pl.edu.icm.unity.saml.slo.SamlRoutableSignableMessage Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of unity-server-saml Show documentation
Module with SAML support
There is a newer version: 4.0.4
/*
 * Copyright (c) 2021 Bixbit - Krzysztof Benedyczak. All rights reserved.
 * See LICENCE.txt file for licensing information.
 */
package pl.edu.icm.unity.saml.slo;

import java.io.IOException;

import org.apache.xmlbeans.XmlObject;

import eu.emi.security.authn.x509.X509Credential;
import eu.unicore.samly2.binding.HttpPostBindingSupport;
import eu.unicore.samly2.binding.HttpRedirectBindingSupport;
import eu.unicore.samly2.binding.SAMLMessageType;
import eu.unicore.samly2.proto.AbstractSAMLMessage;
import eu.unicore.security.dsig.DSigException;

/**
 * SAML message with metadata which can be sent using either HTTP Redirect or POST bindings.
 * Encapsulates crypto material to sign the message - important as the the way in which signature is created 
 * depends on the binding.
 */
public class SamlRoutableSignableMessage implements SamlRoutableMessage
{
	private final AbstractSAMLMessage message;
	private final X509Credential signingKey;
	private final SAMLMessageType messageType;
	private final String relayState;
	private final String destinationURL;

	public SamlRoutableSignableMessage(AbstractSAMLMessage message, X509Credential signingKey, SAMLMessageType messageType,
			String relayState, String destinationURL)
	{
		this.message = message;
		this.signingKey = signingKey;
		this.messageType = messageType;
		this.relayState = relayState;
		this.destinationURL = destinationURL;
	}

	@Override
	public String getPOSTConents() throws DSigException
	{
		if (signingKey != null)
			sign();
		String xmlString = getRawMessage();
		return HttpPostBindingSupport.getHtmlPOSTFormContents(
				messageType, destinationURL, xmlString, relayState);
	}

	@Override
	public String getRedirectURL() throws IOException, DSigException
	{
		String xmlString = getRawMessage();
		return signingKey != null ?
				HttpRedirectBindingSupport.getSignedRedirectURL(messageType, relayState, xmlString, 
						destinationURL, signingKey.getKey()) : 
				HttpRedirectBindingSupport.getRedirectURL(messageType, relayState, xmlString, 
						destinationURL);
	}
	
	public T getSignedMessage() throws DSigException
	{
		if (signingKey != null)
			sign();
		return message.getXMLBeanDoc();
	}

	private void sign() throws DSigException
	{
		message.sign(signingKey.getKey(), signingKey.getCertificateChain());
	}

	@Override
	public SAMLMessageType getMessageType()
	{
		return messageType;
	}

	@Override
	public String getRelayState()
	{
		return relayState;
	}

	@Override
	public String getDestinationURL()
	{
		return destinationURL;
	}
	
	@Override
	public String getRawMessage()
	{
		T xmlDoc = message.getXMLBeanDoc();
		return xmlDoc.xmlText();
	}
}