateInResponseTo, validateIssueInstant, validateIssuer, validateStatus, validateVersion
-
Methods inherited from class se.litsec.opensaml.common.validation.AbstractSignableObjectValidator
getSignatureValidationCriteriaSet, performSignatureValidation
-
Methods inherited from class se.litsec.opensaml.common.validation.AbstractObjectValidator
getAllowedClockSkew, getMaxAgeReceivedMessage, getReceiveInstant, isStrictValidation
-
-
-
-
Constructor Detail
-
SwedishEidResponseValidator
public SwedishEidResponseValidator(SignatureTrustEngine trustEngine, SignaturePrevalidator signaturePrevalidator) throws IllegalArgumentException
Constructor.- Parameters:
trustEngine- the trust used to validate the object's signaturesignaturePrevalidator- the signature pre-validator used to pre-validate the object's signature- Throws:
IllegalArgumentException- ifnullvalues are supplied
-
-
Method Detail
-
validateSignature
protected ValidationResult validateSignature(Response token, ValidationContext context)
Overrides the default signature validation by enforcing signature validation because a Response message MUST be signed according to the Swedish eID Framework.- Overrides:
validateSignaturein classAbstractSignableObjectValidator<Response>
-
validateAssertions
public ValidationResult validateAssertions(Response response, ValidationContext context)
Checks according toResponseValidator.validateAssertions(Response, ValidationContext)and extends the check to validate that assertion is encrypted.- Overrides:
validateAssertionsin classResponseValidator
-
-