Modifier and Type | Method and Description |
---|---|
RequestData |
WSPasswordCallback.getRequestData()
Returns the RequestData associated with the request
|
Modifier and Type | Method and Description |
---|---|
List<WSSecurityEngineResult> |
WSSecurityEngine.processSecurityHeader(Element securityHeader,
RequestData requestData)
Process the security header given the
wsse:Security DOM
Element. |
Constructor and Description |
---|
WSPasswordCallback(String id,
String pw,
String type,
int usage,
RequestData data)
Constructor.
|
Modifier and Type | Method and Description |
---|---|
void |
UsernameTokenSignedAction.execute(WSHandler handler,
int actionToDo,
Document doc,
RequestData reqData) |
void |
UsernameTokenAction.execute(WSHandler handler,
int actionToDo,
Document doc,
RequestData reqData) |
void |
TimestampAction.execute(WSHandler handler,
int actionToDo,
Document doc,
RequestData reqData) |
void |
SignatureConfirmationAction.execute(WSHandler handler,
int actionToDo,
Document doc,
RequestData reqData) |
void |
SignatureAction.execute(WSHandler handler,
int actionToDo,
Document doc,
RequestData reqData) |
void |
SAMLTokenUnsignedAction.execute(WSHandler handler,
int actionToDo,
Document doc,
RequestData reqData) |
void |
SAMLTokenSignedAction.execute(WSHandler handler,
int actionToDo,
Document doc,
RequestData reqData) |
void |
EncryptionAction.execute(WSHandler handler,
int actionToDo,
Document doc,
RequestData reqData) |
void |
Action.execute(WSHandler handler,
int actionToDo,
Document doc,
RequestData reqData) |
protected SAMLIssuer |
SAMLTokenSignedAction.loadSamlIssuer(WSHandler handler,
RequestData reqData) |
Modifier and Type | Method and Description |
---|---|
protected void |
WSHandler.checkSignatureConfirmation(RequestData reqData,
List<WSSecurityEngineResult> resultList) |
protected void |
WSHandler.decodeAlgorithmSuite(RequestData reqData) |
protected boolean |
WSHandler.decodeAllowUsernameTokenNoPassword(RequestData reqData) |
protected boolean |
WSHandler.decodeBooleanConfigValue(RequestData reqData,
String configTag,
boolean defaultToTrue) |
protected boolean |
WSHandler.decodeBSPCompliance(RequestData reqData) |
protected boolean |
WSHandler.decodeCustomPasswordTypes(RequestData reqData) |
protected void |
WSHandler.decodeDecryptionParameter(RequestData reqData) |
protected boolean |
WSHandler.decodeEnableSignatureConfirmation(RequestData reqData) |
protected void |
WSHandler.decodeEncryptionParameter(RequestData reqData) |
protected int |
WSHandler.decodeFutureTimeToLive(RequestData reqData,
boolean timestamp)
Decode the FutureTimeToLive parameter for either a Timestamp or a UsernameToken Created
element, depending on the boolean argument
|
protected boolean |
WSHandler.decodeMustUnderstand(RequestData reqData) |
protected boolean |
WSHandler.decodeNamespaceQualifiedPasswordTypes(RequestData reqData) |
protected String |
WSHandler.decodePasswordType(RequestData reqData) |
protected boolean |
WSHandler.decodePasswordTypeStrict(RequestData reqData) |
protected void |
WSHandler.decodeRequireSignedEncryptedDataElements(RequestData reqData) |
protected void |
WSHandler.decodeSignatureParameter(RequestData reqData) |
protected void |
WSHandler.decodeSignatureParameter2(RequestData reqData) |
protected boolean |
WSHandler.decodeTimestampPrecision(RequestData reqData) |
protected boolean |
WSHandler.decodeTimestampStrict(RequestData reqData) |
int |
WSHandler.decodeTimeToLive(RequestData reqData,
boolean timestamp)
Decode the TimeToLive parameter for either a Timestamp or a UsernameToken Created element,
depending on the boolean argument
|
protected boolean |
WSHandler.decodeUseEncodedPasswords(RequestData reqData) |
protected boolean |
WSHandler.decodeUseSingleCertificate(RequestData reqData) |
protected void |
WSHandler.decodeUTParameter(RequestData reqData) |
protected void |
WSHandler.doReceiverAction(int doAction,
RequestData reqData) |
protected void |
WSHandler.doSenderAction(int doAction,
Document doc,
RequestData reqData,
List<Integer> actions,
boolean isRequest)
Performs all defined security actions to set-up the SOAP request.
