net.shibboleth.idp.saml.profile.config

Class AbstractSAMLProfileConfiguration

java.lang.Object

net.shibboleth.idp.profile.config.AbstractProfileConfiguration

net.shibboleth.idp.saml.profile.config.AbstractSAMLProfileConfiguration

All Implemented Interfaces:

ProfileConfiguration, SAMLProfileConfiguration, net.shibboleth.utilities.java.support.component.Component, net.shibboleth.utilities.java.support.component.IdentifiedComponent

Direct Known Subclasses:

AbstractSAML2ProfileConfiguration, ArtifactResolutionProfileConfiguration, AttributeQueryProfileConfiguration, BrowserSSOProfileConfiguration

public abstract class AbstractSAMLProfileConfiguration
extends AbstractProfileConfiguration
implements SAMLProfileConfiguration

Base class for SAML profile configurations.

Field Summary

Fields

Modifier and Type	Field and Description
private Set<String>	assertionAudiences Additional audiences to which an assertion may be released.
private long	assertionLifetime Lifetime of an assertion in milliseconds.
private boolean	includeConditionsNotBefore Whether to include a NotBefore attribute in the Conditions of generated assertions.
private com.google.common.base.Predicate<org.opensaml.profile.context.ProfileRequestContext>	signAssertionsPredicate Predicate used to determine if the generated assertion should be signed.
private com.google.common.base.Predicate<org.opensaml.profile.context.ProfileRequestContext>	signedRequestsPredicate Predicate used to determine if the received request should be signed.
private com.google.common.base.Predicate<org.opensaml.profile.context.ProfileRequestContext>	signResponsesPredicate Predicate used to determine if the generated response should be signed.

Constructor Summary

Constructors

Constructor and Description
AbstractSAMLProfileConfiguration(String profileId) Constructor.

Method Summary

Methods

Modifier and Type	Method and Description
Set<String>	getAdditionalAudiencesForAssertion() Get an unmodifiable set of audiences, in addition to the relying party(ies) to which the IdP is issuing the assertion, with which an assertion may be shared.
long	getAssertionLifetime() Get the lifetime of generated assertions in milliseconds.
com.google.common.base.Predicate<org.opensaml.profile.context.ProfileRequestContext>	getSignAssertions() Get the predicate used to determine if generated assertions should be signed.
com.google.common.base.Predicate<org.opensaml.profile.context.ProfileRequestContext>	getSignRequests() Get the predicate used to determine if generated requests should be signed.
com.google.common.base.Predicate<org.opensaml.profile.context.ProfileRequestContext>	getSignResponses() Get the predicate used to determine if generated responses should be signed.
boolean	includeConditionsNotBefore() Get whether to include a NotBefore attribute in the Conditions of generated assertions.
void	setAdditionalAudienceForAssertion(Collection<String> audiences) Set the set of audiences, in addition to the relying party(ies) to which the IdP is issuing the assertion, with which an assertion may be shared.
void	setAssertionLifetime(long lifetime) Set the lifetime of an assertion.
void	setIncludeConditionsNotBefore(boolean include) Set whether to include a NotBefore attribute in the Conditions of generated assertions.
void	setSignAssertions(com.google.common.base.Predicate<org.opensaml.profile.context.ProfileRequestContext> predicate) Set the predicate used to determine if generated assertions should be signed.
void	setSignRequests(com.google.common.base.Predicate<org.opensaml.profile.context.ProfileRequestContext> predicate) Set the predicate used to determine if generated requests should be signed.
void	setSignResponses(com.google.common.base.Predicate<org.opensaml.profile.context.ProfileRequestContext> predicate) Set the predicate used to determine if generated responses should be signed.

Methods inherited from class net.shibboleth.idp.profile.config.AbstractProfileConfiguration

equals, getId, getInboundInterceptorFlows, getOutboundInterceptorFlows, getSecurityConfiguration, hashCode, setInboundInterceptorFlows, setOutboundInterceptorFlows, setSecurityConfiguration

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface net.shibboleth.idp.profile.config.ProfileConfiguration

getInboundInterceptorFlows, getOutboundInterceptorFlows, getSecurityConfiguration

Methods inherited from interface net.shibboleth.utilities.java.support.component.IdentifiedComponent

getId

Field Detail

signedRequestsPredicate

@Nonnull
private com.google.common.base.Predicate<org.opensaml.profile.context.ProfileRequestContext> signedRequestsPredicate

Predicate used to determine if the received request should be signed. Default returns false.

signResponsesPredicate

@Nonnull
private com.google.common.base.Predicate<org.opensaml.profile.context.ProfileRequestContext> signResponsesPredicate

