pl.edu.icm.unity.saml.validator.UnityAttributeQueryValidator Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of unity-server-saml Show documentation

Module with SAML support

There is a newer version: 4.0.4

/*
 * Copyright (c) 2012 ICM Uniwersytet Warszawski All rights reserved.
 * See LICENCE file for licensing information.
 */
package pl.edu.icm.unity.saml.validator;

import eu.unicore.samly2.exceptions.SAMLRequesterException;
import eu.unicore.samly2.exceptions.SAMLServerException;
import eu.unicore.samly2.trust.SamlTrustChecker;
import eu.unicore.samly2.validators.AttributeQueryValidator;
import eu.unicore.samly2.validators.ReplayAttackChecker;
import xmlbeans.org.oasis.saml2.assertion.NameIDType;
import xmlbeans.org.oasis.saml2.assertion.SubjectType;
import xmlbeans.org.oasis.saml2.protocol.AttributeQueryDocument;

/**
 * Adds Unity specific limitations to the Attribute Queries:
 *  Subject must have the nameID set.
 * 
 * @author K. Benedyczak
 */
public class UnityAttributeQueryValidator extends AttributeQueryValidator
{
	public UnityAttributeQueryValidator(String responderEndpointUri, SamlTrustChecker trustChecker,
			long requestValidity, ReplayAttackChecker replayChecker)
	{
		super(responderEndpointUri, trustChecker, requestValidity, replayChecker);
	}

	@Override
	public void validate(AttributeQueryDocument wrappingDocument) throws SAMLServerException
	{
		super.validate(wrappingDocument);
		SubjectType subject = wrappingDocument.getAttributeQuery().getSubject();
		NameIDType subjectName = subject.getNameID();
		if (subjectName == null || subjectName.isNil())
			throw new SAMLRequesterException("Subject name must be set");
		if (subjectName.getStringValue() == null)
			throw new SAMLRequesterException("Subject name contents must be set");
	}
}