|
CallbackHandler |
WSHandler.getCallbackHandler(String callbackHandlerClass,
String callbackHandlerRef,
RequestData requestData)
Get a CallbackHandler instance.
|
CallbackHandler |
WSHandler.getPasswordCallbackHandler(RequestData reqData)
Get a CallbackHandler instance to obtain passwords.
|
WSPasswordCallback |
WSHandler.getPasswordCB(String username,
int doAction,
CallbackHandler callbackHandler,
RequestData requestData)
Get a password callback (WSPasswordCallback object) from a CallbackHandler instance
|
protected Crypto |
WSHandler.loadCrypto(String cryptoPropertyFile,
String cryptoPropertyRefId,
RequestData requestData)
Load a Crypto instance.
|
protected Crypto |
WSHandler.loadCryptoFromPropertiesFile(String propFilename,
RequestData reqData)
A hook to allow subclass to load Crypto instances from property files in a different
way.
|
protected Crypto |
WSHandler.loadDecryptionCrypto(RequestData requestData)
Hook to allow subclasses to load their Decryption Crypto however they see
fit.
|
protected Crypto |
WSHandler.loadEncryptionCrypto(RequestData requestData)
Hook to allow subclasses to load their Encryption Crypto however they see
fit.
|
Crypto |
WSHandler.loadSignatureCrypto(RequestData requestData)
Hook to allow subclasses to load their Signature Crypto however they see
fit.
|
Modifier and Type | Method and Description |
---|---|
void |
UsernameToken.setRawPassword(RequestData data)
Set the raw (plain text) password used to compute secret key.
|
Modifier and Type | Method and Description |
---|---|
static AssertionWrapper |
SAMLUtil.getAssertionFromKeyIdentifier(SecurityTokenReference secRef,
Element strElement,
RequestData request,
WSDocInfo wsDocInfo)
Get an AssertionWrapper object from parsing a SecurityTokenReference that uses
a KeyIdentifier that points to a SAML Assertion.
|
static SAMLKeyInfo |
SAMLUtil.getCredentialDirectlyFromKeyInfo(Element keyInfoElement,
RequestData data)
This method returns a SAMLKeyInfo corresponding to the credential found in the
KeyInfo (DOM Element) argument.
|
static SAMLKeyInfo |
SAMLUtil.getCredentialFromKeyInfo(Element keyInfoElement,
RequestData data,
WSDocInfo docInfo,
boolean bspCompliant)
This method returns a SAMLKeyInfo corresponding to the credential found in the
KeyInfo (DOM Element) argument.
|
static SAMLKeyInfo |
SAMLUtil.getCredentialFromSubject(Assertion assertion,
RequestData data,
WSDocInfo docInfo,
boolean bspCompliant)
Get the SAMLKeyInfo object corresponding to the credential stored in the Subject of a
SAML 1.1 assertion
|
static SAMLKeyInfo |
SAMLUtil.getCredentialFromSubject(Assertion assertion,
RequestData data,
WSDocInfo docInfo,
boolean bspCompliant)
Get the SAMLKeyInfo object corresponding to the credential stored in the Subject of a
SAML 2 assertion
|
static SAMLKeyInfo |
SAMLUtil.getCredentialFromSubject(AssertionWrapper assertion,
RequestData data,
WSDocInfo docInfo,
boolean bspCompliant)
Parse a SAML Assertion to obtain a SAMLKeyInfo object from
the Subject of the assertion
|
Modifier and Type | Method and Description |
---|---|
void |
AssertionWrapper.parseHOKSubject(RequestData data,
WSDocInfo docInfo)
This method parses the KeyInfo of the Subject for the holder-of-key confirmation
method, as required by the SAML Token spec.