Predicate used to determine if the generated response should be signed. Default returns true.

signAssertionsPredicate

@Nonnull
private com.google.common.base.Predicate<org.opensaml.profile.context.ProfileRequestContext> signAssertionsPredicate

Predicate used to determine if the generated assertion should be signed. Default returns false.

assertionLifetime

@Positive
@Duration
private long assertionLifetime

Lifetime of an assertion in milliseconds. Default value: 5 minutes

includeConditionsNotBefore

private boolean includeConditionsNotBefore

Whether to include a NotBefore attribute in the Conditions of generated assertions.

assertionAudiences

@Nonnull
@NonnullElements
private Set<String> assertionAudiences

Additional audiences to which an assertion may be released. Default value: empty

Constructor Detail

AbstractSAMLProfileConfiguration

public AbstractSAMLProfileConfiguration(@Nonnull@NotEmpty
                                String profileId)

Constructor.

Parameters:

profileId - ID of the the communication profile

Method Detail

getSignAssertions

@Nonnull
public com.google.common.base.Predicate<org.opensaml.profile.context.ProfileRequestContext> getSignAssertions()

Get the predicate used to determine if generated assertions should be signed.

Specified by:

getSignAssertions in interface SAMLProfileConfiguration

Returns:

predicate used to determine if generated assertions should be signed

setSignAssertions

public void setSignAssertions(@Nonnull
                     com.google.common.base.Predicate<org.opensaml.profile.context.ProfileRequestContext> predicate)

Set the predicate used to determine if generated assertions should be signed.

Parameters:

predicate - predicate used to determine if generated assertions should be signed

getSignRequests

@Nonnull
public com.google.common.base.Predicate<org.opensaml.profile.context.ProfileRequestContext> getSignRequests()

Get the predicate used to determine if generated requests should be signed.

Specified by:

getSignRequests in interface SAMLProfileConfiguration

Returns:

predicate used to determine if generated requests should be signed

setSignRequests

public void setSignRequests(@Nonnull
                   com.google.common.base.Predicate<org.opensaml.profile.context.ProfileRequestContext> predicate)

Set the predicate used to determine if generated requests should be signed.

Parameters:

predicate - predicate used to determine if generated requests should be signed

getSignResponses

@Nonnull
public com.google.common.base.Predicate<org.opensaml.profile.context.ProfileRequestContext> getSignResponses()

Get the predicate used to determine if generated responses should be signed.

Specified by:

getSignResponses in interface SAMLProfileConfiguration

Returns:

predicate used to determine if generated responses should be signed

setSignResponses

public void setSignResponses(@Nonnull
                    com.google.common.base.Predicate<org.opensaml.profile.context.ProfileRequestContext> predicate)

Set the predicate used to determine if generated responses should be signed.

Parameters:

predicate - predicate used to determine if generated responses should be signed

getAssertionLifetime

@Positive
public long getAssertionLifetime()

Get the lifetime of generated assertions in milliseconds.

Specified by:

getAssertionLifetime in interface SAMLProfileConfiguration

Returns:

lifetime of generated assertions in milliseconds

setAssertionLifetime

public void setAssertionLifetime(@Positive@Duration
                        long lifetime)

Set the lifetime of an assertion.

Parameters:

lifetime - lifetime of an assertion in milliseconds

includeConditionsNotBefore

public boolean includeConditionsNotBefore()

Get whether to include a NotBefore attribute in the Conditions of generated assertions.

Specified by:

includeConditionsNotBefore in interface SAMLProfileConfiguration

Returns:

whether to include a NotBefore attribute in the Conditions of generated assertions

setIncludeConditionsNotBefore

public void setIncludeConditionsNotBefore(boolean include)

Set whether to include a NotBefore attribute in the Conditions of generated assertions.

Parameters:

include - whether to include a NotBefore attribute in the Conditions of generated assertions

getAdditionalAudiencesForAssertion

@Nonnull
@NonnullElements
@NotLive
public Set<String> getAdditionalAudiencesForAssertion()

Get an unmodifiable set of audiences, in addition to the relying party(ies) to which the IdP is issuing the assertion, with which an assertion may be shared.

Specified by:

getAdditionalAudiencesForAssertion in interface SAMLProfileConfiguration

Returns:

additional audiences to which an assertion may be shared

setAdditionalAudienceForAssertion

public void setAdditionalAudienceForAssertion(@Nonnull@NonnullElements
                                     Collection<String> audiences)

Set the set of audiences, in addition to the relying party(ies) to which the IdP is issuing the assertion, with which an assertion may be shared.

Parameters:

audiences - the additional audiences