|
void |
AssertionWrapper.verifySignature(RequestData data,
WSDocInfo docInfo)
Verify the signature of this assertion
|
Modifier and Type | Method and Description |
---|---|
void |
SignatureSTRParser.parseSecurityTokenReference(Element strElement,
RequestData data,
WSDocInfo wsDocInfo,
Map<String,Object> parameters)
Parse a SecurityTokenReference element and extract credentials.
|
void |
SecurityTokenRefSTRParser.parseSecurityTokenReference(Element strElement,
RequestData data,
WSDocInfo wsDocInfo,
Map<String,Object> parameters)
Parse a SecurityTokenReference element and extract credentials.
|
void |
STRParser.parseSecurityTokenReference(Element strElement,
RequestData data,
WSDocInfo wsDocInfo,
Map<String,Object> parameters)
Parse a SecurityTokenReference element and extract credentials.
|
void |
EncryptedKeySTRParser.parseSecurityTokenReference(Element strElement,
RequestData data,
WSDocInfo wsDocInfo,
Map<String,Object> parameters)
Parse a SecurityTokenReference element and extract credentials.
|
void |
DerivedKeyTokenSTRParser.parseSecurityTokenReference(Element strElement,
RequestData data,
WSDocInfo wsDocInfo,
Map<String,Object> parameters)
Parse a SecurityTokenReference element and extract credentials.
|
Modifier and Type | Method and Description |
---|---|
protected Crypto |
SignatureTrustValidator.getCrypto(RequestData data) |
Credential |
Validator.validate(Credential credential,
RequestData data)
Validate the credential argument.
|
Credential |
UsernameTokenValidator.validate(Credential credential,
RequestData data)
Validate the credential argument.
|
Credential |
TimestampValidator.validate(Credential credential,
RequestData data)
Validate the credential argument.
|
Credential |
SignatureTrustValidator.validate(Credential credential,
RequestData data)
Validate the credential argument.
|
Credential |
SamlAssertionValidator.validate(Credential credential,
RequestData data)
Validate the credential argument.
|
Credential |
NoOpValidator.validate(Credential credential,
RequestData data)
Validate the credential argument.
|
Credential |
KerberosTokenValidator.validate(Credential credential,
RequestData data)
Validate the credential argument.
|
Credential |
JAASUsernameTokenValidator.validate(Credential credential,
RequestData data)
Validate the credential argument.
|
protected void |
UsernameTokenValidator.verifyCustomPassword(UsernameToken usernameToken,
RequestData data)
Verify a UsernameToken containing a password of some unknown (but specified) password
type.
|
protected void |
UsernameTokenValidator.verifyDigestPassword(UsernameToken usernameToken,
RequestData data)
Verify a UsernameToken containing a password digest.
|
protected void |
UsernameTokenValidator.verifyPlaintextPassword(UsernameToken usernameToken,
RequestData data)
Verify a UsernameToken containing a plaintext password.
|
protected Credential |
SamlAssertionValidator.verifySignedAssertion(AssertionWrapper assertion,
RequestData data)
Verify trust in the signature of a signed Assertion.
|
protected boolean |
SignatureTrustValidator.verifyTrustInCert(X509Certificate cert,
Crypto crypto,
RequestData data,
boolean enableRevocation)
Evaluate whether a given certificate should be trusted.
|
protected boolean |
SignatureTrustValidator.verifyTrustInCerts(X509Certificate[] certificates,
Crypto crypto,
RequestData data,
boolean enableRevocation)
Evaluate whether the given certificate chain should be trusted.
|
protected void |
UsernameTokenValidator.verifyUnknownPassword(UsernameToken usernameToken,
RequestData data)
Verify a UsernameToken containing no password.
|
Copyright © 2014 JBoss by Red Hat. All Rights Reserved.